This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548419074/0/3231302e31362e3130342e302f32322d3234203d3e203331393732.roa File: 3231302e31362e3130342e302f32322d3234203d3e203331393732.roa (raw, json) Hash identifier: n36YMn4WDTafoLTVEBPiggAd2KgjoY7IjA/tNLI51qk= Subject key identifier: 8B:FB:21:32:6B:64:A9:AE:03:12:48:08:A2:11:63:6C:88:70:19:52 Certificate issuer: /CN=7BE06B4744FCF211D039415BB8B17941EC767358 Certificate serial: 7A602A5D01C73E300BF7078EF86A8242838E54AC Authority key identifier: 7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/3231302e31362e3130342e302f32322d3234203d3e203331393732.roa Signing time: Tue 20 Jan 2026 02:25:03 +0000 ROA not before: Tue 20 Jan 2026 02:20:03 +0000 ROA not after: Tue 19 Jan 2027 02:25:03 +0000 asID: 31972 IP address blocks: 210.16.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:60:2a:5d:01:c7:3e:30:0b:f7:07:8e:f8:6a:82:42:83:8e:54:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7BE06B4744FCF211D039415BB8B17941EC767358 Validity Not Before: Jan 20 02:20:03 2026 GMT Not After : Jan 19 02:25:03 2027 GMT Subject: CN=8BFB21326B64A9AE03124808A211636C88701952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9b:63:0b:76:28:87:49:90:f2:8e:7a:1f:52: 59:9a:a8:3e:f7:b3:6e:ea:07:01:7e:be:c3:67:5d: 5e:67:49:e3:83:91:73:f1:f1:35:38:f5:98:48:b4: 34:4e:39:ec:94:0d:5b:9b:30:93:1e:91:a7:2f:54: 57:ce:98:61:4e:83:64:4a:46:1c:73:8a:4a:ca:76: f2:03:12:27:f6:c3:b4:d4:7b:45:e0:b4:58:fb:a1: 0d:a8:f5:84:1f:d3:19:0b:55:41:15:7b:16:b5:75: 91:2b:d3:bb:7a:4c:57:71:cc:6d:c6:1c:cd:00:62: e3:db:7b:da:41:fa:da:ce:0d:7c:40:a4:23:a8:e2: 76:7c:23:ba:49:24:44:b2:ff:a3:34:a1:c3:f3:04: d5:d2:d3:1a:b2:ca:62:ef:14:88:aa:80:48:9d:25: ae:35:d0:61:1f:dd:cb:56:9e:25:14:82:ef:b1:b3: cc:90:18:c3:f8:70:9a:e7:5f:23:73:9d:20:ff:b8: 04:75:05:df:05:26:85:61:30:69:6f:e0:3a:b4:42: 25:db:43:7e:9f:ed:33:41:a7:33:54:7d:c5:4d:32: fa:53:2d:39:cf:0b:f4:b5:53:e6:b5:f2:e1:08:17: ac:3d:42:ff:69:f2:05:2e:e5:22:2b:7d:ca:2b:2b: db:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FB:21:32:6B:64:A9:AE:03:12:48:08:A2:11:63:6C:88:70:19:52 X509v3 Authority Key Identifier: keyid:7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/3231302e31362e3130342e302f32322d3234203d3e203331393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.16.104.0/22 Signature Algorithm: sha256WithRSAEncryption 68:05:44:39:10:94:67:93:8d:b3:fb:72:ad:de:d2:27:25:1e: 07:6b:39:08:e7:fd:9a:5b:b8:25:91:c2:e0:21:24:60:96:a8: 60:3d:a2:3a:f0:41:bb:5d:00:1a:93:95:f5:71:0e:2b:1b:ae: 55:2e:c9:46:82:03:b9:bf:be:96:2f:7c:8a:8c:5c:c2:c3:81: 5e:28:e5:62:95:be:c2:43:f9:93:77:18:b2:d4:26:68:24:53: b2:70:e5:0c:90:7e:48:b8:a4:a9:bd:3d:a8:fe:31:fa:20:0f: d6:8c:16:24:90:99:83:7b:51:87:6b:66:1c:87:a9:8e:33:6a: 4f:99:69:ad:5f:67:64:be:74:f7:b3:2b:15:a4:1a:a6:ce:a0: aa:e1:6b:a3:88:bd:8e:ad:54:da:89:4d:db:0c:a0:a1:35:80: 9d:50:5b:84:67:de:4e:94:fa:3b:f3:68:41:17:aa:b9:55:a1: 24:24:7e:bf:5c:91:e4:90:34:b7:1e:50:37:26:c9:8c:8a:3f: c9:14:20:cf:27:2f:4b:26:35:44:e7:25:ec:91:24:ed:88:88: db:20:85:47:7c:b7:dc:57:f4:89:e3:ef:a6:fc:fe:33:6d:c3: 17:72:9e:b8:cd:48:33:2f:57:47:31:14:e8:fb:1a:00:86:af: 24:f6:dc:15 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUemAqXQHHPjAL9weO+GqCQoOOVKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0JFMDZCNDc0NEZDRjIxMUQwMzk0MTVCQjhCMTc5NDFF Qzc2NzM1ODAeFw0yNjAxMjAwMjIwMDNaFw0yNzAxMTkwMjI1MDNaMDMxMTAvBgNV BAMTKDhCRkIyMTMyNkI2NEE5QUUwMzEyNDgwOEEyMTE2MzZDODg3MDE5NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxm2MLdiiHSZDyjnofUlmaqD73 s27qBwF+vsNnXV5nSeODkXPx8TU49ZhItDROOeyUDVubMJMekacvVFfOmGFOg2RK RhxzikrKdvIDEif2w7TUe0XgtFj7oQ2o9YQf0xkLVUEVexa1dZEr07t6TFdxzG3G HM0AYuPbe9pB+trODXxApCOo4nZ8I7pJJESy/6M0ocPzBNXS0xqyymLvFIiqgEid Ja410GEf3ctWniUUgu+xs8yQGMP4cJrnXyNznSD/uAR1Bd8FJoVhMGlv4Dq0QiXb Q36f7TNBpzNUfcVNMvpTLTnPC/S1U+a18uEIF6w9Qv9p8gUu5SIrfcorK9vDAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUi/shMmtkqa4DEkgIohFjbIhwGVIwHwYDVR0j BBgwFoAUe+BrR0T88hHQOUFbuLF5Qex2c1gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODQxOTA3NC8wLzdCRTA2QjQ3NDRGQ0YyMTFEMDM5NDE1QkI4QjE3 OTQxRUM3NjczNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0JFMDZCNDc0NEZDRjIxMUQwMzk0MTVCQjhCMTc5NDFFQzc2NzM1OC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODQxOTA3NC8wLzMyMzEzMDJlMzEz NjJlMzEzMDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzMzMTM5MzczMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAtIQaDANBgkqhkiG9w0BAQsFAAOCAQEAaAVEORCUZ5ONs/tyrd7SJyUe B2s5COf9mlu4JZHC4CEkYJaoYD2iOvBBu10AGpOV9XEOKxuuVS7JRoIDub++li98 ioxcwsOBXijlYpW+wkP5k3cYstQmaCRTsnDlDJB+SLikqb09qP4x+iAP1owWJJCZ g3tRh2tmHIepjjNqT5lprV9nZL5097MrFaQaps6gquFro4i9jq1U2olN2wygoTWA nVBbhGfeTpT6O/NoQRequVWhJCR+v1yR5JA0tx5QNybJjIo/yRQgzycvSyY1ROcl 7JEk7YiI2yCFR3y33Ff0iePvpvz+M23DF3KeuM1IMy9XRzEU6PsaAIavJPbcFQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:14:04 2026 by rpki-client