This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e35372e3230312e302f32342d3234203d3e20313331333134.roa File: 3230322e35372e3230312e302f32342d3234203d3e20313331333134.roa (raw, json) Hash identifier: hGhV4E3aYHsMwtwfUvLKZMNlkn0O1oh3hS56LmlwRss= Subject key identifier: 7B:7D:25:8D:53:29:98:8A:E8:DC:3F:CA:40:42:74:D6:CA:60:99:CC Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 59C8F0B7F56A317F4B11EEAA3A1273704109E303 Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e35372e3230312e302f32342d3234203d3e20313331333134.roa Signing time: Tue 20 Jan 2026 01:19:12 +0000 ROA not before: Tue 20 Jan 2026 01:14:12 +0000 ROA not after: Tue 19 Jan 2027 01:19:12 +0000 asID: 131314 IP address blocks: 202.57.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 00:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c8:f0:b7:f5:6a:31:7f:4b:11:ee:aa:3a:12:73:70:41:09:e3:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Jan 20 01:14:12 2026 GMT Not After : Jan 19 01:19:12 2027 GMT Subject: CN=7B7D258D5329988AE8DC3FCA404274D6CA6099CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:bd:0f:27:dd:84:9b:bd:b2:d3:2d:01:63: 7b:c0:9b:9f:0f:ba:de:76:05:d0:cb:95:e9:7c:e5: 63:71:15:02:ac:5f:8b:17:e4:b1:5d:41:9c:52:31: 9d:54:3a:9f:7e:00:a3:30:7e:18:71:88:ed:1a:e7: d6:a4:fd:0c:38:2a:21:16:16:39:a9:e6:51:c9:43: 1b:a9:98:60:e4:9c:e9:4a:21:b9:55:ec:c5:f4:0c: c7:fb:f2:b0:3b:9d:94:f7:f4:83:a0:40:4c:a2:e8: 03:d3:c5:85:1b:3a:d2:d7:db:a8:ea:5c:d2:ad:42: 60:de:2a:c8:28:d5:03:e4:17:95:ae:27:c6:bc:87: 6f:92:eb:88:a6:e2:17:f7:a7:66:a8:82:fa:2b:67: cb:33:b9:92:f9:ae:a2:ba:a9:c2:ac:86:c3:3f:3c: df:40:7e:87:e0:d2:8e:a9:12:7a:29:36:dd:d8:8f: 5d:41:73:7a:c4:a3:17:9a:0c:0c:c1:90:67:87:2c: 6f:20:db:68:b7:9a:ad:21:ac:8e:0c:11:d3:da:92: 75:5e:68:84:51:21:b9:97:b8:96:1b:6d:55:b2:c7: d5:30:25:db:4b:d8:a7:c4:8d:fb:b8:6a:c1:67:2d: 1d:25:75:fb:ff:d7:4a:8d:00:5f:51:bf:0e:5e:b5: 94:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7D:25:8D:53:29:98:8A:E8:DC:3F:CA:40:42:74:D6:CA:60:99:CC X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e35372e3230312e302f32342d3234203d3e20313331333134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.57.201.0/24 Signature Algorithm: sha256WithRSAEncryption 91:12:1f:2e:b0:55:89:16:24:b9:20:6d:2c:cd:51:d8:3f:d8: 9e:72:c5:66:0d:ab:8c:24:ad:78:8b:81:c1:55:89:83:51:cc: af:59:cd:aa:1b:65:50:da:8b:87:89:14:9f:65:1e:f2:0c:f2: 98:49:cb:bc:d9:00:bc:c8:34:be:7f:6b:b6:74:58:ce:92:27: fe:01:90:20:fc:95:63:b5:01:c4:6b:90:f5:36:e0:e5:cb:9c: 7c:04:a2:aa:db:bf:2e:cb:e9:7e:17:fe:4d:15:0d:32:65:1f: 3d:84:b9:9d:c4:ae:ea:35:c4:e2:1a:c4:5d:a3:9b:c4:7a:12: 79:87:89:c9:90:50:3c:aa:c1:fa:ef:29:27:bd:5f:3d:27:f5: a1:13:a2:52:c2:9b:b1:f9:94:c7:97:c6:c4:d7:17:21:a6:ae: a7:bb:bd:b4:4d:1d:78:89:da:52:20:c6:57:26:1f:7e:3c:57: 9d:3c:4b:39:bb:15:68:80:03:c6:1e:32:9f:a9:5f:19:ba:6d: ee:13:e0:95:19:ad:b1:54:9d:bd:ee:d5:b7:6d:f1:ef:6d:64: d7:1e:c6:5f:d5:26:fc:4d:cd:23:1c:e1:8f:ae:48:e4:55:54: 84:31:62:b3:78:1b:8a:d6:04:bc:5a:61:b0:be:e1:70:62:2f: 62:87:ee:29 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWcjwt/VqMX9LEe6qOhJzcEEJ4wMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjAxMjAwMTE0MTJaFw0yNzAxMTkwMTE5MTJaMDMxMTAvBgNV BAMTKDdCN0QyNThENTMyOTk4OEFFOERDM0ZDQTQwNDI3NEQ2Q0E2MDk5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Xb0PJ92Em72y0y0BY3vAm58P ut52BdDLlel85WNxFQKsX4sX5LFdQZxSMZ1UOp9+AKMwfhhxiO0a59ak/Qw4KiEW Fjmp5lHJQxupmGDknOlKIblV7MX0DMf78rA7nZT39IOgQEyi6APTxYUbOtLX26jq XNKtQmDeKsgo1QPkF5WuJ8a8h2+S64im4hf3p2aogvorZ8szuZL5rqK6qcKshsM/ PN9Afofg0o6pEnopNt3Yj11Bc3rEoxeaDAzBkGeHLG8g22i3mq0hrI4MEdPaknVe aIRRIbmXuJYbbVWyx9UwJdtL2KfEjfu4asFnLR0ldfv/10qNAF9Rvw5etZTBAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUe30ljVMpmIro3D/KQEJ01spgmcwwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxNzk0NTgvMC8zMjMwMzIyZTM1 MzcyZTMyMzAzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTMzMzEzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMo5yTANBgkqhkiG9w0BAQsFAAOCAQEAkRIfLrBViRYkuSBtLM1R 2D/YnnLFZg2rjCSteIuBwVWJg1HMr1nNqhtlUNqLh4kUn2Ue8gzymEnLvNkAvMg0 vn9rtnRYzpIn/gGQIPyVY7UBxGuQ9Tbg5cucfASiqtu/Lsvpfhf+TRUNMmUfPYS5 ncSu6jXE4hrEXaObxHoSeYeJyZBQPKrB+u8pJ71fPSf1oROiUsKbsfmUx5fGxNcX Iaaup7u9tE0deInaUiDGVyYffjxXnTxLObsVaIADxh4yn6lfGbpt7hPglRmtsVSd ve7Vt23x721k1x7GX9Um/E3NIxzhj65I5FVUhDFis3gbitYEvFphsL7hcGIvYofu KQ== -----END CERTIFICATE-----Generated at Mon Jan 26 18:20:29 2026 by rpki-client