This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3133322e302f32322d3234203d3e203632333837.roa File: 3130312e3233322e3133322e302f32322d3234203d3e203632333837.roa (raw, json) Hash identifier: layHXUGbwoMnKUynxkhzn6W9lshnTJPugxkAq4QtpXo= Subject key identifier: 35:3B:48:BD:57:9A:85:5D:5F:5B:A2:EA:97:C8:FB:4D:3F:14:FF:E1 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 3E275CB591E690AFA2A36B12C6ABCF36875724B6 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3133322e302f32322d3234203d3e203632333837.roa Signing time: Tue 20 Jan 2026 02:11:58 +0000 ROA not before: Tue 20 Jan 2026 02:06:58 +0000 ROA not after: Tue 19 Jan 2027 02:11:58 +0000 asID: 62387 IP address blocks: 101.232.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 10:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:27:5c:b5:91:e6:90:af:a2:a3:6b:12:c6:ab:cf:36:87:57:24:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jan 20 02:06:58 2026 GMT Not After : Jan 19 02:11:58 2027 GMT Subject: CN=353B48BD579A855D5F5BA2EA97C8FB4D3F14FFE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:62:2d:92:de:cd:1b:c0:75:f8:90:04:36:2a: ea:fd:24:24:5a:40:cb:34:7d:24:cf:b0:fa:41:b7: c4:7c:90:8e:d5:9b:91:9b:02:ca:a6:b6:53:83:ee: 91:af:d5:9c:f9:55:53:3d:35:ed:0e:25:5f:75:af: 88:44:6e:5b:15:a5:cd:e8:87:d5:e9:d1:29:9b:fa: 13:12:a7:80:7b:9c:86:69:25:53:68:62:1c:06:83: d3:84:ce:78:92:07:b9:5a:ce:43:54:f6:d8:bc:e2: 31:a9:63:0c:91:b7:62:e2:c2:86:90:af:a0:9b:2e: a7:47:87:f7:c9:9a:73:13:94:36:88:e4:00:e8:33: 85:13:72:9f:1c:3c:2b:8a:43:94:f9:bc:94:89:78: 52:35:f1:4f:4a:7e:a2:ae:8a:d0:5b:e4:24:76:aa: c3:1c:c6:80:80:e8:e2:10:9e:af:41:bb:20:f6:34: 19:b0:bd:ea:67:01:61:5a:f2:37:93:32:73:0c:c5: 35:77:92:d6:cd:eb:5c:ae:a8:0d:2f:52:40:c0:30: 54:29:d0:ab:8f:78:04:f5:1a:ff:35:38:e0:58:d5: 2f:d6:74:e8:2f:e2:6f:ff:99:a3:19:b3:16:c9:0f: 3c:3b:c4:1b:55:19:81:1e:80:6e:e3:be:ed:da:41: 49:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3B:48:BD:57:9A:85:5D:5F:5B:A2:EA:97:C8:FB:4D:3F:14:FF:E1 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3133322e302f32322d3234203d3e203632333837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.232.132.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:f5:b2:22:dc:d0:ae:cd:ab:c8:c1:14:93:aa:3a:3f:54:13: 21:7c:fc:20:cf:bb:59:8c:f1:b8:5c:d9:18:1d:71:0a:b2:c0: fd:d4:cc:20:34:4f:21:a2:b5:da:12:69:ec:db:29:16:ec:43: 97:46:1f:cb:92:9d:3f:f7:65:f0:84:43:5f:ea:53:55:97:e6: a7:af:00:a7:60:23:f9:af:ab:b7:48:f1:bc:b6:e6:a7:51:28: fb:5c:ce:c9:b0:07:dd:68:e2:93:21:33:6d:c3:2f:ad:51:cb: 64:d6:6e:a0:0b:4d:6f:09:e4:92:89:43:76:b5:48:15:cf:68: 70:54:26:94:77:4e:67:0a:7b:2e:45:3a:41:e4:88:09:33:e4: 5d:91:65:29:50:0e:8b:cb:cc:4a:b8:7d:e2:8e:f0:1e:27:ac: d3:0b:bb:a5:40:f5:62:55:52:41:47:2c:f0:16:c2:25:f2:d0: d9:d5:cc:07:3b:4f:27:45:59:1f:10:2a:f8:b6:71:14:af:2d: 66:3d:10:47:2c:74:8b:32:5d:51:65:8d:e1:8c:4c:01:36:9a: cb:ba:a5:2c:4b:91:6b:b2:e1:68:6f:b0:da:a5:12:0c:44:12: 85:92:72:a7:27:8a:f5:20:84:e2:16:e4:5d:c8:53:37:c1:ad: 46:63:92:1e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPidctZHmkK+io2sSxqvPNodXJLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjAxMjAwMjA2NThaFw0yNzAxMTkwMjExNThaMDMxMTAvBgNV BAMTKDM1M0I0OEJENTc5QTg1NUQ1RjVCQTJFQTk3QzhGQjREM0YxNEZGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVYi2S3s0bwHX4kAQ2Kur9JCRa QMs0fSTPsPpBt8R8kI7Vm5GbAsqmtlOD7pGv1Zz5VVM9Ne0OJV91r4hEblsVpc3o h9Xp0Smb+hMSp4B7nIZpJVNoYhwGg9OEzniSB7lazkNU9ti84jGpYwyRt2LiwoaQ r6CbLqdHh/fJmnMTlDaI5ADoM4UTcp8cPCuKQ5T5vJSJeFI18U9KfqKuitBb5CR2 qsMcxoCA6OIQnq9BuyD2NBmwvepnAWFa8jeTMnMMxTV3ktbN61yuqA0vUkDAMFQp 0KuPeAT1Gv81OOBY1S/WdOgv4m//maMZsxbJDzw7xBtVGYEegG7jvu3aQUn1AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUNTtIvVeahV1fW6Lql8j7TT8U/+EwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMTMwMzEyZTMy MzMzMjJlMzEzMzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMjMzMzgzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmXohDANBgkqhkiG9w0BAQsFAAOCAQEAP/WyItzQrs2ryMEUk6o6 P1QTIXz8IM+7WYzxuFzZGB1xCrLA/dTMIDRPIaK12hJp7NspFuxDl0Yfy5KdP/dl 8IRDX+pTVZfmp68Ap2Aj+a+rt0jxvLbmp1Eo+1zOybAH3WjikyEzbcMvrVHLZNZu oAtNbwnkkolDdrVIFc9ocFQmlHdOZwp7LkU6QeSICTPkXZFlKVAOi8vMSrh94o7w Hies0wu7pUD1YlVSQUcs8BbCJfLQ2dXMBztPJ0VZHxAq+LZxFK8tZj0QRyx0izJd UWWN4YxMATaay7qlLEuRa7LhaG+w2qUSDEQShZJypyeK9SCE4hbkXchTN8GtRmOS Hg== -----END CERTIFICATE-----Generated at Thu Jan 22 15:31:56 2026 by rpki-client