This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e33322e302f32322d3234203d3e203632333837.roa File: 3130312e3233322e33322e302f32322d3234203d3e203632333837.roa (raw, json) Hash identifier: Q9d6PLAlNLtu/emzsKDFrKMsH9htWUfZ8MF4elQQCx4= Subject key identifier: AE:55:31:40:17:6C:66:04:AC:BB:54:C8:09:73:AC:EB:B6:26:E3:27 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 3FDCCB006EDFB151415EE58BDEF0625E860029F8 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e33322e302f32322d3234203d3e203632333837.roa Signing time: Tue 20 Jan 2026 02:11:59 +0000 ROA not before: Tue 20 Jan 2026 02:06:59 +0000 ROA not after: Tue 19 Jan 2027 02:11:59 +0000 asID: 62387 IP address blocks: 101.232.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 10:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:dc:cb:00:6e:df:b1:51:41:5e:e5:8b:de:f0:62:5e:86:00:29:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jan 20 02:06:59 2026 GMT Not After : Jan 19 02:11:59 2027 GMT Subject: CN=AE553140176C6604ACBB54C80973ACEBB626E327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:81:a3:06:40:33:6a:13:21:32:59:93:fd: 7e:15:86:78:db:dd:75:f4:99:6e:44:a1:3e:97:88: 4a:fc:4e:c9:c7:5a:49:80:b0:6d:3d:9b:24:f8:2c: 31:80:9b:d4:10:76:4e:20:06:02:83:39:fb:77:2b: f1:d4:ee:c9:40:00:79:e7:5d:ee:57:69:1e:2d:95: 29:76:5a:50:61:41:16:33:f0:e9:7b:02:98:5e:1e: 58:81:7d:90:ab:81:4a:a0:cf:4d:68:59:2c:98:7c: 34:02:79:b8:24:80:85:19:3b:45:18:6a:03:7c:7e: 54:e0:fa:e4:d3:f5:12:07:eb:ff:04:c9:e3:5c:2c: 11:26:5d:22:08:06:9b:e1:23:0f:29:44:56:52:ef: fb:cd:3c:b1:70:a2:3c:78:15:b4:97:75:3d:e1:1a: 8a:c0:e3:7b:a6:04:03:69:3d:c0:bd:c7:0d:9f:39: b4:02:66:7a:fc:85:e1:c4:61:d9:30:da:9d:ee:cf: b8:91:26:cc:57:2e:ed:d8:8b:4f:61:26:00:04:31: 3e:0e:a9:d3:94:19:81:b1:99:c0:18:54:19:6c:ff: 91:75:98:7b:db:2d:5d:c0:c6:00:79:e4:08:45:c4: f1:bd:e0:19:50:16:03:00:72:ea:fb:88:f4:12:6d: 11:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:55:31:40:17:6C:66:04:AC:BB:54:C8:09:73:AC:EB:B6:26:E3:27 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e33322e302f32322d3234203d3e203632333837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.232.32.0/22 Signature Algorithm: sha256WithRSAEncryption a0:eb:98:39:60:e1:c5:52:6f:00:4a:1f:5e:79:5f:f1:37:59: 31:df:76:eb:8f:2c:16:2f:4a:0b:08:2d:ae:91:c1:3a:f3:82: 99:8e:c7:9b:2f:c5:5e:93:e4:68:2f:f7:b2:bc:fb:82:ef:51: 77:f2:47:ca:bb:d7:e4:60:eb:39:3e:3a:ab:51:7f:af:76:ce: 9c:0d:3d:90:f2:f6:74:ce:3a:83:32:b0:19:16:b6:22:fb:3e: 45:c5:12:28:dc:0e:df:c3:f0:33:07:90:f9:79:ee:48:44:79: e6:ac:90:aa:d7:91:e2:5b:ce:74:6f:5e:13:74:13:53:64:ad: 1d:ee:52:ce:2a:3a:66:5d:91:50:0c:9a:5f:27:30:b3:06:f2: 5a:91:3f:6c:f8:5f:40:19:8d:5f:36:f6:0f:55:72:6a:f5:3f: 39:fd:b3:32:7f:ab:e7:0c:b4:b5:e3:a3:16:85:7b:3c:bd:d3: e3:b7:98:44:9c:64:85:a7:d3:93:78:25:92:69:f5:a9:fa:12: b3:0f:b6:6a:01:22:2d:01:42:27:15:26:aa:c3:a9:13:f0:23: 1c:ba:d1:89:a3:7a:59:71:a9:b2:30:be:89:8d:50:c4:5c:f2: 1d:e6:b4:20:75:75:80:f3:d3:10:b5:ed:8a:be:2d:b1:74:c4: 14:69:8f:7b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUP9zLAG7fsVFBXuWL3vBiXoYAKfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjAxMjAwMjA2NTlaFw0yNzAxMTkwMjExNTlaMDMxMTAvBgNV BAMTKEFFNTUzMTQwMTc2QzY2MDRBQ0JCNTRDODA5NzNBQ0VCQjYyNkUzMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeRIGjBkAzahMhMlmT/X4Vhnjb 3XX0mW5EoT6XiEr8TsnHWkmAsG09myT4LDGAm9QQdk4gBgKDOft3K/HU7slAAHnn Xe5XaR4tlSl2WlBhQRYz8Ol7ApheHliBfZCrgUqgz01oWSyYfDQCebgkgIUZO0UY agN8flTg+uTT9RIH6/8EyeNcLBEmXSIIBpvhIw8pRFZS7/vNPLFwojx4FbSXdT3h GorA43umBANpPcC9xw2fObQCZnr8heHEYdkw2p3uz7iRJsxXLu3Yi09hJgAEMT4O qdOUGYGxmcAYVBls/5F1mHvbLV3AxgB55AhFxPG94BlQFgMAcur7iPQSbRGjAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUrlUxQBdsZgSsu1TICXOs67Ym4ycwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTUyNTI1MS8wLzMxMzAzMTJlMzIz MzMyMmUzMzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMjMzMzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmXoIDANBgkqhkiG9w0BAQsFAAOCAQEAoOuYOWDhxVJvAEofXnlf8TdZ Md92648sFi9KCwgtrpHBOvOCmY7Hmy/FXpPkaC/3srz7gu9Rd/JHyrvX5GDrOT46 q1F/r3bOnA09kPL2dM46gzKwGRa2Ivs+RcUSKNwO38PwMweQ+XnuSER55qyQqteR 4lvOdG9eE3QTU2StHe5Szio6Zl2RUAyaXycwswbyWpE/bPhfQBmNXzb2D1VyavU/ Of2zMn+r5wy0teOjFoV7PL3T47eYRJxkhafTk3glkmn1qfoSsw+2agEiLQFCJxUm qsOpE/AjHLrRiaN6WXGpsjC+iY1QxFzyHea0IHV1gPPTELXtir4tsXTEFGmPew== -----END CERTIFICATE-----Generated at Thu Jan 22 15:30:34 2026 by rpki-client