This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e33362e302f32322d3234203d3e203632333837.roa File: 3132332e39382e33362e302f32322d3234203d3e203632333837.roa (raw, json) Hash identifier: uXZqTUVIUMoZhVrKs97j3QYujpa12PmoKmyZwJAGwY0= Subject key identifier: FA:70:3C:64:30:EC:19:C3:C1:AE:73:F9:19:42:4C:2D:58:28:44:BF Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 11A804B8B83021D721B83B8467D4A23BE2D7B572 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e33362e302f32322d3234203d3e203632333837.roa Signing time: Tue 20 Jan 2026 02:11:58 +0000 ROA not before: Tue 20 Jan 2026 02:06:58 +0000 ROA not after: Tue 19 Jan 2027 02:11:58 +0000 asID: 62387 IP address blocks: 123.98.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 10:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a8:04:b8:b8:30:21:d7:21:b8:3b:84:67:d4:a2:3b:e2:d7:b5:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jan 20 02:06:58 2026 GMT Not After : Jan 19 02:11:58 2027 GMT Subject: CN=FA703C6430EC19C3C1AE73F919424C2D582844BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a1:b6:d3:93:bb:90:65:69:a8:40:61:47:af: d7:70:d1:83:f5:e5:90:0b:5c:93:2d:65:85:18:59: a1:4e:bc:73:3d:78:ef:6e:f0:8e:71:7f:1e:1f:20: 99:58:86:9c:04:bf:93:f6:8b:87:48:ea:bd:fb:81: a2:98:32:5a:35:22:f1:bb:07:78:7d:e6:62:24:8c: f3:90:63:aa:3d:6b:84:59:bb:08:11:56:80:9c:8a: 63:d9:3f:4b:2a:ea:56:98:0f:f4:94:d7:99:36:75: a3:ed:0a:8d:7e:6d:d4:12:55:94:28:cc:26:17:1b: 89:d8:3e:2a:bc:d2:a4:c9:b7:89:21:7f:17:50:aa: 5a:4a:bc:c6:16:d2:7c:00:e9:be:d1:84:5e:3b:ea: 57:fc:47:90:83:53:8f:df:c3:1f:f8:60:92:36:ec: ce:55:51:b4:59:ac:e7:d0:26:cf:33:02:63:f1:2d: 82:be:60:0a:17:5f:b6:2f:d4:0e:fe:2d:6a:a7:8a: 1d:9e:8a:31:bf:de:11:64:cc:99:34:2c:07:2e:d8: 69:c6:8d:47:73:da:fd:74:d9:df:07:54:f0:8f:a8: 59:fb:e2:f3:4b:9d:39:f6:1d:d8:54:c2:a4:72:e2: b6:15:63:6a:67:84:91:a4:23:81:4d:d2:07:12:88: f6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:70:3C:64:30:EC:19:C3:C1:AE:73:F9:19:42:4C:2D:58:28:44:BF X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e33362e302f32322d3234203d3e203632333837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.98.36.0/22 Signature Algorithm: sha256WithRSAEncryption 45:a4:a7:08:b2:65:f9:be:0a:d9:e9:4c:de:f9:06:af:d2:55: 15:09:98:38:dd:75:42:8a:bb:8d:a5:f7:e2:8c:30:97:e9:f2: c2:62:61:93:6d:f6:7b:5d:c2:75:84:6a:f5:bf:d8:8f:6d:29: 64:6b:de:0b:47:c3:bb:24:27:f6:ee:2a:dc:55:95:b5:e4:cd: f6:89:08:f4:73:23:58:e8:8f:73:6d:06:e8:eb:1e:bc:67:13: c8:6c:bd:c1:97:91:af:ff:6e:24:fa:2a:3c:26:55:1a:82:77: 0b:6a:40:6a:86:3f:34:51:7f:36:3a:d4:cd:92:38:78:82:00: 76:1a:0f:7e:44:1e:b6:15:0e:16:9b:7e:78:4a:1d:7e:0b:a0: 6e:de:0b:ab:53:a2:15:37:a8:f4:de:a3:09:bd:3e:68:22:14: 5e:78:33:bd:d9:a2:f4:fc:47:35:d0:03:6f:fd:6c:52:3e:e1: ea:78:68:05:9a:0a:ca:0d:fb:3f:e5:6e:86:5f:3d:97:62:48: 05:70:48:9a:26:65:96:b0:bd:38:98:85:af:df:bf:14:ed:34: 0b:9b:8c:9e:1b:bb:73:04:5f:13:65:99:f6:13:c5:b6:9b:a8: 1e:e2:a7:2b:d2:21:b3:86:4a:93:c3:e1:b3:85:3c:5a:14:bb: a7:e3:f3:d9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUEagEuLgwIdchuDuEZ9SiO+LXtXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjAxMjAwMjA2NThaFw0yNzAxMTkwMjExNThaMDMxMTAvBgNV BAMTKEZBNzAzQzY0MzBFQzE5QzNDMUFFNzNGOTE5NDI0QzJENTgyODQ0QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZobbTk7uQZWmoQGFHr9dw0YP1 5ZALXJMtZYUYWaFOvHM9eO9u8I5xfx4fIJlYhpwEv5P2i4dI6r37gaKYMlo1IvG7 B3h95mIkjPOQY6o9a4RZuwgRVoCcimPZP0sq6laYD/SU15k2daPtCo1+bdQSVZQo zCYXG4nYPiq80qTJt4khfxdQqlpKvMYW0nwA6b7RhF476lf8R5CDU4/fwx/4YJI2 7M5VUbRZrOfQJs8zAmPxLYK+YAoXX7Yv1A7+LWqnih2eijG/3hFkzJk0LAcu2GnG jUdz2v102d8HVPCPqFn74vNLnTn2HdhUwqRy4rYVY2pnhJGkI4FN0gcSiPbLAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU+nA8ZDDsGcPBrnP5GUJMLVgoRL8wHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMjMzMmUzOTM4 MmUzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMjMzMzgzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAntiJDANBgkqhkiG9w0BAQsFAAOCAQEARaSnCLJl+b4K2elM3vkGr9JVFQmY ON11Qoq7jaX34owwl+nywmJhk232e13CdYRq9b/Yj20pZGveC0fDuyQn9u4q3FWV teTN9okI9HMjWOiPc20G6OsevGcTyGy9wZeRr/9uJPoqPCZVGoJ3C2pAaoY/NFF/ NjrUzZI4eIIAdhoPfkQethUOFpt+eEodfgugbt4Lq1OiFTeo9N6jCb0+aCIUXngz vdmi9PxHNdADb/1sUj7h6nhoBZoKyg37P+Vuhl89l2JIBXBImiZllrC9OJiFr9+/ FO00C5uMnhu7cwRfE2WZ9hPFtpuoHuKnK9Ihs4ZKk8Phs4U8WhS7p+Pz2Q== -----END CERTIFICATE-----Generated at Thu Jan 22 15:30:24 2026 by rpki-client