This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e35322e302f32322d3234203d3e203632333837.roa File: 3132332e39382e35322e302f32322d3234203d3e203632333837.roa (raw, json) Hash identifier: 8OBwPIffrr3XunlFIKZzyNK+MW5jxSUim6pt9VzokUM= Subject key identifier: 18:08:B2:A5:DB:AA:D8:CE:EC:29:4F:2B:8E:41:93:31:95:E8:80:81 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 1100A88B8CC871F6A01594CD06F8E040E851436C Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e35322e302f32322d3234203d3e203632333837.roa Signing time: Tue 20 Jan 2026 02:11:58 +0000 ROA not before: Tue 20 Jan 2026 02:06:58 +0000 ROA not after: Tue 19 Jan 2027 02:11:58 +0000 asID: 62387 IP address blocks: 123.98.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 10:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:00:a8:8b:8c:c8:71:f6:a0:15:94:cd:06:f8:e0:40:e8:51:43:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jan 20 02:06:58 2026 GMT Not After : Jan 19 02:11:58 2027 GMT Subject: CN=1808B2A5DBAAD8CEEC294F2B8E41933195E88081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d6:43:0f:dd:65:e2:39:18:d2:c4:82:27:f2: 1f:f4:3d:b2:43:85:6e:61:8e:b8:63:51:83:ce:d6: f1:da:e1:97:83:40:b4:62:c8:e1:4b:81:38:a6:7a: 25:21:4d:92:75:30:41:dc:c6:dd:97:69:b8:53:1f: 83:14:82:88:3e:56:23:68:67:be:77:30:2a:9e:55: 68:2b:a2:cb:3e:c7:51:37:e7:96:95:4e:d3:25:cd: 24:54:b6:86:00:b8:c0:0d:ec:48:3a:c7:2a:d9:ac: ac:50:4c:17:6f:68:56:98:e7:f7:ae:77:1a:ba:5f: 60:f4:cb:41:41:49:12:b0:2f:4d:c6:e3:52:14:e6: 3d:ea:b3:a5:31:81:d6:09:01:36:86:15:55:99:b5: d2:22:29:b0:4f:ba:77:b6:50:32:67:1f:1a:5f:4d: 66:f7:bc:55:9e:a3:71:f9:61:9e:0a:80:a9:7d:ad: 36:28:cb:c4:a2:59:13:f7:aa:40:08:d9:c5:a2:16: 4b:28:1d:dc:d1:d8:66:72:03:19:ff:ed:c2:d9:c7: 6f:61:a0:ce:76:b3:c2:57:84:07:1e:2c:55:a7:78: bd:89:e6:c8:0b:32:8c:47:71:a4:42:10:3b:4e:ef: 68:63:4c:a3:7b:4f:bf:01:b5:a0:59:72:58:d7:46: 0d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:08:B2:A5:DB:AA:D8:CE:EC:29:4F:2B:8E:41:93:31:95:E8:80:81 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e35322e302f32322d3234203d3e203632333837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.98.52.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:99:6c:7c:86:b8:c8:75:0a:2f:bf:92:1a:ab:61:13:68:35: a8:62:42:ef:f1:39:a4:ce:97:67:66:d4:42:09:90:90:a0:ff: 21:4d:9f:9d:a8:a3:e9:5d:5e:73:e3:39:a5:28:af:eb:30:24: 09:7f:48:d7:b0:15:97:7a:3b:4a:fc:93:d6:18:7f:c0:c3:01: 94:c8:9c:63:40:cf:82:95:fc:39:e8:e2:28:57:1e:40:b8:48: 0b:76:9d:c5:52:cd:b2:65:fc:cc:a4:ed:4e:16:eb:e7:a0:5a: 72:2b:fa:a6:7d:82:57:db:7c:f7:84:f5:eb:17:12:93:14:6f: 67:43:f6:77:b8:18:a3:82:28:69:be:5e:ea:b3:6c:4a:9b:d5: 26:35:93:c3:17:3d:55:2a:09:89:21:80:de:c6:d7:05:d8:2a: 8e:e3:ea:29:39:7e:1b:a8:e4:99:3c:23:cd:61:5d:10:22:e3: bc:e5:a6:b1:8a:82:26:be:1b:6e:e2:ab:8a:43:71:7e:6d:2f: 65:36:d3:89:d0:a2:eb:24:d6:63:4f:8e:c9:8e:8c:fa:9d:bf: d3:2a:1a:5d:6a:c3:53:52:49:46:dc:26:45:e5:ee:1e:d3:a7: bd:f0:b3:ee:df:fa:13:f3:40:7c:ea:d6:5f:47:d0:77:27:ab: df:a4:78:e7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUEQCoi4zIcfagFZTNBvjgQOhRQ2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjAxMjAwMjA2NThaFw0yNzAxMTkwMjExNThaMDMxMTAvBgNV BAMTKDE4MDhCMkE1REJBQUQ4Q0VFQzI5NEYyQjhFNDE5MzMxOTVFODgwODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP1kMP3WXiORjSxIIn8h/0PbJD hW5hjrhjUYPO1vHa4ZeDQLRiyOFLgTimeiUhTZJ1MEHcxt2XabhTH4MUgog+ViNo Z753MCqeVWgross+x1E355aVTtMlzSRUtoYAuMAN7Eg6xyrZrKxQTBdvaFaY5/eu dxq6X2D0y0FBSRKwL03G41IU5j3qs6UxgdYJATaGFVWZtdIiKbBPune2UDJnHxpf TWb3vFWeo3H5YZ4KgKl9rTYoy8SiWRP3qkAI2cWiFksoHdzR2GZyAxn/7cLZx29h oM52s8JXhAceLFWneL2J5sgLMoxHcaRCEDtO72hjTKN7T78BtaBZcljXRg2nAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUGAiypduq2M7sKU8rjkGTMZXogIEwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMjMzMmUzOTM4 MmUzNTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMjMzMzgzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAntiNDANBgkqhkiG9w0BAQsFAAOCAQEAHZlsfIa4yHUKL7+SGqthE2g1qGJC 7/E5pM6XZ2bUQgmQkKD/IU2fnaij6V1ec+M5pSiv6zAkCX9I17AVl3o7SvyT1hh/ wMMBlMicY0DPgpX8OejiKFceQLhIC3adxVLNsmX8zKTtThbr56Baciv6pn2CV9t8 94T16xcSkxRvZ0P2d7gYo4Ioab5e6rNsSpvVJjWTwxc9VSoJiSGA3sbXBdgqjuPq KTl+G6jkmTwjzWFdECLjvOWmsYqCJr4bbuKrikNxfm0vZTbTidCi6yTWY0+OyY6M +p2/0yoaXWrDU1JJRtwmReXuHtOnvfCz7t/6E/NAfOrWX0fQdyer36R45w== -----END CERTIFICATE-----Generated at Thu Jan 22 15:30:23 2026 by rpki-client