This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3135302e3234322e35322e302f32322d3234203d3e2037363431.roa File: 3135302e3234322e35322e302f32322d3234203d3e2037363431.roa (raw, json) Hash identifier: +h2DPT5HWpDu53axDwSIhcBrUU7TO58A3OQ7ZOiDMhk= Subject key identifier: F6:40:86:C0:AC:0B:FA:0B:4B:4C:8E:8F:30:A8:4D:81:76:42:9C:4B Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 1563B1EAF5402E7492B0E8C7930359DAA9F1948E Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3135302e3234322e35322e302f32322d3234203d3e2037363431.roa Signing time: Tue 20 Jan 2026 02:27:25 +0000 ROA not before: Tue 20 Jan 2026 02:22:25 +0000 ROA not after: Tue 19 Jan 2027 02:27:25 +0000 asID: 7641 IP address blocks: 150.242.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:63:b1:ea:f5:40:2e:74:92:b0:e8:c7:93:03:59:da:a9:f1:94:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:25 2026 GMT Not After : Jan 19 02:27:25 2027 GMT Subject: CN=F64086C0AC0BFA0B4B4C8E8F30A84D8176429C4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:14:3c:b1:e3:f7:7f:b1:21:05:22:d6:99:a3: ea:63:1b:34:fc:38:67:39:9c:5a:dd:ba:91:31:11: 05:01:69:28:64:de:c8:0d:92:6a:40:9f:dc:90:a6: 62:85:0d:c4:70:b1:76:38:00:95:25:23:59:1a:8e: ae:96:87:2e:08:ff:08:9a:1c:59:14:e5:cd:c6:12: 50:2e:f0:93:8f:b2:8c:f9:62:d6:af:a7:ef:65:dc: ed:3c:fc:e8:db:f3:33:63:47:a8:1e:0a:7e:bb:f8: b9:54:d3:e3:0d:05:6e:6f:d0:c8:2d:b4:dd:75:09: a1:77:68:3d:38:c7:67:59:95:a2:cf:d3:21:a6:83: 8b:d2:a6:61:03:da:09:ed:41:d8:42:a3:7a:eb:23: b8:10:77:5f:cb:c1:30:9f:2f:61:a1:ac:5c:4e:8c: 58:a2:83:1f:97:ba:b1:91:23:76:77:50:9f:ae:08: 8e:72:78:7d:29:94:95:5c:90:05:69:3c:27:34:43: 8d:1c:f2:63:a2:0c:0f:d9:16:e4:2e:9d:2a:3b:66: a6:d1:61:53:4a:75:83:95:0f:a0:64:47:ed:b6:ab: 6e:3d:ca:65:02:6c:ab:14:36:3e:6f:c3:7d:5a:1e: e4:af:88:d7:60:dd:89:0a:92:c0:79:62:17:ab:74: 72:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:40:86:C0:AC:0B:FA:0B:4B:4C:8E:8F:30:A8:4D:81:76:42:9C:4B X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3135302e3234322e35322e302f32322d3234203d3e2037363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.242.52.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:11:ae:ca:19:bf:a2:62:88:7d:6f:c3:55:ab:ce:28:42:95: 3d:fe:12:3f:7c:58:f3:55:ee:2e:9c:4b:5a:5e:23:9a:2b:84: 9b:1d:00:26:6b:66:c6:77:e6:d4:fa:39:e2:f6:e1:dc:cc:a2: 9e:da:9e:99:5b:e9:2b:bd:ab:df:76:92:bf:0c:5b:fa:76:4f: b8:27:55:66:9a:41:a7:cd:d1:08:25:9e:69:b8:43:29:c6:7b: 09:15:91:83:a3:5e:e2:b0:60:73:25:ec:98:18:b1:0b:ea:0f: 2e:13:30:26:43:26:fc:80:2a:b5:79:ff:c4:36:6f:e2:05:86: 96:d8:9a:ff:ff:a4:2e:e4:9e:95:08:9f:16:46:df:70:03:e7: 40:56:d6:d8:a6:94:a5:8e:ad:71:7f:6f:3d:17:b1:d6:3d:a5: eb:60:b9:41:1d:d5:c5:0f:6e:75:cf:aa:85:64:8c:01:3b:72: cd:ba:68:4c:bd:2c:95:d0:ce:58:a4:28:de:c9:5f:ea:aa:08: 13:2a:50:de:9e:fa:18:02:a7:92:ab:ad:7a:24:54:3e:cd:c7: a4:71:a0:0b:db:10:33:9b:58:95:71:f9:6b:b2:8d:1e:a3:5c: 4e:59:de:d0:53:4f:cf:ad:8e:43:89:5e:f6:49:54:2d:3c:c9: 62:c3:46:8e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUFWOx6vVALnSSsOjHkwNZ2qnxlI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjVaFw0yNzAxMTkwMjI3MjVaMDMxMTAvBgNV BAMTKEY2NDA4NkMwQUMwQkZBMEI0QjRDOEU4RjMwQTg0RDgxNzY0MjlDNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNFDyx4/d/sSEFItaZo+pjGzT8 OGc5nFrdupExEQUBaShk3sgNkmpAn9yQpmKFDcRwsXY4AJUlI1kajq6Why4I/wia HFkU5c3GElAu8JOPsoz5Ytavp+9l3O08/Ojb8zNjR6geCn67+LlU0+MNBW5v0Mgt tN11CaF3aD04x2dZlaLP0yGmg4vSpmED2gntQdhCo3rrI7gQd1/LwTCfL2GhrFxO jFiigx+XurGRI3Z3UJ+uCI5yeH0plJVckAVpPCc0Q40c8mOiDA/ZFuQunSo7ZqbR YVNKdYOVD6BkR+22q249ymUCbKsUNj5vw31aHuSviNdg3YkKksB5YherdHJ/AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU9kCGwKwL+gtLTI6PMKhNgXZCnEswHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzEzNTMwMmUzMjM0 MzIyZTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNzM2MzQzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEApbyNDANBgkqhkiG9w0BAQsFAAOCAQEADxGuyhm/omKIfW/DVavOKEKVPf4S P3xY81XuLpxLWl4jmiuEmx0AJmtmxnfm1Po54vbh3MyintqemVvpK72r33aSvwxb +nZPuCdVZppBp83RCCWeabhDKcZ7CRWRg6Ne4rBgcyXsmBixC+oPLhMwJkMm/IAq tXn/xDZv4gWGltia//+kLuSelQifFkbfcAPnQFbW2KaUpY6tcX9vPRex1j2l62C5 QR3VxQ9udc+qhWSMATtyzbpoTL0sldDOWKQo3slf6qoIEypQ3p76GAKnkquteiRU Ps3HpHGgC9sQM5tYlXH5a7KNHqNcTlne0FNPz62OQ4le9klULTzJYsNGjg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:52 2026 by rpki-client