This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e302e302f32302d3234203d3e2037363431.roa File: 3231312e3134362e302e302f32302d3234203d3e2037363431.roa (raw, json) Hash identifier: MoWsC+Bmk8onzwTe9CmrtlRknZzGlz/cRXAMT62BLwo= Subject key identifier: 8C:B1:D6:68:A7:8B:82:0D:D6:41:D3:7E:3F:E9:38:B8:E6:EE:2A:94 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 258575260F9B579B69E45CEF310F73B8A010E97A Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e302e302f32302d3234203d3e2037363431.roa Signing time: Tue 20 Jan 2026 02:27:22 +0000 ROA not before: Tue 20 Jan 2026 02:22:22 +0000 ROA not after: Tue 19 Jan 2027 02:27:22 +0000 asID: 7641 IP address blocks: 211.146.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:85:75:26:0f:9b:57:9b:69:e4:5c:ef:31:0f:73:b8:a0:10:e9:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:22 2026 GMT Not After : Jan 19 02:27:22 2027 GMT Subject: CN=8CB1D668A78B820DD641D37E3FE938B8E6EE2A94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:44:92:37:be:a0:dd:76:92:06:3f:d1:f0:b8: 80:ab:59:76:99:95:60:17:62:de:c4:4c:35:e2:53: 92:95:6a:98:80:ae:79:3b:7a:d8:8a:f3:83:0a:a3: b9:d2:5f:4e:9f:1e:64:64:fc:c7:e5:0f:ab:19:18: f3:cb:4b:ed:f2:4d:4f:4f:90:b7:7e:9a:48:e6:3d: cd:34:b6:10:ce:6d:97:2d:30:a6:fd:a7:a1:50:fc: da:9d:a2:0e:d2:7e:b2:15:5e:c3:63:b0:5e:3b:55: ed:32:cc:8a:00:6b:bf:89:7d:cb:66:59:29:35:31: 9f:e8:ca:b1:3f:7d:7f:78:cb:3c:7d:de:67:2d:fe: c2:9c:79:0a:45:a5:ed:fd:63:a7:5c:5d:a0:08:88: 44:a5:b1:62:ff:af:b5:54:55:94:ef:ca:ae:ca:c3: c0:f2:19:92:f1:21:0b:47:20:78:f4:05:8c:42:30: e5:b7:f2:35:51:a2:f3:2b:0f:cf:bd:4b:a1:f6:ba: d5:1a:e1:45:23:05:04:3b:62:60:bd:73:7e:bb:bb: b9:a0:6a:8e:0c:48:f3:ca:cc:57:06:a0:08:ba:ab: 61:a7:93:56:18:d0:1e:7a:92:e0:0a:25:b4:4d:f1: 1e:8f:cb:aa:9b:07:e6:d7:b2:7c:54:06:09:6e:61: 07:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B1:D6:68:A7:8B:82:0D:D6:41:D3:7E:3F:E9:38:B8:E6:EE:2A:94 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e302e302f32302d3234203d3e2037363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.146.0.0/20 Signature Algorithm: sha256WithRSAEncryption ab:e0:8c:6d:10:cd:ed:ca:fc:fc:30:84:49:e9:44:d6:46:27: 5b:c5:f9:d5:1b:a1:33:ec:80:76:d4:07:b3:5b:57:45:71:70: d0:c8:ce:a8:39:e1:bc:f4:1a:fb:c9:37:a0:65:01:8d:29:fc: 0a:d4:52:c2:f9:96:81:a2:d9:49:6a:ca:c9:70:0e:e4:bc:78: e7:16:58:9f:f9:20:5f:50:e4:93:36:5e:11:8c:a2:dc:b9:af: fa:71:11:3c:5f:25:c7:c5:f8:ec:70:d6:60:8e:87:d2:1b:eb: b8:1c:56:64:12:8b:61:da:f3:36:88:ae:ee:64:3c:b0:8f:4f: 91:25:63:e6:3d:bc:c6:5e:5b:e0:ef:06:e4:6f:a0:1f:e1:3a: a3:ce:d6:e7:7c:69:9a:09:93:bb:48:74:28:ee:bb:79:e2:5c: ce:90:ba:39:8f:0b:d1:ac:52:a6:a6:68:46:64:d4:be:99:5f: 0b:2b:3f:50:10:ed:ca:13:f3:dc:33:f2:4e:94:a6:97:dc:c0: c7:ec:d4:47:66:b9:2d:1e:93:22:4e:10:bb:26:74:49:10:74: 1a:dc:74:ba:b7:d1:a0:60:d0:79:0c:07:19:07:8d:6c:d3:29: 3c:4e:de:b7:6b:6b:46:39:62:d7:1e:de:6e:c8:c3:69:d0:d5: 72:f9:bc:5e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUJYV1Jg+bV5tp5FzvMQ9zuKAQ6XowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjJaFw0yNzAxMTkwMjI3MjJaMDMxMTAvBgNV BAMTKDhDQjFENjY4QTc4QjgyMERENjQxRDM3RTNGRTkzOEI4RTZFRTJBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYRJI3vqDddpIGP9HwuICrWXaZ lWAXYt7ETDXiU5KVapiArnk7etiK84MKo7nSX06fHmRk/MflD6sZGPPLS+3yTU9P kLd+mkjmPc00thDObZctMKb9p6FQ/Nqdog7SfrIVXsNjsF47Ve0yzIoAa7+Jfctm WSk1MZ/oyrE/fX94yzx93mct/sKceQpFpe39Y6dcXaAIiESlsWL/r7VUVZTvyq7K w8DyGZLxIQtHIHj0BYxCMOW38jVRovMrD8+9S6H2utUa4UUjBQQ7YmC9c367u7mg ao4MSPPKzFcGoAi6q2Gnk1YY0B56kuAKJbRN8R6Py6qbB+bXsnxUBgluYQf/AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUjLHWaKeLgg3WQdN+P+k4uObuKpQwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMTMxMmUzMTM0 MzYyZTMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzczNjM0MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATTkgAwDQYJKoZIhvcNAQELBQADggEBAKvgjG0Qze3K/PwwhEnpRNZGJ1vF+dUb oTPsgHbUB7NbV0VxcNDIzqg54bz0GvvJN6BlAY0p/ArUUsL5loGi2UlqyslwDuS8 eOcWWJ/5IF9Q5JM2XhGMoty5r/pxETxfJcfF+Oxw1mCOh9Ib67gcVmQSi2Ha8zaI ru5kPLCPT5ElY+Y9vMZeW+DvBuRvoB/hOqPO1ud8aZoJk7tIdCjuu3niXM6QujmP C9GsUqamaEZk1L6ZXwsrP1AQ7coT89wz8k6UppfcwMfs1EdmuS0ekyJOELsmdEkQ dBrcdLq30aBg0HkMBxkHjWzTKTxO3rdra0Y5Ytce3m7Iw2nQ1XL5vF4= -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:58 2026 by rpki-client