This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e32302e302f32322d3234203d3e2037363431.roa File: 3231312e3134362e32302e302f32322d3234203d3e2037363431.roa (raw, json) Hash identifier: m+oYLW9D5yGm4tuIOP+rxwKzeOkgVcVx33S+2HW3mFI= Subject key identifier: 5A:3C:34:2C:0D:4D:85:E4:CE:EE:E1:F4:23:31:67:17:E3:3F:15:90 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 2B735F4B9830E0D6BBE3F0CB94F954F518EB92D7 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e32302e302f32322d3234203d3e2037363431.roa Signing time: Tue 20 Jan 2026 02:27:22 +0000 ROA not before: Tue 20 Jan 2026 02:22:22 +0000 ROA not after: Tue 19 Jan 2027 02:27:22 +0000 asID: 7641 IP address blocks: 211.146.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:73:5f:4b:98:30:e0:d6:bb:e3:f0:cb:94:f9:54:f5:18:eb:92:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:22 2026 GMT Not After : Jan 19 02:27:22 2027 GMT Subject: CN=5A3C342C0D4D85E4CEEEE1F423316717E33F1590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bd:d7:28:28:9c:6b:d4:cb:1a:bd:08:74:57: 24:ba:11:52:22:3b:fe:18:b9:18:ef:82:bb:78:6e: 1f:3a:3f:b9:59:8c:e2:3d:0b:07:a1:17:d8:9f:89: c2:99:b6:8b:8a:66:ab:b9:1b:99:e6:d6:73:01:8d: 2f:cc:f7:92:2d:6b:c0:2f:bf:e5:62:62:21:4e:1b: 52:82:d5:d9:d6:e6:cc:f9:83:93:7b:33:b7:44:4f: b9:bf:00:a8:14:66:1a:2b:2a:0c:1e:37:ec:a2:e8: 24:94:a4:e4:f0:54:85:dd:a1:14:01:d0:1d:b2:34: fa:bb:6d:a9:3c:c1:64:31:6d:bb:73:f4:79:0c:05: 8d:18:f8:bc:bc:f8:ee:73:9f:0e:f7:b0:39:0a:ca: b3:26:2c:a9:d5:8a:57:d4:e7:1d:69:80:65:fc:1c: c9:0a:5b:79:92:16:8e:12:de:d8:84:42:7b:3b:5d: 69:da:20:14:c7:b9:2b:18:7f:24:ad:60:44:e0:0e: 31:5a:51:b2:85:b1:ee:cf:48:d5:c3:ee:32:42:5c: 15:a0:f4:3b:00:72:8c:dc:59:fe:eb:a5:7e:10:68: 2d:70:20:7c:9f:d2:d5:70:2a:3c:91:f5:f4:56:e5: d2:21:bc:07:ca:9a:9c:42:85:39:ee:c9:4d:8e:bb: 52:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3C:34:2C:0D:4D:85:E4:CE:EE:E1:F4:23:31:67:17:E3:3F:15:90 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e32302e302f32322d3234203d3e2037363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.146.20.0/22 Signature Algorithm: sha256WithRSAEncryption 07:3e:cb:03:c9:db:5b:9e:da:8b:42:4c:04:53:20:46:9d:62: 0c:4d:a2:54:a1:6b:c9:12:ae:23:b4:3f:94:8e:31:e2:6c:9f: ff:6a:52:65:a4:83:77:8b:6b:57:3f:c0:52:11:73:33:b6:c2: 84:fc:0a:bb:a5:f2:a7:88:50:78:38:35:0f:1a:e8:ad:9e:86: 30:2b:49:1e:d7:55:48:67:8a:f0:b4:88:9d:87:4d:f6:da:ae: 70:d8:26:78:78:76:14:66:c7:4d:46:d0:6a:80:9c:96:ba:b5: 73:d0:0b:42:ca:65:6c:62:ad:e5:0b:2f:25:b4:cb:40:6f:7f: ab:ae:b3:8a:49:82:db:fb:1d:ba:89:a4:31:fa:6c:dc:d2:3d: a5:b6:3b:b6:b5:16:1a:13:9a:11:82:50:87:d3:3a:0d:77:43: f7:0c:bf:4c:b3:54:57:9f:d6:f5:fc:9c:e7:6d:e1:f8:80:e7: 09:2b:1c:14:80:e7:68:53:bc:7c:5d:ee:79:02:a4:36:d4:df: d0:8e:f1:65:81:85:da:6b:0c:7f:55:2f:70:62:38:d4:ba:38: 92:4e:1a:ed:df:81:3d:c9:17:97:10:65:ab:4e:a2:b5:45:8f: 80:a5:82:c7:a1:45:cb:80:49:93:d3:2a:85:e1:a8:e0:4e:b6: 38:32:8a:a9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUK3NfS5gw4Na74/DLlPlU9RjrktcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjJaFw0yNzAxMTkwMjI3MjJaMDMxMTAvBgNV BAMTKDVBM0MzNDJDMEQ0RDg1RTRDRUVFRTFGNDIzMzE2NzE3RTMzRjE1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSvdcoKJxr1MsavQh0VyS6EVIi O/4YuRjvgrt4bh86P7lZjOI9CwehF9ificKZtouKZqu5G5nm1nMBjS/M95Ita8Av v+ViYiFOG1KC1dnW5sz5g5N7M7dET7m/AKgUZhorKgweN+yi6CSUpOTwVIXdoRQB 0B2yNPq7bak8wWQxbbtz9HkMBY0Y+Ly8+O5znw73sDkKyrMmLKnVilfU5x1pgGX8 HMkKW3mSFo4S3tiEQns7XWnaIBTHuSsYfyStYETgDjFaUbKFse7PSNXD7jJCXBWg 9DsAcozcWf7rpX4QaC1wIHyf0tVwKjyR9fRW5dIhvAfKmpxChTnuyU2Ou1KxAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUWjw0LA1NheTO7uH0IzFnF+M/FZAwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMTMxMmUzMTM0 MzYyZTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNzM2MzQzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtOSFDANBgkqhkiG9w0BAQsFAAOCAQEABz7LA8nbW57ai0JMBFMgRp1iDE2i VKFryRKuI7Q/lI4x4myf/2pSZaSDd4trVz/AUhFzM7bChPwKu6Xyp4hQeDg1Dxro rZ6GMCtJHtdVSGeK8LSInYdN9tqucNgmeHh2FGbHTUbQaoCclrq1c9ALQsplbGKt 5QsvJbTLQG9/q66zikmC2/sduomkMfps3NI9pbY7trUWGhOaEYJQh9M6DXdD9wy/ TLNUV5/W9fyc523h+IDnCSscFIDnaFO8fF3ueQKkNtTf0I7xZYGF2msMf1UvcGI4 1Lo4kk4a7d+BPckXlxBlq06itUWPgKWCx6FFy4BJk9MqheGo4E62ODKKqQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:28 2026 by rpki-client