This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e32342e302f32312d3234203d3e2037363431.roa File: 3231312e3134362e32342e302f32312d3234203d3e2037363431.roa (raw, json) Hash identifier: 8qRT/NGs5ppd6zChA38a5fezK1grs7zY1/8eS2cYpn0= Subject key identifier: 5A:4B:DA:46:00:F9:35:43:8A:C1:D6:B7:9D:F0:C2:0C:0C:2E:44:F5 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 5F729C7F1C9DCFA7F6A7F85A418543D48C6AEE94 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e32342e302f32312d3234203d3e2037363431.roa Signing time: Tue 20 Jan 2026 02:27:24 +0000 ROA not before: Tue 20 Jan 2026 02:22:24 +0000 ROA not after: Tue 19 Jan 2027 02:27:24 +0000 asID: 7641 IP address blocks: 211.146.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:72:9c:7f:1c:9d:cf:a7:f6:a7:f8:5a:41:85:43:d4:8c:6a:ee:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:24 2026 GMT Not After : Jan 19 02:27:24 2027 GMT Subject: CN=5A4BDA4600F935438AC1D6B79DF0C20C0C2E44F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:f0:c2:59:fe:cf:75:00:4c:f7:44:2e:68: 9e:24:91:5d:88:d1:78:6d:31:81:a6:d5:60:97:e1: ff:59:fa:93:0c:5a:ba:be:39:12:dd:63:86:ff:cf: c5:71:61:1d:29:e2:ed:cd:5a:2f:09:94:7e:f4:25: 98:8c:3c:09:b2:83:65:34:b2:db:53:4d:c6:07:77: ad:f9:12:92:a7:e5:ff:f6:0e:02:70:e0:0d:ba:60: b1:4a:f3:8c:63:0a:29:ce:9d:d0:1d:06:39:39:f9: 0d:c9:38:29:53:cb:aa:10:d4:13:38:1b:94:cf:41: fc:74:fc:16:57:bb:63:88:8d:a6:7f:97:00:01:ba: b9:a8:1b:86:21:08:ab:b0:4b:db:68:73:b2:7a:6e: b5:6d:df:e4:a6:21:8d:3d:ae:72:a6:65:c4:6a:0c: de:0a:28:a6:3e:79:b1:48:43:81:34:7b:98:69:81: 80:b1:fb:08:eb:9b:bd:21:3d:67:a1:fc:03:b8:f8: a2:6e:03:a7:4a:cb:42:9d:69:db:a0:c8:32:8b:ac: f2:a1:72:c3:bf:4d:88:e2:28:37:4d:a4:2a:eb:36: 6e:d4:a6:91:9d:a9:c5:28:68:dd:46:23:d6:3e:d3: 38:bb:42:e9:9e:8f:ec:8c:ea:a2:5a:31:13:f9:d2: 40:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4B:DA:46:00:F9:35:43:8A:C1:D6:B7:9D:F0:C2:0C:0C:2E:44:F5 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e32342e302f32312d3234203d3e2037363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.146.24.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:4b:d9:a3:74:da:78:2c:b0:e0:e8:57:59:69:6c:00:7e:22: b0:96:67:52:64:f0:c8:c1:45:3e:78:f3:88:d4:d3:ac:37:cd: 9f:b8:d1:6e:8f:c0:2f:90:28:1d:15:f0:5d:b1:22:15:ad:26: e7:a2:db:a7:30:83:ea:e3:86:0d:9e:13:06:07:a1:e7:dc:de: ed:c2:d2:54:f0:3c:0b:ac:81:e6:77:f4:b5:d2:f4:96:8b:80: f3:25:e3:a5:ba:1c:48:57:71:c3:e4:46:4e:fc:2d:03:66:b9: 42:66:22:ec:24:96:66:c7:81:80:58:66:71:3e:96:dc:1b:c6: 8f:5c:6d:b3:91:fd:43:f6:3e:2a:ad:73:0e:1e:48:98:48:ca: 94:7e:fb:7a:b3:72:06:4f:1d:6d:75:c5:01:24:17:77:84:da: 37:32:61:e5:d4:2f:a2:a5:35:76:40:f2:1d:78:1d:1a:6c:c5: 3f:82:ab:27:ed:ff:be:1d:f6:85:04:71:6b:82:af:0a:5f:1f: 4f:0c:67:40:ec:54:e5:fa:0a:bc:f9:81:ba:06:f4:fa:2f:7e: a2:48:6b:8a:43:fa:55:6c:c8:ae:bd:27:d7:a5:2c:28:c7:62: b3:c3:f2:94:62:f3:b8:c6:7f:fe:97:98:e5:f0:00:15:34:5b: aa:b9:2b:65 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUX3Kcfxydz6f2p/haQYVD1Ixq7pQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjRaFw0yNzAxMTkwMjI3MjRaMDMxMTAvBgNV BAMTKDVBNEJEQTQ2MDBGOTM1NDM4QUMxRDZCNzlERjBDMjBDMEMyRTQ0RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+/DCWf7PdQBM90QuaJ4kkV2I 0XhtMYGm1WCX4f9Z+pMMWrq+ORLdY4b/z8VxYR0p4u3NWi8JlH70JZiMPAmyg2U0 sttTTcYHd635EpKn5f/2DgJw4A26YLFK84xjCinOndAdBjk5+Q3JOClTy6oQ1BM4 G5TPQfx0/BZXu2OIjaZ/lwABurmoG4YhCKuwS9toc7J6brVt3+SmIY09rnKmZcRq DN4KKKY+ebFIQ4E0e5hpgYCx+wjrm70hPWeh/AO4+KJuA6dKy0KdadugyDKLrPKh csO/TYjiKDdNpCrrNm7UppGdqcUoaN1GI9Y+0zi7Qumej+yM6qJaMRP50kALAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUWkvaRgD5NUOKwda3nfDCDAwuRPUwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMTMxMmUzMTM0 MzYyZTMyMzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNzM2MzQzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9OSGDANBgkqhkiG9w0BAQsFAAOCAQEAfUvZo3TaeCyw4OhXWWlsAH4isJZn UmTwyMFFPnjziNTTrDfNn7jRbo/AL5AoHRXwXbEiFa0m56LbpzCD6uOGDZ4TBgeh 59ze7cLSVPA8C6yB5nf0tdL0louA8yXjpbocSFdxw+RGTvwtA2a5QmYi7CSWZseB gFhmcT6W3BvGj1xts5H9Q/Y+Kq1zDh5ImEjKlH77erNyBk8dbXXFASQXd4TaNzJh 5dQvoqU1dkDyHXgdGmzFP4KrJ+3/vh32hQRxa4KvCl8fTwxnQOxU5foKvPmBugb0 +i9+okhrikP6VWzIrr0n16UsKMdis8PylGLzuMZ//peY5fAAFTRbqrkrZQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:06 2026 by rpki-client