This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e33322e302f31392d3234203d3e2037363431.roa File: 3231312e3134362e33322e302f31392d3234203d3e2037363431.roa (raw, json) Hash identifier: qi2SOMBOUVBDYM55z/zyFKf37FpGDEheblGhJn9ousk= Subject key identifier: 11:72:8B:56:C2:2C:41:50:DC:38:28:5C:99:88:E0:F5:4F:23:13:8C Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 251A561B53E62A1D3385EA0BE84A1248F58C0A72 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e33322e302f31392d3234203d3e2037363431.roa Signing time: Tue 20 Jan 2026 02:28:26 +0000 ROA not before: Tue 20 Jan 2026 02:23:26 +0000 ROA not after: Tue 19 Jan 2027 02:28:26 +0000 asID: 7641 IP address blocks: 211.146.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:1a:56:1b:53:e6:2a:1d:33:85:ea:0b:e8:4a:12:48:f5:8c:0a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:26 2026 GMT Not After : Jan 19 02:28:26 2027 GMT Subject: CN=11728B56C22C4150DC38285C9988E0F54F23138C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:09:a2:d2:10:73:90:a0:79:52:4b:7d:c3:34: d9:c0:24:00:66:4e:fd:45:3a:64:59:64:4b:cd:eb: 25:5e:fe:ae:f6:b3:d8:63:cb:d7:2b:74:be:d0:82: 66:a0:5a:d5:35:c0:1f:c6:16:06:8a:e8:0f:a7:85: 23:0f:f1:99:f6:57:b3:85:b2:18:d7:bb:a1:06:7b: fe:f7:e9:e3:87:d7:1b:2e:5c:48:be:ff:70:c4:59: 11:b4:f3:db:53:a1:eb:a5:c3:4e:47:1e:71:db:75: 82:11:50:3d:95:5b:4a:98:80:51:1b:3f:d6:7c:d2: 65:42:7c:5a:5d:78:69:46:72:5e:b7:7b:bb:a6:31: 5f:22:6a:e0:50:0d:33:eb:c3:c9:9b:28:96:ba:35: 9e:81:38:b3:a6:4f:96:92:b3:4d:4a:9b:5e:70:b4: c4:38:74:fd:ce:6a:e4:71:48:fd:32:ae:e1:ff:5f: a8:f8:0e:f9:c4:aa:14:34:dd:de:64:a6:4b:8c:53: c6:89:67:11:25:d3:ff:27:85:a3:04:62:a3:09:e6: 68:76:61:06:4d:c4:2e:29:f7:cb:1b:4b:e6:8b:e9: 80:8f:86:c0:d1:c7:2c:c0:0f:43:01:0f:87:23:9f: 7d:c3:05:07:58:76:22:3e:4c:ef:fd:d6:89:c6:f7: 2b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:72:8B:56:C2:2C:41:50:DC:38:28:5C:99:88:E0:F5:4F:23:13:8C X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e33322e302f31392d3234203d3e2037363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.146.32.0/19 Signature Algorithm: sha256WithRSAEncryption 39:7c:d8:48:23:1c:df:32:4a:87:ee:86:e6:ec:44:9b:cc:f3: 7a:04:a2:cd:75:45:5f:59:e2:6c:2c:fc:3c:2a:e8:22:39:e0: 00:8f:a9:2d:02:16:51:10:2a:41:39:b7:4e:04:73:fa:b7:07: fc:28:40:60:5a:0a:3e:f9:8c:04:bf:d9:2b:51:71:af:21:dd: 89:59:57:ee:fa:ef:1c:58:ae:32:88:db:90:e4:77:c0:f0:41: 29:e7:64:4b:6e:45:4f:f9:af:0d:e8:60:be:97:4b:7c:ec:22: 0d:77:5a:34:ff:e6:85:3a:61:66:1e:c0:93:30:05:80:4a:c3: 97:e3:3e:3a:25:60:e7:73:f2:52:8f:ef:c6:b4:fe:44:9d:89: 7a:72:d4:2d:06:ff:a7:d1:2e:d6:a8:26:3e:c8:96:30:10:ef: af:73:c3:75:23:bd:d8:f4:c1:ee:f7:91:4a:d7:a2:56:66:c8: 6f:15:a4:f5:a3:8f:86:fc:db:ca:01:35:68:7f:f3:db:29:66: 62:8e:f2:f7:34:22:7d:cb:ff:57:02:a9:54:40:9e:da:3f:64: ef:78:b8:ae:23:39:f3:7e:75:1b:21:a1:ed:a3:25:5e:52:ea: 82:e4:2a:77:22:42:77:2e:45:0b:6e:1e:30:b3:66:40:b5:e9: 96:ae:51:9c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUJRpWG1PmKh0zheoL6EoSSPWMCnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjZaFw0yNzAxMTkwMjI4MjZaMDMxMTAvBgNV BAMTKDExNzI4QjU2QzIyQzQxNTBEQzM4Mjg1Qzk5ODhFMEY1NEYyMzEzOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfCaLSEHOQoHlSS33DNNnAJABm Tv1FOmRZZEvN6yVe/q72s9hjy9crdL7QgmagWtU1wB/GFgaK6A+nhSMP8Zn2V7OF shjXu6EGe/736eOH1xsuXEi+/3DEWRG089tToeulw05HHnHbdYIRUD2VW0qYgFEb P9Z80mVCfFpdeGlGcl63e7umMV8iauBQDTPrw8mbKJa6NZ6BOLOmT5aSs01Km15w tMQ4dP3OauRxSP0yruH/X6j4DvnEqhQ03d5kpkuMU8aJZxEl0/8nhaMEYqMJ5mh2 YQZNxC4p98sbS+aL6YCPhsDRxyzAD0MBD4cjn33DBQdYdiI+TO/91onG9yvjAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUEXKLVsIsQVDcOChcmYjg9U8jE4wwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMTMxMmUzMTM0 MzYyZTMzMzIyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzNzM2MzQzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBdOSIDANBgkqhkiG9w0BAQsFAAOCAQEAOXzYSCMc3zJKh+6G5uxEm8zzegSi zXVFX1nibCz8PCroIjngAI+pLQIWURAqQTm3TgRz+rcH/ChAYFoKPvmMBL/ZK1Fx ryHdiVlX7vrvHFiuMojbkOR3wPBBKedkS25FT/mvDehgvpdLfOwiDXdaNP/mhTph Zh7AkzAFgErDl+M+OiVg53PyUo/vxrT+RJ2JenLULQb/p9Eu1qgmPsiWMBDvr3PD dSO92PTB7veRSteiVmbIbxWk9aOPhvzbygE1aH/z2ylmYo7y9zQifcv/VwKpVECe 2j9k73i4riM58351GyGh7aMlXlLqguQqdyJCdy5FC24eMLNmQLXplq5RnA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:58 2026 by rpki-client