This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3135362e3132382e302f31392d3234203d3e2037363431.roa File: 3231312e3135362e3132382e302f31392d3234203d3e2037363431.roa (raw, json) Hash identifier: R8kQ2dL1SLfLs85m4404spReKZE3A+8vIxxKxCL22bA= Subject key identifier: 11:62:21:90:1B:1E:4B:F3:AF:05:21:12:9D:E8:F5:EB:ED:E3:3E:A0 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 36F3843421049621B40EE9C52C8503C9D9387BCE Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3135362e3132382e302f31392d3234203d3e2037363431.roa Signing time: Tue 20 Jan 2026 02:27:22 +0000 ROA not before: Tue 20 Jan 2026 02:22:22 +0000 ROA not after: Tue 19 Jan 2027 02:27:22 +0000 asID: 7641 IP address blocks: 211.156.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f3:84:34:21:04:96:21:b4:0e:e9:c5:2c:85:03:c9:d9:38:7b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:22 2026 GMT Not After : Jan 19 02:27:22 2027 GMT Subject: CN=116221901B1E4BF3AF0521129DE8F5EBEDE33EA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ff:c9:e1:88:ec:08:3d:f8:af:9a:1b:e5:f1: 1d:48:15:29:ff:61:11:41:34:8f:48:09:ad:5c:f5: e7:81:df:f6:c3:52:e9:ea:7c:42:7d:86:a9:8d:ba: 7e:e8:b8:61:06:2c:68:12:6c:ea:a1:1b:98:f8:c8: 9b:19:4a:88:28:85:51:7e:13:26:15:34:c2:2e:31: 10:12:90:b2:3f:38:08:c3:a6:1e:a4:6f:2b:0f:ea: 57:2f:13:29:84:e9:f2:02:28:11:79:93:10:03:f5: 73:a0:d9:81:62:4b:d7:df:03:b9:5d:65:f1:0a:99: 9d:a5:8c:9a:68:82:3e:f6:4d:2a:14:d8:4e:5e:75: 2f:1a:88:e8:ad:01:1e:af:57:af:81:16:c1:ca:9a: 5e:a1:a5:97:9b:fa:0d:29:1d:95:1f:af:25:e2:bd: 79:7a:6c:a9:37:1f:29:c2:8d:50:8c:25:7f:91:80: c9:df:14:39:18:84:ff:31:c6:35:e7:a1:05:f2:3e: fb:2e:bd:b4:b2:7c:37:36:f9:12:e4:2a:c8:bf:db: 9f:c6:cb:f3:ac:13:54:43:2e:22:2b:9a:03:d5:35: b1:fe:4d:3b:47:14:b3:5f:9f:0c:b7:8e:66:db:ef: 39:37:3f:89:87:f8:7c:1e:8d:37:56:21:10:12:b8: 94:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:62:21:90:1B:1E:4B:F3:AF:05:21:12:9D:E8:F5:EB:ED:E3:3E:A0 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3135362e3132382e302f31392d3234203d3e2037363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.156.128.0/19 Signature Algorithm: sha256WithRSAEncryption 39:ce:1e:0d:ba:cc:30:d0:87:6f:31:e2:9f:4d:c3:a4:f3:31: ee:7f:fe:ce:f1:7a:83:f4:99:de:98:8c:0a:a4:db:cc:56:a3: 7e:c6:aa:25:6d:70:5e:40:5e:f5:b3:eb:91:b0:72:23:6e:45: b0:c0:1f:5d:2a:eb:c3:a3:32:b8:cc:05:60:cb:40:15:f8:56: a9:e9:bd:4f:49:65:22:da:f0:36:cd:50:b1:7c:06:a9:f3:78: f6:32:f9:6c:57:d8:f4:f2:67:b8:f2:14:5c:62:e8:e2:59:19: 2a:d4:d0:61:dd:69:d8:18:1c:72:1c:65:94:f0:10:2b:67:d2: e4:b4:25:d3:d7:8c:c5:4d:d0:5e:04:94:8f:a5:d1:13:2a:6a: 59:3b:d7:06:93:ae:1b:e4:84:c2:9c:2f:64:cf:51:7b:ca:36: bf:d5:6a:87:0d:eb:37:3d:88:f8:91:e6:81:d2:31:75:17:0f: a6:76:fa:37:f2:12:d0:f3:21:85:e7:f0:bd:4c:73:5f:78:c5: 2c:08:72:8e:44:67:f4:04:ca:21:ec:4f:fa:a3:90:a5:1a:d2: 06:76:64:15:85:00:98:d9:58:8c:00:7c:bd:03:ad:94:d3:a2: bd:04:89:c4:1e:ba:c2:fa:be:1d:43:bc:b5:7b:0d:57:af:ff: 54:49:32:1a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUNvOENCEEliG0DunFLIUDydk4e84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjJaFw0yNzAxMTkwMjI3MjJaMDMxMTAvBgNV BAMTKDExNjIyMTkwMUIxRTRCRjNBRjA1MjExMjlERThGNUVCRURFMzNFQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ/8nhiOwIPfivmhvl8R1IFSn/ YRFBNI9ICa1c9eeB3/bDUunqfEJ9hqmNun7ouGEGLGgSbOqhG5j4yJsZSogohVF+ EyYVNMIuMRASkLI/OAjDph6kbysP6lcvEymE6fICKBF5kxAD9XOg2YFiS9ffA7ld ZfEKmZ2ljJpogj72TSoU2E5edS8aiOitAR6vV6+BFsHKml6hpZeb+g0pHZUfryXi vXl6bKk3HynCjVCMJX+RgMnfFDkYhP8xxjXnoQXyPvsuvbSyfDc2+RLkKsi/25/G y/OsE1RDLiIrmgPVNbH+TTtHFLNfnwy3jmbb7zk3P4mH+HwejTdWIRASuJSxAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUEWIhkBseS/OvBSESnej16+3jPqAwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzEzMTJlMzEz NTM2MmUzMTMyMzgyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzNzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBdOcgDANBgkqhkiG9w0BAQsFAAOCAQEAOc4eDbrMMNCHbzHin03DpPMx 7n/+zvF6g/SZ3piMCqTbzFajfsaqJW1wXkBe9bPrkbByI25FsMAfXSrrw6MyuMwF YMtAFfhWqem9T0llItrwNs1QsXwGqfN49jL5bFfY9PJnuPIUXGLo4lkZKtTQYd1p 2BgcchxllPAQK2fS5LQl09eMxU3QXgSUj6XREypqWTvXBpOuG+SEwpwvZM9Re8o2 v9Vqhw3rNz2I+JHmgdIxdRcPpnb6N/IS0PMhhefwvUxzX3jFLAhyjkRn9ATKIexP +qOQpRrSBnZkFYUAmNlYjAB8vQOtlNOivQSJxB66wvq+HUO8tXsNV6//VEkyGg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:51 2026 by rpki-client