This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e38392e302e302f31362d3234203d3e2037363431.roa File: 3231312e38392e302e302f31362d3234203d3e2037363431.roa (raw, json) Hash identifier: /tiQG87BDgAj/Sxj2yCO6O1f+vwwNCOALienBsZtrzw= Subject key identifier: 26:0A:07:34:74:B0:CD:9C:6F:93:77:E3:2A:F1:0E:6D:17:3F:C8:81 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 2E3F5C18299120D91B17FD0E8D1955BC47A8BA29 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e38392e302e302f31362d3234203d3e2037363431.roa Signing time: Tue 20 Jan 2026 02:27:23 +0000 ROA not before: Tue 20 Jan 2026 02:22:23 +0000 ROA not after: Tue 19 Jan 2027 02:27:23 +0000 asID: 7641 IP address blocks: 211.89.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3f:5c:18:29:91:20:d9:1b:17:fd:0e:8d:19:55:bc:47:a8:ba:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:23 2026 GMT Not After : Jan 19 02:27:23 2027 GMT Subject: CN=260A073474B0CD9C6F9377E32AF10E6D173FC881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9e:9b:f7:8b:9b:7c:f8:c0:9f:1f:a5:1d:2d: 7d:84:2b:eb:5f:35:c9:51:eb:95:62:77:51:bb:c7: d4:d6:3a:c6:12:44:56:b8:e2:da:f2:c2:48:5b:70: 2c:34:34:5c:d1:4b:d6:99:06:5f:12:77:c2:33:63: 01:a8:77:f3:a6:4d:8d:dd:b9:64:6f:27:9c:69:e6: 22:7b:9a:e6:66:54:f9:e9:ab:0a:1d:e9:71:b7:fc: 74:ac:65:36:c9:67:99:de:3b:5a:c3:1a:40:a6:7b: b4:50:9d:1d:87:52:03:91:83:9b:6b:53:1e:d9:df: 36:94:cf:1d:50:3f:50:08:ae:bd:ef:8d:7c:37:83: 17:5d:08:32:dc:3f:dd:58:f1:cf:1f:fa:18:59:a2: 83:5c:60:a9:dd:6f:40:8f:05:37:4d:4e:29:ce:b3: b4:68:7a:8f:42:2a:f0:77:65:c8:ef:51:69:7d:bf: 3f:bb:a3:aa:b5:2e:bd:4f:25:96:33:d0:e6:cb:8b: 17:eb:fc:6b:53:7b:9d:a4:eb:ca:f5:90:f3:6d:1e: cd:bd:7f:17:09:63:b5:b9:85:e2:6f:cc:e3:f6:da: 33:ba:44:94:31:3b:dd:66:31:2b:c1:06:6e:27:0a: 41:90:94:f4:4e:44:ee:02:06:39:e6:01:c2:2f:2e: 78:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0A:07:34:74:B0:CD:9C:6F:93:77:E3:2A:F1:0E:6D:17:3F:C8:81 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e38392e302e302f31362d3234203d3e2037363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.89.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9d:35:d3:cd:be:24:c2:a8:16:5d:55:3b:ca:cc:43:72:24:d2: 11:41:2e:19:7e:8b:43:17:98:8a:d0:4d:49:2f:e1:47:f6:d5: f2:f8:83:58:cf:17:11:8a:1c:1f:42:a7:7f:93:e1:20:a1:7b: 80:c0:65:1d:44:d3:ec:c8:4b:5d:a5:4c:e5:3b:2f:8b:a2:c4: 27:55:42:1c:48:49:86:67:4d:9e:f0:bc:99:00:29:9b:7c:da: 15:64:ec:04:49:00:ec:f6:ae:9a:07:d7:67:1d:7f:1e:86:58: 6c:5e:8d:c5:36:44:86:0e:03:d5:df:08:7f:d5:9c:2f:d8:e9: 73:c7:91:6f:b6:3e:04:6c:48:22:d5:27:41:58:d0:b5:ba:63: 0a:0b:68:74:9f:ef:34:ff:98:98:a8:5d:3c:47:d1:07:9c:42: f7:43:53:b9:ca:c2:19:09:87:e4:b2:46:e5:c5:da:37:77:94: d3:2c:fe:83:f0:99:31:87:2a:fb:ac:95:8f:3f:ef:26:74:85: 53:66:28:da:df:d2:ca:df:eb:0b:08:a6:0b:35:2d:d7:4e:62: 7e:2c:3e:d6:8d:04:51:08:d3:30:84:ac:43:f8:c1:16:d7:1e: 44:e1:65:94:74:90:f9:aa:27:34:77:4b:8c:24:f9:b7:09:2c: d2:6e:34:69 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIULj9cGCmRINkbF/0OjRlVvEeouikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjNaFw0yNzAxMTkwMjI3MjNaMDMxMTAvBgNV BAMTKDI2MEEwNzM0NzRCMENEOUM2RjkzNzdFMzJBRjEwRTZEMTczRkM4ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnpv3i5t8+MCfH6UdLX2EK+tf NclR65Vid1G7x9TWOsYSRFa44trywkhbcCw0NFzRS9aZBl8Sd8IzYwGod/OmTY3d uWRvJ5xp5iJ7muZmVPnpqwod6XG3/HSsZTbJZ5neO1rDGkCme7RQnR2HUgORg5tr Ux7Z3zaUzx1QP1AIrr3vjXw3gxddCDLcP91Y8c8f+hhZooNcYKndb0CPBTdNTinO s7Roeo9CKvB3ZcjvUWl9vz+7o6q1Lr1PJZYz0ObLixfr/GtTe52k68r1kPNtHs29 fxcJY7W5heJvzOP22jO6RJQxO91mMSvBBm4nCkGQlPRORO4CBjnmAcIvLnhxAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUJgoHNHSwzZxvk3fjKvEObRc/yIEwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMTMxMmUzODM5 MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDM3MzYzNDMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA 01kwDQYJKoZIhvcNAQELBQADggEBAJ01082+JMKoFl1VO8rMQ3Ik0hFBLhl+i0MX mIrQTUkv4Uf21fL4g1jPFxGKHB9Cp3+T4SChe4DAZR1E0+zIS12lTOU7L4uixCdV QhxISYZnTZ7wvJkAKZt82hVk7ARJAOz2rpoH12cdfx6GWGxejcU2RIYOA9XfCH/V nC/Y6XPHkW+2PgRsSCLVJ0FY0LW6YwoLaHSf7zT/mJioXTxH0QecQvdDU7nKwhkJ h+SyRuXF2jd3lNMs/oPwmTGHKvuslY8/7yZ0hVNmKNrf0srf6wsIpgs1LddOYn4s PtaNBFEI0zCErEP4wRbXHkThZZR0kPmqJzR3S4wk+bcJLNJuNGk= -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:50 2026 by rpki-client