This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e302e302f32332d3234203d3e203536303438.roa File: 3232332e3136302e302e302f32332d3234203d3e203536303438.roa (raw, json) Hash identifier: RARXhv4UsMfYQ01xfxGt1gdNKIjFYm/Hdjj85OQivIs= Subject key identifier: 61:3D:0C:4E:69:FE:46:B8:A4:D6:50:5C:2E:24:0B:41:5B:A9:85:FE Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 2B71C58D794021827D579E568DF24DE799797109 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e302e302f32332d3234203d3e203536303438.roa Signing time: Tue 20 Jan 2026 02:28:27 +0000 ROA not before: Tue 20 Jan 2026 02:23:27 +0000 ROA not after: Tue 19 Jan 2027 02:28:27 +0000 asID: 56048 IP address blocks: 223.160.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:71:c5:8d:79:40:21:82:7d:57:9e:56:8d:f2:4d:e7:99:79:71:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:27 2026 GMT Not After : Jan 19 02:28:27 2027 GMT Subject: CN=613D0C4E69FE46B8A4D6505C2E240B415BA985FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a5:36:c1:3e:e9:35:db:a4:a4:e4:80:41:aa: 2a:8e:42:64:8c:7a:b0:95:5d:1e:f4:1c:3e:81:35: f8:48:06:23:dc:3c:57:de:44:79:d7:d5:18:d9:fd: 17:78:84:f1:38:d6:27:17:b1:ef:b7:77:a4:69:86: 07:27:14:80:0a:a4:4a:8b:79:8d:32:9b:1c:1a:15: 60:18:66:36:b3:a3:e8:8f:75:dc:76:6a:0a:bc:e4: d1:f0:47:55:c9:1b:0e:ba:cb:e8:06:c5:d8:55:a2: 7c:98:20:5b:30:7f:48:0b:5f:c5:0a:92:52:db:9d: 84:5c:f3:7b:b7:13:aa:9c:f3:fd:85:92:0a:2d:cf: b3:88:b4:f1:fd:f4:17:96:4b:e6:2e:a7:2d:87:b3: 20:ac:f4:36:19:65:e8:61:17:4c:b5:c8:0d:55:e8: b2:03:2d:d9:63:d1:14:19:be:29:b3:e7:fe:08:6e: a1:a6:1a:89:1e:7c:e5:cb:19:13:10:41:10:41:a4: 2b:63:2d:0b:66:49:df:13:37:0c:0a:5a:9a:da:90: dc:d8:6d:d6:61:be:42:58:2f:b7:bd:ed:05:4b:77: f2:fe:cd:4c:aa:f2:4a:fd:05:4a:b1:73:c0:a5:e5: 5e:d1:10:40:ab:1b:f3:9e:af:db:04:0e:6b:e9:f9: 6c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3D:0C:4E:69:FE:46:B8:A4:D6:50:5C:2E:24:0B:41:5B:A9:85:FE X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e302e302f32332d3234203d3e203536303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.0.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:4f:f2:9a:ce:df:b0:19:76:83:c5:52:39:0d:17:3b:67:6d: 31:71:ed:e5:f2:da:ef:3b:8c:a2:d6:b4:47:2b:e4:12:6e:ba: cc:cf:7f:04:65:84:f6:c7:31:80:26:21:2b:da:39:36:fc:fa: de:67:62:d6:3e:e5:60:2d:1f:43:b1:82:bb:1f:8a:4d:56:b8: b3:a3:30:e6:cd:ea:9c:fc:83:a7:c1:89:f4:19:aa:9a:e4:81: 7e:07:24:e5:8b:42:3c:15:9d:f8:3c:bc:cd:88:23:95:95:18: 8a:30:c3:2c:f5:00:c2:6a:36:87:07:ff:85:89:0b:06:01:54: 04:97:08:44:8d:e3:1b:ad:ae:5f:02:d1:fd:c8:3c:1a:80:a6: 10:f5:99:79:c6:9b:f3:92:7f:a2:74:ff:75:41:0b:46:40:59: 03:28:d4:86:7b:30:81:3f:b7:82:6b:99:d4:77:14:59:e9:96: fb:51:71:8c:09:7f:83:cb:26:2a:6a:d3:de:31:7b:28:ab:c6: 12:fc:59:63:1c:1f:af:f0:34:28:4b:e1:d5:84:04:e7:e2:06: ac:54:d6:45:4e:d7:9a:d8:a8:05:94:6e:51:e8:93:ac:a9:2c: f5:57:35:de:47:64:88:ae:28:e8:03:b7:54:84:9a:7f:03:e5: 61:62:1d:dc -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUK3HFjXlAIYJ9V55WjfJN55l5cQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjdaFw0yNzAxMTkwMjI4MjdaMDMxMTAvBgNV BAMTKDYxM0QwQzRFNjlGRTQ2QjhBNEQ2NTA1QzJFMjQwQjQxNUJBOTg1RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCppTbBPuk126Sk5IBBqiqOQmSM erCVXR70HD6BNfhIBiPcPFfeRHnX1RjZ/Rd4hPE41icXse+3d6RphgcnFIAKpEqL eY0ymxwaFWAYZjazo+iPddx2agq85NHwR1XJGw66y+gGxdhVonyYIFswf0gLX8UK klLbnYRc83u3E6qc8/2Fkgotz7OItPH99BeWS+Yupy2HsyCs9DYZZehhF0y1yA1V 6LIDLdlj0RQZvimz5/4IbqGmGokefOXLGRMQQRBBpCtjLQtmSd8TNwwKWprakNzY bdZhvkJYL7e97QVLd/L+zUyq8kr9BUqxc8Cl5V7REECrG/Oer9sEDmvp+WwpAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUYT0MTmn+Rrik1lBcLiQLQVuphf4wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMjMzMmUzMTM2 MzAyZTMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAd+gADANBgkqhkiG9w0BAQsFAAOCAQEAjE/yms7fsBl2g8VSOQ0XO2dtMXHt 5fLa7zuMota0RyvkEm66zM9/BGWE9scxgCYhK9o5Nvz63mdi1j7lYC0fQ7GCux+K TVa4s6Mw5s3qnPyDp8GJ9BmqmuSBfgck5YtCPBWd+Dy8zYgjlZUYijDDLPUAwmo2 hwf/hYkLBgFUBJcIRI3jG62uXwLR/cg8GoCmEPWZecab85J/onT/dUELRkBZAyjU hnswgT+3gmuZ1HcUWemW+1FxjAl/g8smKmrT3jF7KKvGEvxZYxwfr/A0KEvh1YQE 5+IGrFTWRU7XmtioBZRuUeiTrKks9Vc13kdkiK4o6AO3VISafwPlYWId3A== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:45 2026 by rpki-client