This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31302e302f32332d3234203d3e203536303436.roa File: 3232332e3136302e31302e302f32332d3234203d3e203536303436.roa (raw, json) Hash identifier: xvuDH0bhQVWjucSoYPJ49+BCuG/E2qTpSXMy6zZ1EP8= Subject key identifier: CC:33:8A:D0:FC:A3:CC:60:4D:10:D3:48:24:F0:9F:A6:47:C8:0D:42 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 3E14F37990CFB4A7972CC1F6C820A6FA2E52E1C1 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31302e302f32332d3234203d3e203536303436.roa Signing time: Tue 20 Jan 2026 02:28:28 +0000 ROA not before: Tue 20 Jan 2026 02:23:28 +0000 ROA not after: Tue 19 Jan 2027 02:28:28 +0000 asID: 56046 IP address blocks: 223.160.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:14:f3:79:90:cf:b4:a7:97:2c:c1:f6:c8:20:a6:fa:2e:52:e1:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:28 2026 GMT Not After : Jan 19 02:28:28 2027 GMT Subject: CN=CC338AD0FCA3CC604D10D34824F09FA647C80D42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:57:25:39:55:a8:4b:65:dd:93:63:25:a8:5b: f6:f2:bd:11:e5:e3:1e:87:63:1a:6c:03:8d:f3:fd: 9a:5d:3b:0b:b3:c3:34:3e:74:59:b9:7e:58:9c:e3: 8f:d5:dd:19:8c:f3:cb:9f:42:77:d1:12:d9:83:bf: 2f:84:ea:9d:5c:94:18:f1:42:24:be:2f:3c:51:98: d8:36:d7:38:dd:ef:c0:b7:2b:c7:76:81:ad:2c:cc: ee:13:85:e5:fa:ba:a0:e0:2f:88:e5:55:e8:a3:86: ec:43:57:91:fc:dc:f0:13:8f:46:a5:ce:42:a5:a7: 51:34:94:40:78:6a:5c:0f:c5:c3:2e:0d:8c:b4:08: ea:58:c8:dd:21:13:a0:cb:2b:a4:3f:2d:58:d0:c9: 3c:e4:6a:61:2e:3d:60:f9:24:f0:b9:7f:78:fd:be: 07:28:a6:6e:10:b4:5a:51:55:a6:ad:31:44:83:66: bf:a0:fe:85:4b:3d:88:28:81:21:13:0f:a7:e1:3f: 9d:da:de:c1:8b:d0:ba:ff:af:a6:09:fc:0c:6e:a9: a6:ab:7f:91:20:11:ff:fb:57:77:dc:4b:84:6a:81: 00:0a:3b:0c:37:fd:99:cf:76:24:19:2b:8f:a1:7b: 6c:00:63:19:e8:2f:10:4c:46:16:c2:7a:25:82:31: ed:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:33:8A:D0:FC:A3:CC:60:4D:10:D3:48:24:F0:9F:A6:47:C8:0D:42 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31302e302f32332d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.10.0/23 Signature Algorithm: sha256WithRSAEncryption a4:25:e2:43:48:98:04:4d:43:e2:cf:5f:f2:48:62:e0:40:e1: 12:99:b0:cb:0e:00:9c:65:15:21:c7:2d:ab:07:d2:d8:63:bc: 47:b9:67:e3:8e:23:57:5b:80:be:28:f6:c8:3d:eb:ae:c3:d8: 38:cb:81:77:7f:5d:7a:ef:33:23:80:ce:e6:f3:49:c1:84:b9: 0e:d5:c9:a4:29:eb:df:a4:80:09:c7:b7:96:66:f3:2a:ad:46: ca:91:f6:f3:a6:93:6c:ff:b6:82:04:68:4a:11:4c:34:8c:dd: 8b:1a:30:e6:5d:df:e3:05:28:74:b1:58:b8:40:5a:54:0f:36: c0:57:1c:20:d4:17:eb:d6:6a:23:c7:b6:7b:ec:c6:94:e6:48: cf:41:c8:3c:1c:97:7b:e3:97:1d:01:0e:c5:9c:d6:c2:f8:a2: 8d:90:7b:c9:48:98:09:d8:78:fb:6f:42:e4:22:7c:18:a1:9a: 15:cf:d2:77:c0:3c:43:77:4d:4d:82:18:b6:26:d1:0d:46:45: 90:38:b7:7e:ad:2a:3b:94:00:61:a7:bf:16:ea:8b:9e:33:f0: 3d:3b:c8:fc:49:70:07:6f:f9:28:11:48:20:f2:4e:91:94:bd: 75:77:ec:6b:b4:45:4b:2a:bf:a4:a4:f2:41:a8:b9:79:c9:7d: 03:60:7e:a9 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUPhTzeZDPtKeXLMH2yCCm+i5S4cEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjhaFw0yNzAxMTkwMjI4MjhaMDMxMTAvBgNV BAMTKENDMzM4QUQwRkNBM0NDNjA0RDEwRDM0ODI0RjA5RkE2NDdDODBENDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMVyU5VahLZd2TYyWoW/byvRHl 4x6HYxpsA43z/ZpdOwuzwzQ+dFm5flic44/V3RmM88ufQnfREtmDvy+E6p1clBjx QiS+LzxRmNg21zjd78C3K8d2ga0szO4TheX6uqDgL4jlVeijhuxDV5H83PATj0al zkKlp1E0lEB4alwPxcMuDYy0COpYyN0hE6DLK6Q/LVjQyTzkamEuPWD5JPC5f3j9 vgcopm4QtFpRVaatMUSDZr+g/oVLPYgogSETD6fhP53a3sGL0Lr/r6YJ/Axuqaar f5EgEf/7V3fcS4RqgQAKOww3/ZnPdiQZK4+he2wAYxnoLxBMRhbCeiWCMe2pAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUzDOK0PyjzGBNENNIJPCfpkfIDUIwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMwMmUzMTMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAd+gCjANBgkqhkiG9w0BAQsFAAOCAQEApCXiQ0iYBE1D4s9f8khi4EDh Epmwyw4AnGUVIcctqwfS2GO8R7ln444jV1uAvij2yD3rrsPYOMuBd39deu8zI4DO 5vNJwYS5DtXJpCnr36SACce3lmbzKq1GypH286aTbP+2ggRoShFMNIzdixow5l3f 4wUodLFYuEBaVA82wFccINQX69ZqI8e2e+zGlOZIz0HIPByXe+OXHQEOxZzWwvii jZB7yUiYCdh4+29C5CJ8GKGaFc/Sd8A8Q3dNTYIYtibRDUZFkDi3fq0qO5QAYae/ FuqLnjPwPTvI/ElwB2/5KBFIIPJOkZS9dXfsa7RFSyq/pKTyQai5ecl9A2B+qQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:32 2026 by rpki-client