This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3131322e302f32322d3234203d3e203536303437.roa File: 3232332e3136302e3131322e302f32322d3234203d3e203536303437.roa (raw, json) Hash identifier: q5+/G43+yESMc+DSCiPEExf479bcf+vXYsjLnNebkzE= Subject key identifier: B5:50:14:AB:94:82:C8:9B:21:A5:10:C5:8D:2B:7F:BF:59:B4:03:B1 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 7928BA9F1369793D7F9AD877070ED0BF502EA476 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3131322e302f32322d3234203d3e203536303437.roa Signing time: Tue 20 Jan 2026 02:27:23 +0000 ROA not before: Tue 20 Jan 2026 02:22:23 +0000 ROA not after: Tue 19 Jan 2027 02:27:23 +0000 asID: 56047 IP address blocks: 223.160.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:28:ba:9f:13:69:79:3d:7f:9a:d8:77:07:0e:d0:bf:50:2e:a4:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:23 2026 GMT Not After : Jan 19 02:27:23 2027 GMT Subject: CN=B55014AB9482C89B21A510C58D2B7FBF59B403B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:b5:cc:50:75:17:79:fa:7b:84:eb:e4:7f: b1:65:1f:21:92:77:8e:69:7b:c6:83:a7:02:90:b9: 8e:41:d4:90:a2:f1:05:a8:1a:e1:b8:b8:fe:a5:56: c7:34:6d:32:26:f2:42:30:30:89:5f:d7:da:a5:38: 1c:b0:c6:85:ac:9f:84:99:9f:65:e3:76:59:4d:3f: 01:0d:64:05:a9:a9:ea:ba:05:14:c4:8c:6e:dc:d3: 39:24:4f:9c:07:d4:44:56:ab:df:2d:a9:4b:46:81: a2:f3:93:4b:93:c3:7f:7c:0c:cb:55:a4:6c:9b:8c: 4f:45:67:0e:c3:6b:5d:c8:9d:9f:f6:47:f8:b2:61: b3:4b:e4:97:a6:21:80:58:f0:1b:d8:38:d2:5b:b9: 4a:58:6d:ae:9c:f8:31:50:08:51:e2:15:8b:aa:44: d6:bc:8d:86:87:6f:3a:d2:34:7e:2d:37:09:11:49: 4f:58:9f:f4:20:d8:17:c3:1a:f9:6e:22:94:3e:79: 25:e1:6c:2e:ae:0e:f1:ab:37:31:bf:80:cc:26:f5: b3:01:b0:7f:78:85:be:4f:cd:d3:dc:fb:18:d9:dd: ae:b9:7a:72:dd:03:51:6e:39:d7:5c:24:5a:a6:00: 33:8f:64:ba:02:4e:b8:99:d9:b2:8b:4c:65:e9:7f: 23:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:50:14:AB:94:82:C8:9B:21:A5:10:C5:8D:2B:7F:BF:59:B4:03:B1 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3131322e302f32322d3234203d3e203536303437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.112.0/22 Signature Algorithm: sha256WithRSAEncryption a7:1c:ee:7a:a4:08:36:a4:54:79:b4:f4:08:e3:69:88:64:6c: 2b:e8:2f:20:ce:25:08:97:d4:67:9d:ca:51:6d:c2:4e:05:8c: 1a:b4:4d:5a:4b:b6:4d:6a:74:29:29:9d:2c:5f:99:c1:21:7d: 4e:6f:80:b3:15:30:52:40:49:90:6f:4c:de:61:6d:34:9f:17: 09:3b:d2:b1:4e:f6:4d:87:a4:74:32:43:c6:66:c5:f1:e1:a9: a0:88:22:29:99:5c:33:54:aa:db:be:9b:5b:d7:2f:3a:4f:27: a7:e7:07:9d:5e:3a:87:d0:b1:a3:ba:2f:68:58:4e:77:72:f2: 46:81:7a:1f:57:97:36:bd:bc:07:b8:63:c2:46:33:c2:1e:02: 8c:67:a4:14:2a:f2:b5:13:bd:6b:3c:47:3f:f0:4f:6d:80:0d: 6d:02:ce:f9:0f:a3:c0:16:0c:6a:a4:a5:70:7f:f1:b0:7f:91: b5:4c:d8:bb:c7:e2:a8:e4:0f:f5:a7:e5:2d:54:94:0a:34:ef: 73:ea:7a:99:82:ae:4d:d0:22:ee:bc:78:2b:f2:e4:79:c5:11: f8:17:da:8a:0e:1e:8b:e5:1c:c5:f4:41:7b:50:be:69:e5:9c: db:be:e2:45:7e:e9:0a:8f:d7:34:c7:ac:7c:63:5d:70:8e:e8: 3e:34:47:23 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUeSi6nxNpeT1/mth3Bw7Qv1AupHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjNaFw0yNzAxMTkwMjI3MjNaMDMxMTAvBgNV BAMTKEI1NTAxNEFCOTQ4MkM4OUIyMUE1MTBDNThEMkI3RkJGNTlCNDAzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXH7XMUHUXefp7hOvkf7FlHyGS d45pe8aDpwKQuY5B1JCi8QWoGuG4uP6lVsc0bTIm8kIwMIlf19qlOBywxoWsn4SZ n2XjdllNPwENZAWpqeq6BRTEjG7c0zkkT5wH1ERWq98tqUtGgaLzk0uTw398DMtV pGybjE9FZw7Da13InZ/2R/iyYbNL5JemIYBY8BvYONJbuUpYba6c+DFQCFHiFYuq RNa8jYaHbzrSNH4tNwkRSU9Yn/Qg2BfDGvluIpQ+eSXhbC6uDvGrNzG/gMwm9bMB sH94hb5PzdPc+xjZ3a65enLdA1FuOddcJFqmADOPZLoCTriZ2bKLTGXpfyN/AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUtVAUq5SCyJshpRDFjSt/v1m0A7EwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMDJlMzEzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAt+gcDANBgkqhkiG9w0BAQsFAAOCAQEApxzueqQINqRUebT0CONp iGRsK+gvIM4lCJfUZ53KUW3CTgWMGrRNWku2TWp0KSmdLF+ZwSF9Tm+AsxUwUkBJ kG9M3mFtNJ8XCTvSsU72TYekdDJDxmbF8eGpoIgiKZlcM1Sq276bW9cvOk8np+cH nV46h9Cxo7ovaFhOd3LyRoF6H1eXNr28B7hjwkYzwh4CjGekFCrytRO9azxHP/BP bYANbQLO+Q+jwBYMaqSlcH/xsH+RtUzYu8fiqOQP9aflLVSUCjTvc+p6mYKuTdAi 7rx4K/LkecUR+Bfaig4ei+UcxfRBe1C+aeWc277iRX7pCo/XNMesfGNdcI7oPjRH Iw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:40 2026 by rpki-client