This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3131362e302f32322d3234203d3e2039383038.roa File: 3232332e3136302e3131362e302f32322d3234203d3e2039383038.roa (raw, json) Hash identifier: YKURUb4sqiDEliwnLtD6Ilj+k7Swe+KNKbI3yuecuVw= Subject key identifier: 88:04:3F:72:C8:08:3D:31:22:41:FD:D9:72:D1:E6:88:29:AB:0A:DC Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 55ABC230D595C0A572F8E327985FCFBE7A7AACEA Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3131362e302f32322d3234203d3e2039383038.roa Signing time: Tue 20 Jan 2026 02:28:28 +0000 ROA not before: Tue 20 Jan 2026 02:23:28 +0000 ROA not after: Tue 19 Jan 2027 02:28:28 +0000 asID: 9808 IP address blocks: 223.160.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ab:c2:30:d5:95:c0:a5:72:f8:e3:27:98:5f:cf:be:7a:7a:ac:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:28 2026 GMT Not After : Jan 19 02:28:28 2027 GMT Subject: CN=88043F72C8083D312241FDD972D1E68829AB0ADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:eb:08:3f:e4:a8:4a:e9:de:e1:61:dc:5b:df: de:3e:9b:79:a1:dc:57:50:26:7f:e8:4c:8c:0c:72: ad:0f:6b:4f:15:7d:7d:6e:64:c5:6f:c4:f6:ed:0a: 5d:a5:f0:77:12:6b:f1:02:40:cd:c8:e0:8a:76:6b: 41:42:c9:63:81:88:f9:99:be:7a:aa:d3:5f:23:ba: 87:bd:fb:a8:53:ae:9f:80:fc:e5:1d:4b:b0:da:44: cf:08:49:13:6f:66:92:26:dc:2c:a4:9a:7a:95:51: 2a:b6:0f:32:13:70:fc:b7:46:a9:4b:52:3d:4c:42: 60:2e:9a:6e:e6:02:c0:45:53:f7:b4:a8:1b:7a:f8: 35:08:38:d4:6e:63:aa:34:27:a7:9b:88:16:d6:6d: 4d:31:7c:be:4a:dc:f6:2d:cd:fc:68:03:a2:5d:12: 0e:82:6d:1f:93:3c:7b:3b:50:ec:85:d5:23:9e:bc: a9:c7:d4:69:2e:d7:ad:5a:dd:07:12:1c:1e:37:a9: 99:3a:5b:f7:02:0b:13:95:28:f2:d6:90:5c:1d:cf: b1:b0:b7:6c:35:a7:25:ea:eb:de:a6:b6:5e:8b:f0: 6e:2f:18:96:7c:c5:55:b1:63:af:4e:d7:b7:21:b7: 33:5f:0f:fb:04:7b:44:4c:a0:8e:51:de:82:32:23: 77:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:04:3F:72:C8:08:3D:31:22:41:FD:D9:72:D1:E6:88:29:AB:0A:DC X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3131362e302f32322d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.116.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:af:f2:72:a0:32:3f:cf:b5:ec:7b:8c:a0:c0:fa:45:cd:aa: cf:a7:73:8e:e5:66:1e:b2:65:ba:0e:6b:9c:d4:e2:8f:dd:67: 8b:b2:a9:d5:12:5d:88:86:d9:13:44:21:c9:86:6e:0b:84:04: 90:1c:12:ac:8f:95:8f:1a:10:a5:9a:4d:3d:5b:92:f2:12:20: 1c:be:66:c5:2d:c5:6a:4f:02:3f:6e:3c:e0:97:46:43:e0:4e: ed:f5:2a:69:58:af:f0:10:15:df:ca:1e:4e:a5:9b:ba:af:52: 96:fb:0f:8b:47:cf:0a:d1:be:7d:8d:3d:83:53:f6:1c:30:4f: 1f:50:23:0a:c9:4a:a8:b7:f0:62:28:3d:f1:3f:fb:96:5a:20: 84:f0:52:f7:a9:1b:a3:ce:30:8c:5e:e4:de:2d:27:a3:19:55: 03:0d:fb:f4:f4:24:45:6e:de:f7:f2:e7:ae:c2:b9:6c:09:73: 89:41:13:58:1d:96:b1:07:aa:b2:91:1a:0a:1f:a2:a0:c7:09: 76:11:4b:1e:53:bc:2f:8a:ab:98:74:83:33:9a:e3:3d:d9:a4: e7:c2:31:d2:58:98:f8:23:c8:38:98:b8:e2:8a:98:7a:48:46: 57:2e:9f:46:3b:f1:d5:f5:07:b1:9b:81:38:14:07:3a:0f:97: 41:8a:83:ea -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUVavCMNWVwKVy+OMnmF/Pvnp6rOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjhaFw0yNzAxMTkwMjI4MjhaMDMxMTAvBgNV BAMTKDg4MDQzRjcyQzgwODNEMzEyMjQxRkREOTcyRDFFNjg4MjlBQjBBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6wg/5KhK6d7hYdxb394+m3mh 3FdQJn/oTIwMcq0Pa08VfX1uZMVvxPbtCl2l8HcSa/ECQM3I4Ip2a0FCyWOBiPmZ vnqq018juoe9+6hTrp+A/OUdS7DaRM8ISRNvZpIm3CykmnqVUSq2DzITcPy3RqlL Uj1MQmAumm7mAsBFU/e0qBt6+DUIONRuY6o0J6ebiBbWbU0xfL5K3PYtzfxoA6Jd Eg6CbR+TPHs7UOyF1SOevKnH1Gku161a3QcSHB43qZk6W/cCCxOVKPLWkFwdz7Gw t2w1pyXq696mtl6L8G4vGJZ8xVWxY69O17chtzNfD/sEe0RMoI5R3oIyI3ffAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUiAQ/csgIPTEiQf3ZctHmiCmrCtwwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMwMmUzMTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAt+gdDANBgkqhkiG9w0BAQsFAAOCAQEAXK/ycqAyP8+17HuMoMD6Rc2q z6dzjuVmHrJlug5rnNTij91ni7Kp1RJdiIbZE0QhyYZuC4QEkBwSrI+VjxoQpZpN PVuS8hIgHL5mxS3Fak8CP2484JdGQ+BO7fUqaViv8BAV38oeTqWbuq9SlvsPi0fP CtG+fY09g1P2HDBPH1AjCslKqLfwYig98T/7lloghPBS96kbo84wjF7k3i0noxlV Aw379PQkRW7e9/LnrsK5bAlziUETWB2WsQeqspEaCh+ioMcJdhFLHlO8L4qrmHSD M5rjPdmk58Ix0liY+CPIOJi44oqYekhGVy6fRjvx1fUHsZuBOBQHOg+XQYqD6g== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:43 2026 by rpki-client