This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31322e302f32332d3234203d3e2039383038.roa File: 3232332e3136302e31322e302f32332d3234203d3e2039383038.roa (raw, json) Hash identifier: 804P88oO0sRUWgu7kgzMcEhKWLRUZkZp5uroKiO5hDk= Subject key identifier: 9F:E2:40:FB:B0:88:AD:0F:C1:3B:42:24:21:8A:F5:0A:71:1B:0C:FA Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 1B4959DFE9973643A8ABDAAFA04C87DF3623877E Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31322e302f32332d3234203d3e2039383038.roa Signing time: Tue 20 Jan 2026 02:28:27 +0000 ROA not before: Tue 20 Jan 2026 02:23:27 +0000 ROA not after: Tue 19 Jan 2027 02:28:27 +0000 asID: 9808 IP address blocks: 223.160.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:49:59:df:e9:97:36:43:a8:ab:da:af:a0:4c:87:df:36:23:87:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:27 2026 GMT Not After : Jan 19 02:28:27 2027 GMT Subject: CN=9FE240FBB088AD0FC13B4224218AF50A711B0CFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:6a:2b:02:1e:b7:36:8d:fa:a9:10:7e:2b: 19:68:f0:23:aa:86:3a:c3:35:8f:c6:5a:2e:75:b9: cd:8e:94:ee:20:f6:08:82:42:d9:c2:43:1a:a9:df: e9:a9:72:e9:b4:30:e0:63:a2:1f:a3:78:f8:4f:89: 3b:fc:44:32:a3:d8:6e:85:c1:eb:53:0c:47:74:0d: 8a:44:dd:99:7a:7a:40:06:7c:18:b1:70:1e:18:8e: 3e:88:36:f2:ce:d3:ad:df:fd:fc:eb:6f:c3:26:4b: 98:56:e9:af:d1:23:6f:04:e8:c1:eb:d5:db:a9:54: 2e:44:bf:e6:a5:16:35:b2:42:5e:4e:5c:1e:91:94: db:c8:15:59:c4:5f:85:c3:0f:5e:82:d2:38:bd:1b: 63:38:0b:61:af:ea:0e:9f:71:3b:91:1c:4f:af:6b: 25:78:33:80:07:49:fb:65:38:70:3c:e2:9c:57:f4: 70:59:f8:6d:36:a9:57:19:0c:5f:51:b2:89:cd:11: b2:62:0a:ff:f7:58:23:9f:79:27:e5:af:d4:e1:50: ba:5a:6f:fc:29:ec:bf:3e:36:a2:75:ae:88:66:c4: f9:46:6b:90:e8:44:da:9d:7c:9b:43:ee:82:61:b7: d3:1c:ff:2c:f3:df:c3:ec:c1:a4:ec:46:21:65:83: 2e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E2:40:FB:B0:88:AD:0F:C1:3B:42:24:21:8A:F5:0A:71:1B:0C:FA X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31322e302f32332d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.12.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:25:f7:b8:21:d7:d8:0f:39:3e:dd:7c:da:7a:50:11:f3:ad: 86:29:cc:09:b5:4f:f7:54:55:47:5c:bc:4e:35:92:1c:3a:1a: 6b:38:2c:a4:4d:ca:e5:cd:2c:30:d1:60:b1:ce:fd:b2:ae:82: 93:fb:d9:4f:2d:90:49:f5:e7:9c:a3:a7:d3:6f:36:65:26:cf: 0f:4c:dc:32:31:8b:bf:ca:aa:39:67:db:f2:54:fa:bc:af:00: da:43:eb:47:b4:80:5d:e6:c3:c1:a5:39:ba:f1:c4:22:aa:cd: 65:a4:6d:e3:d2:23:8e:c3:3c:49:ce:9c:ba:7a:65:cc:8d:f3: f5:26:62:45:f0:b2:e3:32:11:81:cd:b6:2e:4b:3c:fe:09:cc: 4c:64:ea:a0:9e:0b:b1:03:08:a5:f1:5b:44:d0:e1:30:e4:b7: ec:e8:37:73:22:29:b1:b9:65:81:3f:3a:b9:63:26:2a:0b:1a: c6:d6:c0:58:a8:60:61:8d:af:a6:0d:b9:03:27:79:ca:96:70: 64:31:85:07:c5:5d:45:bb:7f:f8:41:cd:c3:2c:19:59:e9:31: e7:49:81:d4:8c:d6:64:8d:99:eb:4f:fb:32:aa:4b:ce:ab:cf: d8:83:7e:76:3d:4e:8a:86:ff:cd:21:43:fc:1f:66:45:41:9a: db:11:87:12 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUG0lZ3+mXNkOoq9qvoEyH3zYjh34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjdaFw0yNzAxMTkwMjI4MjdaMDMxMTAvBgNV BAMTKDlGRTI0MEZCQjA4OEFEMEZDMTNCNDIyNDIxOEFGNTBBNzExQjBDRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2OmorAh63No36qRB+Kxlo8COq hjrDNY/GWi51uc2OlO4g9giCQtnCQxqp3+mpcum0MOBjoh+jePhPiTv8RDKj2G6F wetTDEd0DYpE3Zl6ekAGfBixcB4Yjj6INvLO063f/fzrb8MmS5hW6a/RI28E6MHr 1dupVC5Ev+alFjWyQl5OXB6RlNvIFVnEX4XDD16C0ji9G2M4C2Gv6g6fcTuRHE+v ayV4M4AHSftlOHA84pxX9HBZ+G02qVcZDF9RsonNEbJiCv/3WCOfeSflr9ThULpa b/wp7L8+NqJ1rohmxPlGa5DoRNqdfJtD7oJht9Mc/yzz38PswaTsRiFlgy4NAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUn+JA+7CIrQ/BO0IkIYr1CnEbDPowHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMjMzMmUzMTM2 MzAyZTMxMzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAd+gDDANBgkqhkiG9w0BAQsFAAOCAQEAXyX3uCHX2A85Pt182npQEfOthinM CbVP91RVR1y8TjWSHDoaazgspE3K5c0sMNFgsc79sq6Ck/vZTy2QSfXnnKOn0282 ZSbPD0zcMjGLv8qqOWfb8lT6vK8A2kPrR7SAXebDwaU5uvHEIqrNZaRt49IjjsM8 Sc6cunplzI3z9SZiRfCy4zIRgc22Lks8/gnMTGTqoJ4LsQMIpfFbRNDhMOS37Og3 cyIpsbllgT86uWMmKgsaxtbAWKhgYY2vpg25Ayd5ypZwZDGFB8VdRbt/+EHNwywZ Wekx50mB1IzWZI2Z60/7MqpLzqvP2IN+dj1Oiob/zSFD/B9mRUGa2xGHEg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:13 2026 by rpki-client