This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3132302e302f32312d3234203d3e203234343435.roa File: 3232332e3136302e3132302e302f32312d3234203d3e203234343435.roa (raw, json) Hash identifier: qQL3n5M1iDdWh5Ak58qFxsRgpVLQeLXPTCYAlfrmv/0= Subject key identifier: 1F:39:CA:EA:42:7D:D9:CC:C7:91:08:D3:4D:31:D8:6A:7B:0C:F6:65 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 27BDA384DBA90500D8E027BBFCEE1F82A26E739C Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3132302e302f32312d3234203d3e203234343435.roa Signing time: Tue 20 Jan 2026 02:28:28 +0000 ROA not before: Tue 20 Jan 2026 02:23:28 +0000 ROA not after: Tue 19 Jan 2027 02:28:28 +0000 asID: 24445 IP address blocks: 223.160.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:bd:a3:84:db:a9:05:00:d8:e0:27:bb:fc:ee:1f:82:a2:6e:73:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:28 2026 GMT Not After : Jan 19 02:28:28 2027 GMT Subject: CN=1F39CAEA427DD9CCC79108D34D31D86A7B0CF665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fa:87:1b:5f:9c:35:ff:e9:77:e3:00:e5:8e: cd:a4:35:07:db:3c:f3:6d:07:e5:91:30:af:f0:9c: 02:ff:35:ff:9d:76:0e:9f:09:f1:2e:b8:c7:bd:b9: 5f:33:34:7e:35:31:be:10:27:ce:c7:81:8a:cc:2f: 08:54:c5:52:92:cc:93:b2:04:65:d6:96:8c:6b:e1: 4d:29:23:18:e2:4a:ea:ab:29:b2:ae:f8:50:ae:34: 11:0b:cf:d9:e2:5b:8b:24:05:d4:df:e3:ec:68:ea: 26:fb:c3:a2:06:81:5b:9f:51:4a:e1:c3:e1:bc:5c: f2:b2:b3:a4:37:3b:8a:4b:3d:15:91:96:16:7a:69: 21:a2:ad:63:d9:88:3f:26:96:00:3e:56:f5:a3:94: 19:b3:0a:ae:58:01:62:9e:a9:35:95:af:5d:6c:6a: 23:3a:f9:d8:56:6f:40:f1:df:54:5d:2b:c3:f1:ea: cf:be:16:a7:9e:85:7d:d0:e9:26:54:5a:59:fb:26: 6d:a4:41:67:b1:3a:6f:48:08:75:1d:f2:bd:f5:41: 24:2d:b4:2e:e2:14:ad:6d:a7:a6:a8:aa:cd:6e:80: 7f:a0:93:38:43:f3:23:51:b0:fe:e2:8b:ea:89:9c: f9:a9:74:02:c4:d0:a0:9d:ad:4a:11:56:b5:b5:d8: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:39:CA:EA:42:7D:D9:CC:C7:91:08:D3:4D:31:D8:6A:7B:0C:F6:65 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3132302e302f32312d3234203d3e203234343435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.120.0/21 Signature Algorithm: sha256WithRSAEncryption 75:15:45:2f:3c:47:41:00:8a:1a:ae:ba:df:ba:b3:6b:8f:a0: a5:f9:9b:62:c8:ec:f7:51:dd:7d:93:d5:98:ee:a0:f7:85:b9: c6:83:f8:3c:e0:c9:4d:f3:3a:f3:15:ef:16:44:d9:66:59:ba: 5e:6c:a1:4f:ab:41:70:e3:1a:0c:ac:bd:93:3a:18:8c:77:d3: ec:c7:67:cb:48:0d:9f:ba:e0:74:7f:be:96:e4:ac:3f:80:b6: e0:77:04:59:9d:e8:b7:76:37:5d:80:f6:76:7c:cc:83:e3:69: a3:01:75:71:30:44:f1:48:b9:e6:53:ac:3e:93:4f:67:c8:30: ba:65:18:c8:72:cf:ff:17:c7:4e:e9:62:dc:c0:a5:de:3c:cc: b9:c4:24:7d:ad:c2:89:82:a7:bb:17:ad:8c:ff:44:79:bb:0f: dd:92:3f:08:41:5e:28:6c:76:e9:a8:29:4d:98:fa:b7:3f:7a: 1e:f5:21:b3:8f:58:28:c6:a5:8c:28:ab:5c:8e:b6:44:70:c7: ac:ad:31:2a:3d:32:a4:9e:19:9b:09:fe:1a:51:0d:c4:ad:5a: bd:df:88:b1:62:74:35:e2:af:25:a8:d2:0b:88:76:19:e6:a2: 02:68:45:fd:e7:94:fb:d9:a2:3b:c9:f7:e5:bb:07:7a:cb:56: cb:96:e5:ee -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUJ72jhNupBQDY4Ce7/O4fgqJuc5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjhaFw0yNzAxMTkwMjI4MjhaMDMxMTAvBgNV BAMTKDFGMzlDQUVBNDI3REQ5Q0NDNzkxMDhEMzREMzFEODZBN0IwQ0Y2NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO+ocbX5w1/+l34wDljs2kNQfb PPNtB+WRMK/wnAL/Nf+ddg6fCfEuuMe9uV8zNH41Mb4QJ87HgYrMLwhUxVKSzJOy BGXWloxr4U0pIxjiSuqrKbKu+FCuNBELz9niW4skBdTf4+xo6ib7w6IGgVufUUrh w+G8XPKys6Q3O4pLPRWRlhZ6aSGirWPZiD8mlgA+VvWjlBmzCq5YAWKeqTWVr11s aiM6+dhWb0Dx31RdK8Px6s++FqeehX3Q6SZUWln7Jm2kQWexOm9ICHUd8r31QSQt tC7iFK1tp6aoqs1ugH+gkzhD8yNRsP7ii+qJnPmpdALE0KCdrUoRVrW12EV5AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUHznK6kJ92czHkQjTTTHYansM9mUwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMDJlMzEzMjMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNDM0MzQzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA9+geDANBgkqhkiG9w0BAQsFAAOCAQEAdRVFLzxHQQCKGq6637qz a4+gpfmbYsjs91HdfZPVmO6g94W5xoP4PODJTfM68xXvFkTZZlm6XmyhT6tBcOMa DKy9kzoYjHfT7Mdny0gNn7rgdH++luSsP4C24HcEWZ3ot3Y3XYD2dnzMg+NpowF1 cTBE8Ui55lOsPpNPZ8gwumUYyHLP/xfHTuli3MCl3jzMucQkfa3CiYKnuxetjP9E ebsP3ZI/CEFeKGx26agpTZj6tz96HvUhs49YKMaljCirXI62RHDHrK0xKj0ypJ4Z mwn+GlENxK1avd+IsWJ0NeKvJajSC4h2GeaiAmhF/eeU+9miO8n35bsHestWy5bl 7g== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:43 2026 by rpki-client