This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3132382e302f32322d3234203d3e203536303438.roa File: 3232332e3136302e3132382e302f32322d3234203d3e203536303438.roa (raw, json) Hash identifier: P8x7craGf8Zr3BrivT6HnUkGjD/rJkXcLgPpXhw6uqQ= Subject key identifier: 02:A6:0B:51:40:94:6F:0C:A7:E7:2A:DA:6B:24:D4:A4:08:A4:96:6E Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 700A32B540F5290D4204606494A1C557ED04CA56 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3132382e302f32322d3234203d3e203536303438.roa Signing time: Tue 20 Jan 2026 02:27:22 +0000 ROA not before: Tue 20 Jan 2026 02:22:22 +0000 ROA not after: Tue 19 Jan 2027 02:27:22 +0000 asID: 56048 IP address blocks: 223.160.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:0a:32:b5:40:f5:29:0d:42:04:60:64:94:a1:c5:57:ed:04:ca:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:22 2026 GMT Not After : Jan 19 02:27:22 2027 GMT Subject: CN=02A60B5140946F0CA7E72ADA6B24D4A408A4966E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f0:9b:d6:d0:d9:8c:96:02:ec:12:bd:79:60: 62:0d:93:72:e7:cf:7d:56:a0:b1:1a:55:6a:8d:b0: 8a:be:e8:7c:01:91:dc:f0:31:c3:77:4b:1e:91:b6: da:bb:f9:4b:33:4a:b0:c7:d3:9e:0c:8d:56:9a:7b: e0:eb:59:ad:61:d8:0e:0e:bc:46:c1:a3:fa:0e:64: c2:6d:dd:47:02:8c:d5:b5:dd:86:c6:64:2e:48:86: 05:ce:8f:a9:86:12:19:d5:71:08:81:44:63:1e:7b: 6a:57:c6:e4:40:49:4c:5b:89:a8:64:35:a4:f6:b8: e0:64:b9:26:b5:48:a7:c1:60:52:4a:82:20:e2:8a: 90:f1:f2:99:8b:bb:a1:84:c0:8b:f9:19:8c:fb:42: 6e:ac:16:17:5b:70:64:3e:2b:6e:35:a9:1e:4f:fa: 29:78:70:ee:4c:6b:51:c5:8b:ce:98:da:af:19:50: ab:bf:67:cf:54:6a:34:b1:e6:b7:5b:bc:d5:df:29: cd:1b:9e:95:e3:b7:8d:4f:ef:88:b3:e3:bf:f4:a8: 03:0d:0f:19:d8:be:23:e4:45:1d:7f:ad:3f:58:9c: 4b:f5:15:16:83:50:f1:6a:be:87:d9:d6:6a:ae:41: 19:a3:fd:c2:d5:df:3c:87:d9:08:5b:ef:ed:ce:b6: 60:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A6:0B:51:40:94:6F:0C:A7:E7:2A:DA:6B:24:D4:A4:08:A4:96:6E X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3132382e302f32322d3234203d3e203536303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.128.0/22 Signature Algorithm: sha256WithRSAEncryption a6:54:7b:7f:cf:90:e4:1b:4a:81:41:4d:1a:bb:d5:e8:a4:b2: 3c:34:13:49:0c:a7:1c:9f:91:fd:39:68:04:44:12:7b:af:31: 9f:a5:99:7f:89:bc:8b:00:fe:ba:4c:88:7d:5b:a4:3e:78:36: 61:53:91:6b:f7:e1:de:6a:49:c2:03:ee:31:b2:2b:66:a7:0d: e7:62:11:94:36:b9:c6:9e:47:28:d9:bc:d3:b7:11:92:2e:05: d1:d8:d6:c7:15:11:57:e0:00:1f:47:f3:88:a5:e6:1b:78:21: 72:72:5a:47:5a:3d:54:93:70:a6:92:40:9b:80:2a:85:b4:66: 41:40:65:7b:66:bd:30:18:9c:da:3b:72:f3:b2:b6:25:7b:3e: 58:a8:f0:cf:37:cf:8b:84:48:c4:df:10:64:66:06:30:fd:11: 2b:4b:a4:2a:ed:42:2e:69:f4:02:90:28:ec:47:91:ff:8b:56: 3d:e8:50:07:67:f0:33:a0:f8:f0:4d:d8:f3:2d:55:32:a6:f2: 55:41:f6:95:94:0c:ac:93:d3:bb:5c:24:df:29:04:ee:6d:2f: 40:9f:19:54:93:5f:2f:a2:ed:c4:cf:63:fd:9c:8a:e8:3f:04: 2c:16:18:2c:a3:a3:c2:3f:e4:cd:f3:3c:c2:10:20:e3:c6:19: 38:4b:3e:0b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUcAoytUD1KQ1CBGBklKHFV+0EylYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjJaFw0yNzAxMTkwMjI3MjJaMDMxMTAvBgNV BAMTKDAyQTYwQjUxNDA5NDZGMENBN0U3MkFEQTZCMjRENEE0MDhBNDk2NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg8JvW0NmMlgLsEr15YGINk3Ln z31WoLEaVWqNsIq+6HwBkdzwMcN3Sx6Rttq7+UszSrDH054MjVaae+DrWa1h2A4O vEbBo/oOZMJt3UcCjNW13YbGZC5IhgXOj6mGEhnVcQiBRGMee2pXxuRASUxbiahk NaT2uOBkuSa1SKfBYFJKgiDiipDx8pmLu6GEwIv5GYz7Qm6sFhdbcGQ+K241qR5P +il4cO5Ma1HFi86Y2q8ZUKu/Z89UajSx5rdbvNXfKc0bnpXjt41P74iz47/0qAMN DxnYviPkRR1/rT9YnEv1FRaDUPFqvofZ1mquQRmj/cLV3zyH2Qhb7+3OtmCvAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUAqYLUUCUbwyn5yraayTUpAiklm4wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMDJlMzEzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAt+ggDANBgkqhkiG9w0BAQsFAAOCAQEAplR7f8+Q5BtKgUFNGrvV 6KSyPDQTSQynHJ+R/TloBEQSe68xn6WZf4m8iwD+ukyIfVukPng2YVORa/fh3mpJ wgPuMbIrZqcN52IRlDa5xp5HKNm807cRki4F0djWxxURV+AAH0fziKXmG3ghcnJa R1o9VJNwppJAm4AqhbRmQUBle2a9MBic2jty87K2JXs+WKjwzzfPi4RIxN8QZGYG MP0RK0ukKu1CLmn0ApAo7EeR/4tWPehQB2fwM6D48E3Y8y1VMqbyVUH2lZQMrJPT u1wk3ykE7m0vQJ8ZVJNfL6LtxM9j/ZyK6D8ELBYYLKOjwj/kzfM8whAg48YZOEs+ Cw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:42 2026 by rpki-client