This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3133342e302f32332d3234203d3e203338303139.roa File: 3232332e3136302e3133342e302f32332d3234203d3e203338303139.roa (raw, json) Hash identifier: 3S549LpyZSSdJOoVdhWGOm2nFTC2b88nVqcvWIaS+MM= Subject key identifier: 9C:88:40:B5:AA:F1:76:D0:26:8F:0E:5E:C6:08:05:3F:E4:A6:A7:59 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 6AC3C8DCB13E21E275449CF6CC4CE5716E58C8DA Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3133342e302f32332d3234203d3e203338303139.roa Signing time: Tue 20 Jan 2026 02:27:25 +0000 ROA not before: Tue 20 Jan 2026 02:22:25 +0000 ROA not after: Tue 19 Jan 2027 02:27:25 +0000 asID: 38019 IP address blocks: 223.160.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c3:c8:dc:b1:3e:21:e2:75:44:9c:f6:cc:4c:e5:71:6e:58:c8:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:25 2026 GMT Not After : Jan 19 02:27:25 2027 GMT Subject: CN=9C8840B5AAF176D0268F0E5EC608053FE4A6A759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f7:eb:3c:a1:93:e1:f5:ce:f0:1e:ce:83:a3: 73:56:47:25:f1:97:71:96:95:bd:a2:51:bf:ef:3e: 48:ab:e3:ea:d5:08:cc:d3:1d:a4:53:b0:0f:7a:95: ce:e1:3d:f1:32:a8:ee:66:e2:d1:a2:b4:11:a6:36: 7e:6e:12:38:6d:e8:c3:d8:d2:d5:d1:17:0a:91:7d: 37:2b:12:80:a9:14:73:b0:f4:fb:3a:6e:dd:e7:59: 16:f4:c9:e2:e8:a4:70:d8:30:d5:e3:7e:fd:d1:2c: b5:e1:b9:1a:a3:a9:be:df:7c:6a:74:90:70:97:a4: 18:cf:59:a5:4d:e1:5d:64:a6:bc:2e:48:a9:50:dc: 8c:0b:27:d8:d2:0b:fe:51:56:47:22:14:20:21:41: 0a:73:e8:7b:0c:44:ac:68:0e:69:c2:b4:8a:74:fb: 53:e4:a5:8b:96:12:97:78:70:88:3b:0d:50:e0:2c: f9:be:8f:43:02:52:fe:ad:04:91:8b:08:18:1a:9d: 46:d9:0e:36:22:17:07:98:c4:00:e8:0a:4c:15:5d: 17:9a:e1:f6:1f:72:38:96:1a:67:14:a1:4d:1b:55: 61:c6:56:9c:9e:28:46:06:4d:ca:25:8b:fe:9b:67: 0e:c5:bf:92:91:22:df:ed:18:14:58:ac:a3:18:51: 41:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:88:40:B5:AA:F1:76:D0:26:8F:0E:5E:C6:08:05:3F:E4:A6:A7:59 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3133342e302f32332d3234203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.134.0/23 Signature Algorithm: sha256WithRSAEncryption 42:7a:cb:d5:ad:a0:df:91:c7:a0:1b:7e:3c:73:12:ee:a7:eb: 23:43:56:0c:9d:57:0c:c4:f8:e6:28:6f:55:16:51:ce:4b:d7: bb:1d:f4:fc:e1:b1:07:78:ec:69:74:39:9b:b8:c6:8c:94:52: 3e:b2:c0:85:68:4f:e4:c1:6f:b9:95:5a:3a:f2:f0:6a:ae:44: e6:09:13:1e:eb:f8:12:9f:77:30:39:b7:2e:6f:d9:d7:b6:ee: 68:d1:4c:3d:ad:55:89:47:10:97:c1:1d:21:56:0d:e5:b7:ce: ca:01:e6:5b:18:0f:c8:ef:48:aa:7a:a3:99:31:ff:b7:05:89: 04:e1:2d:a4:68:07:b5:6a:46:86:e4:f9:41:97:22:de:28:60: 32:da:7a:0d:2d:47:94:91:00:ba:69:2a:2f:ca:57:14:4a:56: c3:34:96:d2:08:2a:cb:34:c6:92:fc:77:00:24:c6:5c:7e:2b: 69:6b:d8:5d:66:30:8c:2e:a9:47:ce:e6:f5:78:32:06:4a:75: 18:0b:21:40:cc:01:9f:92:f6:27:03:9c:f2:c5:be:32:d7:e4: d1:5f:10:ce:66:d2:b3:4f:6f:94:c3:30:da:1f:1f:c3:d8:ee: 7b:e3:93:a7:55:d5:3d:35:46:57:70:79:a3:57:fb:2d:e7:20: 5d:0a:70:17 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUasPI3LE+IeJ1RJz2zEzlcW5YyNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjVaFw0yNzAxMTkwMjI3MjVaMDMxMTAvBgNV BAMTKDlDODg0MEI1QUFGMTc2RDAyNjhGMEU1RUM2MDgwNTNGRTRBNkE3NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT9+s8oZPh9c7wHs6Do3NWRyXx l3GWlb2iUb/vPkir4+rVCMzTHaRTsA96lc7hPfEyqO5m4tGitBGmNn5uEjht6MPY 0tXRFwqRfTcrEoCpFHOw9Ps6bt3nWRb0yeLopHDYMNXjfv3RLLXhuRqjqb7ffGp0 kHCXpBjPWaVN4V1kprwuSKlQ3IwLJ9jSC/5RVkciFCAhQQpz6HsMRKxoDmnCtIp0 +1PkpYuWEpd4cIg7DVDgLPm+j0MCUv6tBJGLCBganUbZDjYiFweYxADoCkwVXRea 4fYfcjiWGmcUoU0bVWHGVpyeKEYGTcoli/6bZw7Fv5KRIt/tGBRYrKMYUUEDAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUnIhAtarxdtAmjw5exggFP+Smp1kwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMDJlMzEzMzM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+ghjANBgkqhkiG9w0BAQsFAAOCAQEAQnrL1a2g35HHoBt+PHMS 7qfrI0NWDJ1XDMT45ihvVRZRzkvXux30/OGxB3jsaXQ5m7jGjJRSPrLAhWhP5MFv uZVaOvLwaq5E5gkTHuv4Ep93MDm3Lm/Z17buaNFMPa1ViUcQl8EdIVYN5bfOygHm WxgPyO9IqnqjmTH/twWJBOEtpGgHtWpGhuT5QZci3ihgMtp6DS1HlJEAumkqL8pX FEpWwzSW0ggqyzTGkvx3ACTGXH4raWvYXWYwjC6pR87m9XgyBkp1GAshQMwBn5L2 JwOc8sW+Mtfk0V8QzmbSs09vlMMw2h8fw9jue+OTp1XVPTVGV3B5o1f7LecgXQpw Fw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:45 2026 by rpki-client