This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31342e302f32332d3234203d3e203536303430.roa File: 3232332e3136302e31342e302f32332d3234203d3e203536303430.roa (raw, json) Hash identifier: w9JiwpPf/bIFWCweRN8AgWmxUuYzwv4NzAjF9OH5lKY= Subject key identifier: 66:C5:CD:AD:F3:29:EF:3B:EE:79:1D:11:B0:08:CC:41:69:9C:BE:E0 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 5871F6CA5694105EBD1D5F16FFFE86B63569EA56 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31342e302f32332d3234203d3e203536303430.roa Signing time: Tue 20 Jan 2026 02:27:23 +0000 ROA not before: Tue 20 Jan 2026 02:22:23 +0000 ROA not after: Tue 19 Jan 2027 02:27:23 +0000 asID: 56040 IP address blocks: 223.160.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:71:f6:ca:56:94:10:5e:bd:1d:5f:16:ff:fe:86:b6:35:69:ea:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:23 2026 GMT Not After : Jan 19 02:27:23 2027 GMT Subject: CN=66C5CDADF329EF3BEE791D11B008CC41699CBEE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:25:25:ed:09:6e:78:94:ca:13:c2:22:b7:77: f4:f3:c3:37:00:c3:e2:99:8a:e7:77:2f:0f:7e:e6: ab:40:8a:2f:62:95:65:ef:05:46:82:12:e6:a1:aa: 86:5e:2c:5c:ab:eb:2d:99:db:34:6d:29:e5:55:24: 18:ca:d0:e7:64:1e:11:e3:cc:33:8e:d1:d7:1a:33: e0:b1:d8:71:d9:d2:0e:32:6e:be:fc:8b:e1:3c:2f: 11:fd:f1:b9:88:2a:2e:e5:2a:df:a7:59:4e:b7:74: 78:e2:fb:42:34:df:1c:c0:65:24:ad:d0:14:b7:e7: 77:ac:4e:fd:67:a8:a3:41:d8:5a:91:c8:78:77:9b: 31:70:36:f1:ac:b8:20:5d:d4:00:23:6b:0c:7c:09: aa:db:89:28:00:c6:83:be:7a:85:75:cc:ee:ec:75: a5:68:a7:11:49:09:9c:d9:65:d4:bc:6d:d5:6c:3a: 2c:15:5d:56:e3:59:59:bc:d2:32:94:ee:00:16:a5: 89:dc:6f:97:82:b9:51:d8:f5:81:26:bf:70:67:e3: 2a:72:4e:6d:c7:a9:5d:4f:91:99:a9:59:05:cc:16: c7:d1:1c:39:58:9c:28:3d:4f:e7:e6:14:99:6b:4d: 7d:3f:96:7f:3f:ad:85:c7:27:f8:68:96:42:82:2b: 28:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C5:CD:AD:F3:29:EF:3B:EE:79:1D:11:B0:08:CC:41:69:9C:BE:E0 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31342e302f32332d3234203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.14.0/23 Signature Algorithm: sha256WithRSAEncryption 01:51:f4:45:f6:03:f1:02:ff:8d:a3:ce:cf:c8:5d:15:be:8d: 3f:41:fc:fc:4a:c2:a6:42:fa:73:2c:58:50:9b:23:25:23:ea: 60:4b:70:78:7d:77:af:14:8d:c0:dc:bb:b6:07:8e:57:f0:87: 8e:c1:68:d5:94:4e:95:f1:07:4f:6c:2f:56:fc:28:f1:e9:bd: 3a:ff:b7:87:4f:ba:9b:de:a0:52:15:18:95:32:ce:44:13:eb: 2d:dc:92:97:e1:00:d7:fb:d9:5f:92:54:cf:eb:1b:cc:0e:66: e3:91:e7:0c:9e:b9:e5:0d:70:95:44:99:93:7b:b5:d0:4d:8b: 00:34:b4:2b:ae:8e:1c:ea:fc:4b:ae:a5:1d:48:b4:01:ae:ce: d8:50:6a:4d:ef:bf:a6:e1:fc:40:27:f9:b2:61:d0:2d:e9:3f: 47:c3:85:f3:b7:01:96:11:84:82:ab:2f:a9:86:15:87:0d:47: 67:ea:01:f2:62:10:51:1e:4a:3e:2c:a1:57:48:f6:2a:17:41: 28:bb:93:83:4c:d4:8b:77:0c:00:65:03:e4:9b:f5:70:31:0d: 14:01:c0:e8:17:ab:d5:dd:19:fb:5b:1e:36:f0:e0:48:f5:7d: 52:56:0e:be:7b:73:bc:52:e8:8c:ef:05:aa:44:ca:48:50:62: 26:6f:8d:05 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUWHH2ylaUEF69HV8W//6GtjVp6lYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjNaFw0yNzAxMTkwMjI3MjNaMDMxMTAvBgNV BAMTKDY2QzVDREFERjMyOUVGM0JFRTc5MUQxMUIwMDhDQzQxNjk5Q0JFRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXJSXtCW54lMoTwiK3d/TzwzcA w+KZiud3Lw9+5qtAii9ilWXvBUaCEuahqoZeLFyr6y2Z2zRtKeVVJBjK0OdkHhHj zDOO0dcaM+Cx2HHZ0g4ybr78i+E8LxH98bmIKi7lKt+nWU63dHji+0I03xzAZSSt 0BS353esTv1nqKNB2FqRyHh3mzFwNvGsuCBd1AAjawx8CarbiSgAxoO+eoV1zO7s daVopxFJCZzZZdS8bdVsOiwVXVbjWVm80jKU7gAWpYncb5eCuVHY9YEmv3Bn4ypy Tm3HqV1PkZmpWQXMFsfRHDlYnCg9T+fmFJlrTX0/ln8/rYXHJ/holkKCKyhJAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUZsXNrfMp7zvueR0RsAjMQWmcvuAwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMwMmUzMTM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAd+gDjANBgkqhkiG9w0BAQsFAAOCAQEAAVH0RfYD8QL/jaPOz8hdFb6N P0H8/ErCpkL6cyxYUJsjJSPqYEtweH13rxSNwNy7tgeOV/CHjsFo1ZROlfEHT2wv Vvwo8em9Ov+3h0+6m96gUhUYlTLORBPrLdySl+EA1/vZX5JUz+sbzA5m45HnDJ65 5Q1wlUSZk3u10E2LADS0K66OHOr8S66lHUi0Aa7O2FBqTe+/puH8QCf5smHQLek/ R8OF87cBlhGEgqsvqYYVhw1HZ+oB8mIQUR5KPiyhV0j2KhdBKLuTg0zUi3cMAGUD 5Jv1cDENFAHA6Ber1d0Z+1seNvDgSPV9UlYOvntzvFLojO8FqkTKSFBiJm+NBQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:13 2026 by rpki-client