This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134302e302f32332d3234203d3e203536303432.roa File: 3232332e3136302e3134302e302f32332d3234203d3e203536303432.roa (raw, json) Hash identifier: 3pKOqZoeBkOJT2BlrTFRVLNyWHrNo9RWNik7WfPl3bk= Subject key identifier: 33:07:A9:B4:3B:AB:D7:B1:7F:DC:E2:13:6C:93:A0:B2:70:D6:63:B1 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 4E27A5C851940B781319E08A16819389F875F4C8 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134302e302f32332d3234203d3e203536303432.roa Signing time: Tue 20 Jan 2026 02:27:22 +0000 ROA not before: Tue 20 Jan 2026 02:22:22 +0000 ROA not after: Tue 19 Jan 2027 02:27:22 +0000 asID: 56042 IP address blocks: 223.160.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:27:a5:c8:51:94:0b:78:13:19:e0:8a:16:81:93:89:f8:75:f4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:22 2026 GMT Not After : Jan 19 02:27:22 2027 GMT Subject: CN=3307A9B43BABD7B17FDCE2136C93A0B270D663B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:45:0f:59:8a:03:06:f6:01:d9:73:fb:47:02: 58:02:34:c7:1f:b6:44:37:be:fe:2f:25:a8:bc:6b: 2c:84:a8:9a:13:04:30:5b:99:e9:f3:84:a2:a8:de: ab:de:df:10:d4:3a:14:58:83:8d:2d:65:41:9f:48: 41:ed:03:97:ce:23:ad:41:db:fa:86:5c:ba:a5:bc: b4:23:00:ec:04:f5:d8:76:5f:d3:46:3f:49:e7:6c: 65:52:70:9b:ab:e7:e1:9e:ed:d3:10:3a:6c:00:67: 58:ce:9c:18:aa:9c:0a:f1:c1:33:c7:dd:25:aa:8c: 21:34:10:03:e4:c2:25:84:14:c6:88:d5:aa:57:f8: 99:e6:f5:c0:0b:c5:80:32:0b:f9:b2:cd:f3:3e:7c: e3:78:5f:dd:5d:c5:a1:0d:ed:d7:cb:db:53:30:f5: 8f:03:cf:25:0b:7b:29:f6:33:4e:1c:32:63:17:14: 07:26:4f:e2:db:c7:1d:ef:05:25:d6:e6:e7:89:0b: 5f:21:96:3e:21:21:1c:e8:62:f8:eb:db:59:94:a4: a5:fe:f0:99:5c:7d:bf:a7:58:73:6e:12:4c:6f:70: fa:bb:2f:9e:1d:7d:dc:05:89:b4:70:cc:46:94:a4: e3:90:bb:fd:94:28:a3:8d:85:c0:17:89:32:8b:aa: ac:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:07:A9:B4:3B:AB:D7:B1:7F:DC:E2:13:6C:93:A0:B2:70:D6:63:B1 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134302e302f32332d3234203d3e203536303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.140.0/23 Signature Algorithm: sha256WithRSAEncryption 15:a4:86:58:a6:7e:ef:c6:6c:41:6f:1d:1f:f1:fd:b4:e9:c4: 63:ea:10:26:ff:09:40:d2:a6:55:3c:2c:77:48:3f:fd:8c:a5: 9d:d4:45:61:c5:97:48:71:e6:b3:0e:44:66:e2:44:0d:ed:bb: 88:bd:15:ea:9d:b0:4d:55:17:ee:3f:d2:b7:26:03:bd:bd:50: 6e:9a:eb:ae:36:79:45:31:d5:c3:f8:57:23:54:b5:a8:fb:59: a5:dc:18:46:c6:61:c7:c5:f0:6c:ae:4f:6d:bd:e4:4f:2e:4e: 54:36:be:9d:8d:b0:56:68:20:29:de:52:b0:08:a9:ff:0b:8c: ae:7b:ed:ab:2e:70:13:89:88:70:19:0e:39:98:6b:49:c3:32: 3c:aa:2b:9a:df:26:f6:9c:ee:ee:a1:a8:9a:fa:78:a7:6d:c7: 30:7f:bd:d0:ea:02:7c:05:5d:8f:12:7e:2b:26:31:4c:1a:b6: 15:b7:b4:86:e1:31:c7:55:3e:f2:3d:12:0c:10:e2:0b:ef:42: 2f:4f:31:cd:4e:08:1f:a4:31:fa:fe:34:dc:bf:70:e9:95:ae: 28:d9:6a:01:5c:e9:a9:9c:5f:ac:91:01:7f:3c:25:cb:0b:c3: 4c:78:d4:c7:92:88:b7:79:ae:75:5b:e6:60:ea:61:d2:dc:6e: 6a:3f:53:d2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUTielyFGUC3gTGeCKFoGTifh19MgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjJaFw0yNzAxMTkwMjI3MjJaMDMxMTAvBgNV BAMTKDMzMDdBOUI0M0JBQkQ3QjE3RkRDRTIxMzZDOTNBMEIyNzBENjYzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXRQ9ZigMG9gHZc/tHAlgCNMcf tkQ3vv4vJai8ayyEqJoTBDBbmenzhKKo3qve3xDUOhRYg40tZUGfSEHtA5fOI61B 2/qGXLqlvLQjAOwE9dh2X9NGP0nnbGVScJur5+Ge7dMQOmwAZ1jOnBiqnArxwTPH 3SWqjCE0EAPkwiWEFMaI1apX+Jnm9cALxYAyC/myzfM+fON4X91dxaEN7dfL21Mw 9Y8DzyULeyn2M04cMmMXFAcmT+Lbxx3vBSXW5ueJC18hlj4hIRzoYvjr21mUpKX+ 8Jlcfb+nWHNuEkxvcPq7L54dfdwFibRwzEaUpOOQu/2UKKONhcAXiTKLqqzbAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUMweptDur17F/3OITbJOgsnDWY7EwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMDJlMzEzNDMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+gjDANBgkqhkiG9w0BAQsFAAOCAQEAFaSGWKZ+78ZsQW8dH/H9 tOnEY+oQJv8JQNKmVTwsd0g//YylndRFYcWXSHHmsw5EZuJEDe27iL0V6p2wTVUX 7j/StyYDvb1QbprrrjZ5RTHVw/hXI1S1qPtZpdwYRsZhx8XwbK5Pbb3kTy5OVDa+ nY2wVmggKd5SsAip/wuMrnvtqy5wE4mIcBkOOZhrScMyPKormt8m9pzu7qGomvp4 p23HMH+90OoCfAVdjxJ+KyYxTBq2Fbe0huExx1U+8j0SDBDiC+9CL08xzU4IH6Qx +v403L9w6ZWuKNlqAVzpqZxfrJEBfzwlywvDTHjUx5KIt3mudVvmYOph0txuaj9T 0g== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:48 2026 by rpki-client