This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134342e302f32332d3234203d3e20313332353235.roa File: 3232332e3136302e3134342e302f32332d3234203d3e20313332353235.roa (raw, json) Hash identifier: t3VEc/fHWSrePxjhM3L7cJ7eqS2jph+EBAZQhjAzQrs= Subject key identifier: AE:C6:5E:27:77:02:D5:44:25:04:D7:EF:A7:CF:30:6E:38:F2:AA:1E Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 662EBD9E4D34049F4C3C0E933263DE45D1EDB785 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134342e302f32332d3234203d3e20313332353235.roa Signing time: Tue 20 Jan 2026 02:27:25 +0000 ROA not before: Tue 20 Jan 2026 02:22:25 +0000 ROA not after: Tue 19 Jan 2027 02:27:25 +0000 asID: 132525 IP address blocks: 223.160.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:2e:bd:9e:4d:34:04:9f:4c:3c:0e:93:32:63:de:45:d1:ed:b7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:25 2026 GMT Not After : Jan 19 02:27:25 2027 GMT Subject: CN=AEC65E277702D5442504D7EFA7CF306E38F2AA1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f3:c8:10:b9:ba:45:fd:7c:31:af:dc:88:8a: b2:74:5e:b2:fd:37:db:2b:8b:67:8c:b4:10:1a:7e: 2a:0f:de:1d:2a:9e:b0:eb:06:6c:fd:6e:b4:f5:33: f9:18:87:84:ab:ff:31:09:6c:63:0a:db:d6:c3:8a: e6:27:83:82:39:77:04:2e:61:15:d5:eb:15:1c:38: 8d:fb:21:23:bc:d6:95:1d:a3:1b:75:44:18:89:cd: f6:a3:ad:5e:b8:66:42:bf:90:cd:4a:c5:bb:8b:03: 69:06:d2:db:e4:9d:8c:36:35:c0:47:9e:9e:a7:3e: 1a:0a:48:5d:5b:bb:f9:c1:a8:0c:54:f2:10:f7:06: 72:8e:ee:18:ba:34:ca:c2:cd:f6:47:ce:0f:4f:7d: 94:ad:51:1a:0f:5e:e9:b3:ff:59:ff:2c:ba:8b:6e: 60:a3:16:78:8c:29:76:fc:94:78:94:a2:5d:7c:b1: 57:56:f6:3e:ac:52:e0:bc:12:91:31:0b:8f:fc:a3: ac:17:52:15:92:54:65:67:64:e6:e5:08:db:db:72: d6:b8:a8:8f:86:6e:3b:17:b4:06:05:39:44:00:94: 4a:97:ac:f9:76:c2:ef:4d:af:9a:d1:dc:be:40:ef: 46:64:ea:14:7e:20:7c:1a:90:44:ca:1b:08:2d:e7: a0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C6:5E:27:77:02:D5:44:25:04:D7:EF:A7:CF:30:6E:38:F2:AA:1E X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134342e302f32332d3234203d3e20313332353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.144.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:10:5f:33:04:00:fb:71:44:b5:0f:fb:99:ec:3b:68:3f:e3: be:dd:6c:06:67:78:98:af:b9:c2:64:26:5e:4b:33:3f:31:ad: 0e:02:64:3c:79:aa:6c:e3:a8:b2:6d:78:b1:68:dd:3c:2e:2c: 96:78:62:95:35:22:5e:88:05:9b:12:67:60:57:b2:ed:66:44: 92:96:e6:55:96:48:2e:15:35:9a:e4:91:7a:72:21:eb:40:3e: a7:27:33:0f:34:89:7b:d3:ac:6f:9b:a2:14:45:45:72:d6:66: 3f:7c:f5:80:21:49:f9:c3:f6:07:4c:9a:6d:d4:cf:59:2c:08: 07:06:4c:bd:77:2b:78:eb:56:1a:5e:43:b3:43:7d:3a:14:5d: 15:09:81:32:fa:e6:45:8d:80:a7:d3:2d:9c:86:61:20:49:b1: 8a:86:45:85:91:92:38:ee:ac:ce:0b:d7:cc:36:50:9d:36:e7: 85:c9:c7:ab:23:21:8d:fb:a7:87:17:c7:95:8d:d7:f4:d0:29: 6c:55:38:e7:85:2f:48:da:92:51:52:56:a9:07:f7:fa:ba:5b: ea:97:e1:c0:67:28:9a:f4:d9:a3:94:05:69:9f:50:de:c4:87: 12:9d:8e:21:a3:06:1a:81:13:4c:e4:1e:3b:73:db:af:44:d2: 9e:f8:d0:a8 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUZi69nk00BJ9MPA6TMmPeRdHtt4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjVaFw0yNzAxMTkwMjI3MjVaMDMxMTAvBgNV BAMTKEFFQzY1RTI3NzcwMkQ1NDQyNTA0RDdFRkE3Q0YzMDZFMzhGMkFBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH88gQubpF/Xwxr9yIirJ0XrL9 N9sri2eMtBAafioP3h0qnrDrBmz9brT1M/kYh4Sr/zEJbGMK29bDiuYng4I5dwQu YRXV6xUcOI37ISO81pUdoxt1RBiJzfajrV64ZkK/kM1KxbuLA2kG0tvknYw2NcBH np6nPhoKSF1bu/nBqAxU8hD3BnKO7hi6NMrCzfZHzg9PfZStURoPXumz/1n/LLqL bmCjFniMKXb8lHiUol18sVdW9j6sUuC8EpExC4/8o6wXUhWSVGVnZOblCNvbcta4 qI+GbjsXtAYFOUQAlEqXrPl2wu9Nr5rR3L5A70Zk6hR+IHwakETKGwgt56BTAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUrsZeJ3cC1UQlBNfvp88wbjjyqh4wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMjMzMmUz MTM2MzAyZTMxMzQzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzMjM1MzIz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAd+gkDANBgkqhkiG9w0BAQsFAAOCAQEAmhBfMwQA+3FEtQ/7 mew7aD/jvt1sBmd4mK+5wmQmXkszPzGtDgJkPHmqbOOosm14sWjdPC4slnhilTUi XogFmxJnYFey7WZEkpbmVZZILhU1muSRenIh60A+pyczDzSJe9Osb5uiFEVFctZm P3z1gCFJ+cP2B0yabdTPWSwIBwZMvXcreOtWGl5Ds0N9OhRdFQmBMvrmRY2Ap9Mt nIZhIEmxioZFhZGSOO6szgvXzDZQnTbnhcnHqyMhjfunhxfHlY3X9NApbFU454Uv SNqSUVJWqQf3+rpb6pfhwGcomvTZo5QFaZ9Q3sSHEp2OIaMGGoETTOQeO3Pbr0TS nvjQqA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:32 2026 by rpki-client