This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134362e302f32332d3234203d3e20313334383130.roa File: 3232332e3136302e3134362e302f32332d3234203d3e20313334383130.roa (raw, json) Hash identifier: EUV+Rd+fBBNIhT2ktsyJvYWs0kyhaZ57EfiZHhdEzIY= Subject key identifier: 69:71:53:A8:5E:66:7D:EC:E2:66:B9:FC:00:BD:A4:FD:91:5F:05:C4 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 09BEB8E5CDBCB40FEB863587AF4FF2F6D7DB9C54 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134362e302f32332d3234203d3e20313334383130.roa Signing time: Tue 20 Jan 2026 02:28:28 +0000 ROA not before: Tue 20 Jan 2026 02:23:28 +0000 ROA not after: Tue 19 Jan 2027 02:28:28 +0000 asID: 134810 IP address blocks: 223.160.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:be:b8:e5:cd:bc:b4:0f:eb:86:35:87:af:4f:f2:f6:d7:db:9c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:28 2026 GMT Not After : Jan 19 02:28:28 2027 GMT Subject: CN=697153A85E667DECE266B9FC00BDA4FD915F05C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f4:90:a4:89:28:80:17:79:3d:07:24:65:50: b3:d6:d8:0b:f2:e7:88:d1:16:fc:06:07:b5:02:b2: 3b:ca:0c:2c:51:6e:48:10:d1:cb:ce:43:e3:4f:6a: 47:df:8b:30:b0:8f:16:1f:b6:bf:0a:96:45:7f:9f: 73:e0:a1:54:66:1c:93:f9:94:ab:8d:72:98:7e:53: 4e:f7:06:78:fa:e7:01:d2:1f:a2:8d:f0:20:9e:90: e3:a6:c6:7d:cc:3e:24:ea:2a:20:f9:62:bf:63:78: 41:26:07:47:22:40:a4:68:e6:97:04:ee:b2:b8:30: 15:7d:f8:79:ce:bd:f8:d5:ad:af:86:98:4e:86:32: fa:38:50:24:42:4e:45:86:d8:97:df:4c:f5:47:86: e5:74:d7:6d:88:b8:c1:9f:5b:b4:19:d5:4a:1d:36: 97:2b:67:89:82:ba:9a:b8:70:a6:d0:af:07:9c:61: c0:26:8f:76:b4:a7:5b:fc:a6:90:1f:2d:e1:b6:eb: 04:30:3b:0b:8e:b3:2e:81:a8:53:87:91:82:f3:37: bd:5e:fe:89:14:6d:ae:3a:b8:7d:54:0d:84:e4:e4: c1:a6:91:b8:86:fe:26:41:e0:c5:c3:fc:a4:9f:72: d1:cc:f9:77:73:0c:61:70:b0:57:74:13:8b:6d:4d: 54:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:71:53:A8:5E:66:7D:EC:E2:66:B9:FC:00:BD:A4:FD:91:5F:05:C4 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134362e302f32332d3234203d3e20313334383130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.146.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:b9:c9:70:c9:dc:36:84:6a:0d:ba:9d:2b:3d:c4:ba:50:52: 6d:bc:4d:5b:14:fc:c3:3e:59:74:36:31:67:dd:db:79:f6:02: 4f:be:85:b3:9a:7d:5e:76:5f:c3:ae:e8:70:b9:d3:f5:36:ed: cc:ff:50:fa:5f:20:8f:cd:4b:70:95:76:b9:e1:b2:b0:d9:30: 65:4e:a5:d3:a9:0c:66:21:a8:83:3f:19:68:3a:88:10:29:a3: 91:94:dc:0a:af:78:f4:f5:bb:1c:44:79:db:18:eb:ea:89:a2: 1c:bc:40:f9:a4:81:dd:09:61:67:85:e6:e7:5d:4d:11:df:4b: 1d:80:b9:b3:99:f6:db:ad:a0:b6:04:f1:ff:ec:62:df:4b:ce: 52:5f:d4:c5:b9:e2:94:40:0c:da:d1:b3:55:57:1a:50:ec:11: c8:5c:40:d7:65:9b:21:66:0f:56:47:d9:e3:03:37:7d:fe:75: da:de:12:7c:3d:2c:7c:b4:2b:1c:6d:0a:db:f0:f5:a1:a9:23: e4:5e:0d:b6:a9:18:fe:d8:eb:62:00:f8:87:3e:c0:8c:93:b1: 50:78:ab:c7:6c:23:b5:c0:f6:fd:86:9b:04:0c:c7:b5:8b:9c: 72:e7:de:bb:ab:7c:d8:c3:49:9d:14:8c:dd:09:c1:71:b9:79: 1f:5b:d0:45 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUCb645c28tA/rhjWHr0/y9tfbnFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjhaFw0yNzAxMTkwMjI4MjhaMDMxMTAvBgNV BAMTKDY5NzE1M0E4NUU2NjdERUNFMjY2QjlGQzAwQkRBNEZEOTE1RjA1QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc9JCkiSiAF3k9ByRlULPW2Avy 54jRFvwGB7UCsjvKDCxRbkgQ0cvOQ+NPakffizCwjxYftr8KlkV/n3PgoVRmHJP5 lKuNcph+U073Bnj65wHSH6KN8CCekOOmxn3MPiTqKiD5Yr9jeEEmB0ciQKRo5pcE 7rK4MBV9+HnOvfjVra+GmE6GMvo4UCRCTkWG2JffTPVHhuV0122IuMGfW7QZ1Uod NpcrZ4mCupq4cKbQrwecYcAmj3a0p1v8ppAfLeG26wQwOwuOsy6BqFOHkYLzN71e /okUba46uH1UDYTk5MGmkbiG/iZB4MXD/KSfctHM+XdzDGFwsFd0E4ttTVR5AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUaXFTqF5mfeziZrn8AL2k/ZFfBcQwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMjMzMmUz MTM2MzAyZTMxMzQzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzNDM4MzEz MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAd+gkjANBgkqhkiG9w0BAQsFAAOCAQEAj7nJcMncNoRqDbqd Kz3EulBSbbxNWxT8wz5ZdDYxZ93befYCT76Fs5p9XnZfw67ocLnT9TbtzP9Q+l8g j81LcJV2ueGysNkwZU6l06kMZiGogz8ZaDqIECmjkZTcCq949PW7HER52xjr6omi HLxA+aSB3QlhZ4Xm511NEd9LHYC5s5n2262gtgTx/+xi30vOUl/UxbnilEAM2tGz VVcaUOwRyFxA12WbIWYPVkfZ4wM3ff512t4SfD0sfLQrHG0K2/D1oakj5F4NtqkY /tjrYgD4hz7AjJOxUHirx2wjtcD2/YabBAzHtYuccufeu6t82MNJnRSM3QnBcbl5 H1vQRQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:35 2026 by rpki-client