This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134382e302f32322d3234203d3e203536303434.roa File: 3232332e3136302e3134382e302f32322d3234203d3e203536303434.roa (raw, json) Hash identifier: a3FRrb/mAisp12mS0Of2V64c3lPoS19LNfR9iuRrVoA= Subject key identifier: 36:0C:F1:2A:0B:20:6F:FE:48:21:89:14:96:6D:A1:D0:D5:55:37:6E Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 195B73368A92183284B7E03040B6F546F376EE29 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134382e302f32322d3234203d3e203536303434.roa Signing time: Tue 20 Jan 2026 02:28:27 +0000 ROA not before: Tue 20 Jan 2026 02:23:27 +0000 ROA not after: Tue 19 Jan 2027 02:28:27 +0000 asID: 56044 IP address blocks: 223.160.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:5b:73:36:8a:92:18:32:84:b7:e0:30:40:b6:f5:46:f3:76:ee:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:27 2026 GMT Not After : Jan 19 02:28:27 2027 GMT Subject: CN=360CF12A0B206FFE48218914966DA1D0D555376E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:1d:54:8c:df:c2:12:6c:c7:65:c2:9b:0b: 4e:56:c1:4a:1f:a9:c6:c9:e5:47:8d:df:d2:f9:0c: 8f:e8:57:7e:14:d1:1c:cf:44:5b:c3:7a:b4:62:16: ef:f0:5d:a5:af:f5:87:d3:f4:1e:32:32:ae:99:c8: 6e:0e:49:ff:39:f3:39:77:66:a9:91:7d:92:b6:9b: 2c:20:28:e3:d3:d1:db:b4:a5:af:f0:f5:5f:26:cb: d8:51:f8:24:c8:a5:d2:eb:7d:86:72:0b:74:88:a5: 7e:7a:4a:98:6f:09:c5:bf:79:49:4a:96:8a:2b:ed: ea:55:9d:b0:eb:09:3b:c6:da:dd:ed:5b:2e:be:6b: 04:b0:0a:99:93:d6:8d:b9:9a:be:21:42:33:b1:b5: 59:1e:92:e0:6f:b2:40:87:91:ab:6a:a2:47:56:4a: b4:17:48:cf:c5:4a:18:ed:e2:53:73:cd:c8:ee:22: e5:06:9a:ff:e3:5a:a2:4d:b1:98:e5:d5:36:89:e1: 1f:a4:24:f2:7a:40:20:3e:08:c4:60:b2:02:27:56: 3d:16:27:7c:45:76:e4:28:41:c0:62:4d:5c:f6:8e: 1c:90:56:10:45:92:e7:ec:ae:6c:1f:df:28:fd:fd: ca:bc:24:7c:92:91:f8:f9:61:18:65:4b:e0:10:03: 6d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0C:F1:2A:0B:20:6F:FE:48:21:89:14:96:6D:A1:D0:D5:55:37:6E X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134382e302f32322d3234203d3e203536303434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.148.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:be:84:eb:33:09:ce:83:23:42:55:df:0c:df:9e:1f:ea:20: da:44:6f:42:fa:17:5a:c3:1e:62:40:65:2c:8f:bb:24:0f:79: c9:5e:e8:9d:ae:1c:55:40:23:0a:7c:48:d9:8c:cf:f0:f9:46: 2e:ea:40:b4:d1:d8:d5:13:9d:d1:54:be:47:f7:c0:4a:05:72: 9f:bf:dd:98:b0:1a:11:bd:99:a6:65:d4:18:a8:59:a1:38:e0: cd:4b:30:b4:9c:72:84:fc:27:81:6b:26:93:b9:bc:bd:51:e5: 3d:36:e5:c9:6e:b6:3b:73:db:38:73:be:ec:f0:05:bd:0c:19: 30:87:87:2e:9f:1f:99:9b:33:34:f7:2f:5d:37:7b:03:37:6c: bb:90:48:e2:09:0a:1a:c3:d0:8e:b6:1e:33:cd:49:a3:bf:ff: 64:a5:3e:e5:ce:af:0e:0f:a4:00:c2:98:b9:29:61:c6:aa:c2: 46:07:63:da:f6:65:10:7d:2e:67:2e:2e:78:16:a5:e3:85:f3: 04:0f:82:3d:e2:65:47:09:68:57:eb:12:76:9d:23:5a:79:30: 17:9b:09:f9:e2:f8:ef:25:a7:5f:9c:c1:65:a8:a0:cb:19:c0: 73:c7:17:42:37:6c:08:ab:00:47:90:6e:6e:4f:7c:75:4b:f3: c8:91:5c:b2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUGVtzNoqSGDKEt+AwQLb1RvN27ikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjdaFw0yNzAxMTkwMjI4MjdaMDMxMTAvBgNV BAMTKDM2MENGMTJBMEIyMDZGRkU0ODIxODkxNDk2NkRBMUQwRDU1NTM3NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRR1UjN/CEmzHZcKbC05WwUof qcbJ5UeN39L5DI/oV34U0RzPRFvDerRiFu/wXaWv9YfT9B4yMq6ZyG4OSf858zl3 ZqmRfZK2mywgKOPT0du0pa/w9V8my9hR+CTIpdLrfYZyC3SIpX56SphvCcW/eUlK loor7epVnbDrCTvG2t3tWy6+awSwCpmT1o25mr4hQjOxtVkekuBvskCHkatqokdW SrQXSM/FShjt4lNzzcjuIuUGmv/jWqJNsZjl1TaJ4R+kJPJ6QCA+CMRgsgInVj0W J3xFduQoQcBiTVz2jhyQVhBFkufsrmwf3yj9/cq8JHySkfj5YRhlS+AQA20fAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUNgzxKgsgb/5IIYkUlm2h0NVVN24wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMDJlMzEzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAt+glDANBgkqhkiG9w0BAQsFAAOCAQEACr6E6zMJzoMjQlXfDN+e H+og2kRvQvoXWsMeYkBlLI+7JA95yV7ona4cVUAjCnxI2YzP8PlGLupAtNHY1ROd 0VS+R/fASgVyn7/dmLAaEb2ZpmXUGKhZoTjgzUswtJxyhPwngWsmk7m8vVHlPTbl yW62O3PbOHO+7PAFvQwZMIeHLp8fmZszNPcvXTd7Azdsu5BI4gkKGsPQjrYeM81J o7//ZKU+5c6vDg+kAMKYuSlhxqrCRgdj2vZlEH0uZy4ueBal44XzBA+CPeJlRwlo V+sSdp0jWnkwF5sJ+eL47yWnX5zBZaigyxnAc8cXQjdsCKsAR5Bubk98dUvzyJFc sg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:36 2026 by rpki-client