This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31362e302f32322d3234203d3e203536303438.roa File: 3232332e3136302e31362e302f32322d3234203d3e203536303438.roa (raw, json) Hash identifier: nZ3NrwQk2UNd4zyWETikJ+QEvzBwefjr2LqmSoachCs= Subject key identifier: 61:D0:0A:72:27:76:D6:D9:6C:39:26:5D:7E:BC:3B:89:C8:DB:59:89 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 03E18874DECE6439A79A913820987FBE245019B6 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31362e302f32322d3234203d3e203536303438.roa Signing time: Tue 20 Jan 2026 02:27:22 +0000 ROA not before: Tue 20 Jan 2026 02:22:22 +0000 ROA not after: Tue 19 Jan 2027 02:27:22 +0000 asID: 56048 IP address blocks: 223.160.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e1:88:74:de:ce:64:39:a7:9a:91:38:20:98:7f:be:24:50:19:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:22 2026 GMT Not After : Jan 19 02:27:22 2027 GMT Subject: CN=61D00A722776D6D96C39265D7EBC3B89C8DB5989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:54:6b:50:3b:d6:18:10:5a:b5:a5:17:e2: 1a:2a:da:0e:28:6d:8f:00:d0:0a:38:4e:82:24:97: 39:62:95:00:e3:c9:2e:5f:10:4e:8e:e2:c7:ec:9c: ab:15:eb:09:7c:dc:0a:72:fa:4c:59:2a:be:55:63: 09:13:84:f5:c5:13:a1:c3:5c:35:09:16:49:89:c7: 01:97:41:7d:d0:25:48:ef:d9:88:18:5b:6c:84:48: ec:74:e3:bd:d3:52:5c:a5:cf:54:21:7b:c4:c8:83: f4:18:ee:47:61:80:59:7a:bc:a4:92:86:ff:8b:9d: d9:2d:2a:7f:e8:2b:00:ba:08:1d:cc:ec:52:61:ee: 9e:b5:61:97:df:fc:6c:68:73:a8:fa:02:8a:e8:92: 3a:98:f1:15:81:e9:de:3f:63:54:78:63:ca:44:69: c5:b0:51:8b:11:75:72:1a:fe:30:70:3f:4b:14:91: 5c:a6:7c:bb:d0:ee:f5:65:10:32:86:28:54:7d:db: 9b:26:04:f8:76:60:6e:fa:8d:eb:f9:5e:8c:1d:d7: 92:db:56:e8:6e:1a:ea:73:4c:f9:09:35:dd:cf:a6: 78:7e:2c:b9:7a:b5:cf:fd:3a:0a:97:8d:21:85:99: 7c:90:2f:0b:92:1f:54:4b:8b:48:a1:70:02:f4:f5: 49:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D0:0A:72:27:76:D6:D9:6C:39:26:5D:7E:BC:3B:89:C8:DB:59:89 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31362e302f32322d3234203d3e203536303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.16.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:4c:cf:ff:23:63:98:00:07:a1:49:cc:b1:56:3e:6c:d4:94: 3d:6a:3f:1b:86:8a:b0:6e:b0:88:61:9b:54:62:f0:62:f3:67: 8e:93:26:5f:8f:9e:b1:71:f9:97:7d:a9:42:2f:fe:1d:df:e8: 8b:90:e5:59:e7:5d:2e:ae:34:8e:3f:10:01:db:f6:07:e0:17: 49:9d:33:5f:0a:79:bb:63:f3:30:59:70:cb:88:12:a3:b2:db: e6:2b:1c:5d:27:dc:66:24:d3:a8:6b:eb:72:f6:b3:87:09:19: 79:ab:ae:a2:aa:8d:60:ff:ca:bc:73:98:2f:79:26:63:9b:3b: a1:11:7e:61:c9:39:4f:cc:39:78:4b:55:8e:d6:43:99:58:95: a8:84:ab:2e:fc:c2:99:6f:1d:e2:a7:a8:1c:3e:b2:14:5c:39: 69:66:0a:87:3e:1d:27:5c:a5:b6:ec:14:87:39:18:34:3c:4e: 1d:c9:0b:1b:17:1f:26:9c:62:e8:dd:2e:4a:b9:54:c9:44:04: 34:b5:8b:60:aa:c8:ba:79:c8:f3:b9:af:80:7e:3f:0a:ac:7d: 59:60:22:ca:c5:b1:9a:ac:c2:69:88:fd:f3:15:8c:ce:e3:a6: ac:db:e5:66:4e:06:9b:0a:ed:a8:bd:0f:c4:50:28:40:91:82: a3:3a:81:79 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUA+GIdN7OZDmnmpE4IJh/viRQGbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjJaFw0yNzAxMTkwMjI3MjJaMDMxMTAvBgNV BAMTKDYxRDAwQTcyMjc3NkQ2RDk2QzM5MjY1RDdFQkMzQjg5QzhEQjU5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2f1RrUDvWGBBataUX4hoq2g4o bY8A0Ao4ToIklzlilQDjyS5fEE6O4sfsnKsV6wl83Apy+kxZKr5VYwkThPXFE6HD XDUJFkmJxwGXQX3QJUjv2YgYW2yESOx0473TUlylz1Qhe8TIg/QY7kdhgFl6vKSS hv+LndktKn/oKwC6CB3M7FJh7p61YZff/Gxoc6j6AorokjqY8RWB6d4/Y1R4Y8pE acWwUYsRdXIa/jBwP0sUkVymfLvQ7vVlEDKGKFR925smBPh2YG76jev5Xowd15Lb VuhuGupzTPkJNd3Ppnh+LLl6tc/9OgqXjSGFmXyQLwuSH1RLi0ihcAL09Uk3AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUYdAKcid21tlsOSZdfrw7icjbWYkwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMwMmUzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAt+gEDANBgkqhkiG9w0BAQsFAAOCAQEAfkzP/yNjmAAHoUnMsVY+bNSU PWo/G4aKsG6wiGGbVGLwYvNnjpMmX4+esXH5l32pQi/+Hd/oi5DlWeddLq40jj8Q Adv2B+AXSZ0zXwp5u2PzMFlwy4gSo7Lb5iscXSfcZiTTqGvrcvazhwkZeauuoqqN YP/KvHOYL3kmY5s7oRF+Yck5T8w5eEtVjtZDmViVqISrLvzCmW8d4qeoHD6yFFw5 aWYKhz4dJ1yltuwUhzkYNDxOHckLGxcfJpxi6N0uSrlUyUQENLWLYKrIunnI87mv gH4/Cqx9WWAiysWxmqzCaYj98xWMzuOmrNvlZk4GmwrtqL0PxFAoQJGCozqBeQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:48 2026 by rpki-client