This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3136382e302f32312d3234203d3e2039383038.roa File: 3232332e3136302e3136382e302f32312d3234203d3e2039383038.roa (raw, json) Hash identifier: PQEhT7qgtiJ5Za8D04yTBYRFGAtYELBM57dlmdQ5Z8E= Subject key identifier: F0:2F:65:27:FF:CB:0A:B3:28:C5:7C:7A:B2:B5:6C:29:0A:D6:4C:A3 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 136D648A784570D0F2F24B030F9E023DD7667750 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3136382e302f32312d3234203d3e2039383038.roa Signing time: Tue 20 Jan 2026 02:28:26 +0000 ROA not before: Tue 20 Jan 2026 02:23:26 +0000 ROA not after: Tue 19 Jan 2027 02:28:26 +0000 asID: 9808 IP address blocks: 223.160.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6d:64:8a:78:45:70:d0:f2:f2:4b:03:0f:9e:02:3d:d7:66:77:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:26 2026 GMT Not After : Jan 19 02:28:26 2027 GMT Subject: CN=F02F6527FFCB0AB328C57C7AB2B56C290AD64CA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a8:01:c7:98:b1:c0:fa:17:a7:93:5b:26:bd: 54:08:b0:d6:b0:e8:94:46:bc:54:24:2c:da:a0:59: 48:9e:92:1e:92:c5:a3:b2:0f:f8:d4:2c:3f:2d:5f: 08:76:85:82:c6:df:73:85:2a:84:6e:7e:20:1a:32: 5c:b1:3b:9e:ce:29:59:80:53:da:cd:c0:b6:be:a1: 54:da:3f:76:ea:e5:ff:43:f1:2d:66:56:a6:9e:fb: 32:c9:48:16:3a:3f:c8:7d:c2:e6:d5:29:5a:29:ea: 6f:07:fc:5a:8c:06:06:cb:c2:87:7d:7e:9a:25:83: 91:21:5e:a9:e8:82:ed:e7:a4:a2:ce:dd:44:76:a0: 90:8f:01:ad:5e:51:2f:87:0d:3c:c3:bc:35:c7:58: c9:6c:37:5f:02:8c:33:72:44:ba:d0:17:cf:95:92: 68:6e:d6:ec:51:68:bb:c1:2f:ed:3f:b6:3e:6a:94: 5b:d5:7a:15:f2:25:59:43:df:51:61:20:94:99:44: 13:c6:9c:51:17:05:5d:a1:0b:ca:7f:62:3a:4e:c6: 0e:c2:43:b6:39:88:6d:d1:54:30:c1:8a:32:6c:90: 35:a5:52:f7:10:ef:39:68:39:ed:af:60:75:c1:e5: 13:64:8d:43:e7:74:82:9d:bf:98:c9:18:a0:2a:f5: 64:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2F:65:27:FF:CB:0A:B3:28:C5:7C:7A:B2:B5:6C:29:0A:D6:4C:A3 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3136382e302f32312d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.168.0/21 Signature Algorithm: sha256WithRSAEncryption a3:1b:a1:96:a2:db:b5:2f:73:40:7e:40:78:51:e4:88:bb:6e: 23:97:8d:1a:12:ff:cc:5b:1a:ec:a2:8a:c2:e2:85:b6:7b:9e: 0e:6e:b4:35:39:8c:21:4a:48:27:82:63:67:a8:ce:d4:b0:25: 3d:b0:43:6e:45:18:b8:a7:b2:be:f7:0f:96:72:a2:40:8c:22: 21:47:aa:02:29:51:a0:68:d7:23:de:e7:88:d0:37:3f:96:c2: 46:49:64:88:8f:f8:a4:ab:6e:24:1a:e2:8f:4e:80:d9:3b:0e: 1f:97:17:5b:1c:56:14:ab:91:49:b8:d4:2e:11:86:e6:2e:6b: a1:4b:76:0b:b9:b2:2a:af:61:81:62:9a:ba:c6:8e:7e:b0:f3: fd:e0:28:4b:71:d8:84:5b:6e:86:7e:5f:72:c0:99:30:df:2b: 49:07:9d:cf:9a:19:64:bd:1a:1d:37:4a:db:72:06:cc:21:a1: 48:a9:5f:2b:ae:6b:44:b9:b7:85:f4:f5:4c:2e:79:b4:05:cd: e8:b6:4c:13:ea:ae:bf:82:88:34:d8:05:31:ce:21:88:82:d0: 1e:67:21:b9:f1:83:8e:9c:b8:45:4b:c4:c7:19:c7:7f:86:f9: e9:2e:70:c2:27:63:be:76:61:ea:75:58:d5:d1:8c:88:d0:e2: 62:bb:8a:e7 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUE21kinhFcNDy8ksDD54CPddmd1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjZaFw0yNzAxMTkwMjI4MjZaMDMxMTAvBgNV BAMTKEYwMkY2NTI3RkZDQjBBQjMyOEM1N0M3QUIyQjU2QzI5MEFENjRDQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWqAHHmLHA+henk1smvVQIsNaw 6JRGvFQkLNqgWUiekh6SxaOyD/jULD8tXwh2hYLG33OFKoRufiAaMlyxO57OKVmA U9rNwLa+oVTaP3bq5f9D8S1mVqae+zLJSBY6P8h9wubVKVop6m8H/FqMBgbLwod9 fpolg5EhXqnogu3npKLO3UR2oJCPAa1eUS+HDTzDvDXHWMlsN18CjDNyRLrQF8+V kmhu1uxRaLvBL+0/tj5qlFvVehXyJVlD31FhIJSZRBPGnFEXBV2hC8p/YjpOxg7C Q7Y5iG3RVDDBijJskDWlUvcQ7zloOe2vYHXB5RNkjUPndIKdv5jJGKAq9WQvAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU8C9lJ//LCrMoxXx6srVsKQrWTKMwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMwMmUzMTM2MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA9+gqDANBgkqhkiG9w0BAQsFAAOCAQEAoxuhlqLbtS9zQH5AeFHkiLtu I5eNGhL/zFsa7KKKwuKFtnueDm60NTmMIUpIJ4JjZ6jO1LAlPbBDbkUYuKeyvvcP lnKiQIwiIUeqAilRoGjXI97niNA3P5bCRklkiI/4pKtuJBrij06A2TsOH5cXWxxW FKuRSbjULhGG5i5roUt2C7myKq9hgWKausaOfrDz/eAoS3HYhFtuhn5fcsCZMN8r SQedz5oZZL0aHTdK23IGzCGhSKlfK65rRLm3hfT1TC55tAXN6LZME+quv4KINNgF Mc4hiILQHmchufGDjpy4RUvExxnHf4b56S5wwidjvnZh6nVY1dGMiNDiYruK5w== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:40 2026 by rpki-client