This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3139322e302f32312d3234203d3e2039383038.roa File: 3232332e3136302e3139322e302f32312d3234203d3e2039383038.roa (raw, json) Hash identifier: 5foVF+5iCUzANQYfwjPR3lgWRT0Zx9svkXMtEtvB/ZE= Subject key identifier: BD:DA:8B:8D:79:FD:C6:17:81:C9:A5:E9:B5:FF:53:EF:B0:7B:36:38 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 0F5679D03057D18342E2E27045B9D85FA5A3FC2A Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3139322e302f32312d3234203d3e2039383038.roa Signing time: Tue 20 Jan 2026 02:27:24 +0000 ROA not before: Tue 20 Jan 2026 02:22:24 +0000 ROA not after: Tue 19 Jan 2027 02:27:24 +0000 asID: 9808 IP address blocks: 223.160.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:56:79:d0:30:57:d1:83:42:e2:e2:70:45:b9:d8:5f:a5:a3:fc:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:24 2026 GMT Not After : Jan 19 02:27:24 2027 GMT Subject: CN=BDDA8B8D79FDC61781C9A5E9B5FF53EFB07B3638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7c:f1:77:df:e5:ab:aa:cb:af:32:18:c7:9a: 00:4a:c3:70:19:0e:ef:17:9f:87:91:24:09:a4:b5: 92:4a:24:40:8a:29:09:c2:8d:08:32:ca:bf:69:45: fb:f8:31:e7:50:0f:89:06:c9:f6:5d:5c:4d:2c:ca: c6:2e:37:6e:3e:84:e9:91:c7:10:13:83:12:23:d7: c9:30:b8:dc:a1:e6:97:42:a7:75:a1:f5:0a:a7:05: da:2b:37:1f:22:ad:70:9b:20:1c:cd:48:81:f1:45: 43:52:0a:22:ba:3b:fc:27:37:ab:48:7c:06:50:e7: 95:a3:3d:86:46:fc:af:6f:0d:d8:d0:a4:8a:b6:c3: 16:c0:a2:e0:df:63:03:cc:41:da:b5:c9:24:89:c5: 72:00:8f:ef:b9:26:7c:a3:a1:b2:00:33:13:da:8f: 0a:cc:58:e0:92:0b:a9:ad:48:75:d9:95:0a:e7:b4: 17:ba:fb:72:a6:9e:f5:d2:ee:5d:eb:1f:91:e4:96: b3:d3:4e:ac:6e:f2:03:af:fd:9e:b1:fc:7c:bd:a3: 97:cb:ff:01:61:eb:85:20:e8:48:9c:07:5d:67:dc: c9:6a:98:c7:23:b6:84:90:59:7b:4c:49:8d:61:07: 8b:b7:fd:fc:ad:30:7a:a9:ab:e2:3f:6e:94:42:d0: cc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DA:8B:8D:79:FD:C6:17:81:C9:A5:E9:B5:FF:53:EF:B0:7B:36:38 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3139322e302f32312d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.192.0/21 Signature Algorithm: sha256WithRSAEncryption 86:a1:b4:99:b7:8d:70:3a:dc:e4:11:8c:28:a9:ed:42:29:1a: 82:66:48:1b:8e:0e:4b:fc:f2:2e:d3:f0:29:8d:33:ad:ab:77: 8e:90:58:e0:e5:77:03:5c:b3:29:23:82:f6:49:f4:10:27:70: a7:2c:c6:31:44:8b:b3:96:40:91:cb:4c:6b:37:85:87:6f:f6: 86:95:ec:a0:5e:6c:c7:ee:4d:22:35:85:48:45:f4:a7:e7:87: af:cd:89:4b:bd:85:cd:83:e5:cf:ce:91:4c:34:38:20:62:13: 0f:95:b5:17:c2:4e:d0:87:49:dc:5f:0f:ca:35:58:e6:18:64: e4:c8:85:6b:7a:7b:4f:93:c9:d2:e1:cc:8a:63:3e:a9:20:65: 4b:24:34:30:4e:3d:c7:c1:31:98:7c:fd:ad:bf:de:4f:5c:ad: 12:0b:dd:ca:fb:3f:ec:82:2d:92:ed:9e:14:a5:c4:03:3a:a9: 74:c1:ee:7f:33:54:c4:91:c7:59:f2:56:7a:8c:bd:88:79:c7: 46:16:05:0b:92:df:05:0a:2a:5e:04:09:5c:1e:1e:e8:26:9f: 04:65:02:5a:4c:b8:27:47:2a:1d:7c:dd:f8:22:cf:ef:18:c3: f4:2c:ae:6e:8c:c2:39:bf:74:7e:4f:ab:1b:8f:c6:4e:5c:c5: b8:db:6a:14 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUD1Z50DBX0YNC4uJwRbnYX6Wj/CowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjRaFw0yNzAxMTkwMjI3MjRaMDMxMTAvBgNV BAMTKEJEREE4QjhENzlGREM2MTc4MUM5QTVFOUI1RkY1M0VGQjA3QjM2MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChfPF33+WrqsuvMhjHmgBKw3AZ Du8Xn4eRJAmktZJKJECKKQnCjQgyyr9pRfv4MedQD4kGyfZdXE0sysYuN24+hOmR xxATgxIj18kwuNyh5pdCp3Wh9QqnBdorNx8irXCbIBzNSIHxRUNSCiK6O/wnN6tI fAZQ55WjPYZG/K9vDdjQpIq2wxbAouDfYwPMQdq1ySSJxXIAj++5JnyjobIAMxPa jwrMWOCSC6mtSHXZlQrntBe6+3KmnvXS7l3rH5HklrPTTqxu8gOv/Z6x/Hy9o5fL /wFh64Ug6EicB11n3MlqmMcjtoSQWXtMSY1hB4u3/fytMHqpq+I/bpRC0MxjAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUvdqLjXn9xheByaXptf9T77B7NjgwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMwMmUzMTM5MzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA9+gwDANBgkqhkiG9w0BAQsFAAOCAQEAhqG0mbeNcDrc5BGMKKntQika gmZIG44OS/zyLtPwKY0zrat3jpBY4OV3A1yzKSOC9kn0ECdwpyzGMUSLs5ZAkctM azeFh2/2hpXsoF5sx+5NIjWFSEX0p+eHr82JS72FzYPlz86RTDQ4IGITD5W1F8JO 0IdJ3F8PyjVY5hhk5MiFa3p7T5PJ0uHMimM+qSBlSyQ0ME49x8ExmHz9rb/eT1yt Egvdyvs/7IItku2eFKXEAzqpdMHufzNUxJHHWfJWeoy9iHnHRhYFC5LfBQoqXgQJ XB4e6CafBGUCWky4J0cqHXzd+CLP7xjD9CyubozCOb90fk+rG4/GTlzFuNtqFA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:46 2026 by rpki-client