This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e322e302f32332d3234203d3e203536303436.roa File: 3232332e3136302e322e302f32332d3234203d3e203536303436.roa (raw, json) Hash identifier: wwoSD7HLW9gfYGKPcpqh6UBPSzt5Rryxzmo74Awk8fk= Subject key identifier: 9D:B3:DD:F0:36:A3:6C:DA:8D:D2:F8:1C:3C:48:5C:D4:FC:42:AD:D0 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 2A42DCAA6E1CD5830CB886903F54412C7162EA38 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e322e302f32332d3234203d3e203536303436.roa Signing time: Tue 20 Jan 2026 02:27:24 +0000 ROA not before: Tue 20 Jan 2026 02:22:24 +0000 ROA not after: Tue 19 Jan 2027 02:27:24 +0000 asID: 56046 IP address blocks: 223.160.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:42:dc:aa:6e:1c:d5:83:0c:b8:86:90:3f:54:41:2c:71:62:ea:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:24 2026 GMT Not After : Jan 19 02:27:24 2027 GMT Subject: CN=9DB3DDF036A36CDA8DD2F81C3C485CD4FC42ADD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:df:8e:c9:01:90:20:c3:19:02:5a:69:b9: 2f:ef:2e:c6:d4:9d:28:f9:9d:b6:d3:b0:55:70:90: 12:5b:d6:46:72:b5:d5:63:15:50:fc:6b:ae:29:15: fb:ec:3d:81:bd:a7:a2:00:42:2c:b0:84:e2:cd:7b: 5b:4d:b1:a0:db:d5:d2:31:95:7d:9a:26:b6:63:66: fd:f8:61:c2:43:cb:27:a3:de:ae:bb:96:40:aa:7c: 0d:ec:21:52:1c:55:a6:6f:d4:d1:6a:ec:bf:c6:d0: 2e:08:01:48:e9:fd:40:16:53:3b:0d:fc:f6:5b:fe: 12:74:0d:1c:b9:58:9b:a5:0f:81:f4:c2:47:16:11: da:68:72:3a:43:0c:bf:59:8b:c6:d9:db:65:21:95: 3e:ab:ed:5b:70:0b:ff:3d:aa:3f:88:4a:9c:e1:bd: 93:3a:7a:ee:a5:21:4c:19:62:1e:3b:da:b1:13:e5: d1:ba:75:cd:e9:b2:70:07:aa:b1:9a:e9:f3:94:e7: 5e:05:d5:d4:6f:47:03:6b:da:97:db:55:c7:e3:6c: e9:d6:f9:ec:78:23:19:fd:1a:2c:f5:ac:89:5a:01: 2e:87:89:6f:31:15:9b:fe:5e:44:1e:42:73:a6:d9: 65:14:bf:02:02:2c:68:98:cf:34:ed:ea:31:f5:dc: ea:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B3:DD:F0:36:A3:6C:DA:8D:D2:F8:1C:3C:48:5C:D4:FC:42:AD:D0 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e322e302f32332d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.2.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:ca:96:21:68:df:49:58:65:f5:36:69:20:de:67:44:93:f9: 7f:66:d2:c1:0b:33:97:af:d8:b4:75:fc:91:37:83:8a:d2:f4: 41:16:9d:85:d0:3a:86:99:74:41:8d:eb:e7:0d:e0:21:b3:07: 03:3f:4e:21:49:fe:0e:36:69:ee:84:04:63:1c:81:e6:b5:ee: e9:34:3f:bd:cf:17:49:75:70:8b:35:1a:dd:0b:86:76:65:80: 97:32:17:3a:ab:2d:ca:71:df:0c:7e:f7:49:37:7d:99:8f:8c: b1:a9:05:f1:14:ee:a9:46:71:60:d9:d9:7a:ad:ef:22:7e:27: fe:69:06:3d:e5:ed:44:44:e9:0f:b7:aa:81:a5:f0:74:ac:a4: e5:55:d2:34:d4:c9:57:5b:10:6f:25:4c:f5:97:95:e2:1f:6d: c7:11:3f:e1:3f:a0:04:5c:fa:44:bd:28:e0:4e:a7:91:4b:14: c6:e3:f5:1b:e7:ef:c6:8e:3c:ed:1d:db:34:c9:18:0f:2c:62: fd:52:b5:1f:3a:cd:8d:30:ba:66:32:66:5a:ba:d3:e7:39:15: 17:f1:6d:55:47:7c:48:a1:d3:22:92:16:4d:59:2f:a3:e7:4e: 9f:6a:d6:a6:11:3e:e1:0a:a7:f2:6c:d9:f3:44:26:15:a9:2d: c0:a6:70:91 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUKkLcqm4c1YMMuIaQP1RBLHFi6jgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjRaFw0yNzAxMTkwMjI3MjRaMDMxMTAvBgNV BAMTKDlEQjNEREYwMzZBMzZDREE4REQyRjgxQzNDNDg1Q0Q0RkM0MkFERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59N+OyQGQIMMZAlppuS/vLsbU nSj5nbbTsFVwkBJb1kZytdVjFVD8a64pFfvsPYG9p6IAQiywhOLNe1tNsaDb1dIx lX2aJrZjZv34YcJDyyej3q67lkCqfA3sIVIcVaZv1NFq7L/G0C4IAUjp/UAWUzsN /PZb/hJ0DRy5WJulD4H0wkcWEdpocjpDDL9Zi8bZ22UhlT6r7VtwC/89qj+ISpzh vZM6eu6lIUwZYh472rET5dG6dc3psnAHqrGa6fOU514F1dRvRwNr2pfbVcfjbOnW +ex4Ixn9Giz1rIlaAS6HiW8xFZv+XkQeQnOm2WUUvwICLGiYzzTt6jH13OqfAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUnbPd8DajbNqN0vgcPEhc1PxCrdAwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMjMzMmUzMTM2 MzAyZTMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAd+gAjANBgkqhkiG9w0BAQsFAAOCAQEACsqWIWjfSVhl9TZpIN5nRJP5f2bS wQszl6/YtHX8kTeDitL0QRadhdA6hpl0QY3r5w3gIbMHAz9OIUn+DjZp7oQEYxyB 5rXu6TQ/vc8XSXVwizUa3QuGdmWAlzIXOqstynHfDH73STd9mY+MsakF8RTuqUZx YNnZeq3vIn4n/mkGPeXtRETpD7eqgaXwdKyk5VXSNNTJV1sQbyVM9ZeV4h9txxE/ 4T+gBFz6RL0o4E6nkUsUxuP1G+fvxo487R3bNMkYDyxi/VK1HzrNjTC6ZjJmWrrT 5zkVF/FtVUd8SKHTIpIWTVkvo+dOn2rWphE+4Qqn8mzZ80QmFaktwKZwkQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:38 2026 by rpki-client