This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e32302e302f32322d3234203d3e203536303430.roa File: 3232332e3136302e32302e302f32322d3234203d3e203536303430.roa (raw, json) Hash identifier: zMP/uMe4Y9FevJAnnaYzTpf9xZ5UzijxZ8zY9mV64+g= Subject key identifier: 6A:CE:7C:C8:EA:BE:EC:80:0D:39:8A:DF:24:64:37:A1:53:3D:26:21 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 5791E0AA8B26FF193DC0F48F34A6DC2557A1CEE4 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e32302e302f32322d3234203d3e203536303430.roa Signing time: Tue 20 Jan 2026 02:27:25 +0000 ROA not before: Tue 20 Jan 2026 02:22:25 +0000 ROA not after: Tue 19 Jan 2027 02:27:25 +0000 asID: 56040 IP address blocks: 223.160.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:91:e0:aa:8b:26:ff:19:3d:c0:f4:8f:34:a6:dc:25:57:a1:ce:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:25 2026 GMT Not After : Jan 19 02:27:25 2027 GMT Subject: CN=6ACE7CC8EABEEC800D398ADF246437A1533D2621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ed:a3:c5:d5:ab:78:84:87:2a:54:20:b9:70: 66:a9:79:a6:67:af:be:0f:d7:6d:d8:af:89:22:7e: e6:3e:18:be:89:50:72:10:e1:ff:43:93:7c:5a:3c: 9a:6a:be:76:ec:69:03:37:4a:ba:21:b6:bc:04:54: b7:dd:9f:55:6d:89:d9:e1:1c:93:2c:1d:5d:d4:70: 8a:10:2d:69:36:d7:2d:82:21:db:00:4a:5b:f9:dc: 11:d7:b1:83:4e:de:7b:e1:d0:83:dc:84:bc:2c:93: 1a:f3:70:6d:a6:c5:e6:ed:24:ae:8d:5e:44:1b:f1: d5:2f:e5:13:c1:82:72:bf:a4:51:2c:a0:a5:28:43: 8d:66:12:92:45:51:06:49:d0:be:b2:cc:6f:5e:f2: 52:30:d0:62:c0:f8:5f:d8:a5:37:78:89:43:78:1f: 3d:85:db:24:14:51:22:23:20:b4:6a:35:bd:1c:3e: 7b:e1:a5:8f:6e:15:b1:0f:fd:21:d8:ed:e0:a7:11: af:d3:6f:59:76:ca:f5:e4:e7:a0:c9:2d:a4:47:8b: 64:2e:f4:d4:08:3d:3b:a7:b6:72:99:0e:b9:fa:a0: db:c1:80:37:71:6b:ac:59:86:0c:f0:2b:17:d5:b9: de:b0:de:3c:35:e6:46:d7:a1:31:45:e0:af:c9:4e: 8d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CE:7C:C8:EA:BE:EC:80:0D:39:8A:DF:24:64:37:A1:53:3D:26:21 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e32302e302f32322d3234203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.20.0/22 Signature Algorithm: sha256WithRSAEncryption 61:01:25:f2:f7:b2:c8:e7:30:cd:4c:f6:83:f7:53:cb:cd:01: a3:75:2e:ad:da:29:b8:bd:75:c6:d2:73:65:41:4c:2c:ce:e7: a9:6d:dd:e4:6d:c3:e7:e5:81:59:ea:c9:74:5f:99:fa:59:c1: a0:d0:ce:cf:1a:0b:69:ec:fc:ad:50:65:1f:2e:53:3a:c2:cf: 38:50:a2:64:8e:9f:44:de:9c:b7:ea:3a:25:78:e6:8b:17:43: 15:0b:f7:05:26:13:79:9c:e1:98:df:b2:6c:f7:57:fe:95:5b: cd:02:bd:5a:bd:ee:72:17:82:3b:01:e6:21:a2:34:5c:5b:00: 22:4e:95:4c:59:49:26:9f:b1:3d:04:89:3d:32:8f:7a:8f:73: 53:73:83:c9:27:42:54:26:7a:f0:2a:c4:ab:cd:a6:5c:16:7b: 62:ad:de:bb:d0:9d:f9:44:f2:37:2c:c5:29:8e:d3:02:48:a9: ab:4f:0b:f8:1b:8f:37:f9:56:58:83:a0:b3:fe:29:aa:7e:e9: 07:a8:c4:20:fa:0e:03:f2:4b:7b:4a:ee:e1:b4:ef:1e:24:b8: d9:b4:83:5c:47:9f:77:17:51:11:97:48:92:81:ea:c7:39:93: 53:07:fb:d5:43:0a:d2:50:e5:4b:b3:62:77:77:cd:fe:3c:de: ae:7c:91:44 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUV5Hgqosm/xk9wPSPNKbcJVehzuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjVaFw0yNzAxMTkwMjI3MjVaMDMxMTAvBgNV BAMTKDZBQ0U3Q0M4RUFCRUVDODAwRDM5OEFERjI0NjQzN0ExNTMzRDI2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ7aPF1at4hIcqVCC5cGapeaZn r74P123Yr4kifuY+GL6JUHIQ4f9Dk3xaPJpqvnbsaQM3SrohtrwEVLfdn1Vtidnh HJMsHV3UcIoQLWk21y2CIdsASlv53BHXsYNO3nvh0IPchLwskxrzcG2mxebtJK6N XkQb8dUv5RPBgnK/pFEsoKUoQ41mEpJFUQZJ0L6yzG9e8lIw0GLA+F/YpTd4iUN4 Hz2F2yQUUSIjILRqNb0cPnvhpY9uFbEP/SHY7eCnEa/Tb1l2yvXk56DJLaRHi2Qu 9NQIPTuntnKZDrn6oNvBgDdxa6xZhgzwKxfVud6w3jw15kbXoTFF4K/JTo0DAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUas58yOq+7IANOYrfJGQ3oVM9JiEwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMwMmUzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAt+gFDANBgkqhkiG9w0BAQsFAAOCAQEAYQEl8veyyOcwzUz2g/dTy80B o3UurdopuL11xtJzZUFMLM7nqW3d5G3D5+WBWerJdF+Z+lnBoNDOzxoLaez8rVBl Hy5TOsLPOFCiZI6fRN6ct+o6JXjmixdDFQv3BSYTeZzhmN+ybPdX/pVbzQK9Wr3u cheCOwHmIaI0XFsAIk6VTFlJJp+xPQSJPTKPeo9zU3ODySdCVCZ68CrEq82mXBZ7 Yq3eu9Cd+UTyNyzFKY7TAkipq08L+BuPN/lWWIOgs/4pqn7pB6jEIPoOA/JLe0ru 4bTvHiS42bSDXEefdxdREZdIkoHqxzmTUwf71UMK0lDlS7Nid3fN/jzernyRRA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:13 2026 by rpki-client