This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3230302e302f32322d3234203d3e2039383038.roa File: 3232332e3136302e3230302e302f32322d3234203d3e2039383038.roa (raw, json) Hash identifier: AGGcaG4FaFWNykOROS3R3loKqJQ6EvV+lYjzu74cqJc= Subject key identifier: DD:68:36:E2:00:3B:AD:31:8A:1D:4F:30:37:C7:51:B1:8C:58:81:93 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 1CE8B7BBC0B4D9BFC5DECDF70993800DF531A33A Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3230302e302f32322d3234203d3e2039383038.roa Signing time: Tue 20 Jan 2026 02:28:28 +0000 ROA not before: Tue 20 Jan 2026 02:23:28 +0000 ROA not after: Tue 19 Jan 2027 02:28:28 +0000 asID: 9808 IP address blocks: 223.160.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e8:b7:bb:c0:b4:d9:bf:c5:de:cd:f7:09:93:80:0d:f5:31:a3:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:28 2026 GMT Not After : Jan 19 02:28:28 2027 GMT Subject: CN=DD6836E2003BAD318A1D4F3037C751B18C588193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4a:33:50:5c:c1:ea:1f:5a:60:ab:e1:c3:56: 3c:49:11:c3:f4:43:e4:b3:90:5d:7a:3f:11:a2:29: 7c:b6:e9:4c:7e:6c:bd:5a:d9:e5:00:3f:82:f2:d9: 4a:dd:5f:08:d6:4d:4b:9a:38:39:5b:b5:8b:77:d1: 09:54:b5:f4:a4:3d:d7:61:50:57:ab:eb:91:86:cc: f7:4c:1d:ea:78:27:60:f9:59:66:4f:dc:58:65:30: 9f:11:7f:f1:dd:a4:d8:90:d5:e6:d7:43:c9:d6:c4: af:5d:86:c8:b9:04:dc:4e:fd:a3:41:37:13:2d:e5: 4f:4b:e3:76:e7:03:ba:63:6c:9f:36:4c:01:66:de: f1:d6:fc:ea:8f:04:44:21:49:f5:2d:f2:a9:5b:92: cf:f1:8c:08:83:17:4c:ea:be:c9:cd:4a:f9:68:f6: 31:78:f5:58:56:69:3c:07:b0:03:1c:e4:c5:94:89: 25:1f:e5:97:1f:f1:80:00:e4:65:4c:f1:14:44:62: 10:58:d7:e7:f4:a8:ce:fd:ac:36:2e:ee:eb:a9:17: 6c:02:3d:06:0a:41:b1:66:cc:4b:6e:3b:5d:8c:79: 45:e1:02:bf:14:f7:85:a6:65:35:be:a6:d3:75:63: da:67:bc:11:4f:63:63:bb:13:79:e0:a7:cd:44:b3: e4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:68:36:E2:00:3B:AD:31:8A:1D:4F:30:37:C7:51:B1:8C:58:81:93 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3230302e302f32322d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.200.0/22 Signature Algorithm: sha256WithRSAEncryption 96:79:12:c9:2a:04:2e:43:f2:7f:cd:b1:ce:3d:d5:38:3d:94: ad:a1:af:90:f5:3c:9d:c8:58:4f:5c:44:f2:b0:de:2a:c0:d7: b9:0a:6a:c0:1f:5a:e9:bc:81:1e:7a:43:a0:a7:bb:02:0d:49: f0:f5:75:91:fb:a3:c0:93:51:16:ee:c0:66:a7:dd:cc:5b:c8: 8b:62:49:8b:45:87:b3:9f:74:e4:81:7a:f0:38:32:81:f0:f2: 2c:03:70:a5:09:5c:1e:e7:cc:d8:6e:f2:a2:66:28:ae:b7:86: 48:e8:1d:0b:e9:14:1f:24:34:0b:d4:c8:22:2f:cb:47:43:7e: 66:d3:1b:25:d4:f6:dc:a9:ba:18:20:96:4f:b7:ff:c9:14:d1: d7:1b:62:5c:8e:32:9e:5c:59:a6:9f:ea:87:ee:7b:0b:e9:47: f6:ff:ee:c0:23:21:6d:91:e5:6a:76:04:9d:39:85:6f:67:12: 85:80:68:19:93:e9:a4:8a:0d:c1:71:04:8f:bf:10:7f:88:8c: 84:63:14:0c:67:d0:5e:9c:28:13:af:ff:49:08:d2:e7:7e:d8: 00:06:46:31:61:e3:ab:b4:43:7d:e9:b7:90:36:51:d2:7a:b9: 09:53:a8:5f:13:e6:84:bc:45:c5:95:59:dc:82:37:fe:ad:3d: bc:fd:50:37 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUHOi3u8C02b/F3s33CZOADfUxozowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjhaFw0yNzAxMTkwMjI4MjhaMDMxMTAvBgNV BAMTKERENjgzNkUyMDAzQkFEMzE4QTFENEYzMDM3Qzc1MUIxOEM1ODgxOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbSjNQXMHqH1pgq+HDVjxJEcP0 Q+SzkF16PxGiKXy26Ux+bL1a2eUAP4Ly2UrdXwjWTUuaODlbtYt30QlUtfSkPddh UFer65GGzPdMHep4J2D5WWZP3FhlMJ8Rf/HdpNiQ1ebXQ8nWxK9dhsi5BNxO/aNB NxMt5U9L43bnA7pjbJ82TAFm3vHW/OqPBEQhSfUt8qlbks/xjAiDF0zqvsnNSvlo 9jF49VhWaTwHsAMc5MWUiSUf5Zcf8YAA5GVM8RREYhBY1+f0qM79rDYu7uupF2wC PQYKQbFmzEtuO12MeUXhAr8U94WmZTW+ptN1Y9pnvBFPY2O7E3ngp81Es+TdAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU3Wg24gA7rTGKHU8wN8dRsYxYgZMwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMwMmUzMjMwMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAt+gyDANBgkqhkiG9w0BAQsFAAOCAQEAlnkSySoELkPyf82xzj3VOD2U raGvkPU8nchYT1xE8rDeKsDXuQpqwB9a6byBHnpDoKe7Ag1J8PV1kfujwJNRFu7A ZqfdzFvIi2JJi0WHs5905IF68DgygfDyLANwpQlcHufM2G7yomYorreGSOgdC+kU HyQ0C9TIIi/LR0N+ZtMbJdT23Km6GCCWT7f/yRTR1xtiXI4ynlxZpp/qh+57C+lH 9v/uwCMhbZHlanYEnTmFb2cShYBoGZPppIoNwXEEj78Qf4iMhGMUDGfQXpwoE6// SQjS537YAAZGMWHjq7RDfem3kDZR0nq5CVOoXxPmhLxFxZVZ3II3/q09vP1QNw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:55 2026 by rpki-client