This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3230342e302f32332d3234203d3e2039383038.roa File: 3232332e3136302e3230342e302f32332d3234203d3e2039383038.roa (raw, json) Hash identifier: k1u17aScLl69PmyabHm11H3pEZPCGFHHWpWNVl7HRY0= Subject key identifier: 23:C1:94:71:3F:4C:7E:A1:27:FF:35:99:EF:2C:84:B3:C5:A4:EA:E9 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 372F898CEFA856ED89D1931FB148374FAA25E808 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3230342e302f32332d3234203d3e2039383038.roa Signing time: Tue 20 Jan 2026 02:28:26 +0000 ROA not before: Tue 20 Jan 2026 02:23:26 +0000 ROA not after: Tue 19 Jan 2027 02:28:26 +0000 asID: 9808 IP address blocks: 223.160.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:2f:89:8c:ef:a8:56:ed:89:d1:93:1f:b1:48:37:4f:aa:25:e8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:26 2026 GMT Not After : Jan 19 02:28:26 2027 GMT Subject: CN=23C194713F4C7EA127FF3599EF2C84B3C5A4EAE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:77:8e:75:e5:56:7f:76:78:57:bd:18:21:c1: 8e:0d:04:97:05:08:64:a5:5e:ef:9b:17:84:2c:a4: aa:d2:a0:c7:2e:45:6c:72:b5:e6:d8:0b:b0:1a:a8: 40:58:36:ed:f2:fb:c4:8a:a2:67:e3:17:73:b9:8b: d6:f5:d3:eb:f5:18:73:c6:2b:61:d1:75:cb:2e:f0: 2a:2d:87:34:cc:38:23:d1:c2:3d:8c:83:35:6b:ba: f3:91:93:7c:8d:39:66:7b:91:96:e0:e7:93:ac:ab: 04:91:9d:de:e4:b2:2f:5c:4d:fd:66:a0:5f:98:f0: 73:97:a6:6e:35:73:90:4c:f6:01:97:c6:f2:b3:e2: ee:c2:dd:c3:39:fe:9d:2b:74:19:be:94:32:25:8d: a3:28:48:7d:0c:44:0d:89:89:a8:7f:12:bf:0b:c3: 74:7e:ec:05:de:d8:33:4c:f5:e1:65:3d:d1:3c:b2: b4:fc:90:05:41:d6:87:e7:89:d5:15:11:b0:7a:38: 1e:be:d6:e4:97:be:43:b9:75:7f:31:3b:03:e6:44: 90:a7:83:37:c0:31:91:4e:f5:5a:ed:69:88:32:51: 7d:c3:1e:55:93:9f:29:7b:0d:50:dd:75:58:55:2e: 51:76:f3:2a:52:39:6b:1b:20:bf:25:a0:5b:27:b3: 6c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C1:94:71:3F:4C:7E:A1:27:FF:35:99:EF:2C:84:B3:C5:A4:EA:E9 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3230342e302f32332d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.204.0/23 Signature Algorithm: sha256WithRSAEncryption 95:e3:4d:85:da:79:e4:f5:bf:9c:17:46:49:44:40:57:f5:0c: 7e:61:d5:0c:3d:cb:ea:71:b2:ff:4a:84:08:fe:e5:8a:5d:2c: 32:39:63:a8:bb:36:f7:34:38:a2:a9:1e:90:9c:62:92:f9:e8: 86:99:09:c5:dc:1d:5b:fd:d6:bb:e3:f6:93:a6:b4:02:9c:d3: 1b:01:a3:b4:6b:31:88:63:31:c3:7a:70:2a:52:32:a7:b2:a4: f7:c7:6f:1e:ec:d8:45:db:c5:b5:bd:7c:54:ae:00:43:1c:79: b4:e8:d9:52:28:20:61:7c:98:c2:46:99:ec:b7:12:c1:6d:03: b1:e9:f9:12:58:5a:e5:2a:ee:71:d9:61:a3:88:65:55:0f:f7: 2a:2e:96:b7:ae:45:6b:fa:e0:a6:22:9f:2c:e3:9b:48:79:f1: fb:09:85:1b:a9:3d:86:58:b6:2e:6f:17:a3:3b:86:81:eb:3a: 67:ad:96:72:6b:1b:08:71:37:28:a3:f1:0e:7e:f6:ca:db:1e: 08:4d:45:c2:80:1a:91:5d:8d:6d:4c:9f:65:2b:f3:94:20:c3: 0a:26:e4:bd:9f:f9:72:d7:b6:f6:af:b0:30:2d:c0:ee:54:4f: 8d:59:3e:49:4c:93:40:5c:2d:37:20:cf:08:31:dc:08:68:d0: 67:05:ba:6a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUNy+JjO+oVu2J0ZMfsUg3T6ol6AgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjZaFw0yNzAxMTkwMjI4MjZaMDMxMTAvBgNV BAMTKDIzQzE5NDcxM0Y0QzdFQTEyN0ZGMzU5OUVGMkM4NEIzQzVBNEVBRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDId4515VZ/dnhXvRghwY4NBJcF CGSlXu+bF4QspKrSoMcuRWxytebYC7AaqEBYNu3y+8SKomfjF3O5i9b10+v1GHPG K2HRdcsu8CothzTMOCPRwj2MgzVruvORk3yNOWZ7kZbg55OsqwSRnd7ksi9cTf1m oF+Y8HOXpm41c5BM9gGXxvKz4u7C3cM5/p0rdBm+lDIljaMoSH0MRA2Jiah/Er8L w3R+7AXe2DNM9eFlPdE8srT8kAVB1ofnidUVEbB6OB6+1uSXvkO5dX8xOwPmRJCn gzfAMZFO9VrtaYgyUX3DHlWTnyl7DVDddVhVLlF28ypSOWsbIL8loFsns2yzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUI8GUcT9MfqEn/zWZ7yyEs8Wk6ukwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMwMmUzMjMwMzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAd+gzDANBgkqhkiG9w0BAQsFAAOCAQEAleNNhdp55PW/nBdGSURAV/UM fmHVDD3L6nGy/0qECP7lil0sMjljqLs29zQ4oqkekJxikvnohpkJxdwdW/3Wu+P2 k6a0ApzTGwGjtGsxiGMxw3pwKlIyp7Kk98dvHuzYRdvFtb18VK4AQxx5tOjZUigg YXyYwkaZ7LcSwW0Dsen5Elha5Srucdlho4hlVQ/3Ki6Wt65Fa/rgpiKfLOObSHnx +wmFG6k9hli2Lm8XozuGges6Z62WcmsbCHE3KKPxDn72ytseCE1FwoAakV2NbUyf ZSvzlCDDCibkvZ/5cte29q+wMC3A7lRPjVk+SUyTQFwtNyDPCDHcCGjQZwW6ag== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:26 2026 by rpki-client