This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3230362e302f32332d3234203d3e203234343030.roa File: 3232332e3136302e3230362e302f32332d3234203d3e203234343030.roa (raw, json) Hash identifier: 9+4qx49VN4q18FSOf8Vb3AiyLorG5gpJSuy8poFgOfo= Subject key identifier: E0:41:C1:55:15:5A:51:77:49:CF:13:AF:2A:0F:B3:33:7E:5B:FA:CF Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 56274B1D56F0B9F516445D5EA0628B61FDE5AF94 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3230362e302f32332d3234203d3e203234343030.roa Signing time: Tue 20 Jan 2026 02:28:27 +0000 ROA not before: Tue 20 Jan 2026 02:23:27 +0000 ROA not after: Tue 19 Jan 2027 02:28:27 +0000 asID: 24400 IP address blocks: 223.160.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:27:4b:1d:56:f0:b9:f5:16:44:5d:5e:a0:62:8b:61:fd:e5:af:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:27 2026 GMT Not After : Jan 19 02:28:27 2027 GMT Subject: CN=E041C155155A517749CF13AF2A0FB3337E5BFACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:14:c7:ca:3a:77:d0:1a:09:ba:c8:59:8d: 80:a8:c2:f1:75:da:4a:e1:9c:bd:0b:37:fb:eb:60: 9d:09:c8:be:31:20:7f:da:ea:22:7a:52:e4:ff:7e: f4:39:ca:cd:62:37:e1:09:d9:5f:13:fd:f8:f5:03: 9d:2a:a6:52:45:aa:90:91:42:22:1e:93:99:30:06: d9:36:26:9e:df:25:60:79:9c:ff:b2:59:8d:eb:e9: cf:20:73:26:d1:c6:34:17:64:b8:00:62:d7:af:20: bd:1f:0a:56:e6:7f:67:1d:cf:63:d5:c2:da:73:61: e7:77:a9:74:c5:cb:0a:1c:e5:9d:94:cf:e2:a4:b5: ff:5b:6d:a5:94:36:1f:d8:e1:e5:44:b3:a0:a2:24: d6:b1:9d:0e:29:5b:86:98:22:ec:97:d7:9e:a8:05: cc:17:f1:ec:c9:6c:c6:58:01:85:94:9c:8b:17:c3: 98:2b:e7:ee:df:ff:7a:98:30:11:18:7e:00:b3:ea: 07:d8:f0:bd:38:cc:01:ee:78:d8:4a:5c:e3:6a:4e: 89:4a:df:64:eb:e3:19:6a:c5:0c:25:2b:6c:ec:28: 57:fa:76:ae:6e:89:f2:d2:7c:ff:d8:9b:b3:88:90: 48:f6:26:d7:1c:9e:a0:9b:0b:39:ca:0b:4c:72:c0: 93:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:41:C1:55:15:5A:51:77:49:CF:13:AF:2A:0F:B3:33:7E:5B:FA:CF X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3230362e302f32332d3234203d3e203234343030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.206.0/23 Signature Algorithm: sha256WithRSAEncryption ac:87:c5:cc:38:fe:6f:76:5b:9a:6b:61:e3:d5:b6:21:c0:31: 7a:72:47:9e:40:4b:96:66:6c:3f:f1:f8:84:fb:df:59:7e:26: e9:57:d1:17:ea:4b:e1:a1:b7:3d:00:53:b5:2e:82:6d:fd:d2: 1f:b0:9b:fc:2a:9f:0e:d2:93:89:8d:08:91:b6:b2:fa:3d:42: d6:d4:19:1e:ac:3c:d7:a4:93:c2:55:68:7b:71:b4:62:9e:8e: 3d:7e:0a:ef:b8:06:d9:cb:95:e6:b9:40:ed:66:31:e6:59:1f: 77:b4:dd:5e:a3:52:57:bc:79:5d:4b:ea:ba:ca:fb:64:5e:97: fa:d0:51:cb:dd:a0:25:dc:4b:a9:6f:10:98:74:80:6d:c3:42: d5:4f:3e:a9:c0:24:ec:3b:a3:8f:ea:af:2b:57:11:fd:3b:45: 0d:78:cd:9b:8f:77:14:27:2c:3f:5f:61:0a:3a:ed:34:46:6d: 16:4d:3d:a3:e9:af:48:13:9b:ba:d8:69:71:d3:f9:a2:c2:1a: df:0b:e4:71:9d:f5:3e:44:d3:37:c0:ca:d3:dc:bd:c8:2b:3c: 7c:c8:b5:06:72:84:2e:81:4c:58:ff:2a:83:cf:5c:a8:f5:3d: 65:be:9d:bb:f8:96:1e:39:28:1d:62:df:57:e0:ca:68:80:21: a5:fb:fb:cb -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUVidLHVbwufUWRF1eoGKLYf3lr5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjdaFw0yNzAxMTkwMjI4MjdaMDMxMTAvBgNV BAMTKEUwNDFDMTU1MTU1QTUxNzc0OUNGMTNBRjJBMEZCMzMzN0U1QkZBQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDhTHyjp30BoJushZjYCowvF1 2krhnL0LN/vrYJ0JyL4xIH/a6iJ6UuT/fvQ5ys1iN+EJ2V8T/fj1A50qplJFqpCR QiIek5kwBtk2Jp7fJWB5nP+yWY3r6c8gcybRxjQXZLgAYtevIL0fClbmf2cdz2PV wtpzYed3qXTFywoc5Z2Uz+Kktf9bbaWUNh/Y4eVEs6CiJNaxnQ4pW4aYIuyX156o BcwX8ezJbMZYAYWUnIsXw5gr5+7f/3qYMBEYfgCz6gfY8L04zAHueNhKXONqTolK 32Tr4xlqxQwlK2zsKFf6dq5uifLSfP/Ym7OIkEj2JtccnqCbCznKC0xywJOlAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU4EHBVRVaUXdJzxOvKg+zM35b+s8wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMDJlMzIzMDM2MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNDM0MzAzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+gzjANBgkqhkiG9w0BAQsFAAOCAQEArIfFzDj+b3Zbmmth49W2 IcAxenJHnkBLlmZsP/H4hPvfWX4m6VfRF+pL4aG3PQBTtS6Cbf3SH7Cb/CqfDtKT iY0Ikbay+j1C1tQZHqw816STwlVoe3G0Yp6OPX4K77gG2cuV5rlA7WYx5lkfd7Td XqNSV7x5XUvqusr7ZF6X+tBRy92gJdxLqW8QmHSAbcNC1U8+qcAk7Dujj+qvK1cR /TtFDXjNm493FCcsP19hCjrtNEZtFk09o+mvSBObuthpcdP5osIa3wvkcZ31PkTT N8DK09y9yCs8fMi1BnKELoFMWP8qg89cqPU9Zb6du/iWHjkoHWLfV+DKaIAhpfv7 yw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:47 2026 by rpki-client