This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3230382e302f32312d3234203d3e203536303431.roa File: 3232332e3136302e3230382e302f32312d3234203d3e203536303431.roa (raw, json) Hash identifier: jCIHRCzg69Z8bb5JRr/tLS0bah/zWip0/PjDEHpOK34= Subject key identifier: 22:35:48:7F:3B:11:1E:D8:42:3A:C5:F1:46:6D:7F:F0:6B:17:FA:CB Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 08E5AA8D8EAB5B6CBE9DE4CE35CCD3DECF0CC9F8 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3230382e302f32312d3234203d3e203536303431.roa Signing time: Tue 20 Jan 2026 02:27:23 +0000 ROA not before: Tue 20 Jan 2026 02:22:23 +0000 ROA not after: Tue 19 Jan 2027 02:27:23 +0000 asID: 56041 IP address blocks: 223.160.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e5:aa:8d:8e:ab:5b:6c:be:9d:e4:ce:35:cc:d3:de:cf:0c:c9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:23 2026 GMT Not After : Jan 19 02:27:23 2027 GMT Subject: CN=2235487F3B111ED8423AC5F1466D7FF06B17FACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e5:fb:e9:95:e4:cf:af:e2:95:23:13:d3:78: 68:5d:cb:7c:40:7a:5c:49:93:ae:64:bc:5e:b1:54: 79:8b:ad:2e:87:8a:58:6a:88:ad:26:34:9b:e1:d3: e9:58:7a:b8:4a:c8:b7:29:1d:fd:d1:fa:c2:9b:e0: 15:55:e3:a5:dd:13:cb:ec:15:1b:84:2f:d3:2e:5f: c3:4a:c7:b5:2a:bd:ed:75:d3:9b:5a:d8:57:01:ae: 69:d8:fe:ea:be:ba:96:9f:24:79:81:c0:61:c8:c0: ad:e7:1f:a0:db:1d:f3:ad:fc:66:2a:e5:26:4c:4c: 9c:9b:b5:a2:8d:3c:a9:1c:ab:4d:1f:11:a5:07:d4: 16:36:7e:75:d5:68:3a:ee:68:5e:d9:bc:09:f8:a8: 2b:1d:23:dc:e0:81:a3:91:70:e1:9c:9f:9a:b1:d4: 83:0e:bb:1b:fe:9a:aa:34:f2:21:9e:1f:77:3c:73: ca:79:59:29:db:4a:02:6e:98:1f:ad:0f:c1:0f:d8: 8d:04:79:2b:75:a8:56:9d:69:96:92:71:ff:fa:a1: 0a:02:d8:40:39:81:5e:97:a7:77:28:08:5e:f8:2c: d2:4d:9e:9a:85:ef:a5:d4:c8:94:d9:cd:7c:bb:50: fb:06:2a:77:09:af:fc:00:22:0c:78:65:14:d4:51: c5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:35:48:7F:3B:11:1E:D8:42:3A:C5:F1:46:6D:7F:F0:6B:17:FA:CB X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3230382e302f32312d3234203d3e203536303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.208.0/21 Signature Algorithm: sha256WithRSAEncryption 94:61:bb:14:fc:99:d0:e1:ef:ff:aa:a4:09:51:49:30:11:73: c8:06:52:ab:83:83:c0:3c:f7:e1:88:8f:79:38:c5:71:e1:86: ea:c6:08:f0:f0:96:51:64:79:b6:27:ad:9b:2e:20:df:01:37: 8f:4f:35:ad:d4:32:2f:77:fb:4c:63:9a:e9:20:12:14:67:02: cf:94:46:f2:61:78:cc:0e:00:b0:53:5d:1c:4c:be:b8:de:cf: 58:ea:d1:cf:49:b6:bf:df:19:8f:26:65:3e:74:46:71:df:05: 3d:ca:36:df:8d:e6:6f:92:c7:39:53:71:67:62:66:b6:35:86: 2f:61:48:c5:0d:d9:04:5e:37:38:5f:7c:8f:4b:ce:fb:b5:eb: 48:2a:92:fe:6a:85:25:4e:fc:83:04:08:24:72:43:0e:00:36: 5d:fc:26:36:49:a4:09:5c:15:35:b7:ed:25:e4:62:e1:8f:b9: 88:f4:02:19:d5:2a:7c:ef:f2:18:c4:17:9b:d4:e5:c2:2c:a4: bd:8b:8b:fd:12:d5:2f:c9:24:96:b1:db:d7:80:9f:1e:39:64: 0c:5b:69:9d:6b:6e:b7:5b:c0:3e:86:cd:31:4f:14:af:ff:74: 45:f1:08:20:e6:cc:68:2f:d8:c2:e0:7f:72:17:d6:a6:1f:c1: ed:d4:c5:ce -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCOWqjY6rW2y+neTONczT3s8MyfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjNaFw0yNzAxMTkwMjI3MjNaMDMxMTAvBgNV BAMTKDIyMzU0ODdGM0IxMTFFRDg0MjNBQzVGMTQ2NkQ3RkYwNkIxN0ZBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn5fvpleTPr+KVIxPTeGhdy3xA elxJk65kvF6xVHmLrS6HilhqiK0mNJvh0+lYerhKyLcpHf3R+sKb4BVV46XdE8vs FRuEL9MuX8NKx7Uqve1105ta2FcBrmnY/uq+upafJHmBwGHIwK3nH6DbHfOt/GYq 5SZMTJybtaKNPKkcq00fEaUH1BY2fnXVaDruaF7ZvAn4qCsdI9zggaORcOGcn5qx 1IMOuxv+mqo08iGeH3c8c8p5WSnbSgJumB+tD8EP2I0EeSt1qFadaZaScf/6oQoC 2EA5gV6Xp3coCF74LNJNnpqF76XUyJTZzXy7UPsGKncJr/wAIgx4ZRTUUcXPAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUIjVIfzsRHthCOsXxRm1/8GsX+sswHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMDJlMzIzMDM4MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA9+g0DANBgkqhkiG9w0BAQsFAAOCAQEAlGG7FPyZ0OHv/6qkCVFJ MBFzyAZSq4ODwDz34YiPeTjFceGG6sYI8PCWUWR5tietmy4g3wE3j081rdQyL3f7 TGOa6SASFGcCz5RG8mF4zA4AsFNdHEy+uN7PWOrRz0m2v98ZjyZlPnRGcd8FPco2 343mb5LHOVNxZ2JmtjWGL2FIxQ3ZBF43OF98j0vO+7XrSCqS/mqFJU78gwQIJHJD DgA2XfwmNkmkCVwVNbftJeRi4Y+5iPQCGdUqfO/yGMQXm9TlwiykvYuL/RLVL8kk lrHb14CfHjlkDFtpnWtut1vAPobNMU8Ur/90RfEIIObMaC/YwuB/chfWph/B7dTF zg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:47 2026 by rpki-client