This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3231362e302f32322d3234203d3e203536303435.roa File: 3232332e3136302e3231362e302f32322d3234203d3e203536303435.roa (raw, json) Hash identifier: cC4URdYYq+0Q3KyiErbjeIDlmkCFxoehUXq49f8LggI= Subject key identifier: 19:41:9C:8C:68:1E:F1:FD:C3:A5:09:D2:88:C0:78:D7:DC:CA:3E:06 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 7669814C8A89A0F20DB572140D65B6BBA29EED1E Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3231362e302f32322d3234203d3e203536303435.roa Signing time: Tue 20 Jan 2026 02:27:24 +0000 ROA not before: Tue 20 Jan 2026 02:22:24 +0000 ROA not after: Tue 19 Jan 2027 02:27:24 +0000 asID: 56045 IP address blocks: 223.160.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:69:81:4c:8a:89:a0:f2:0d:b5:72:14:0d:65:b6:bb:a2:9e:ed:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:24 2026 GMT Not After : Jan 19 02:27:24 2027 GMT Subject: CN=19419C8C681EF1FDC3A509D288C078D7DCCA3E06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:de:c3:ac:56:8d:e4:e4:da:11:76:6c:ea:73: c5:8e:8b:c1:6c:fa:d9:b5:fe:78:7f:04:f5:46:27: 02:28:39:94:ee:d2:35:93:83:dd:a8:99:f0:61:3e: cf:d8:b1:47:94:ca:8d:fc:8e:7f:ff:11:fd:87:1e: b3:db:7c:0f:dd:b1:92:d3:4a:2f:f1:09:ac:4f:95: 8c:a9:be:11:8d:b3:82:db:07:18:f5:3e:3c:6b:3f: 23:41:e7:52:aa:7c:88:b2:a9:3d:00:53:5f:f3:ba: 5e:8c:5d:87:06:61:7d:ac:3f:d0:8f:3f:4c:05:10: be:28:43:d2:eb:2a:67:c8:3a:25:db:4e:ed:3d:d9: 4f:e7:24:04:bb:1a:f5:31:e3:97:51:8c:82:6d:77: d5:f1:14:7e:f7:fe:83:43:5f:a9:45:53:56:60:ea: f8:32:db:9a:d7:ef:68:5b:c1:5a:20:33:91:89:ac: 26:dd:e9:03:87:cf:7e:3d:8b:51:4e:bf:7f:54:fe: bc:50:e6:62:92:95:f1:30:0b:f8:13:2e:52:c2:e4: e3:81:d9:d5:cf:7e:ef:01:cf:6d:3b:14:bb:0f:d5: 62:6c:9b:90:dd:bc:5d:30:58:c4:76:40:e0:f0:00: e5:f0:32:eb:38:d0:d1:29:5b:c2:6a:83:60:cd:18: 40:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:41:9C:8C:68:1E:F1:FD:C3:A5:09:D2:88:C0:78:D7:DC:CA:3E:06 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3231362e302f32322d3234203d3e203536303435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.216.0/22 Signature Algorithm: sha256WithRSAEncryption 51:ed:09:1e:bc:8d:07:a2:42:ad:bd:7b:39:7d:f2:ab:e6:d7: 28:ef:01:48:0a:90:81:62:45:b8:32:10:03:da:03:5e:31:0a: 18:2f:3c:28:40:6c:b1:68:34:7e:57:82:b9:19:49:26:72:04: 79:b9:98:d4:26:ed:e4:07:b5:cd:b3:85:e6:16:87:f3:d3:6c: b6:a8:f6:8d:80:90:e1:66:ce:88:da:4f:3b:21:49:88:ad:3a: 6b:1a:b8:d9:d6:06:86:0d:2e:ce:b5:a9:09:f8:0e:e7:13:31: 9a:27:d8:8b:11:35:c0:f3:a6:c0:ce:6c:fb:23:e8:f3:90:6b: 15:2a:1e:30:69:11:ca:7d:28:38:a9:55:fc:3a:99:17:4c:c7: c7:1f:6c:71:ac:b7:14:93:a8:15:5f:90:6d:ff:73:82:b4:66: f8:83:2d:b5:d3:63:ee:c6:36:1b:54:bc:b7:13:65:bc:22:1f: 4c:14:61:32:e0:c2:21:27:39:74:9b:ee:81:f3:49:33:5d:9e: a5:c2:b2:30:32:a2:d4:66:ba:8e:bf:47:18:15:11:34:a7:15: ff:4f:92:49:3d:1e:c2:e4:8c:a4:30:6b:ae:ce:c7:c5:8b:f5: 3e:35:1e:61:af:2b:0d:94:15:c1:7f:62:f3:be:04:89:50:df: 0e:74:e4:6e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUdmmBTIqJoPINtXIUDWW2u6Ke7R4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjRaFw0yNzAxMTkwMjI3MjRaMDMxMTAvBgNV BAMTKDE5NDE5QzhDNjgxRUYxRkRDM0E1MDlEMjg4QzA3OEQ3RENDQTNFMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS3sOsVo3k5NoRdmzqc8WOi8Fs +tm1/nh/BPVGJwIoOZTu0jWTg92omfBhPs/YsUeUyo38jn//Ef2HHrPbfA/dsZLT Si/xCaxPlYypvhGNs4LbBxj1PjxrPyNB51KqfIiyqT0AU1/zul6MXYcGYX2sP9CP P0wFEL4oQ9LrKmfIOiXbTu092U/nJAS7GvUx45dRjIJtd9XxFH73/oNDX6lFU1Zg 6vgy25rX72hbwVogM5GJrCbd6QOHz349i1FOv39U/rxQ5mKSlfEwC/gTLlLC5OOB 2dXPfu8Bz207FLsP1WJsm5DdvF0wWMR2QODwAOXwMus40NEpW8Jqg2DNGEBBAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUGUGcjGge8f3DpQnSiMB419zKPgYwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMDJlMzIzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAt+g2DANBgkqhkiG9w0BAQsFAAOCAQEAUe0JHryNB6JCrb17OX3y q+bXKO8BSAqQgWJFuDIQA9oDXjEKGC88KEBssWg0fleCuRlJJnIEebmY1Cbt5Ae1 zbOF5haH89Nstqj2jYCQ4WbOiNpPOyFJiK06axq42dYGhg0uzrWpCfgO5xMxmifY ixE1wPOmwM5s+yPo85BrFSoeMGkRyn0oOKlV/DqZF0zHxx9scay3FJOoFV+Qbf9z grRm+IMttdNj7sY2G1S8txNlvCIfTBRhMuDCISc5dJvugfNJM12epcKyMDKi1Ga6 jr9HGBURNKcV/0+SST0ewuSMpDBrrs7HxYv1PjUeYa8rDZQVwX9i874EiVDfDnTk bg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:39 2026 by rpki-client