This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3232342e302f32312d3234203d3e203536303430.roa File: 3232332e3136302e3232342e302f32312d3234203d3e203536303430.roa (raw, json) Hash identifier: gHn3CgjZ4fzhImliN2i3pexr6GrSCpY9WTVfJ9EqZwI= Subject key identifier: B9:87:97:8A:35:E4:68:73:E9:17:A3:5E:EC:2F:3A:D8:8C:8B:62:7E Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 564DEF9A02451F8020D0500912BF2CE7F89DA8F0 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3232342e302f32312d3234203d3e203536303430.roa Signing time: Tue 20 Jan 2026 02:27:25 +0000 ROA not before: Tue 20 Jan 2026 02:22:25 +0000 ROA not after: Tue 19 Jan 2027 02:27:25 +0000 asID: 56040 IP address blocks: 223.160.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4d:ef:9a:02:45:1f:80:20:d0:50:09:12:bf:2c:e7:f8:9d:a8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:25 2026 GMT Not After : Jan 19 02:27:25 2027 GMT Subject: CN=B987978A35E46873E917A35EEC2F3AD88C8B627E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:65:cb:8e:11:8a:a8:1c:31:b1:88:6c:ac: bb:a6:22:20:b9:9a:b0:3b:54:97:6a:0a:db:31:c6: 5c:07:ea:e3:97:0d:ff:6b:8b:52:aa:72:c3:f3:75: 0e:f9:18:0c:cf:9e:ee:14:0b:f9:8e:e1:bc:19:fc: e1:7b:81:bd:a0:6b:4e:73:cd:66:7a:89:c5:49:fd: 05:e7:c6:8b:38:6e:59:01:89:d7:cb:43:92:36:84: c1:26:cf:ed:27:ad:6d:3d:74:22:db:64:11:19:bf: 98:53:8a:b8:14:16:fc:e5:10:c3:4f:e4:ae:47:e4: b1:ac:cd:0a:4a:95:f6:69:33:fc:eb:32:4f:1d:e2: ff:2a:d3:90:e2:27:7f:53:fd:a9:89:69:26:a6:fa: de:f6:6f:96:21:71:cb:21:db:0a:27:37:ea:0a:d4: 90:d8:3c:4f:db:e7:32:7f:99:71:11:4a:76:bd:24: 98:98:a0:71:ee:82:70:21:bf:c4:e7:8e:1d:82:f3: 85:55:1c:ac:59:04:af:2a:58:61:2f:eb:4d:ad:51: 11:01:b8:33:8a:7b:88:c3:8c:6b:da:f1:bb:78:d6: 90:29:28:6f:0d:ca:be:55:78:b4:a9:50:b9:e2:bd: 0f:03:03:02:f2:0e:cf:39:81:33:6e:24:fa:e0:4a: 2f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:87:97:8A:35:E4:68:73:E9:17:A3:5E:EC:2F:3A:D8:8C:8B:62:7E X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3232342e302f32312d3234203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.224.0/21 Signature Algorithm: sha256WithRSAEncryption 9f:f1:3a:c0:4a:ed:a0:7c:7f:bc:51:05:e7:5e:63:ca:be:2f: 24:c0:45:d5:66:7e:ed:70:d1:06:eb:98:97:32:11:8e:c2:71: e2:76:70:d1:bd:d1:35:5c:58:a6:5f:81:c4:92:b5:3a:5d:be: 2c:5c:71:a7:d8:42:cc:6a:01:8c:af:d1:6d:72:22:9c:bf:d3: 15:b1:c1:15:f4:75:c2:d0:4f:27:64:d1:08:d7:a9:41:bd:d9: f7:ab:77:58:e2:41:8d:a6:ae:f3:74:b1:d7:95:b8:9b:e2:d7: 8d:e7:b7:b0:96:52:1d:9c:46:96:5e:93:6f:58:28:21:46:d2: ee:d5:6a:a1:99:be:8f:f0:c9:d4:85:c1:10:62:b8:32:0b:fa: ed:97:5f:73:d2:96:b8:97:bb:69:f5:23:8a:0f:2b:05:98:0e: 77:18:3f:50:2b:0b:38:bd:89:02:6c:a6:b0:ba:15:d1:f1:4b: 5b:a4:b5:c8:63:0d:79:b9:10:0d:de:db:3b:da:84:04:d7:b2: 14:20:61:09:bb:e9:92:12:96:39:57:27:7e:01:7a:70:86:18: c0:2a:f3:04:5f:80:df:ae:4a:27:6a:20:fe:cd:8b:a0:44:b3: cf:5c:23:9b:0e:b1:1a:48:de:6c:52:42:58:13:50:29:55:1d: 31:24:e8:4f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUVk3vmgJFH4Ag0FAJEr8s5/idqPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjVaFw0yNzAxMTkwMjI3MjVaMDMxMTAvBgNV BAMTKEI5ODc5NzhBMzVFNDY4NzNFOTE3QTM1RUVDMkYzQUQ4OEM4QjYyN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTemXLjhGKqBwxsYhsrLumIiC5 mrA7VJdqCtsxxlwH6uOXDf9ri1KqcsPzdQ75GAzPnu4UC/mO4bwZ/OF7gb2ga05z zWZ6icVJ/QXnxos4blkBidfLQ5I2hMEmz+0nrW09dCLbZBEZv5hTirgUFvzlEMNP 5K5H5LGszQpKlfZpM/zrMk8d4v8q05DiJ39T/amJaSam+t72b5Yhccsh2wonN+oK 1JDYPE/b5zJ/mXERSna9JJiYoHHugnAhv8Tnjh2C84VVHKxZBK8qWGEv602tUREB uDOKe4jDjGva8bt41pApKG8Nyr5VeLSpULnivQ8DAwLyDs85gTNuJPrgSi8XAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUuYeXijXkaHPpF6Ne7C862IyLYn4wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMDJlMzIzMjM0MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA9+g4DANBgkqhkiG9w0BAQsFAAOCAQEAn/E6wErtoHx/vFEF515j yr4vJMBF1WZ+7XDRBuuYlzIRjsJx4nZw0b3RNVxYpl+BxJK1Ol2+LFxxp9hCzGoB jK/RbXIinL/TFbHBFfR1wtBPJ2TRCNepQb3Z96t3WOJBjaau83Sx15W4m+LXjee3 sJZSHZxGll6Tb1goIUbS7tVqoZm+j/DJ1IXBEGK4Mgv67Zdfc9KWuJe7afUjig8r BZgOdxg/UCsLOL2JAmymsLoV0fFLW6S1yGMNebkQDd7bO9qEBNeyFCBhCbvpkhKW OVcnfgF6cIYYwCrzBF+A365KJ2og/s2LoESzz1wjmw6xGkjebFJCWBNQKVUdMSTo Tw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:52 2026 by rpki-client