This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3233322e302f32322d3234203d3e2039383038.roa File: 3232332e3136302e3233322e302f32322d3234203d3e2039383038.roa (raw, json) Hash identifier: XfWfgJfhmgECImMUdBAI6FS/o9xM/6bKSWo+7KO6cuk= Subject key identifier: 63:86:A0:78:F8:9B:BA:80:5A:2A:23:D8:82:08:0D:D3:0E:1C:18:26 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 5D3B1F0E28338DE3363CE0ECE9433162549B4446 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3233322e302f32322d3234203d3e2039383038.roa Signing time: Tue 20 Jan 2026 02:28:26 +0000 ROA not before: Tue 20 Jan 2026 02:23:26 +0000 ROA not after: Tue 19 Jan 2027 02:28:26 +0000 asID: 9808 IP address blocks: 223.160.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3b:1f:0e:28:33:8d:e3:36:3c:e0:ec:e9:43:31:62:54:9b:44:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:26 2026 GMT Not After : Jan 19 02:28:26 2027 GMT Subject: CN=6386A078F89BBA805A2A23D882080DD30E1C1826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:a6:a4:3d:31:26:6a:d9:31:53:c2:1d:f0: 82:56:e9:f9:16:4c:7f:31:79:43:e5:3c:2d:c2:8a: 9d:d3:24:8a:bf:ad:a3:cc:c5:e6:c4:6e:a1:49:81: 5b:fb:95:b2:80:61:59:9a:88:3b:e4:6c:70:77:5a: 38:7d:ac:7f:aa:d3:08:c3:19:04:6d:ee:37:78:18: ef:f1:9a:c4:a4:65:2f:f2:03:79:13:3e:95:0e:43: 89:97:b2:b8:a6:44:74:05:ef:e7:25:19:2c:37:1b: 5e:0e:1e:28:a4:62:41:4d:a2:3a:8c:cd:ce:2e:fe: 56:85:4f:15:7e:65:e4:58:1d:32:8c:ed:8d:42:7c: 71:d5:74:3a:52:30:0c:09:bc:52:5c:e9:45:82:53: 55:b0:28:93:48:d2:a1:2e:8d:29:6b:c3:0a:d5:14: 8c:9b:e3:93:e0:7c:d2:68:b6:ba:cf:61:ac:77:8e: 96:38:5c:7f:af:80:1c:48:66:ed:5f:aa:56:58:39: de:81:bc:44:b5:c3:86:31:b8:d1:60:f6:8f:6e:5e: 61:8b:ae:af:8f:6e:27:93:19:78:6c:84:19:be:3f: 84:19:0c:74:32:7f:3f:f1:6c:e5:a0:9e:73:25:c2: 9b:18:c4:2a:48:8b:b1:ce:16:bd:3c:fe:d4:b2:74: b5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:86:A0:78:F8:9B:BA:80:5A:2A:23:D8:82:08:0D:D3:0E:1C:18:26 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3233322e302f32322d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.232.0/22 Signature Algorithm: sha256WithRSAEncryption b0:57:08:77:0d:91:25:e8:74:97:1a:f0:f2:26:dc:cd:b7:11: a8:75:11:a8:ed:cc:6a:ac:a1:4a:09:4b:6f:5c:d6:f5:5e:6e: 5f:f3:45:cb:ef:1c:28:98:27:a1:01:de:db:b6:1e:a0:c8:56: 5e:d4:34:36:a7:b9:a7:32:d2:87:ea:1a:c5:4d:53:34:00:39: 44:ad:5a:64:fd:1d:e1:cb:38:40:e7:b4:32:31:94:a5:67:27: 65:e2:19:ae:f2:2a:0e:f5:a1:98:25:c4:81:bf:15:38:f3:c1: ec:e9:2f:fa:da:3c:db:64:c4:31:9c:4d:7b:b5:a2:70:ad:fd: fe:96:a2:78:b7:85:58:98:4a:4e:ee:76:38:0e:ff:cb:52:53: 58:e3:35:bf:ec:f7:69:f6:d9:04:04:7f:69:4a:80:bd:ca:29: e6:c9:3b:05:6c:67:13:7c:93:08:df:ad:e8:c2:55:3c:8b:9d: 54:b3:c1:d1:52:b3:50:48:bc:58:6c:25:87:cc:62:9a:9e:28: e6:7a:81:19:1a:70:75:c7:26:3a:2a:73:e0:1e:94:24:ca:ad: 62:7e:69:6f:f7:d3:b5:75:21:d6:11:20:9a:66:25:7e:52:4c: 37:1a:61:35:67:74:4c:b7:4a:64:93:be:ad:ab:9b:61:ac:64: a1:64:43:c3 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUXTsfDigzjeM2PODs6UMxYlSbREYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjZaFw0yNzAxMTkwMjI4MjZaMDMxMTAvBgNV BAMTKDYzODZBMDc4Rjg5QkJBODA1QTJBMjNEODgyMDgwREQzMEUxQzE4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZaakPTEmatkxU8Id8IJW6fkW TH8xeUPlPC3Cip3TJIq/raPMxebEbqFJgVv7lbKAYVmaiDvkbHB3Wjh9rH+q0wjD GQRt7jd4GO/xmsSkZS/yA3kTPpUOQ4mXsrimRHQF7+clGSw3G14OHiikYkFNojqM zc4u/laFTxV+ZeRYHTKM7Y1CfHHVdDpSMAwJvFJc6UWCU1WwKJNI0qEujSlrwwrV FIyb45PgfNJotrrPYax3jpY4XH+vgBxIZu1fqlZYOd6BvES1w4YxuNFg9o9uXmGL rq+PbieTGXhshBm+P4QZDHQyfz/xbOWgnnMlwpsYxCpIi7HOFr08/tSydLUnAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUY4agePibuoBaKiPYgggN0w4cGCYwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMwMmUzMjMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAt+g6DANBgkqhkiG9w0BAQsFAAOCAQEAsFcIdw2RJeh0lxrw8ibczbcR qHURqO3MaqyhSglLb1zW9V5uX/NFy+8cKJgnoQHe27YeoMhWXtQ0Nqe5pzLSh+oa xU1TNAA5RK1aZP0d4cs4QOe0MjGUpWcnZeIZrvIqDvWhmCXEgb8VOPPB7Okv+to8 22TEMZxNe7WicK39/paieLeFWJhKTu52OA7/y1JTWOM1v+z3afbZBAR/aUqAvcop 5sk7BWxnE3yTCN+t6MJVPIudVLPB0VKzUEi8WGwlh8ximp4o5nqBGRpwdccmOipz 4B6UJMqtYn5pb/fTtXUh1hEgmmYlflJMNxphNWd0TLdKZJO+raubYaxkoWRDww== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:45 2026 by rpki-client