This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3233362e302f32332d3234203d3e2039383038.roa File: 3232332e3136302e3233362e302f32332d3234203d3e2039383038.roa (raw, json) Hash identifier: LQlNOl3hdnWd2KxrU62T2d5afnP3VnkmilyHDMczKlM= Subject key identifier: 3B:5E:5A:25:D5:A4:4E:85:DB:E9:79:91:82:F3:48:D0:7B:93:97:59 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 27CB7D042F9E17093C153806663F20FB9F8F719B Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3233362e302f32332d3234203d3e2039383038.roa Signing time: Tue 20 Jan 2026 02:27:24 +0000 ROA not before: Tue 20 Jan 2026 02:22:24 +0000 ROA not after: Tue 19 Jan 2027 02:27:24 +0000 asID: 9808 IP address blocks: 223.160.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:cb:7d:04:2f:9e:17:09:3c:15:38:06:66:3f:20:fb:9f:8f:71:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:24 2026 GMT Not After : Jan 19 02:27:24 2027 GMT Subject: CN=3B5E5A25D5A44E85DBE9799182F348D07B939759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:9e:9e:38:f7:ad:c6:43:cc:cf:c7:76:82: 5f:dd:01:5e:90:f2:28:43:8c:23:43:63:dd:55:2b: d4:36:80:69:36:e6:23:a2:49:ce:62:3e:db:42:cc: a0:b8:d1:77:50:d0:1d:3c:01:65:05:49:93:da:5b: 4b:c8:4b:12:db:82:a7:ca:5d:b7:0b:32:5f:f7:c9: 73:14:1b:d0:82:4d:2a:f4:7a:cd:3b:ed:05:12:a8: 71:6a:02:6f:18:51:2c:9b:90:f5:c8:38:29:d4:5f: 25:ee:eb:68:b3:f6:9a:37:e8:b3:b2:2c:24:d1:04: 4b:e2:9f:1b:6f:95:a9:41:b2:9f:ad:07:b8:63:40: a5:a2:5f:7b:2c:10:55:6b:13:10:f1:0f:07:5f:69: 7a:56:cd:3b:55:09:75:b4:1a:58:e8:13:74:73:49: 5b:6c:c1:b6:88:ae:39:54:e4:ea:ce:fc:c8:c5:5b: d7:99:04:20:30:82:98:fa:3d:75:24:eb:c8:d1:36: 56:e1:aa:53:97:ed:20:28:04:a9:07:ee:e2:af:0d: cb:ed:92:91:7a:d9:62:eb:f9:63:29:00:25:78:9c: 77:77:69:50:35:df:74:65:10:37:e4:2f:72:ab:fa: 5b:a6:3b:0b:16:d3:91:47:ab:cc:f2:80:3e:15:88: 4d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5E:5A:25:D5:A4:4E:85:DB:E9:79:91:82:F3:48:D0:7B:93:97:59 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3233362e302f32332d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.236.0/23 Signature Algorithm: sha256WithRSAEncryption 87:5f:0d:ea:0f:7b:2b:79:5b:af:94:93:af:f3:42:66:fb:75: 87:f3:65:67:99:26:8e:22:f8:35:a6:33:2b:fa:1f:cc:19:78: 18:96:cb:dd:77:7b:5e:f7:d6:86:e3:61:22:74:f6:30:7e:f3: 56:42:c9:25:21:e4:17:10:8d:3f:b2:2b:da:c8:f9:04:56:24: c7:53:f9:57:7a:72:c9:cd:a0:29:56:b1:28:d9:d7:80:8f:b0: 9f:e8:33:9a:47:24:b7:a5:6e:bd:8c:44:96:e3:7a:c3:b7:18: 25:b6:74:3a:23:4f:3c:f9:86:b5:68:4d:9e:5e:5e:f3:44:58: 53:a4:ab:7f:48:6e:ed:56:c6:2e:16:f1:52:2f:78:57:94:4a: 0f:f1:cf:17:48:e4:e7:65:19:40:db:c8:2b:2b:26:4e:22:e5: 43:f1:ee:46:df:66:78:e4:a9:b2:04:d3:ed:69:a3:60:b2:d1: 71:3c:07:df:9f:54:e0:59:58:4f:d6:81:87:53:b3:93:92:f8: 58:59:c9:86:26:17:8c:39:a5:b4:b9:f9:b8:8d:0c:80:70:0f: b9:ff:98:db:31:d1:99:1d:a0:55:95:09:c8:e8:47:f6:27:60: db:2a:6d:00:b2:25:2b:9a:6f:ab:dd:f9:91:5f:b0:c8:a1:10: bc:e9:cf:52 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJ8t9BC+eFwk8FTgGZj8g+5+PcZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjRaFw0yNzAxMTkwMjI3MjRaMDMxMTAvBgNV BAMTKDNCNUU1QTI1RDVBNDRFODVEQkU5Nzk5MTgyRjM0OEQwN0I5Mzk3NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClfZ6eOPetxkPMz8d2gl/dAV6Q 8ihDjCNDY91VK9Q2gGk25iOiSc5iPttCzKC40XdQ0B08AWUFSZPaW0vISxLbgqfK XbcLMl/3yXMUG9CCTSr0es077QUSqHFqAm8YUSybkPXIOCnUXyXu62iz9po36LOy LCTRBEvinxtvlalBsp+tB7hjQKWiX3ssEFVrExDxDwdfaXpWzTtVCXW0GljoE3Rz SVtswbaIrjlU5OrO/MjFW9eZBCAwgpj6PXUk68jRNlbhqlOX7SAoBKkH7uKvDcvt kpF62WLr+WMpACV4nHd3aVA133RlEDfkL3Kr+lumOwsW05FHq8zygD4ViE07AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUO15aJdWkToXb6XmRgvNI0HuTl1kwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMwMmUzMjMzMzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAd+g7DANBgkqhkiG9w0BAQsFAAOCAQEAh18N6g97K3lbr5STr/NCZvt1 h/NlZ5kmjiL4NaYzK/ofzBl4GJbL3Xd7XvfWhuNhInT2MH7zVkLJJSHkFxCNP7Ir 2sj5BFYkx1P5V3pyyc2gKVaxKNnXgI+wn+gzmkckt6VuvYxEluN6w7cYJbZ0OiNP PPmGtWhNnl5e80RYU6Srf0hu7VbGLhbxUi94V5RKD/HPF0jk52UZQNvIKysmTiLl Q/HuRt9meOSpsgTT7WmjYLLRcTwH359U4FlYT9aBh1Ozk5L4WFnJhiYXjDmltLn5 uI0MgHAPuf+Y2zHRmR2gVZUJyOhH9idg2yptALIlK5pvq935kV+wyKEQvOnPUg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:54 2026 by rpki-client