This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e382e302f32332d3234203d3e203536303438.roa File: 3232332e3136302e382e302f32332d3234203d3e203536303438.roa (raw, json) Hash identifier: F95rLDGqDXnqcHjYE4cJ/yZ5Q1gQCUrLDcqX6ADfWIo= Subject key identifier: A3:6B:4C:1E:1E:8F:CF:43:7E:6F:E6:67:71:95:BA:AD:67:D1:62:70 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 303AF5FB532FB475939F98CB9E7EE3EF364BAF9E Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e382e302f32332d3234203d3e203536303438.roa Signing time: Tue 20 Jan 2026 02:27:25 +0000 ROA not before: Tue 20 Jan 2026 02:22:25 +0000 ROA not after: Tue 19 Jan 2027 02:27:25 +0000 asID: 56048 IP address blocks: 223.160.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:3a:f5:fb:53:2f:b4:75:93:9f:98:cb:9e:7e:e3:ef:36:4b:af:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:25 2026 GMT Not After : Jan 19 02:27:25 2027 GMT Subject: CN=A36B4C1E1E8FCF437E6FE6677195BAAD67D16270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:11:e4:56:04:6c:c9:0a:f0:3c:4f:03:a4: ba:e3:48:27:07:3c:88:43:1f:10:f2:c0:c8:9c:e4: d0:7a:30:f1:a4:49:cc:7c:00:ca:64:a5:57:ac:59: 51:52:d3:18:26:6a:e7:82:07:be:89:d7:c4:c7:a9: 19:4b:0e:15:8e:d6:06:4c:5e:6c:e7:16:b2:dc:72: 35:97:3e:cd:9e:12:a2:fd:b6:d6:7d:39:fd:fc:72: 36:03:39:09:ba:fc:f6:a9:64:cf:dc:31:7f:9f:ec: d7:16:96:18:82:16:3a:cf:96:38:db:6f:30:79:49: f7:eb:ad:41:a8:d8:11:43:ee:4b:4a:f9:0a:e4:8f: 89:a3:03:58:63:b6:86:bf:10:cb:f3:a7:4c:ac:22: 30:cd:fd:c0:d7:93:4e:76:0c:88:8b:aa:c3:67:43: c0:b5:98:78:91:80:b8:47:74:47:19:0c:05:3e:c3: 11:61:d7:f0:e8:ab:cf:b7:93:0c:1f:a4:10:73:05: 6a:58:86:5e:4f:c5:01:ad:04:78:52:c1:09:e6:03: cc:74:65:d6:e0:a9:7f:0b:f6:ef:b6:91:b1:31:53: b5:fc:cf:2f:37:33:3a:dd:7c:9d:2a:fe:26:35:f9: f1:02:8a:8f:38:ab:4b:48:95:9e:46:74:25:9d:3c: 80:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6B:4C:1E:1E:8F:CF:43:7E:6F:E6:67:71:95:BA:AD:67:D1:62:70 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e382e302f32332d3234203d3e203536303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.8.0/23 Signature Algorithm: sha256WithRSAEncryption 17:e7:c0:fc:3d:df:93:7d:c4:32:ac:cd:c0:3e:2c:a8:fc:59: 11:9a:f7:f3:50:71:97:b2:d3:2a:95:21:ff:1e:41:bd:72:e7: 24:4e:57:b9:90:05:ce:ea:4d:79:1b:81:42:6c:04:d3:16:96: ec:a7:2a:bd:c7:f8:ed:31:7e:59:82:50:84:3b:bd:01:54:3d: 0a:a4:c9:7c:79:ea:c1:e7:18:bc:a5:b2:06:82:16:fb:df:ed: 79:a6:41:34:4b:97:59:bd:5a:f6:8b:91:f0:ae:f4:4a:50:36: 67:86:23:c0:77:50:1e:a5:e6:83:40:c9:6f:46:8b:13:29:58: 7a:14:63:e4:71:33:e6:5b:f3:90:dc:b0:d0:77:c9:85:44:0b: 3f:9c:01:21:12:3c:a7:0e:79:d7:bc:49:89:9a:cb:ea:22:9e: 8b:29:f6:62:51:19:c8:81:a3:f3:1b:7f:0b:9e:68:55:c1:d5: fc:95:6c:d6:f9:1e:7f:95:9e:d8:5b:08:c1:25:89:96:30:5d: 86:f9:e6:54:fc:07:d7:5e:ca:bf:ea:86:e8:f6:29:59:3e:bf: e0:45:a8:37:45:46:09:5f:e0:f2:6b:58:da:6a:bb:56:fc:5c: 0c:40:c6:84:67:9e:95:d8:5a:f3:48:f8:fc:60:89:aa:da:41: db:16:28:a2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUMDr1+1MvtHWTn5jLnn7j7zZLr54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjVaFw0yNzAxMTkwMjI3MjVaMDMxMTAvBgNV BAMTKEEzNkI0QzFFMUU4RkNGNDM3RTZGRTY2NzcxOTVCQUFENjdEMTYyNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/EBHkVgRsyQrwPE8DpLrjSCcH PIhDHxDywMic5NB6MPGkScx8AMpkpVesWVFS0xgmaueCB76J18THqRlLDhWO1gZM XmznFrLccjWXPs2eEqL9ttZ9Of38cjYDOQm6/PapZM/cMX+f7NcWlhiCFjrPljjb bzB5SffrrUGo2BFD7ktK+Qrkj4mjA1hjtoa/EMvzp0ysIjDN/cDXk052DIiLqsNn Q8C1mHiRgLhHdEcZDAU+wxFh1/Doq8+3kwwfpBBzBWpYhl5PxQGtBHhSwQnmA8x0 ZdbgqX8L9u+2kbExU7X8zy83MzrdfJ0q/iY1+fECio84q0tIlZ5GdCWdPIDRAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUo2tMHh6Pz0N+b+ZncZW6rWfRYnAwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMjMzMmUzMTM2 MzAyZTM4MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAd+gCDANBgkqhkiG9w0BAQsFAAOCAQEAF+fA/D3fk33EMqzNwD4sqPxZEZr3 81Bxl7LTKpUh/x5BvXLnJE5XuZAFzupNeRuBQmwE0xaW7Kcqvcf47TF+WYJQhDu9 AVQ9CqTJfHnqwecYvKWyBoIW+9/teaZBNEuXWb1a9ouR8K70SlA2Z4YjwHdQHqXm g0DJb0aLEylYehRj5HEz5lvzkNyw0HfJhUQLP5wBIRI8pw5517xJiZrL6iKeiyn2 YlEZyIGj8xt/C55oVcHV/JVs1vkef5We2FsIwSWJljBdhvnmVPwH117Kv+qG6PYp WT6/4EWoN0VGCV/g8mtY2mq7VvxcDEDGhGeeldha80j4/GCJqtpB2xYoog== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:37 2026 by rpki-client