This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3139342e302f32332d3234203d3e203536303430.roa File: 3232332e3136312e3139342e302f32332d3234203d3e203536303430.roa (raw, json) Hash identifier: v8PTug3ikNMED9clxShH3P97TJzS9lCEg8BThafXNTE= Subject key identifier: 57:8F:CA:A4:E1:32:74:27:23:0E:9E:4C:D3:CF:D5:9A:03:F4:E3:2E Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 0B3B55DCCD5A4171471D5852D462318038243D1F Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3139342e302f32332d3234203d3e203536303430.roa Signing time: Tue 20 Jan 2026 02:27:23 +0000 ROA not before: Tue 20 Jan 2026 02:22:23 +0000 ROA not after: Tue 19 Jan 2027 02:27:23 +0000 asID: 56040 IP address blocks: 223.161.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:3b:55:dc:cd:5a:41:71:47:1d:58:52:d4:62:31:80:38:24:3d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:23 2026 GMT Not After : Jan 19 02:27:23 2027 GMT Subject: CN=578FCAA4E1327427230E9E4CD3CFD59A03F4E32E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:59:13:0d:4d:ab:0a:da:ad:36:74:e4:c2: d2:98:15:13:6e:bb:a9:8f:b8:4d:e9:43:02:b8:8c: ed:8a:0a:b2:fd:32:81:7e:ad:fa:a7:4a:c6:17:23: 4c:26:a9:e7:97:1b:90:17:01:79:24:b9:ee:7c:5d: 03:de:84:2b:02:69:d3:63:47:90:72:b6:cf:b6:ae: bd:a6:c8:8b:06:39:31:80:a2:e4:dd:32:ae:c2:38: 48:c4:d8:03:6c:00:55:f8:01:3c:eb:7d:c9:e8:3e: 18:4d:f5:06:0b:9e:9f:c5:86:21:45:2c:d4:d8:28: f8:5b:0a:b4:12:4c:5b:a4:54:4a:ad:70:7f:6f:2c: aa:90:a1:05:dd:e2:64:87:b6:42:fd:b8:f4:20:bd: 9e:0c:2a:c4:a3:35:66:c5:20:76:31:c5:5d:1f:37: ef:dc:d4:04:17:de:23:50:05:92:f2:2d:f1:17:c6: 85:4f:2b:13:4b:4d:a7:42:52:d9:d5:d3:16:3c:fc: 35:84:39:e3:94:44:2d:75:0a:d1:42:4a:a5:e3:7d: 0f:9a:41:cf:89:d9:a4:6f:10:00:50:07:92:66:74: f8:66:27:b4:f1:ad:99:b7:5b:e4:a1:b6:ae:0e:78: 3f:31:bf:3d:c1:b6:e4:a0:5c:33:63:ea:17:ab:85: 86:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8F:CA:A4:E1:32:74:27:23:0E:9E:4C:D3:CF:D5:9A:03:F4:E3:2E X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3139342e302f32332d3234203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.194.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:4f:2b:6d:b1:d3:7e:78:6b:d5:29:b0:b2:77:88:0e:15:dc: a3:fd:a6:ee:4b:aa:f4:70:c2:87:bd:54:86:20:fd:bd:1d:34: b0:76:0d:64:d6:5c:0e:4b:d8:0e:f4:09:85:67:ed:0f:4c:bf: 8d:62:59:8f:b2:46:12:9c:1d:01:38:08:26:db:88:1a:06:4e: c6:ce:94:44:59:16:1e:0f:ed:cc:44:f6:45:ec:31:dc:e8:48: 1a:c2:23:40:83:8c:87:60:61:58:ea:24:8a:74:18:3d:4a:a7: 5a:3e:ac:e5:21:2e:5d:62:2b:f3:3b:ab:a2:f1:5a:f1:b8:1a: e1:d3:0e:40:7a:34:15:bf:9c:1b:12:e8:5a:6c:85:a5:68:4b: eb:bd:e4:6a:54:a3:5f:f1:62:45:c9:42:0e:87:86:a4:56:e7: b6:7f:e3:9a:9f:cc:e9:5b:42:6e:90:f9:8c:94:ff:91:28:ba: 52:f0:98:a0:02:75:f0:50:1f:75:97:b4:b9:d8:ca:0f:5a:78: 87:51:11:12:47:eb:77:68:c9:88:f7:a5:2d:ad:d1:b0:db:cd: 6c:16:5f:eb:c9:58:b2:f0:de:e4:c0:5a:63:47:90:44:c9:87: 9b:89:63:75:3a:d5:57:f8:18:69:b6:4e:31:bf:24:bd:8a:71: d3:7d:af:ad -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCztV3M1aQXFHHVhS1GIxgDgkPR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjNaFw0yNzAxMTkwMjI3MjNaMDMxMTAvBgNV BAMTKDU3OEZDQUE0RTEzMjc0MjcyMzBFOUU0Q0QzQ0ZENTlBMDNGNEUzMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjnlkTDU2rCtqtNnTkwtKYFRNu u6mPuE3pQwK4jO2KCrL9MoF+rfqnSsYXI0wmqeeXG5AXAXkkue58XQPehCsCadNj R5Byts+2rr2myIsGOTGAouTdMq7COEjE2ANsAFX4ATzrfcnoPhhN9QYLnp/FhiFF LNTYKPhbCrQSTFukVEqtcH9vLKqQoQXd4mSHtkL9uPQgvZ4MKsSjNWbFIHYxxV0f N+/c1AQX3iNQBZLyLfEXxoVPKxNLTadCUtnV0xY8/DWEOeOURC11CtFCSqXjfQ+a Qc+J2aRvEABQB5JmdPhmJ7TxrZm3W+Shtq4OeD8xvz3BtuSgXDNj6herhYadAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUV4/KpOEydCcjDp5M08/VmgP04y4wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzEzOTM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+hwjANBgkqhkiG9w0BAQsFAAOCAQEAHk8rbbHTfnhr1SmwsneI DhXco/2m7kuq9HDCh71UhiD9vR00sHYNZNZcDkvYDvQJhWftD0y/jWJZj7JGEpwd ATgIJtuIGgZOxs6URFkWHg/tzET2Rewx3OhIGsIjQIOMh2BhWOokinQYPUqnWj6s 5SEuXWIr8zurovFa8bga4dMOQHo0Fb+cGxLoWmyFpWhL673kalSjX/FiRclCDoeG pFbntn/jmp/M6VtCbpD5jJT/kSi6UvCYoAJ18FAfdZe0udjKD1p4h1EREkfrd2jJ iPelLa3RsNvNbBZf68lYsvDe5MBaY0eQRMmHm4ljdTrVV/gYabZOMb8kvYpx032v rQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:49 2026 by rpki-client