This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3139362e302f32332d3234203d3e203536303438.roa File: 3232332e3136312e3139362e302f32332d3234203d3e203536303438.roa (raw, json) Hash identifier: 4D49saYnFYTQzqnUQih6PHdzWsvhCGHAMLW2EYVgOvk= Subject key identifier: 02:FA:14:1B:7D:FA:A5:E2:3E:20:21:BC:A3:42:17:AF:A3:CF:9B:3C Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 1BA023401792F829AFE2905988333F4531E9B79B Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3139362e302f32332d3234203d3e203536303438.roa Signing time: Tue 20 Jan 2026 02:27:23 +0000 ROA not before: Tue 20 Jan 2026 02:22:23 +0000 ROA not after: Tue 19 Jan 2027 02:27:23 +0000 asID: 56048 IP address blocks: 223.161.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a0:23:40:17:92:f8:29:af:e2:90:59:88:33:3f:45:31:e9:b7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:23 2026 GMT Not After : Jan 19 02:27:23 2027 GMT Subject: CN=02FA141B7DFAA5E23E2021BCA34217AFA3CF9B3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:08:b1:2d:1e:8c:c0:31:77:83:e9:7e:83: a4:f5:c9:a4:b6:6c:60:3f:74:ee:62:0d:9a:75:73: 1e:d2:d2:e2:d0:3f:70:fb:dc:cd:fb:a0:62:78:9e: b9:c8:dd:4a:66:d8:35:f9:c9:97:51:42:0d:4d:4c: 92:98:e6:c7:b7:02:88:5c:fe:10:31:67:ef:bf:1a: da:39:09:1b:cd:c1:c3:fe:ff:96:48:6a:de:0d:4b: f8:13:6d:0d:ff:4c:c7:e6:87:05:49:cb:41:a5:a0: 79:17:b1:18:60:39:42:55:de:91:76:dc:5e:82:b8: 92:bf:b4:0b:0f:64:de:1f:35:b3:ab:c0:c6:4c:6b: 20:d1:5f:fb:b2:75:15:05:f1:1a:2a:80:12:e6:e1: 7e:b3:a2:eb:8e:bb:3d:e3:f2:0e:3d:f6:81:9b:4d: e9:df:34:1c:58:95:4f:0c:0f:08:33:46:6b:8c:e1: d3:fb:ba:d0:1a:4c:76:dd:6e:d7:68:42:7e:88:86: 0b:0e:ba:52:bd:90:23:0e:f4:38:1f:a3:e3:a3:dc: 52:6a:c2:94:07:bd:1f:e8:62:03:15:74:b8:d5:32: eb:24:6c:99:53:54:28:b2:a1:0b:8b:3d:56:32:17: 7e:bc:c7:13:07:94:c0:1a:ea:c8:85:f5:97:05:66: 5c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FA:14:1B:7D:FA:A5:E2:3E:20:21:BC:A3:42:17:AF:A3:CF:9B:3C X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3139362e302f32332d3234203d3e203536303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.196.0/23 Signature Algorithm: sha256WithRSAEncryption 13:a0:ff:53:7f:57:69:a0:e1:ba:79:4a:29:8c:5a:46:00:1d: f6:1a:1e:13:43:f1:ed:d9:4d:f4:61:ad:ce:fd:70:3d:c1:15: ac:a6:09:c4:87:e1:8e:3e:54:8c:1d:6d:86:1f:b2:47:00:9c: f1:0c:5a:aa:9d:d2:4f:77:d7:04:64:9d:b3:0a:c0:9c:72:ed: e4:0a:ce:aa:f0:60:0f:4f:c6:7a:0b:f3:46:2f:c2:1a:18:89: 82:fe:41:58:db:ec:01:81:be:4d:99:0d:df:07:0b:75:31:62: cc:0b:e9:31:f8:b9:bd:5f:28:f3:fd:7e:db:3e:18:17:1a:60: 01:46:e7:c6:c0:f1:2a:56:84:53:2e:1e:a1:eb:a9:53:d3:30: f8:91:18:19:64:bc:06:2a:8e:1c:04:2b:f0:98:65:1c:dd:95: 8b:a0:41:c0:45:60:1f:29:7c:ad:39:4b:0b:d3:e6:db:92:41: 3a:a4:48:4c:26:c5:b9:ea:f7:21:5e:a8:1c:3b:da:7a:f5:4a: 7e:a5:b6:1d:0f:d3:00:b3:ea:5e:f5:fb:ee:e1:3c:e6:c8:45: 48:3c:ba:b4:d8:fc:2e:c1:c2:56:12:7f:4c:dd:be:96:43:40: 19:ab:9e:50:ed:e6:45:89:5b:9c:41:51:e3:a9:39:bb:02:be: ee:a5:d2:dd -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUG6AjQBeS+Cmv4pBZiDM/RTHpt5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjNaFw0yNzAxMTkwMjI3MjNaMDMxMTAvBgNV BAMTKDAyRkExNDFCN0RGQUE1RTIzRTIwMjFCQ0EzNDIxN0FGQTNDRjlCM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vgixLR6MwDF3g+l+g6T1yaS2 bGA/dO5iDZp1cx7S0uLQP3D73M37oGJ4nrnI3Upm2DX5yZdRQg1NTJKY5se3Aohc /hAxZ++/Gto5CRvNwcP+/5ZIat4NS/gTbQ3/TMfmhwVJy0GloHkXsRhgOUJV3pF2 3F6CuJK/tAsPZN4fNbOrwMZMayDRX/uydRUF8RoqgBLm4X6zouuOuz3j8g499oGb TenfNBxYlU8MDwgzRmuM4dP7utAaTHbdbtdoQn6IhgsOulK9kCMO9Dgfo+Oj3FJq wpQHvR/oYgMVdLjVMuskbJlTVCiyoQuLPVYyF368xxMHlMAa6siF9ZcFZlzrAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUAvoUG336peI+ICG8o0IXr6PPmzwwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzEzOTM2MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+hxDANBgkqhkiG9w0BAQsFAAOCAQEAE6D/U39XaaDhunlKKYxa RgAd9hoeE0Px7dlN9GGtzv1wPcEVrKYJxIfhjj5UjB1thh+yRwCc8Qxaqp3ST3fX BGSdswrAnHLt5ArOqvBgD0/GegvzRi/CGhiJgv5BWNvsAYG+TZkN3wcLdTFizAvp Mfi5vV8o8/1+2z4YFxpgAUbnxsDxKlaEUy4eoeupU9Mw+JEYGWS8BiqOHAQr8Jhl HN2Vi6BBwEVgHyl8rTlLC9Pm25JBOqRITCbFuer3IV6oHDvaevVKfqW2HQ/TALPq XvX77uE85shFSDy6tNj8LsHCVhJ/TN2+lkNAGaueUO3mRYlbnEFR46k5uwK+7qXS 3Q== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:46 2026 by rpki-client