This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3139382e302f32332d3234203d3e203536303436.roa File: 3232332e3136312e3139382e302f32332d3234203d3e203536303436.roa (raw, json) Hash identifier: IvGrfp3lkK23Tq2VWC8pqvDvlkPoa8B3J0HBKCgmlPI= Subject key identifier: D2:22:D2:86:15:BC:96:7C:37:1C:AF:DC:AB:35:93:68:59:1E:43:1A Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 08062C1F0F922FFD842F01A68B0C8EE39651E51F Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3139382e302f32332d3234203d3e203536303436.roa Signing time: Tue 20 Jan 2026 02:28:28 +0000 ROA not before: Tue 20 Jan 2026 02:23:28 +0000 ROA not after: Tue 19 Jan 2027 02:28:28 +0000 asID: 56046 IP address blocks: 223.161.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:06:2c:1f:0f:92:2f:fd:84:2f:01:a6:8b:0c:8e:e3:96:51:e5:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:28 2026 GMT Not After : Jan 19 02:28:28 2027 GMT Subject: CN=D222D28615BC967C371CAFDCAB359368591E431A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:e1:15:94:ea:d0:9f:8f:1c:cc:43:b0:45: ab:37:58:54:aa:87:98:4e:ce:fb:fa:5c:d4:c9:53: 7e:69:6f:1b:6c:d9:f0:10:ca:97:b7:9d:03:1b:57: 58:9c:bf:a6:6e:9b:8d:9f:f5:63:a6:dd:76:7e:2f: 20:17:86:9a:b3:1e:98:50:6a:1a:2c:8a:8a:cb:d7: de:4c:2b:95:f0:db:c8:dd:67:b7:bc:93:d5:b2:54: 5d:a6:4d:a4:6b:79:5c:f8:31:8b:80:5f:e6:13:79: 25:60:f4:6f:9d:77:80:ed:de:aa:0e:17:45:0e:7b: d0:3f:13:11:e1:b7:f6:10:01:29:52:e4:bf:3f:70: 0c:98:94:b4:ed:8a:6b:ad:61:a8:67:0b:82:e8:7a: 18:7d:e9:dc:47:3d:34:40:c6:81:11:bb:eb:cf:e2: 6c:c1:85:df:df:20:db:8a:b0:9c:b9:fb:0f:d8:d7: 18:8c:2a:61:4f:3c:80:a3:53:b1:3b:39:b2:20:ee: d3:86:79:a7:8a:5a:8a:f1:e9:e3:d4:f0:3e:32:bb: a4:8d:56:34:f3:3b:bf:fe:a5:53:c7:09:e3:06:5e: 60:8a:8a:8a:4e:22:ec:4c:c3:6e:28:a4:fa:d3:a0: fa:bc:f7:71:7a:62:76:5f:e0:d5:b9:c1:95:e9:07: 5d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:22:D2:86:15:BC:96:7C:37:1C:AF:DC:AB:35:93:68:59:1E:43:1A X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3139382e302f32332d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.198.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:a3:48:75:00:20:9b:bf:09:19:8c:74:05:37:16:a5:e2:a8: b2:d3:1f:72:a3:ed:dd:9a:03:89:e7:a8:21:01:67:a4:e3:85: d8:66:65:ba:fe:9d:14:7a:83:43:9d:81:91:d7:84:d0:ab:29: 89:7f:8f:fa:7f:3d:55:7f:14:8e:17:f6:32:e6:ed:03:48:06: 13:f8:c9:b8:a1:ab:80:b3:bb:16:7d:fa:63:a0:9b:44:7b:72: 14:c2:b3:9d:d7:bd:95:09:b3:a2:b5:04:2b:56:43:ae:c1:1b: f3:a4:17:23:67:df:fb:ea:d1:ff:5d:39:83:2f:b0:fe:39:5a: 3b:3b:9f:30:bc:0f:35:d5:66:56:57:e5:55:40:40:51:7b:35: a8:ab:19:5d:17:58:6d:d6:c6:6a:8f:95:fe:14:8d:48:d2:3b: b4:94:36:76:4c:9c:70:9b:90:b8:59:d9:a4:6c:73:4c:3a:f9: b1:03:eb:47:37:f2:95:79:94:24:34:95:f2:fc:c1:75:e6:95: ff:ff:30:92:a4:c9:b5:60:c7:e2:c5:12:6d:0f:f5:57:ab:91: 6b:f9:c9:08:18:0b:7a:c7:8a:2b:cf:82:0d:35:10:15:75:22: 5d:f9:f2:c4:78:a8:b0:90:f4:1a:06:34:09:6e:65:db:de:e2: c3:e3:ce:75 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCAYsHw+SL/2ELwGmiwyO45ZR5R8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjhaFw0yNzAxMTkwMjI4MjhaMDMxMTAvBgNV BAMTKEQyMjJEMjg2MTVCQzk2N0MzNzFDQUZEQ0FCMzU5MzY4NTkxRTQzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TuEVlOrQn48czEOwRas3WFSq h5hOzvv6XNTJU35pbxts2fAQype3nQMbV1icv6Zum42f9WOm3XZ+LyAXhpqzHphQ ahosiorL195MK5Xw28jdZ7e8k9WyVF2mTaRreVz4MYuAX+YTeSVg9G+dd4Dt3qoO F0UOe9A/ExHht/YQASlS5L8/cAyYlLTtimutYahnC4Loehh96dxHPTRAxoERu+vP 4mzBhd/fINuKsJy5+w/Y1xiMKmFPPICjU7E7ObIg7tOGeaeKWorx6ePU8D4yu6SN VjTzO7/+pVPHCeMGXmCKiopOIuxMw24opPrToPq893F6YnZf4NW5wZXpB12lAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU0iLShhW8lnw3HK/cqzWTaFkeQxowHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzEzOTM4MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+hxjANBgkqhkiG9w0BAQsFAAOCAQEAn6NIdQAgm78JGYx0BTcW peKostMfcqPt3ZoDieeoIQFnpOOF2GZluv6dFHqDQ52BkdeE0KspiX+P+n89VX8U jhf2MubtA0gGE/jJuKGrgLO7Fn36Y6CbRHtyFMKznde9lQmzorUEK1ZDrsEb86QX I2ff++rR/105gy+w/jlaOzufMLwPNdVmVlflVUBAUXs1qKsZXRdYbdbGao+V/hSN SNI7tJQ2dkyccJuQuFnZpGxzTDr5sQPrRzfylXmUJDSV8vzBdeaV//8wkqTJtWDH 4sUSbQ/1V6uRa/nJCBgLeseKK8+CDTUQFXUiXfnyxHiosJD0GgY0CW5l297iw+PO dQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:45 2026 by rpki-client