This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230302e302f32332d3234203d3e2039383038.roa File: 3232332e3136312e3230302e302f32332d3234203d3e2039383038.roa (raw, json) Hash identifier: nJWdKTCTCnRSLEbR9tw1/RZTw4BAbtKxXjyqLKYZEOg= Subject key identifier: 10:81:E1:37:70:71:19:C8:85:3B:93:62:21:7F:F4:72:4B:9E:3A:2B Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 30A2AD8394965544BCDF2C42D46E4E2EF1B4A3F4 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230302e302f32332d3234203d3e2039383038.roa Signing time: Tue 20 Jan 2026 02:28:27 +0000 ROA not before: Tue 20 Jan 2026 02:23:27 +0000 ROA not after: Tue 19 Jan 2027 02:28:27 +0000 asID: 9808 IP address blocks: 223.161.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a2:ad:83:94:96:55:44:bc:df:2c:42:d4:6e:4e:2e:f1:b4:a3:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:27 2026 GMT Not After : Jan 19 02:28:27 2027 GMT Subject: CN=1081E137707119C8853B9362217FF4724B9E3A2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:ac:41:7d:70:96:2e:59:29:eb:e9:8b:aa: 1d:6e:1f:59:b4:53:ac:b7:8d:ed:11:15:8a:1b:4a: 30:df:4b:f7:f8:8e:f6:4f:d1:6c:72:f3:04:13:af: 7c:4a:3b:77:a5:dc:8c:36:05:d9:81:85:05:a6:a7: dc:8f:f8:4e:32:83:a7:02:83:2a:6b:f9:27:4e:2b: 5f:c6:10:2a:95:2e:76:ee:46:11:d4:89:57:a2:e9: 8d:88:b8:1e:b4:18:79:6f:1a:84:e0:e5:fa:47:f0: 05:4a:74:52:e1:e3:d9:36:6c:02:ea:fd:ff:d0:cb: b0:02:01:e7:36:48:5b:ea:85:2e:e2:9d:eb:4a:1b: d7:5d:97:56:84:6d:15:55:95:f6:84:3a:76:6b:4f: 1e:69:48:22:df:b7:75:2f:60:c7:55:45:60:27:f8: 21:df:1a:2f:a2:5c:d2:e6:ae:13:b4:de:86:f1:b2: 3f:04:b7:c3:0f:28:ff:35:27:b9:b3:9f:eb:89:76: f0:d2:a3:d6:4e:13:72:81:f0:3b:e8:f8:bc:5d:3a: 75:c2:2a:7f:74:40:84:04:95:31:4c:25:82:1f:16: 9e:e2:10:ca:97:94:e0:dc:d5:5b:f5:35:25:e8:4b: 3b:08:bb:83:01:eb:ce:7f:73:ce:c6:4c:9d:2d:38: 98:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:81:E1:37:70:71:19:C8:85:3B:93:62:21:7F:F4:72:4B:9E:3A:2B X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230302e302f32332d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.200.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:7a:ad:34:19:d0:59:e8:77:3c:56:14:d3:94:84:6a:0c:9e: 59:9c:c3:f9:45:a3:b1:4c:54:25:4a:76:0f:8b:f2:48:a4:a6: fb:77:74:8a:f1:e6:92:77:c8:82:15:5c:77:04:29:59:10:8d: 1d:9f:3d:8b:27:da:4a:c6:a6:37:0f:87:d3:76:10:6f:8b:b1: 22:bd:c6:37:b5:75:74:19:b1:ac:be:58:56:7f:50:3b:cb:95: 61:54:56:85:15:df:98:b0:1e:8c:d5:99:c2:28:53:7b:d3:e6: 04:6c:b3:1c:3b:9c:da:15:88:f6:1f:f9:8b:5b:b6:10:d5:a4: 3b:b5:7d:60:85:ea:ba:57:de:10:0b:47:aa:7d:1c:f4:9c:92: 4a:e5:09:a4:e3:a4:de:f4:76:bb:7b:3d:eb:2f:6a:d5:e9:f3: c1:ff:54:27:39:8f:3a:f9:a7:28:70:72:8b:6a:c3:1b:0b:8a: b3:c8:fc:fb:88:26:02:da:09:ef:de:79:65:24:5e:6f:a4:17: 24:cc:c3:93:07:1c:05:a5:12:fb:08:d0:75:c5:d1:cd:d6:c3: 6e:90:52:fc:26:9c:66:62:1d:ae:de:65:cb:a8:16:28:fa:ae: c3:d0:c9:f2:bb:48:e9:cb:ac:2d:1e:71:39:0d:7c:24:73:8b: 05:49:29:74 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUMKKtg5SWVUS83yxC1G5OLvG0o/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjdaFw0yNzAxMTkwMjI4MjdaMDMxMTAvBgNV BAMTKDEwODFFMTM3NzA3MTE5Qzg4NTNCOTM2MjIxN0ZGNDcyNEI5RTNBMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ86xBfXCWLlkp6+mLqh1uH1m0 U6y3je0RFYobSjDfS/f4jvZP0Wxy8wQTr3xKO3el3Iw2BdmBhQWmp9yP+E4yg6cC gypr+SdOK1/GECqVLnbuRhHUiVei6Y2IuB60GHlvGoTg5fpH8AVKdFLh49k2bALq /f/Qy7ACAec2SFvqhS7inetKG9ddl1aEbRVVlfaEOnZrTx5pSCLft3UvYMdVRWAn +CHfGi+iXNLmrhO03obxsj8Et8MPKP81J7mzn+uJdvDSo9ZOE3KB8Dvo+LxdOnXC Kn90QIQElTFMJYIfFp7iEMqXlODc1Vv1NSXoSzsIu4MB685/c87GTJ0tOJhLAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUEIHhN3BxGciFO5NiIX/0ckueOiswHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMxMmUzMjMwMzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAd+hyDANBgkqhkiG9w0BAQsFAAOCAQEAKnqtNBnQWeh3PFYU05SEagye WZzD+UWjsUxUJUp2D4vySKSm+3d0ivHmknfIghVcdwQpWRCNHZ89iyfaSsamNw+H 03YQb4uxIr3GN7V1dBmxrL5YVn9QO8uVYVRWhRXfmLAejNWZwihTe9PmBGyzHDuc 2hWI9h/5i1u2ENWkO7V9YIXqulfeEAtHqn0c9JySSuUJpOOk3vR2u3s96y9q1enz wf9UJzmPOvmnKHByi2rDGwuKs8j8+4gmAtoJ7955ZSReb6QXJMzDkwccBaUS+wjQ dcXRzdbDbpBS/CacZmIdrt5ly6gWKPquw9DJ8rtI6cusLR5xOQ18JHOLBUkpdA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:41 2026 by rpki-client