This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230322e302f32332d3234203d3e203338303139.roa File: 3232332e3136312e3230322e302f32332d3234203d3e203338303139.roa (raw, json) Hash identifier: KI1dqzkcaYEHVHqG0+Px+kwI22OAn4seqdAAaMwtauM= Subject key identifier: 4E:88:70:C6:1B:B5:65:BC:4F:D6:81:73:70:94:A3:AC:FC:14:74:3A Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 09CE28C5BFA35BB41DB9E5270A822027E3FA7B1B Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230322e302f32332d3234203d3e203338303139.roa Signing time: Tue 20 Jan 2026 02:27:22 +0000 ROA not before: Tue 20 Jan 2026 02:22:22 +0000 ROA not after: Tue 19 Jan 2027 02:27:22 +0000 asID: 38019 IP address blocks: 223.161.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ce:28:c5:bf:a3:5b:b4:1d:b9:e5:27:0a:82:20:27:e3:fa:7b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:22 2026 GMT Not After : Jan 19 02:27:22 2027 GMT Subject: CN=4E8870C61BB565BC4FD681737094A3ACFC14743A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:a9:a6:df:84:58:be:da:b0:c5:05:44:f3: 73:84:78:22:48:72:b5:fe:6d:07:a0:01:1a:c1:b5: 17:ad:74:6d:8f:46:12:0d:87:be:aa:7d:25:48:cb: 7e:ea:ba:2a:88:95:0f:c7:c0:05:e2:ef:03:60:42: ad:8d:03:0c:62:ce:80:c1:8c:27:a8:32:53:9e:10: 5a:83:4e:83:9a:c1:66:e6:69:5d:16:56:97:7c:da: c1:2b:be:ab:c3:92:44:48:70:2c:db:02:74:a2:84: 1d:41:7d:b4:ce:83:bd:1b:82:25:c2:64:b2:90:2b: 57:ae:0c:86:15:fb:31:79:a0:1a:f4:0e:95:84:52: 28:08:bb:79:b7:2e:e9:81:8e:d9:4b:02:99:f3:d2: bf:0b:dc:5f:65:34:2c:93:cb:99:af:7b:c1:7f:e0: 3a:80:6e:e0:06:55:8e:8e:d6:a0:b6:54:6d:09:67: a4:a1:6a:a3:f1:dd:ec:d3:03:1b:ad:45:83:71:51: 61:da:5e:10:f9:e5:75:16:91:fb:3b:88:2e:59:c9: 9f:63:8e:29:03:1c:52:c0:60:1b:86:7b:94:bb:74: 69:f6:8f:ba:34:40:bf:f3:33:1c:c6:e8:99:75:18: 96:13:5c:45:4a:4d:82:10:91:49:5c:6d:ab:b1:e4: 69:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:88:70:C6:1B:B5:65:BC:4F:D6:81:73:70:94:A3:AC:FC:14:74:3A X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230322e302f32332d3234203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.202.0/23 Signature Algorithm: sha256WithRSAEncryption 52:f9:11:33:55:94:e9:11:6b:ab:78:73:bd:08:22:4f:53:a0: e6:cf:8f:db:ec:7d:88:7f:32:29:4f:23:5a:b8:c1:67:52:4b: 1e:75:2a:08:bc:c3:6e:d0:02:18:5c:c4:c7:d7:c8:f7:02:7c: 41:a3:06:28:7d:05:58:7a:38:9e:ce:51:b1:4f:dc:38:af:04: 52:62:f8:7c:33:c0:d0:cd:36:98:f1:0b:05:53:28:44:5e:ce: 01:4f:87:72:99:28:da:c2:87:5e:03:f1:11:d6:b6:c0:cf:0f: f7:2c:be:e6:78:39:25:26:88:a0:80:ba:80:41:c4:c9:17:92: ab:53:40:9e:ca:37:34:8d:35:5b:97:94:39:1b:eb:fd:ad:8d: a6:63:a1:6d:b0:c5:9b:f0:56:69:6a:99:b0:4e:fe:a3:90:b7: f1:aa:a1:26:ae:6a:61:9e:90:26:e4:65:3d:95:80:d3:3f:b4: e9:2d:99:6a:e6:0a:0c:62:5c:75:11:46:a4:ef:96:08:95:8a: ff:b4:8b:99:1c:ab:a2:15:29:4d:d3:ea:be:a5:f9:4d:80:0d: 8d:d5:9d:89:55:de:56:80:24:05:d3:89:b1:46:b5:56:c1:8b: 7b:66:4b:c6:e8:18:33:6c:38:d4:04:df:64:2b:10:cb:b2:3f: f2:da:8e:fb -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCc4oxb+jW7QdueUnCoIgJ+P6exswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjJaFw0yNzAxMTkwMjI3MjJaMDMxMTAvBgNV BAMTKDRFODg3MEM2MUJCNTY1QkM0RkQ2ODE3MzcwOTRBM0FDRkMxNDc0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6vKmm34RYvtqwxQVE83OEeCJI crX+bQegARrBtRetdG2PRhINh76qfSVIy37quiqIlQ/HwAXi7wNgQq2NAwxizoDB jCeoMlOeEFqDToOawWbmaV0WVpd82sErvqvDkkRIcCzbAnSihB1BfbTOg70bgiXC ZLKQK1euDIYV+zF5oBr0DpWEUigIu3m3LumBjtlLApnz0r8L3F9lNCyTy5mve8F/ 4DqAbuAGVY6O1qC2VG0JZ6ShaqPx3ezTAxutRYNxUWHaXhD55XUWkfs7iC5ZyZ9j jikDHFLAYBuGe5S7dGn2j7o0QL/zMxzG6Jl1GJYTXEVKTYIQkUlcbaux5GlNAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUTohwxhu1ZbxP1oFzcJSjrPwUdDowHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzIzMDMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+hyjANBgkqhkiG9w0BAQsFAAOCAQEAUvkRM1WU6RFrq3hzvQgi T1Og5s+P2+x9iH8yKU8jWrjBZ1JLHnUqCLzDbtACGFzEx9fI9wJ8QaMGKH0FWHo4 ns5RsU/cOK8EUmL4fDPA0M02mPELBVMoRF7OAU+Hcpko2sKHXgPxEda2wM8P9yy+ 5ng5JSaIoIC6gEHEyReSq1NAnso3NI01W5eUORvr/a2NpmOhbbDFm/BWaWqZsE7+ o5C38aqhJq5qYZ6QJuRlPZWA0z+06S2ZauYKDGJcdRFGpO+WCJWK/7SLmRyrohUp TdPqvqX5TYANjdWdiVXeVoAkBdOJsUa1VsGLe2ZLxugYM2w41ATfZCsQy7I/8tqO +w== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:34 2026 by rpki-client