This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230382e302f32332d3234203d3e20313332353235.roa File: 3232332e3136312e3230382e302f32332d3234203d3e20313332353235.roa (raw, json) Hash identifier: EzGQelWIoo2YpGVvA5jhRckEj88wUFmyH6k35hBGVzQ= Subject key identifier: EE:1A:C2:57:3A:36:11:0A:A0:74:2F:64:16:B3:DC:E0:2A:08:EC:8D Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 2920A3D225571329702D8A4F21BCEDC8154F4887 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230382e302f32332d3234203d3e20313332353235.roa Signing time: Tue 20 Jan 2026 02:28:27 +0000 ROA not before: Tue 20 Jan 2026 02:23:27 +0000 ROA not after: Tue 19 Jan 2027 02:28:27 +0000 asID: 132525 IP address blocks: 223.161.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:20:a3:d2:25:57:13:29:70:2d:8a:4f:21:bc:ed:c8:15:4f:48:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:27 2026 GMT Not After : Jan 19 02:28:27 2027 GMT Subject: CN=EE1AC2573A36110AA0742F6416B3DCE02A08EC8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:74:28:33:9a:05:ae:c8:ed:ea:eb:68:50:37: d0:38:43:33:0c:9d:09:9e:d1:ec:84:0e:c6:fa:80: ff:28:25:8f:02:4f:7e:dd:5e:85:8d:ca:14:12:2c: 34:cd:ef:25:ff:04:e1:8d:c6:c3:5d:8e:30:88:ac: fc:a3:25:87:be:52:99:62:39:50:58:f6:58:8b:3e: 3b:12:aa:d4:45:ff:3c:9d:e1:a9:a4:b7:d3:b9:3d: 51:17:b0:b8:14:41:4d:8e:1a:c2:71:07:0e:14:b0: 6c:6f:2b:3c:bc:5b:20:84:20:5b:3c:f0:47:07:d5: 8e:1d:d3:b7:86:c5:25:98:c1:05:f4:42:64:b7:8d: f9:f2:f4:d3:29:ce:ef:16:ff:b8:78:7c:26:6e:a2: 28:35:be:1f:e7:ca:91:85:ca:fb:66:8a:fb:3f:c0: da:e1:06:ea:49:12:a0:77:c7:79:a6:15:b1:07:c7: f6:ff:dd:81:ec:9d:80:f9:26:00:e9:3f:96:2b:30: 9f:2c:cc:cd:fd:f4:35:e7:3a:60:7f:da:f6:54:11: 14:28:de:95:c3:f1:35:37:d9:45:35:c1:8b:e1:2c: b1:a8:4c:b1:5d:2d:15:1f:10:9f:62:41:8b:d4:d3: 39:45:e6:11:c0:a8:4f:81:e1:ab:b9:ab:5f:4c:53: 1e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1A:C2:57:3A:36:11:0A:A0:74:2F:64:16:B3:DC:E0:2A:08:EC:8D X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230382e302f32332d3234203d3e20313332353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.208.0/23 Signature Algorithm: sha256WithRSAEncryption 23:c6:7e:e1:97:54:24:73:f4:af:bc:6a:05:8b:b8:38:ef:ab: 94:c7:10:3f:2e:89:e7:55:3f:c7:a8:15:2d:f8:ff:0f:5b:8e: 6a:fa:90:c0:48:a4:a6:ec:7c:54:86:0c:58:71:f0:58:df:a9: 67:94:94:d3:3c:ac:9f:38:ff:ae:4c:7b:9f:be:98:1f:9a:6d: b5:bd:91:49:1d:4b:1c:70:4c:87:2d:08:1f:ea:d5:40:c4:e2: 40:e3:ad:93:30:4b:5c:ff:b1:b1:28:8d:47:c7:a5:8e:3e:0b: 71:f8:b0:c5:7a:20:b7:63:b8:ad:fe:12:07:d4:f2:92:1a:06: 02:e4:2e:e9:e8:90:1c:1a:1b:95:33:ea:b4:75:e6:92:b2:bc: e3:46:9c:2e:70:81:e5:4e:1c:48:db:37:9f:64:8d:6a:a8:17: 67:62:ac:ee:a5:1d:11:23:e5:d8:8d:0d:9f:ad:89:19:53:fb: e1:08:75:f4:2d:6c:de:0c:f5:ce:ca:1d:1c:f4:b9:d8:d0:47: 5c:be:4f:9f:83:44:e7:f8:9a:3d:5c:b5:c3:f1:ac:d0:5b:a8: 10:92:82:ec:23:80:47:fa:5e:63:7f:d1:42:5f:ae:3d:b5:7f: 2f:9b:6b:94:ce:61:0d:ba:dc:bc:25:42:05:d6:b9:97:ad:40: 20:cd:d2:dc -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUKSCj0iVXEylwLYpPIbztyBVPSIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjdaFw0yNzAxMTkwMjI4MjdaMDMxMTAvBgNV BAMTKEVFMUFDMjU3M0EzNjExMEFBMDc0MkY2NDE2QjNEQ0UwMkEwOEVDOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDddCgzmgWuyO3q62hQN9A4QzMM nQme0eyEDsb6gP8oJY8CT37dXoWNyhQSLDTN7yX/BOGNxsNdjjCIrPyjJYe+Upli OVBY9liLPjsSqtRF/zyd4amkt9O5PVEXsLgUQU2OGsJxBw4UsGxvKzy8WyCEIFs8 8EcH1Y4d07eGxSWYwQX0QmS3jfny9NMpzu8W/7h4fCZuoig1vh/nypGFyvtmivs/ wNrhBupJEqB3x3mmFbEHx/b/3YHsnYD5JgDpP5YrMJ8szM399DXnOmB/2vZUERQo 3pXD8TU32UU1wYvhLLGoTLFdLRUfEJ9iQYvU0zlF5hHAqE+B4au5q19MUx7PAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQU7hrCVzo2EQqgdC9kFrPc4CoI7I0wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMjMzMmUz MTM2MzEyZTMyMzAzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzMjM1MzIz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAd+h0DANBgkqhkiG9w0BAQsFAAOCAQEAI8Z+4ZdUJHP0r7xq BYu4OO+rlMcQPy6J51U/x6gVLfj/D1uOavqQwEikpux8VIYMWHHwWN+pZ5SU0zys nzj/rkx7n76YH5pttb2RSR1LHHBMhy0IH+rVQMTiQOOtkzBLXP+xsSiNR8eljj4L cfiwxXogt2O4rf4SB9TykhoGAuQu6eiQHBoblTPqtHXmkrK840acLnCB5U4cSNs3 n2SNaqgXZ2Ks7qUdESPl2I0Nn62JGVP74Qh19C1s3gz1zsodHPS52NBHXL5Pn4NE 5/iaPVy1w/Gs0FuoEJKC7COAR/peY3/RQl+uPbV/L5trlM5hDbrcvCVCBda5l61A IM3S3A== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:40 2026 by rpki-client