This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3231302e302f32332d3234203d3e20313334383130.roa File: 3232332e3136312e3231302e302f32332d3234203d3e20313334383130.roa (raw, json) Hash identifier: LAL82O2QRGcXpLvL7rYDG9Iiu50ZKNAnQbL+LwGlcIE= Subject key identifier: C5:F6:CE:0E:52:BB:94:E1:6E:F4:D0:B5:75:1A:DC:EA:BA:9B:8D:A7 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 1DFC2FB2E9380DB7A27852D02D8DABA3F4651014 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3231302e302f32332d3234203d3e20313334383130.roa Signing time: Tue 20 Jan 2026 02:27:25 +0000 ROA not before: Tue 20 Jan 2026 02:22:25 +0000 ROA not after: Tue 19 Jan 2027 02:27:25 +0000 asID: 134810 IP address blocks: 223.161.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:fc:2f:b2:e9:38:0d:b7:a2:78:52:d0:2d:8d:ab:a3:f4:65:10:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:25 2026 GMT Not After : Jan 19 02:27:25 2027 GMT Subject: CN=C5F6CE0E52BB94E16EF4D0B5751ADCEABA9B8DA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a2:a4:c7:eb:2b:c0:1b:7d:eb:b0:87:da:74: 0a:da:46:e5:ee:68:e2:0e:22:62:c9:dc:a9:49:d1: 7c:6e:2e:5d:dc:1d:92:5b:8a:91:29:dd:db:94:c7: df:7a:a9:52:c2:11:a8:ee:99:f6:38:af:f8:4d:17: 79:c4:02:d9:f1:53:11:ba:1e:00:90:6c:f2:bc:2c: 1b:7e:75:94:39:1b:09:60:e8:65:43:c1:a0:24:2f: 5b:e8:00:f2:14:00:33:df:52:3c:ff:78:5e:d3:40: 4e:f2:40:ec:ba:90:bd:1a:e1:ac:d2:fa:f4:b5:08: d0:30:60:cb:b1:a0:63:b3:38:05:9f:67:00:52:b3: fa:d5:77:e6:e6:65:c0:fb:3a:c4:e0:c1:bb:c2:bc: 62:bf:89:06:de:d3:ea:91:4a:9b:51:89:b5:96:d0: 4b:20:3f:1a:3d:44:36:39:1b:8c:bc:ba:2b:1c:99: 20:f8:d9:83:60:18:81:0f:0c:7a:98:dc:15:61:ac: 5c:db:02:8c:b5:78:94:a6:af:73:2e:1d:f7:27:c2: e2:85:91:ae:d4:1a:41:99:a2:31:78:5d:de:fc:bd: fb:63:2a:91:ae:75:60:74:5d:bb:f5:9d:e1:d2:e3: b4:4c:7a:b3:49:5d:ef:c2:45:2d:d9:5c:50:71:cc: 2c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F6:CE:0E:52:BB:94:E1:6E:F4:D0:B5:75:1A:DC:EA:BA:9B:8D:A7 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3231302e302f32332d3234203d3e20313334383130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.210.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:35:cd:cc:59:5c:ed:74:6c:fa:3d:7a:31:a5:9f:cb:9d:73: e9:00:5c:46:d2:09:7a:25:39:1b:6b:a3:d1:d7:85:2e:bf:48: a3:5c:b1:34:bb:0f:65:ae:27:39:ac:a8:68:42:45:7b:ea:3d: 0d:d1:fd:4c:75:e5:4d:ba:83:63:c5:f2:1e:10:bf:41:ee:c1: eb:af:e4:5a:31:62:44:23:e1:75:7a:ac:f0:59:cb:56:19:a4: 91:de:e6:fd:ab:d8:24:a5:91:88:b4:6b:ef:7b:fa:31:fe:a2: 3d:cb:ea:a1:ac:85:ed:23:fd:38:dd:cf:be:d2:00:64:90:e0: c4:80:70:31:09:d5:b0:31:da:df:2c:1f:ae:c1:53:03:d0:a4: 60:ed:98:05:14:22:e0:3f:83:6d:12:45:f9:8c:1e:b1:d7:86: 33:4a:e7:ea:12:40:02:3b:d6:fa:07:e8:39:89:fc:e4:24:15: 4f:c7:28:f2:25:5e:37:ae:48:74:1c:29:8f:2e:ae:a2:d5:e4: 4a:66:4d:f2:83:f3:0b:7c:87:a1:c8:94:e8:d9:40:24:b6:18: 35:d4:13:b6:66:ac:4c:5d:96:9e:35:3f:63:2e:3e:27:10:fc: b5:64:15:b7:0b:21:d3:c5:fc:8d:1d:c0:2c:43:fe:c9:7f:5c: b8:4e:47:ea -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUHfwvsuk4DbeieFLQLY2ro/RlEBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjVaFw0yNzAxMTkwMjI3MjVaMDMxMTAvBgNV BAMTKEM1RjZDRTBFNTJCQjk0RTE2RUY0RDBCNTc1MUFEQ0VBQkE5QjhEQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oqTH6yvAG33rsIfadAraRuXu aOIOImLJ3KlJ0XxuLl3cHZJbipEp3duUx996qVLCEajumfY4r/hNF3nEAtnxUxG6 HgCQbPK8LBt+dZQ5Gwlg6GVDwaAkL1voAPIUADPfUjz/eF7TQE7yQOy6kL0a4azS +vS1CNAwYMuxoGOzOAWfZwBSs/rVd+bmZcD7OsTgwbvCvGK/iQbe0+qRSptRibWW 0EsgPxo9RDY5G4y8uiscmSD42YNgGIEPDHqY3BVhrFzbAoy1eJSmr3MuHfcnwuKF ka7UGkGZojF4Xd78vftjKpGudWB0Xbv1neHS47RMerNJXe/CRS3ZXFBxzCxfAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUxfbODlK7lOFu9NC1dRrc6rqbjacwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMjMzMmUz MTM2MzEyZTMyMzEzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzNDM4MzEz MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAd+h0jANBgkqhkiG9w0BAQsFAAOCAQEAHDXNzFlc7XRs+j16 MaWfy51z6QBcRtIJeiU5G2uj0deFLr9Io1yxNLsPZa4nOayoaEJFe+o9DdH9THXl TbqDY8XyHhC/Qe7B66/kWjFiRCPhdXqs8FnLVhmkkd7m/avYJKWRiLRr73v6Mf6i PcvqoayF7SP9ON3PvtIAZJDgxIBwMQnVsDHa3ywfrsFTA9CkYO2YBRQi4D+DbRJF +YwesdeGM0rn6hJAAjvW+gfoOYn85CQVT8co8iVeN65IdBwpjy6uotXkSmZN8oPz C3yHociU6NlAJLYYNdQTtmasTF2WnjU/Yy4+JxD8tWQVtwsh08X8jR3ALEP+yX9c uE5H6g== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:46 2026 by rpki-client