This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3231322e302f32322d3234203d3e2039383038.roa File: 3232332e3136312e3231322e302f32322d3234203d3e2039383038.roa (raw, json) Hash identifier: fz95aY2wyysPonPmLEYdomzuRgXGiY8EcFJivNHaQRU= Subject key identifier: 3F:72:91:1F:66:02:75:C6:67:DD:1E:9F:71:9F:DA:35:AA:1C:51:48 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 0181B893ED578935941BC0C648BB722DD1D9972F Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3231322e302f32322d3234203d3e2039383038.roa Signing time: Tue 20 Jan 2026 02:27:26 +0000 ROA not before: Tue 20 Jan 2026 02:22:26 +0000 ROA not after: Tue 19 Jan 2027 02:27:26 +0000 asID: 9808 IP address blocks: 223.161.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:81:b8:93:ed:57:89:35:94:1b:c0:c6:48:bb:72:2d:d1:d9:97:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:26 2026 GMT Not After : Jan 19 02:27:26 2027 GMT Subject: CN=3F72911F660275C667DD1E9F719FDA35AA1C5148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fd:4d:5f:ee:1b:17:9f:cb:cd:bb:4f:eb:30: 04:35:95:63:9a:bb:32:36:81:2c:54:5e:96:d3:46: f8:30:70:c0:e7:9e:2f:af:a2:ab:1f:78:35:dd:41: 38:0e:96:ff:1d:1e:cd:27:87:c2:50:8a:71:0b:13: 3a:0d:db:3f:a9:55:d8:0a:33:3f:16:cf:a6:9f:39: 0c:0f:4a:09:00:64:73:dd:11:67:84:84:23:e8:a3: 36:f7:4e:5c:78:12:f6:46:6b:9e:6f:eb:5a:48:a5: 98:22:e1:45:69:a0:f4:bf:df:e8:7a:63:b7:11:5b: 37:56:2a:5a:dd:21:86:bd:e5:19:62:91:72:84:39: 18:35:27:ec:2e:77:71:1b:21:f7:e1:c8:1f:60:f3: c8:89:44:48:eb:d9:43:d3:fa:8b:32:3a:99:59:04: e8:fd:1e:53:0c:7c:7a:bf:be:d9:c0:52:d1:2f:c1: 84:89:7b:0a:7c:bf:18:a2:85:32:cb:33:92:49:bb: 07:fb:ba:44:77:ea:3e:cf:02:95:87:23:86:03:de: b8:3d:32:9a:23:1a:0d:4c:64:e6:59:81:c7:23:17: f9:d7:75:27:f1:a8:00:23:f7:40:9c:28:2c:5f:f9: 60:4b:62:ba:1c:28:4e:72:24:c1:b0:f1:38:cc:ac: fd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:72:91:1F:66:02:75:C6:67:DD:1E:9F:71:9F:DA:35:AA:1C:51:48 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3231322e302f32322d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.212.0/22 Signature Algorithm: sha256WithRSAEncryption 77:22:6b:ff:95:bb:d6:09:01:40:ea:08:53:28:94:85:84:28: 5a:a2:d4:20:b8:66:3b:5f:46:f9:7d:33:a4:f6:d3:24:e0:86: b2:5e:2b:ce:78:3d:a4:9b:04:e7:55:f6:f0:b9:53:4d:1c:3f: 33:a5:19:9f:34:65:35:4b:c9:d5:02:09:37:43:61:38:a9:6f: ee:22:17:c7:f6:c0:d0:a5:5c:4a:32:73:7e:f3:67:20:86:d7: 97:d8:4b:95:10:b4:7a:03:9e:3e:7e:81:62:c0:ce:4e:5d:f5: 59:18:c4:03:0e:84:4a:8d:7f:8f:ff:eb:fd:f8:e2:70:26:4b: bc:b8:97:a3:b7:65:a8:51:42:6f:d4:68:51:11:04:28:9a:67: 43:29:52:ec:ab:eb:0d:e0:e3:c9:df:92:a0:93:d4:b7:cc:0f: 7a:5c:95:08:95:d3:71:fa:fa:58:49:66:22:91:fb:5b:bb:4a: e2:56:d9:59:1a:66:fd:01:cd:67:22:63:49:cd:b3:16:99:bc: 42:c2:f9:6b:11:a3:27:de:ff:7f:52:3b:37:4a:0b:19:6a:5a: 3f:a0:1c:f6:d8:87:c0:af:68:80:c5:d0:b8:60:ea:40:3e:97: dd:07:7b:42:dc:e6:f1:3c:f7:56:40:a5:aa:2f:a5:e2:19:c5: 1c:ea:3f:19 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAYG4k+1XiTWUG8DGSLtyLdHZly8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjZaFw0yNzAxMTkwMjI3MjZaMDMxMTAvBgNV BAMTKDNGNzI5MTFGNjYwMjc1QzY2N0REMUU5RjcxOUZEQTM1QUExQzUxNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/U1f7hsXn8vNu0/rMAQ1lWOa uzI2gSxUXpbTRvgwcMDnni+voqsfeDXdQTgOlv8dHs0nh8JQinELEzoN2z+pVdgK Mz8Wz6afOQwPSgkAZHPdEWeEhCPoozb3Tlx4EvZGa55v61pIpZgi4UVpoPS/3+h6 Y7cRWzdWKlrdIYa95RlikXKEORg1J+wud3EbIffhyB9g88iJREjr2UPT+osyOplZ BOj9HlMMfHq/vtnAUtEvwYSJewp8vxiihTLLM5JJuwf7ukR36j7PApWHI4YD3rg9 MpojGg1MZOZZgccjF/nXdSfxqAAj90CcKCxf+WBLYrocKE5yJMGw8TjMrP3BAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUP3KRH2YCdcZn3R6fcZ/aNaocUUgwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMxMmUzMjMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAt+h1DANBgkqhkiG9w0BAQsFAAOCAQEAdyJr/5W71gkBQOoIUyiUhYQo WqLUILhmO19G+X0zpPbTJOCGsl4rzng9pJsE51X28LlTTRw/M6UZnzRlNUvJ1QIJ N0NhOKlv7iIXx/bA0KVcSjJzfvNnIIbXl9hLlRC0egOePn6BYsDOTl31WRjEAw6E So1/j//r/fjicCZLvLiXo7dlqFFCb9RoUREEKJpnQylS7KvrDeDjyd+SoJPUt8wP elyVCJXTcfr6WElmIpH7W7tK4lbZWRpm/QHNZyJjSc2zFpm8QsL5axGjJ97/f1I7 N0oLGWpaP6Ac9tiHwK9ogMXQuGDqQD6X3Qd7Qtzm8Tz3VkClqi+l4hnFHOo/GQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:46 2026 by rpki-client