This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3231362e302f32322d3234203d3e2039383038.roa File: 3232332e3136312e3231362e302f32322d3234203d3e2039383038.roa (raw, json) Hash identifier: Tq7ysWXcbrl0umJLcQ3y1Kgu7rz4J5vo4xaWIHtwbRk= Subject key identifier: 6A:8D:C1:F2:17:56:15:43:CC:43:B7:C4:11:D5:D2:E4:F1:73:88:EF Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 5F35FBCFBEB79D9C3C1D5B820B8837952C7670A2 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3231362e302f32322d3234203d3e2039383038.roa Signing time: Tue 20 Jan 2026 02:28:27 +0000 ROA not before: Tue 20 Jan 2026 02:23:27 +0000 ROA not after: Tue 19 Jan 2027 02:28:27 +0000 asID: 9808 IP address blocks: 223.161.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:35:fb:cf:be:b7:9d:9c:3c:1d:5b:82:0b:88:37:95:2c:76:70:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:27 2026 GMT Not After : Jan 19 02:28:27 2027 GMT Subject: CN=6A8DC1F217561543CC43B7C411D5D2E4F17388EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:30:52:c9:7e:33:d3:2c:f6:c3:29:e3:ab: 03:ab:1b:8d:67:5c:ae:53:76:f1:90:ee:74:ba:59: a7:e8:b3:78:52:5d:59:e4:3f:c4:ca:14:50:d0:3d: 7f:b4:d0:79:43:eb:c0:ec:6b:a5:d6:a0:b4:d2:89: 0d:2f:c2:fa:ff:86:c4:39:e0:46:2b:3a:53:8d:86: 70:35:0a:6c:92:23:73:51:e1:f3:8a:21:29:0f:c3: ea:8c:82:11:f7:e1:d3:a7:b3:39:ca:a4:49:13:88: 79:8d:30:06:20:c8:8b:0a:20:9d:01:f5:57:c1:71: 92:f0:39:14:a7:e7:ad:8b:60:d3:3b:d1:11:26:8e: fd:21:1f:fd:7c:23:5e:72:62:54:0a:2b:d0:80:3c: f9:2f:d7:c7:5e:7e:25:71:71:42:ae:90:ab:52:4a: 17:52:b6:c8:98:9b:9b:02:b4:4d:94:62:b4:fe:6c: 42:7d:1f:a6:e9:60:fe:bc:03:ef:93:a1:45:2b:48: cf:e7:b6:f8:8d:33:a3:f8:ef:08:e3:6a:0b:a7:de: 04:d0:22:1a:0a:24:39:dc:90:e4:1b:11:4a:d9:1f: d3:78:b2:15:5c:18:bf:e3:be:0f:b3:d4:db:74:da: a7:80:3f:f1:06:6d:d5:a3:8a:68:b7:24:97:55:6f: 35:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8D:C1:F2:17:56:15:43:CC:43:B7:C4:11:D5:D2:E4:F1:73:88:EF X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3231362e302f32322d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.216.0/22 Signature Algorithm: sha256WithRSAEncryption 36:d8:48:55:41:c8:17:3b:70:af:7b:f1:b0:eb:88:cd:02:fc: 78:aa:fc:cd:4a:dc:e9:7b:fe:7d:e4:66:a4:db:d3:e7:e5:d1: 92:43:4c:38:69:ee:f5:5d:bb:b3:56:b7:b2:14:8b:8e:c0:4c: 75:e0:9d:45:cb:86:ae:af:b7:4a:92:a7:84:64:7e:25:60:5e: 6c:5d:66:56:d5:74:1c:56:d3:97:78:7e:36:fc:90:90:ff:2f: 2c:31:d3:f0:2c:d4:d5:c5:86:51:85:cb:2a:d1:89:76:20:0a: 65:41:20:f8:23:4e:d6:44:76:61:88:cb:76:76:31:1a:01:1f: 96:bd:0e:5a:c0:be:1a:b8:f1:0a:ec:6b:7e:3c:8b:2d:cf:6d: 31:a2:bb:48:d4:67:fd:89:b6:c9:47:21:9c:3b:f1:f3:c3:bc: 38:87:50:55:47:54:14:51:e4:ad:66:5f:26:4d:cf:08:8a:b8: 6e:51:d0:26:9e:9d:be:d2:a0:d5:36:6c:71:a9:dc:f7:06:8f: a0:f9:fe:94:44:f3:c1:aa:06:bd:20:aa:63:95:fa:aa:77:59: fc:e0:40:e8:80:0f:a3:64:1e:32:8e:a5:18:b8:11:e8:63:25: 4f:54:c8:cc:74:ea:8d:26:43:44:eb:f2:78:24:ca:dc:e6:36: e5:c6:95:3d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUXzX7z763nZw8HVuCC4g3lSx2cKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjdaFw0yNzAxMTkwMjI4MjdaMDMxMTAvBgNV BAMTKDZBOERDMUYyMTc1NjE1NDNDQzQzQjdDNDExRDVEMkU0RjE3Mzg4RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzhTBSyX4z0yz2wynjqwOrG41n XK5TdvGQ7nS6Wafos3hSXVnkP8TKFFDQPX+00HlD68Dsa6XWoLTSiQ0vwvr/hsQ5 4EYrOlONhnA1CmySI3NR4fOKISkPw+qMghH34dOnsznKpEkTiHmNMAYgyIsKIJ0B 9VfBcZLwORSn562LYNM70REmjv0hH/18I15yYlQKK9CAPPkv18defiVxcUKukKtS ShdStsiYm5sCtE2UYrT+bEJ9H6bpYP68A++ToUUrSM/ntviNM6P47wjjagun3gTQ IhoKJDnckOQbEUrZH9N4shVcGL/jvg+z1Nt02qeAP/EGbdWjimi3JJdVbzVXAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUao3B8hdWFUPMQ7fEEdXS5PFziO8wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMxMmUzMjMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAt+h2DANBgkqhkiG9w0BAQsFAAOCAQEANthIVUHIFztwr3vxsOuIzQL8 eKr8zUrc6Xv+feRmpNvT5+XRkkNMOGnu9V27s1a3shSLjsBMdeCdRcuGrq+3SpKn hGR+JWBebF1mVtV0HFbTl3h+NvyQkP8vLDHT8CzU1cWGUYXLKtGJdiAKZUEg+CNO 1kR2YYjLdnYxGgEflr0OWsC+GrjxCuxrfjyLLc9tMaK7SNRn/Ym2yUchnDvx88O8 OIdQVUdUFFHkrWZfJk3PCIq4blHQJp6dvtKg1TZscanc9waPoPn+lETzwaoGvSCq Y5X6qndZ/OBA6IAPo2QeMo6lGLgR6GMlT1TIzHTqjSZDROvyeCTK3OY25caVPQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:47 2026 by rpki-client