This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232302e302f32332d3234203d3e203536303431.roa File: 3232332e3136312e3232302e302f32332d3234203d3e203536303431.roa (raw, json) Hash identifier: smi8l7Bf2LJf5D1Oao5xoCJObiLI6emq7WFGGBmIo8M= Subject key identifier: BB:8D:4A:01:90:FF:58:68:A9:0F:4C:A0:E3:01:D9:01:2E:C5:36:95 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 114E5DBE9C06538AA10012E8E68E31EFEE84E24D Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232302e302f32332d3234203d3e203536303431.roa Signing time: Tue 20 Jan 2026 02:27:25 +0000 ROA not before: Tue 20 Jan 2026 02:22:25 +0000 ROA not after: Tue 19 Jan 2027 02:27:25 +0000 asID: 56041 IP address blocks: 223.161.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:4e:5d:be:9c:06:53:8a:a1:00:12:e8:e6:8e:31:ef:ee:84:e2:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:25 2026 GMT Not After : Jan 19 02:27:25 2027 GMT Subject: CN=BB8D4A0190FF5868A90F4CA0E301D9012EC53695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:07:47:9d:cf:09:e5:e1:42:b4:3b:48:63:57: a1:26:6c:58:0c:f3:f8:f7:76:54:c8:fc:ca:a6:c2: e4:df:9c:55:ef:e3:eb:d4:62:ae:34:f7:d6:e3:e1: be:dc:43:d3:62:6c:e2:7b:19:08:6f:34:41:d3:8c: 94:6f:e6:c5:32:b0:08:4c:d4:86:fb:df:6a:92:77: 64:aa:63:31:ee:66:89:0f:4a:44:b3:d1:a7:b4:d1: f8:0d:1b:55:e4:2d:b1:4f:fa:d8:35:d4:0f:9e:36: 7d:f9:4d:17:c6:a6:13:61:f8:87:b5:ab:66:71:39: 9d:22:03:13:fe:2c:dc:59:33:8b:c7:aa:88:c8:a9: e2:0e:df:66:5c:c3:6c:07:40:c0:bd:fe:37:69:ff: dc:7a:e0:6f:3c:94:72:ff:89:88:5f:cb:9c:1c:7d: f6:0c:09:3b:79:cb:de:d8:02:9c:22:b1:b1:6e:60: da:70:15:a9:4a:67:c7:0a:be:bf:77:45:94:f9:c3: 10:2b:f0:c2:81:c0:25:a3:76:3f:03:2d:f3:8d:bb: 0b:15:59:61:5c:bd:59:5d:1f:d1:0d:d1:24:dd:91: 15:9d:69:23:4e:23:0e:12:d1:2b:10:22:71:48:bd: bb:19:9b:8c:ee:5b:a1:dd:52:27:62:82:77:78:e5: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8D:4A:01:90:FF:58:68:A9:0F:4C:A0:E3:01:D9:01:2E:C5:36:95 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232302e302f32332d3234203d3e203536303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.220.0/23 Signature Algorithm: sha256WithRSAEncryption 83:3d:b2:63:0e:a7:8c:94:44:c9:08:d7:5e:47:a2:9e:04:eb: aa:54:cf:9e:d1:41:2c:1d:10:29:45:65:28:b9:6c:80:7e:c8: 6b:3e:05:10:55:67:5d:52:0e:b0:a9:59:ce:8b:ca:c3:12:12: 9e:b9:13:a5:60:27:12:80:44:0f:52:e5:4b:d9:ce:7f:2c:0b: 54:dd:27:52:e2:ef:e6:4f:b7:3d:0f:45:f2:cf:03:25:cb:00: b4:0a:ad:4b:79:4e:5b:2e:23:b2:b8:0f:ba:1f:91:04:57:dc: 82:09:1f:dd:e8:9a:07:7e:2d:dd:bb:06:85:2f:c6:e4:63:5e: 0f:71:1e:74:f0:ae:fc:29:0b:cc:f6:98:0c:dc:af:45:9f:2d: 18:66:b8:23:63:cf:d7:e7:b9:bc:4b:c9:de:e7:13:31:3c:31: 22:c4:03:b9:14:23:79:66:f7:a7:d9:36:1e:7b:be:14:74:f2: fd:01:62:86:3f:13:bf:43:61:fe:63:43:f0:01:39:5c:c4:d3: f8:9a:de:7c:7f:40:91:c2:1e:4a:f8:ff:f5:52:0c:6e:7f:4d: c0:49:a9:ad:c7:38:ba:c9:21:3c:48:81:07:2e:19:11:0d:41: af:98:f5:b5:cf:02:74:c4:a5:98:d0:9e:a6:ba:f8:e1:36:5e: b9:a0:82:a0 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEU5dvpwGU4qhABLo5o4x7+6E4k0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjVaFw0yNzAxMTkwMjI3MjVaMDMxMTAvBgNV BAMTKEJCOEQ0QTAxOTBGRjU4NjhBOTBGNENBMEUzMDFEOTAxMkVDNTM2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAB0edzwnl4UK0O0hjV6EmbFgM 8/j3dlTI/MqmwuTfnFXv4+vUYq4099bj4b7cQ9NibOJ7GQhvNEHTjJRv5sUysAhM 1Ib732qSd2SqYzHuZokPSkSz0ae00fgNG1XkLbFP+tg11A+eNn35TRfGphNh+Ie1 q2ZxOZ0iAxP+LNxZM4vHqojIqeIO32Zcw2wHQMC9/jdp/9x64G88lHL/iYhfy5wc ffYMCTt5y97YApwisbFuYNpwFalKZ8cKvr93RZT5wxAr8MKBwCWjdj8DLfONuwsV WWFcvVldH9EN0STdkRWdaSNOIw4S0SsQInFIvbsZm4zuW6HdUidignd45ftNAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUu41KAZD/WGipD0yg4wHZAS7FNpUwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzIzMjMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+h3DANBgkqhkiG9w0BAQsFAAOCAQEAgz2yYw6njJREyQjXXkei ngTrqlTPntFBLB0QKUVlKLlsgH7Iaz4FEFVnXVIOsKlZzovKwxISnrkTpWAnEoBE D1LlS9nOfywLVN0nUuLv5k+3PQ9F8s8DJcsAtAqtS3lOWy4jsrgPuh+RBFfcggkf 3eiaB34t3bsGhS/G5GNeD3EedPCu/CkLzPaYDNyvRZ8tGGa4I2PP1+e5vEvJ3ucT MTwxIsQDuRQjeWb3p9k2Hnu+FHTy/QFihj8Tv0Nh/mND8AE5XMTT+JrefH9AkcIe Svj/9VIMbn9NwEmprcc4uskhPEiBBy4ZEQ1Br5j1tc8CdMSlmNCeprr44TZeuaCC oA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:18 2026 by rpki-client