This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232322e302f32332d3234203d3e2039383038.roa File: 3232332e3136312e3232322e302f32332d3234203d3e2039383038.roa (raw, json) Hash identifier: y/PTSfYaAnTmIQsZ9/3zeetfpvmShFtVAhqH5tJWx30= Subject key identifier: D3:D9:30:64:A1:D1:9B:C5:32:32:87:0D:B9:02:C4:94:90:A4:48:ED Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 0992EAFE810E6A385ABCA0D70E4EB13543E19A86 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232322e302f32332d3234203d3e2039383038.roa Signing time: Tue 20 Jan 2026 02:27:25 +0000 ROA not before: Tue 20 Jan 2026 02:22:25 +0000 ROA not after: Tue 19 Jan 2027 02:27:25 +0000 asID: 9808 IP address blocks: 223.161.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:92:ea:fe:81:0e:6a:38:5a:bc:a0:d7:0e:4e:b1:35:43:e1:9a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:25 2026 GMT Not After : Jan 19 02:27:25 2027 GMT Subject: CN=D3D93064A1D19BC53232870DB902C49490A448ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8c:e2:76:95:6b:ac:74:97:51:49:40:f4:19: b4:ba:fd:ca:64:ed:85:e7:79:f9:2e:6c:b6:99:9e: 64:b6:ec:cc:d9:a2:93:7d:6a:e7:bb:6f:2d:fc:8e: 65:00:b0:15:4c:a9:4b:f2:7c:66:40:e4:c0:f6:85: ac:01:89:cf:3d:a8:bc:6a:59:83:c7:c9:7c:82:9f: 71:0f:2f:7c:ae:2a:ac:e6:f5:cd:cf:e4:c3:a9:d6: db:dd:cb:c9:ec:85:cd:7e:8d:ed:97:c6:a2:37:c2: aa:91:95:e8:61:ab:cd:c1:d3:bb:c4:d5:49:38:27: a4:43:e5:1e:9d:df:0e:d6:28:c6:ed:b9:b2:70:6a: b1:a4:13:e3:0f:d5:ea:c7:e1:2c:b9:4d:4d:f1:fd: 3e:9a:5d:ec:87:6a:38:c8:70:9e:8a:9d:25:6e:97: ee:86:44:e6:49:e5:71:7a:10:eb:73:4e:9f:44:1e: 09:21:9d:4b:a0:6b:6f:54:59:ba:f3:25:74:af:52: e6:39:0f:be:b3:25:0f:2b:50:e8:47:2f:42:59:43: 8b:24:b0:3b:d5:59:b2:91:14:39:48:e7:4f:5c:c3: 5c:17:d5:a4:3c:39:d8:e5:f6:f5:51:10:7b:19:f7: 97:9c:cc:de:91:72:29:e2:c9:fc:38:23:b2:e5:40: 6a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D9:30:64:A1:D1:9B:C5:32:32:87:0D:B9:02:C4:94:90:A4:48:ED X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232322e302f32332d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.222.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:1a:a9:4f:76:cc:c4:ea:5c:dd:dd:87:c8:f8:6f:c9:54:95: 85:f8:80:db:10:a3:91:28:58:97:4e:7d:47:83:cf:90:ef:c5: 8d:14:8a:6f:1d:c7:5f:2c:25:28:b9:ba:61:97:cc:27:ce:b8: f3:9b:1e:02:52:bf:35:cb:fb:30:cc:c4:11:11:11:59:a2:0c: bb:cc:27:9f:da:a9:86:b3:43:07:d7:35:4a:01:28:c0:fe:39: 3a:77:48:0e:ab:ae:f6:fe:90:e7:40:54:fa:46:bc:ff:18:f8: be:f2:a1:29:75:69:80:fb:18:f9:7e:49:90:52:c8:28:c6:89: 72:a8:ae:d9:39:98:39:5c:e5:cf:e8:3e:63:aa:41:a0:4b:c8: 87:86:e4:49:4e:bb:94:f6:71:b5:fe:6e:98:3a:3a:1c:91:54: 98:13:59:b7:63:8a:f3:39:41:a5:2e:3d:63:2b:f6:97:f6:0f: 66:39:d0:6e:df:b8:29:b1:78:91:53:15:65:a7:a2:15:0a:43: 95:db:a2:7d:47:be:af:cb:9b:91:c2:0b:47:24:a6:cd:c1:98: f7:69:bb:da:07:e2:5e:6f:94:5f:7b:74:3e:fa:76:9a:4e:ca: 11:ee:24:43:20:8f:1e:06:c9:c0:b9:4e:d6:79:a0:f9:49:11: d2:c7:9f:d7 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUCZLq/oEOajhavKDXDk6xNUPhmoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjVaFw0yNzAxMTkwMjI3MjVaMDMxMTAvBgNV BAMTKEQzRDkzMDY0QTFEMTlCQzUzMjMyODcwREI5MDJDNDk0OTBBNDQ4RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVjOJ2lWusdJdRSUD0GbS6/cpk 7YXnefkubLaZnmS27MzZopN9aue7by38jmUAsBVMqUvyfGZA5MD2hawBic89qLxq WYPHyXyCn3EPL3yuKqzm9c3P5MOp1tvdy8nshc1+je2XxqI3wqqRlehhq83B07vE 1Uk4J6RD5R6d3w7WKMbtubJwarGkE+MP1erH4Sy5TU3x/T6aXeyHajjIcJ6KnSVu l+6GROZJ5XF6EOtzTp9EHgkhnUuga29UWbrzJXSvUuY5D76zJQ8rUOhHL0JZQ4sk sDvVWbKRFDlI509cw1wX1aQ8Odjl9vVREHsZ95eczN6Rciniyfw4I7LlQGrzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU09kwZKHRm8UyMocNuQLElJCkSO0wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMxMmUzMjMyMzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAd+h3jANBgkqhkiG9w0BAQsFAAOCAQEAmhqpT3bMxOpc3d2HyPhvyVSV hfiA2xCjkShYl059R4PPkO/FjRSKbx3HXywlKLm6YZfMJ86485seAlK/Ncv7MMzE ERERWaIMu8wnn9qphrNDB9c1SgEowP45OndIDquu9v6Q50BU+ka8/xj4vvKhKXVp gPsY+X5JkFLIKMaJcqiu2TmYOVzlz+g+Y6pBoEvIh4bkSU67lPZxtf5umDo6HJFU mBNZt2OK8zlBpS49Yyv2l/YPZjnQbt+4KbF4kVMVZaeiFQpDlduifUe+r8ubkcIL RySmzcGY92m72gfiXm+UX3t0Pvp2mk7KEe4kQyCPHgbJwLlO1nmg+UkR0sef1w== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:52 2026 by rpki-client