This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232342e302f32332d3234203d3e203234353437.roa File: 3232332e3136312e3232342e302f32332d3234203d3e203234353437.roa (raw, json) Hash identifier: yla0/5k0rkVhunciyS8lW6M8SOEFxG3fkoctf+rJer4= Subject key identifier: 71:FC:E9:5D:8D:CC:57:07:89:FF:0D:76:B8:2C:13:37:22:5D:13:31 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 4930C1384E4340ECA9201A1151803899AE74506E Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232342e302f32332d3234203d3e203234353437.roa Signing time: Tue 20 Jan 2026 02:27:22 +0000 ROA not before: Tue 20 Jan 2026 02:22:22 +0000 ROA not after: Tue 19 Jan 2027 02:27:22 +0000 asID: 24547 IP address blocks: 223.161.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:30:c1:38:4e:43:40:ec:a9:20:1a:11:51:80:38:99:ae:74:50:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:22 2026 GMT Not After : Jan 19 02:27:22 2027 GMT Subject: CN=71FCE95D8DCC570789FF0D76B82C1337225D1331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:19:6a:72:40:83:bb:6c:f6:c1:63:60:53:83: d6:fd:b9:51:e4:e8:d3:83:54:5b:b5:c5:b8:9a:4c: 77:1d:c2:67:23:3c:ef:47:97:5b:45:05:32:00:2f: 84:25:8b:95:af:5f:9e:6d:77:97:1b:95:bb:b9:29: a4:7b:70:ee:30:3b:8f:d0:db:7e:0b:8f:bc:c8:b3: 92:f0:46:8a:55:13:24:f2:3f:59:bc:a1:53:2e:49: 42:ab:77:57:a2:56:ca:68:0b:8b:b4:4c:e8:b4:df: bd:22:2a:d3:45:01:72:c8:53:37:5f:76:8f:56:15: e6:32:9c:4a:4c:56:61:24:e9:f6:e8:28:9e:24:8a: 19:86:7d:02:c7:38:62:44:d3:54:2b:09:d1:3d:01: f3:78:e0:36:29:a8:a1:5e:62:90:63:ed:9f:f8:4b: db:fc:2e:2f:61:b5:44:bc:2b:9d:86:29:d3:df:57: 09:59:71:88:8f:27:4b:71:50:4e:da:7f:a1:cd:57: 5b:d6:6b:5d:e7:58:92:0d:ad:6a:fd:90:bd:76:06: 5b:68:b2:ae:8a:ec:7a:7b:e6:3b:64:01:ea:fa:81: 08:aa:72:7d:c3:a7:9c:b0:50:92:dd:eb:8d:53:41: 0c:12:39:cc:c4:ed:3e:06:7a:db:57:ea:ab:df:bf: 56:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FC:E9:5D:8D:CC:57:07:89:FF:0D:76:B8:2C:13:37:22:5D:13:31 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232342e302f32332d3234203d3e203234353437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.224.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:e0:5e:ba:5d:c9:d8:a0:d8:3f:13:13:65:52:fb:e4:a1:40: b5:c9:1b:80:7a:db:b9:0c:59:88:77:6b:85:70:4d:01:63:63: 32:d7:11:1a:4d:13:40:e0:3c:bf:dd:cf:6d:af:27:70:36:74: 42:6a:e9:95:96:dd:98:76:08:f6:cd:6f:06:2e:1d:47:10:58: 7b:45:a4:c4:34:93:49:e2:87:6a:7d:95:51:dd:b8:5b:eb:ae: 95:38:a2:f6:d5:55:98:54:4f:af:25:72:00:83:27:f2:d5:58: 4b:30:af:af:c9:53:88:81:52:52:a5:e8:32:1a:c8:11:f1:b8: 13:f6:41:69:a0:d5:97:d0:51:6f:ec:70:87:fb:fb:1b:0c:39: d7:c8:9b:8e:20:49:3a:41:d6:a1:ee:0e:a3:2a:10:84:d5:00: df:64:64:59:b2:53:a1:73:24:1a:26:e1:e7:3a:f6:50:9c:2f: 51:47:ba:b5:c9:15:f3:7c:5a:2a:4d:0e:94:d5:47:84:ed:e4: 6f:46:df:3e:e6:e1:24:de:ed:24:12:f3:66:18:06:1f:15:2d: 22:49:b9:ea:9d:3d:65:e7:af:17:63:b3:f0:c4:bb:dc:44:92: e9:07:91:7f:c9:3c:31:17:2f:7f:be:40:af:ea:2e:8c:f2:64: cc:3b:cf:4d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUSTDBOE5DQOypIBoRUYA4ma50UG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjJaFw0yNzAxMTkwMjI3MjJaMDMxMTAvBgNV BAMTKDcxRkNFOTVEOERDQzU3MDc4OUZGMEQ3NkI4MkMxMzM3MjI1RDEzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKGWpyQIO7bPbBY2BTg9b9uVHk 6NODVFu1xbiaTHcdwmcjPO9Hl1tFBTIAL4Qli5WvX55td5cblbu5KaR7cO4wO4/Q 234Lj7zIs5LwRopVEyTyP1m8oVMuSUKrd1eiVspoC4u0TOi0370iKtNFAXLIUzdf do9WFeYynEpMVmEk6fboKJ4kihmGfQLHOGJE01QrCdE9AfN44DYpqKFeYpBj7Z/4 S9v8Li9htUS8K52GKdPfVwlZcYiPJ0txUE7af6HNV1vWa13nWJINrWr9kL12Blto sq6K7Hp75jtkAer6gQiqcn3Dp5ywUJLd641TQQwSOczE7T4GettX6qvfv1avAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUcfzpXY3MVweJ/w12uCwTNyJdEzEwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzIzMjM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNDM1MzQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+h4DANBgkqhkiG9w0BAQsFAAOCAQEAjOBeul3J2KDYPxMTZVL7 5KFAtckbgHrbuQxZiHdrhXBNAWNjMtcRGk0TQOA8v93Pba8ncDZ0QmrplZbdmHYI 9s1vBi4dRxBYe0WkxDSTSeKHan2VUd24W+uulTii9tVVmFRPryVyAIMn8tVYSzCv r8lTiIFSUqXoMhrIEfG4E/ZBaaDVl9BRb+xwh/v7Gww518ibjiBJOkHWoe4OoyoQ hNUA32RkWbJToXMkGibh5zr2UJwvUUe6tckV83xaKk0OlNVHhO3kb0bfPubhJN7t JBLzZhgGHxUtIkm56p09ZeevF2Oz8MS73ESS6QeRf8k8MRcvf75Ar+oujPJkzDvP TQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:53 2026 by rpki-client