This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232362e302f32332d3234203d3e203536303434.roa File: 3232332e3136312e3232362e302f32332d3234203d3e203536303434.roa (raw, json) Hash identifier: ke9D43dLUrpaG9ucU1zRxWJCJm1uI5iw8DKLPng69qQ= Subject key identifier: 14:25:08:D1:02:1C:4A:6B:6D:1D:4A:7A:FF:E2:D2:F9:D7:EF:38:7B Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 46ECE67F14897051B80A65AAF75069B181D2429F Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232362e302f32332d3234203d3e203536303434.roa Signing time: Tue 20 Jan 2026 02:27:24 +0000 ROA not before: Tue 20 Jan 2026 02:22:24 +0000 ROA not after: Tue 19 Jan 2027 02:27:24 +0000 asID: 56044 IP address blocks: 223.161.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ec:e6:7f:14:89:70:51:b8:0a:65:aa:f7:50:69:b1:81:d2:42:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:24 2026 GMT Not After : Jan 19 02:27:24 2027 GMT Subject: CN=142508D1021C4A6B6D1D4A7AFFE2D2F9D7EF387B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:df:66:d0:2f:46:16:93:26:77:22:4a:19:ad: da:ff:ca:2a:20:9b:48:44:4b:ca:1a:53:57:64:7e: 1b:4e:62:cf:7b:cb:1e:dc:41:dd:c3:2e:0f:e4:97: cb:8d:7d:78:26:f7:f6:d5:09:a6:e6:48:23:db:02: bd:29:51:ed:c9:54:64:45:36:80:ef:9a:02:bd:a2: ad:50:55:83:7b:a3:d6:e9:b1:11:c4:43:c7:01:57: 94:79:c8:47:98:df:e7:0a:45:6d:d4:e9:4e:f2:f3: 69:25:a7:6e:64:57:bd:7f:b5:b7:4c:ab:9d:77:03: 3a:5a:41:d0:e3:31:28:42:3d:3c:e7:98:43:1b:76: 9f:9f:eb:1e:b3:11:74:f8:64:99:5f:34:05:32:50: 53:62:58:f8:70:ca:3c:8c:d2:51:2b:ca:d5:1f:61: 43:d2:47:9f:76:f7:5e:3d:44:51:1b:b9:ce:b6:6f: 9d:39:00:e9:d7:8d:10:7b:38:eb:9e:16:55:07:9a: 3f:69:1a:40:68:c5:79:3f:f1:6b:e2:59:ef:8d:c4: 74:87:68:f7:15:a1:5f:ef:26:f8:80:72:99:e9:e5: b9:ac:e0:5e:8d:e4:32:f6:8a:37:8f:22:4d:2e:a0: a0:84:b8:9a:4f:03:6d:1c:f0:23:d0:55:0e:9b:e2: 2c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:25:08:D1:02:1C:4A:6B:6D:1D:4A:7A:FF:E2:D2:F9:D7:EF:38:7B X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232362e302f32332d3234203d3e203536303434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.226.0/23 Signature Algorithm: sha256WithRSAEncryption 77:0a:81:61:78:7b:0b:8a:12:26:79:88:09:db:71:b0:09:63: 23:b5:bb:e2:01:56:ca:d4:20:ca:01:9c:17:ce:19:94:d9:53: 6c:95:61:ef:b7:8a:d0:71:aa:c0:dc:24:f4:52:19:86:90:22: 0b:4f:f0:e9:66:60:bf:1c:85:6b:3a:4a:9f:c0:99:3c:5c:4b: 6f:07:fe:68:12:9e:75:35:14:ec:ad:36:63:71:c4:c5:41:17: c9:8f:8e:42:00:d6:0c:60:d4:50:ca:73:64:2e:68:24:29:b4: 59:df:56:f4:87:d3:f1:ed:1b:52:01:fd:36:bd:33:a6:75:54: bc:49:3a:f9:0e:ba:48:ab:2a:cd:d6:37:9e:12:6b:fe:e2:9f: 42:fb:c8:f9:5e:53:9c:77:4f:ca:c3:ea:50:31:fd:9a:35:f0: be:92:51:84:67:50:b9:c4:6b:b8:dd:12:97:45:c7:49:7d:ef: 5b:6f:9f:3e:02:78:24:de:cd:ad:66:6b:d1:f3:d5:3b:cd:1a: 9a:e9:72:bd:70:8f:f4:07:ca:6a:7e:3d:8e:8c:2c:6e:69:34: 07:c4:10:df:c1:ff:ec:c1:71:95:b6:ac:44:89:cb:c1:89:23: 73:c1:dc:ec:5a:26:a9:92:2f:38:4a:2a:36:a7:f5:04:28:c7: 9c:43:09:eb -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIURuzmfxSJcFG4CmWq91BpsYHSQp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjRaFw0yNzAxMTkwMjI3MjRaMDMxMTAvBgNV BAMTKDE0MjUwOEQxMDIxQzRBNkI2RDFENEE3QUZGRTJEMkY5RDdFRjM4N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg32bQL0YWkyZ3IkoZrdr/yiog m0hES8oaU1dkfhtOYs97yx7cQd3DLg/kl8uNfXgm9/bVCabmSCPbAr0pUe3JVGRF NoDvmgK9oq1QVYN7o9bpsRHEQ8cBV5R5yEeY3+cKRW3U6U7y82klp25kV71/tbdM q513AzpaQdDjMShCPTznmEMbdp+f6x6zEXT4ZJlfNAUyUFNiWPhwyjyM0lErytUf YUPSR5929149RFEbuc62b505AOnXjRB7OOueFlUHmj9pGkBoxXk/8WviWe+NxHSH aPcVoV/vJviAcpnp5bms4F6N5DL2ijePIk0uoKCEuJpPA20c8CPQVQ6b4iwFAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUFCUI0QIcSmttHUp6/+LS+dfvOHswHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzIzMjM2MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+h4jANBgkqhkiG9w0BAQsFAAOCAQEAdwqBYXh7C4oSJnmICdtx sAljI7W74gFWytQgygGcF84ZlNlTbJVh77eK0HGqwNwk9FIZhpAiC0/w6WZgvxyF azpKn8CZPFxLbwf+aBKedTUU7K02Y3HExUEXyY+OQgDWDGDUUMpzZC5oJCm0Wd9W 9IfT8e0bUgH9Nr0zpnVUvEk6+Q66SKsqzdY3nhJr/uKfQvvI+V5TnHdPysPqUDH9 mjXwvpJRhGdQucRruN0Sl0XHSX3vW2+fPgJ4JN7NrWZr0fPVO80amulyvXCP9AfK an49jowsbmk0B8QQ38H/7MFxlbasRInLwYkjc8Hc7FomqZIvOEoqNqf1BCjHnEMJ 6w== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:50 2026 by rpki-client