This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232382e302f32322d3234203d3e2039383038.roa File: 3232332e3136312e3232382e302f32322d3234203d3e2039383038.roa (raw, json) Hash identifier: KhVPR5Ve2oqGSNSvXooI0r13Jpdp3lEgpwNYW61a9pY= Subject key identifier: 06:20:CE:56:10:4D:F1:DA:D6:40:C9:93:79:13:AA:E6:AB:74:09:7C Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 543CBD4E5F16E5F09E16A594519BCA40B04F5F1C Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232382e302f32322d3234203d3e2039383038.roa Signing time: Tue 20 Jan 2026 02:27:26 +0000 ROA not before: Tue 20 Jan 2026 02:22:26 +0000 ROA not after: Tue 19 Jan 2027 02:27:26 +0000 asID: 9808 IP address blocks: 223.161.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3c:bd:4e:5f:16:e5:f0:9e:16:a5:94:51:9b:ca:40:b0:4f:5f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:26 2026 GMT Not After : Jan 19 02:27:26 2027 GMT Subject: CN=0620CE56104DF1DAD640C9937913AAE6AB74097C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:18:6c:79:d8:89:ce:c9:4a:53:7e:ce:d7: e8:5c:e6:9b:a6:00:f8:c8:51:e3:4d:e4:06:b9:a1: e7:ff:42:4f:88:9e:ba:74:5f:84:ba:61:00:f1:a7: b1:ec:93:ff:32:31:78:af:17:e0:42:cf:8c:52:ae: 9f:ba:9e:4c:37:39:00:77:66:d4:59:a4:d4:00:fe: 58:58:73:12:8f:80:4f:b5:ea:d2:fb:1b:56:81:73: fd:73:6e:da:bb:44:46:39:8a:6b:cb:61:d4:ef:08: 83:a6:96:dc:d5:6c:ea:50:1d:c9:93:9d:f2:c8:e4: 34:e1:f0:da:2d:d9:46:7f:b2:af:e6:3d:62:c2:53: dd:5a:fa:0a:e7:48:b0:93:15:4f:1f:b2:3e:f8:a1: 2a:e3:25:e9:99:31:17:f8:3e:b4:c8:48:da:e6:cc: a9:fe:16:23:fa:3f:ad:08:a1:15:9a:58:af:73:27: 44:e7:2b:4c:b0:06:9e:b5:14:8c:80:72:5a:09:8a: dd:a4:a5:b6:13:fb:d3:11:10:72:c2:f0:99:05:8c: 77:09:3b:9c:86:da:3a:34:54:47:94:58:1f:7f:b6: 07:c7:75:9e:43:f0:1a:3c:e7:67:6c:95:85:da:f8: 71:e5:3b:f2:a3:79:3d:65:0a:47:e1:e7:66:d1:1f: 3e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:20:CE:56:10:4D:F1:DA:D6:40:C9:93:79:13:AA:E6:AB:74:09:7C X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232382e302f32322d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.228.0/22 Signature Algorithm: sha256WithRSAEncryption 89:b3:e6:52:fb:29:e5:32:65:19:b6:b3:1f:9e:1a:36:96:ee: 10:b0:af:6d:b2:ce:a4:e8:c2:4f:f2:61:5e:3d:92:7f:05:30: 8c:de:0a:d5:a2:ba:66:46:ea:5a:a6:15:d9:64:5c:33:de:a5: 58:28:4a:35:c6:02:7f:25:ae:50:39:a1:e8:10:c8:b3:81:d7: ae:02:a2:33:bd:ee:48:9d:f5:40:f6:e9:3b:a5:71:98:b2:0a: 58:91:4d:d7:52:3b:da:2d:57:72:56:0d:31:8c:e7:51:bf:bf: 3f:5c:d0:34:3a:18:cc:a5:1f:1e:51:33:75:70:e5:a8:2f:cc: 25:21:46:12:b7:81:f1:18:23:a5:9b:e7:9d:9b:86:69:68:35: fe:d6:55:d9:e1:42:bc:84:31:1d:f5:bd:f2:ed:c9:c3:df:c1: ff:80:3a:79:47:50:e5:ef:72:ee:21:0d:e9:ad:af:86:3b:c7: 4b:f7:30:2c:58:22:5c:ff:b7:6a:67:87:cc:2d:da:f2:a8:dd: 66:ed:f8:f2:e3:dd:b5:8d:1f:d3:8a:c1:2a:54:24:76:84:62: 67:00:12:a1:27:eb:71:a8:0b:1f:6b:60:05:a9:5b:68:e9:39: 1b:1a:d8:75:c1:a5:9c:40:14:6f:a7:4b:8a:87:d8:9b:e7:0c: 2f:41:98:f6 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUVDy9Tl8W5fCeFqWUUZvKQLBPXxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjZaFw0yNzAxMTkwMjI3MjZaMDMxMTAvBgNV BAMTKDA2MjBDRTU2MTA0REYxREFENjQwQzk5Mzc5MTNBQUU2QUI3NDA5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4xhsediJzslKU37O1+hc5pum APjIUeNN5Aa5oef/Qk+Inrp0X4S6YQDxp7Hsk/8yMXivF+BCz4xSrp+6nkw3OQB3 ZtRZpNQA/lhYcxKPgE+16tL7G1aBc/1zbtq7REY5imvLYdTvCIOmltzVbOpQHcmT nfLI5DTh8Not2UZ/sq/mPWLCU91a+grnSLCTFU8fsj74oSrjJemZMRf4PrTISNrm zKn+FiP6P60IoRWaWK9zJ0TnK0ywBp61FIyAcloJit2kpbYT+9MREHLC8JkFjHcJ O5yG2jo0VEeUWB9/tgfHdZ5D8Bo852dslYXa+HHlO/KjeT1lCkfh52bRHz5zAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUBiDOVhBN8drWQMmTeROq5qt0CXwwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMxMmUzMjMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAt+h5DANBgkqhkiG9w0BAQsFAAOCAQEAibPmUvsp5TJlGbazH54aNpbu ELCvbbLOpOjCT/JhXj2SfwUwjN4K1aK6ZkbqWqYV2WRcM96lWChKNcYCfyWuUDmh 6BDIs4HXrgKiM73uSJ31QPbpO6VxmLIKWJFN11I72i1XclYNMYznUb+/P1zQNDoY zKUfHlEzdXDlqC/MJSFGEreB8RgjpZvnnZuGaWg1/tZV2eFCvIQxHfW98u3Jw9/B /4A6eUdQ5e9y7iEN6a2vhjvHS/cwLFgiXP+3ameHzC3a8qjdZu348uPdtY0f04rB KlQkdoRiZwASoSfrcagLH2tgBalbaOk5GxrYdcGlnEAUb6dLiofYm+cML0GY9g== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:47 2026 by rpki-client