This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3234302e302f32332d3234203d3e203536303435.roa File: 3232332e3136312e3234302e302f32332d3234203d3e203536303435.roa (raw, json) Hash identifier: Jr3VVLoLanSfINKPDuhjv4WzeNvG2iCh62dC7h2QoRg= Subject key identifier: 7B:E9:A4:B2:D4:91:DB:0D:46:90:4F:CC:CA:70:04:B4:F2:B6:91:E3 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 64F96D3AE3434987F2358A386400708749914780 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3234302e302f32332d3234203d3e203536303435.roa Signing time: Tue 20 Jan 2026 02:27:24 +0000 ROA not before: Tue 20 Jan 2026 02:22:24 +0000 ROA not after: Tue 19 Jan 2027 02:27:24 +0000 asID: 56045 IP address blocks: 223.161.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f9:6d:3a:e3:43:49:87:f2:35:8a:38:64:00:70:87:49:91:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:24 2026 GMT Not After : Jan 19 02:27:24 2027 GMT Subject: CN=7BE9A4B2D491DB0D46904FCCCA7004B4F2B691E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8b:43:72:0c:df:d7:1f:c3:90:a8:8a:5f:c2: b4:c0:6e:b2:f8:60:12:a5:43:43:4a:db:3a:45:bb: b1:38:32:5e:ee:62:9f:45:a3:10:a1:25:42:6c:3a: 27:30:79:5b:05:d4:01:cc:d4:43:43:5e:84:80:68: ac:f3:9d:74:50:70:ad:00:d6:2b:b8:99:5d:f6:ea: f7:c6:0f:68:98:bf:2d:25:31:82:bf:85:30:45:39: de:aa:60:13:b5:66:14:0b:e8:f7:d4:09:48:5c:fc: 65:15:b8:85:1d:29:7d:99:aa:d7:6f:70:8f:cb:b9: 05:14:5f:0c:dd:f0:8e:6b:c8:54:12:f1:30:98:f0: 21:de:56:bd:19:8c:a7:a9:1e:d9:0d:4b:7b:88:57: 16:78:d1:dd:e5:56:de:c3:df:b6:63:bd:a5:a2:5b: bf:ef:15:ab:3b:06:8e:6b:9f:05:92:71:b2:9a:f2: 84:ef:1f:11:c9:3e:e8:b0:ce:5d:d2:cf:e1:30:14: 38:e6:67:11:0e:5f:ca:12:7b:84:12:0d:12:4e:a9: e5:ea:5a:80:9f:41:c6:7d:4f:dc:61:5d:33:db:84: a0:c8:36:f6:ae:5b:93:54:bc:58:54:d5:8b:fa:9c: f3:1d:30:3a:59:87:dc:e3:79:de:07:d5:60:8c:a1: 75:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E9:A4:B2:D4:91:DB:0D:46:90:4F:CC:CA:70:04:B4:F2:B6:91:E3 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3234302e302f32332d3234203d3e203536303435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.240.0/23 Signature Algorithm: sha256WithRSAEncryption 18:3c:6c:d9:dd:f9:90:37:fb:75:48:42:fa:5b:4d:21:73:4f: 8e:2f:a0:46:c6:35:42:6e:8a:ab:f1:26:dd:d4:be:ef:64:13: 6f:6b:df:7a:78:86:9d:96:40:33:67:bb:94:d5:5a:17:5f:90: 30:6f:19:4e:46:ec:9a:95:ec:12:30:8c:e2:54:a1:37:77:99: 53:3c:37:55:61:4b:1e:83:38:d2:2b:3b:c6:38:b4:42:bb:19: d8:3b:ef:65:c4:4f:fa:1a:8e:cb:d0:81:39:5f:24:d6:50:d7: 82:10:1c:eb:ea:1d:1d:ae:84:61:01:a7:07:e6:c8:53:de:2f: cc:0b:6c:e0:37:ae:75:24:7d:8d:cc:3c:8e:bb:2f:8a:1f:69: c8:9d:3f:14:e2:84:16:04:a8:0d:34:ea:ce:38:71:af:4d:98: 97:e6:76:bb:47:7f:5e:3f:65:2c:74:fe:e9:3d:09:a1:52:15: 97:03:a6:01:78:89:02:c2:eb:95:0c:21:f3:06:0e:5c:75:1f: 5d:2c:76:14:bb:40:61:74:d5:9b:55:74:3a:59:6e:07:75:54: 1f:11:aa:9d:8b:7b:1e:8c:3b:8e:c2:5b:e0:50:3b:37:93:9e: 6d:cb:1d:f0:5a:85:1a:fe:59:97:de:5c:dc:32:27:33:f8:33: 1c:d7:3a:9a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUZPltOuNDSYfyNYo4ZABwh0mRR4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjRaFw0yNzAxMTkwMjI3MjRaMDMxMTAvBgNV BAMTKDdCRTlBNEIyRDQ5MURCMEQ0NjkwNEZDQ0NBNzAwNEI0RjJCNjkxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDei0NyDN/XH8OQqIpfwrTAbrL4 YBKlQ0NK2zpFu7E4Ml7uYp9FoxChJUJsOicweVsF1AHM1ENDXoSAaKzznXRQcK0A 1iu4mV326vfGD2iYvy0lMYK/hTBFOd6qYBO1ZhQL6PfUCUhc/GUVuIUdKX2Zqtdv cI/LuQUUXwzd8I5ryFQS8TCY8CHeVr0ZjKepHtkNS3uIVxZ40d3lVt7D37ZjvaWi W7/vFas7Bo5rnwWScbKa8oTvHxHJPuiwzl3Sz+EwFDjmZxEOX8oSe4QSDRJOqeXq WoCfQcZ9T9xhXTPbhKDINvauW5NUvFhU1Yv6nPMdMDpZh9zjed4H1WCMoXX7AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUe+mkstSR2w1GkE/MynAEtPK2keMwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzIzNDMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+h8DANBgkqhkiG9w0BAQsFAAOCAQEAGDxs2d35kDf7dUhC+ltN IXNPji+gRsY1Qm6Kq/Em3dS+72QTb2vfeniGnZZAM2e7lNVaF1+QMG8ZTkbsmpXs EjCM4lShN3eZUzw3VWFLHoM40is7xji0QrsZ2DvvZcRP+hqOy9CBOV8k1lDXghAc 6+odHa6EYQGnB+bIU94vzAts4DeudSR9jcw8jrsvih9pyJ0/FOKEFgSoDTTqzjhx r02Yl+Z2u0d/Xj9lLHT+6T0JoVIVlwOmAXiJAsLrlQwh8wYOXHUfXSx2FLtAYXTV m1V0OlluB3VUHxGqnYt7How7jsJb4FA7N5Oebcsd8FqFGv5Zl95c3DInM/gzHNc6 mg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:50 2026 by rpki-client