This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3234322e302f32332d3234203d3e2039383038.roa File: 3232332e3136312e3234322e302f32332d3234203d3e2039383038.roa (raw, json) Hash identifier: 7oi4seewQvLoNq2FDLdEl1RaxJfsnohtlrHugBoNCSg= Subject key identifier: 5B:CD:08:03:20:08:64:20:58:D4:24:F1:BF:67:AF:2A:C4:68:78:25 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 4C19BDA9AD55062A06DA0BFEACCA75B5481E327D Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3234322e302f32332d3234203d3e2039383038.roa Signing time: Tue 20 Jan 2026 02:28:27 +0000 ROA not before: Tue 20 Jan 2026 02:23:27 +0000 ROA not after: Tue 19 Jan 2027 02:28:27 +0000 asID: 9808 IP address blocks: 223.161.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:19:bd:a9:ad:55:06:2a:06:da:0b:fe:ac:ca:75:b5:48:1e:32:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:27 2026 GMT Not After : Jan 19 02:28:27 2027 GMT Subject: CN=5BCD08032008642058D424F1BF67AF2AC4687825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:46:39:0b:7c:7b:5a:11:8c:0a:ae:91:3f:f6: 8f:9e:4a:19:ca:d3:28:07:b8:88:69:92:e0:03:3f: c8:bb:73:37:e8:2a:2b:ad:51:ed:0c:4c:0a:04:f3: b9:7c:a0:85:b8:ed:42:97:52:81:23:c5:bb:3a:91: 33:66:b4:31:45:31:bb:d6:e1:e7:43:30:1d:1a:55: d3:36:3f:a1:cf:a4:c6:3f:f2:b8:eb:d0:85:85:22: 23:e5:77:e3:99:da:35:38:83:5a:87:52:73:35:c7: 94:2a:6e:34:1a:3f:8b:9d:25:6b:34:b2:a6:e7:3e: 1d:19:0b:5f:b5:e8:69:d9:33:bf:c3:74:38:64:01: 6d:8b:83:45:37:f9:ae:81:96:88:15:fa:4c:61:fe: 93:28:71:af:6c:70:d8:cc:ad:ce:39:3f:d3:29:91: b6:55:97:96:61:d3:0b:7f:25:51:e2:17:c5:17:89: 72:4e:8b:63:82:2c:a7:c3:ac:b6:43:56:d9:dd:37: ac:3f:40:dc:59:31:eb:91:f9:69:3c:66:44:3c:28: a8:3e:93:d8:fc:f8:cf:72:6c:4c:88:65:9f:0f:14: 4b:5c:13:a5:32:ab:18:68:6a:67:33:15:67:95:2b: ea:c0:5b:5c:78:1b:6c:96:ca:bc:80:c7:bb:67:d4: dc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CD:08:03:20:08:64:20:58:D4:24:F1:BF:67:AF:2A:C4:68:78:25 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3234322e302f32332d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.242.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:86:f3:44:b6:53:94:f9:43:ba:0e:e7:af:50:40:7a:88:a0: 14:6b:e1:73:dd:15:2c:ef:08:e5:d3:06:a7:88:89:e2:39:09: 20:64:ae:7d:94:36:2b:0b:75:c5:b6:94:d6:06:05:18:6f:b6: 1c:8a:ff:3b:51:41:8e:28:2e:61:ce:56:51:7f:a5:71:12:2b: 5f:21:15:2a:d7:8b:f1:6a:99:99:c5:49:0a:96:88:d9:b3:e9: 04:56:af:ca:4d:d8:71:8a:06:d0:ab:31:9c:af:3e:9c:0a:ff: bb:59:a5:00:91:74:c0:6d:73:72:ef:bd:4e:69:1f:93:df:1b: 33:0a:69:6f:11:fc:e9:23:a2:13:df:04:69:f8:5a:9e:3b:5c: 42:4e:47:ab:4e:c8:52:33:6d:10:77:ab:69:78:06:c4:1c:98: 58:c4:4e:19:ab:fb:b8:ef:62:ef:15:bd:7b:02:47:3f:2a:3e: 23:4e:49:16:ab:18:4e:00:9d:13:1d:63:95:e6:63:ed:aa:0e: 00:e2:bb:6d:8e:ed:74:5f:03:1c:20:a7:92:58:d9:36:a7:ea: 8a:1b:70:04:7b:d7:62:23:a3:14:90:af:c0:2e:c2:0a:57:c7: ac:0a:0c:32:58:13:fb:99:17:6b:cc:28:29:5c:84:55:a5:2e: 9f:8c:0c:71 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUTBm9qa1VBioG2gv+rMp1tUgeMn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjdaFw0yNzAxMTkwMjI4MjdaMDMxMTAvBgNV BAMTKDVCQ0QwODAzMjAwODY0MjA1OEQ0MjRGMUJGNjdBRjJBQzQ2ODc4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDARjkLfHtaEYwKrpE/9o+eShnK 0ygHuIhpkuADP8i7czfoKiutUe0MTAoE87l8oIW47UKXUoEjxbs6kTNmtDFFMbvW 4edDMB0aVdM2P6HPpMY/8rjr0IWFIiPld+OZ2jU4g1qHUnM1x5QqbjQaP4udJWs0 sqbnPh0ZC1+16GnZM7/DdDhkAW2Lg0U3+a6BlogV+kxh/pMoca9scNjMrc45P9Mp kbZVl5Zh0wt/JVHiF8UXiXJOi2OCLKfDrLZDVtndN6w/QNxZMeuR+Wk8ZkQ8KKg+ k9j8+M9ybEyIZZ8PFEtcE6UyqxhoamczFWeVK+rAW1x4G2yWyryAx7tn1NzZAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUW80IAyAIZCBY1CTxv2evKsRoeCUwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMxMmUzMjM0MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAd+h8jANBgkqhkiG9w0BAQsFAAOCAQEAT4bzRLZTlPlDug7nr1BAeoig FGvhc90VLO8I5dMGp4iJ4jkJIGSufZQ2Kwt1xbaU1gYFGG+2HIr/O1FBjiguYc5W UX+lcRIrXyEVKteL8WqZmcVJCpaI2bPpBFavyk3YcYoG0KsxnK8+nAr/u1mlAJF0 wG1zcu+9Tmkfk98bMwppbxH86SOiE98EafhanjtcQk5Hq07IUjNtEHeraXgGxByY WMROGav7uO9i7xW9ewJHPyo+I05JFqsYTgCdEx1jleZj7aoOAOK7bY7tdF8DHCCn kljZNqfqihtwBHvXYiOjFJCvwC7CClfHrAoMMlgT+5kXa8woKVyEVaUun4wMcQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:04 2026 by rpki-client