This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3235302e302f32332d3234203d3e203234343435.roa File: 3232332e3136312e3235302e302f32332d3234203d3e203234343435.roa (raw, json) Hash identifier: GCqq+vb3YWNNk3mqAJ6S6/MIzaa3+AyEtwZlUpTd5gw= Subject key identifier: 73:2A:B0:C2:83:97:03:7D:AF:41:99:26:2D:62:48:48:8A:9A:83:2E Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 02D484E3B8E27804AB47C1665288440B16938F78 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3235302e302f32332d3234203d3e203234343435.roa Signing time: Tue 20 Jan 2026 02:27:23 +0000 ROA not before: Tue 20 Jan 2026 02:22:23 +0000 ROA not after: Tue 19 Jan 2027 02:27:23 +0000 asID: 24445 IP address blocks: 223.161.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d4:84:e3:b8:e2:78:04:ab:47:c1:66:52:88:44:0b:16:93:8f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:23 2026 GMT Not After : Jan 19 02:27:23 2027 GMT Subject: CN=732AB0C28397037DAF4199262D6248488A9A832E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9c:c5:97:69:d1:d3:94:4d:04:d5:60:e9:3e: c6:19:02:14:6a:96:ef:d4:34:90:51:6a:c8:22:f5: dc:73:df:fd:0a:06:5c:0e:2d:ce:dd:53:a6:28:50: 2a:3e:be:62:f5:ff:9a:16:aa:50:f2:64:f8:65:10: 24:6a:9f:8a:f6:77:dd:0e:2b:4e:3f:93:c1:fb:b0: 15:48:ac:a8:ea:57:49:4d:c8:6f:62:5b:bd:b3:e1: 62:12:9f:fe:e6:cf:f4:4d:b5:52:4a:3e:da:69:b7: 4f:28:2b:e7:a7:61:31:b4:b8:3e:f2:97:8f:f5:45: f0:79:5d:e7:b7:7d:dd:76:52:1b:b4:2c:7d:2c:91: 52:92:9e:39:73:58:e2:d4:5d:a5:e2:1f:0e:9c:78: ba:87:c2:24:3a:12:45:c3:e0:f1:34:f1:81:8c:30: 7e:82:6e:af:1b:34:40:26:26:bb:13:6d:96:36:17: 73:6a:d5:32:f9:1f:b4:4d:af:5a:2a:ed:46:08:89: 8c:ea:46:84:ba:f2:ff:95:15:34:40:d0:19:c9:33: 5b:0f:98:c1:b0:26:4b:84:c5:76:5a:d8:31:4b:86: c2:f5:bc:74:cd:ff:bf:91:0d:e6:3c:61:8a:5f:6f: 75:23:d9:f0:8f:81:85:0d:67:7f:c5:32:87:36:68: a3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2A:B0:C2:83:97:03:7D:AF:41:99:26:2D:62:48:48:8A:9A:83:2E X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3235302e302f32332d3234203d3e203234343435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.250.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:db:6c:52:86:32:af:11:5e:69:0c:5c:5e:84:5d:77:f7:7c: cc:1a:0f:34:4d:42:ad:1f:9f:69:d4:4f:36:7e:a3:44:0e:a6: c8:c8:f3:cf:32:c5:0d:ad:e3:ed:aa:08:77:7b:37:81:2c:76: 01:b9:15:80:80:f4:e7:82:a8:92:39:6c:f6:26:ee:a2:e1:e0: c3:ff:33:d6:fc:83:be:74:8e:14:65:b9:7e:3a:a6:eb:18:a1: 56:2d:49:3b:22:30:dd:e3:02:a2:3b:e8:53:f0:bc:9f:72:df: 4f:91:00:a3:c1:48:4d:b2:07:9e:4d:28:81:85:fb:f5:a5:62: 03:07:76:db:67:14:09:d3:9b:38:4c:b2:7e:5d:d1:24:30:87: 0c:23:61:ac:8d:0e:5d:b0:00:95:e1:92:0f:30:46:90:3d:de: f5:0a:80:51:a7:b4:3c:6f:5d:f9:4a:3e:a7:7f:0c:f1:13:a6: 26:24:84:d5:d6:d4:1f:b0:d1:b1:2a:c0:b5:9b:7c:12:ff:1f: 5a:95:d1:a8:49:dd:1e:3b:fe:88:dc:cc:54:47:b5:9b:ef:8b: 50:94:59:54:50:af:48:79:07:21:9e:59:d7:76:ef:35:25:0b: f9:75:64:bf:7f:42:e8:17:1b:4f:08:6e:39:2d:45:a9:a0:e1: c0:a2:70:42 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUAtSE47jieASrR8FmUohECxaTj3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjNaFw0yNzAxMTkwMjI3MjNaMDMxMTAvBgNV BAMTKDczMkFCMEMyODM5NzAzN0RBRjQxOTkyNjJENjI0ODQ4OEE5QTgzMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnMWXadHTlE0E1WDpPsYZAhRq lu/UNJBRasgi9dxz3/0KBlwOLc7dU6YoUCo+vmL1/5oWqlDyZPhlECRqn4r2d90O K04/k8H7sBVIrKjqV0lNyG9iW72z4WISn/7mz/RNtVJKPtppt08oK+enYTG0uD7y l4/1RfB5Xee3fd12Uhu0LH0skVKSnjlzWOLUXaXiHw6ceLqHwiQ6EkXD4PE08YGM MH6Cbq8bNEAmJrsTbZY2F3Nq1TL5H7RNr1oq7UYIiYzqRoS68v+VFTRA0BnJM1sP mMGwJkuExXZa2DFLhsL1vHTN/7+RDeY8YYpfb3Uj2fCPgYUNZ3/FMoc2aKPPAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUcyqwwoOXA32vQZkmLWJISIqagy4wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzIzNTMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNDM0MzQzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+h+jANBgkqhkiG9w0BAQsFAAOCAQEAK9tsUoYyrxFeaQxcXoRd d/d8zBoPNE1CrR+fadRPNn6jRA6myMjzzzLFDa3j7aoId3s3gSx2AbkVgID054Ko kjls9ibuouHgw/8z1vyDvnSOFGW5fjqm6xihVi1JOyIw3eMCojvoU/C8n3LfT5EA o8FITbIHnk0ogYX79aViAwd222cUCdObOEyyfl3RJDCHDCNhrI0OXbAAleGSDzBG kD3e9QqAUae0PG9d+Uo+p38M8ROmJiSE1dbUH7DRsSrAtZt8Ev8fWpXRqEndHjv+ iNzMVEe1m++LUJRZVFCvSHkHIZ5Z13bvNSUL+XVkv39C6BcbTwhuOS1FqaDhwKJw Qg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:40 2026 by rpki-client