This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3235322e302f32332d3234203d3e203234343434.roa File: 3232332e3136312e3235322e302f32332d3234203d3e203234343434.roa (raw, json) Hash identifier: 4ocQPvvXmbKGtFslIgYq1k/T2hci6o9N7T/udOSeubM= Subject key identifier: 0C:07:1A:B2:C3:2C:52:EA:2C:79:BE:6D:E0:31:42:59:52:5C:F2:60 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 018A40912C80B6F24FDB15B0FA2D4076A8A3D402 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3235322e302f32332d3234203d3e203234343434.roa Signing time: Tue 20 Jan 2026 02:27:26 +0000 ROA not before: Tue 20 Jan 2026 02:22:26 +0000 ROA not after: Tue 19 Jan 2027 02:27:26 +0000 asID: 24444 IP address blocks: 223.161.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:40:91:2c:80:b6:f2:4f:db:15:b0:fa:2d:40:76:a8:a3:d4:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:26 2026 GMT Not After : Jan 19 02:27:26 2027 GMT Subject: CN=0C071AB2C32C52EA2C79BE6DE0314259525CF260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b7:70:cc:f7:f5:ba:ac:0a:c5:64:7f:99:4e: 32:ef:3d:67:a7:1c:a9:40:dd:3f:71:13:58:c2:95: ba:b3:77:a6:1a:e8:f5:c7:67:58:83:d9:79:a5:f8: c8:4a:b5:49:16:92:43:e4:5a:73:1c:96:e9:65:2c: a0:96:33:41:5e:6a:61:07:32:ba:7a:27:dd:b7:e1: 11:10:29:73:e4:89:92:bb:4f:bb:ee:be:d9:39:c8: aa:d2:88:70:dd:79:3e:9a:1b:ac:67:30:81:08:85: 4a:95:53:6f:07:48:fa:d4:d8:38:a6:b7:f4:84:c3: 6b:62:d8:99:aa:1f:95:d8:b6:14:1c:07:be:0e:b8: b6:60:0a:4f:39:d2:5c:b7:76:1a:46:6d:96:cb:de: 27:11:40:ac:94:0c:c1:bd:4f:89:a5:5a:e6:c1:19: 6a:47:90:a3:8f:86:24:c2:f4:e7:18:4d:5e:eb:dd: 29:1e:9d:3c:09:0f:3b:76:12:80:ba:e8:7e:d3:be: a3:50:f3:3a:8f:c7:63:6e:2f:47:ca:93:4e:9c:e0: 3d:15:50:6e:3f:c3:df:5c:d9:12:9a:1c:0b:d9:7a: 45:ea:6e:d2:d5:52:6f:b6:ce:e0:3f:81:ae:67:a1: 47:36:a0:3f:af:28:a5:41:1b:d4:38:c1:bc:59:9a: 2a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:07:1A:B2:C3:2C:52:EA:2C:79:BE:6D:E0:31:42:59:52:5C:F2:60 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3235322e302f32332d3234203d3e203234343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.252.0/23 Signature Algorithm: sha256WithRSAEncryption 04:e7:ee:10:4d:3d:88:f5:67:2f:55:6d:1e:e3:4a:6c:4f:44: 88:d4:e1:a6:2e:fc:04:17:25:2a:36:87:cd:38:f8:b0:be:05: 30:ac:68:de:5a:95:8d:0a:ab:6c:ad:04:bd:1c:c5:53:bb:4d: f5:35:97:59:42:04:1e:51:da:21:fb:3f:3c:71:f8:6a:14:01: f3:1c:7d:a3:c3:7c:a6:40:3c:7a:2d:66:2b:06:1e:e5:22:63: a4:ec:f3:70:b2:00:04:31:ee:79:73:7d:66:12:3d:90:46:ca: c4:95:a4:97:66:d9:0e:35:a2:a4:67:c2:fc:44:42:8c:11:3a: 20:9c:9c:c9:66:45:fa:2b:45:ad:3e:a4:f1:78:9e:bb:ac:68: 9d:4a:a1:e2:0f:9a:ab:b4:d2:61:a8:7c:99:a6:00:5d:6b:ba: bd:bd:ce:60:ce:2e:92:75:15:cd:8c:db:95:89:67:9d:4a:07: 22:1c:a2:35:6e:98:7b:b7:6f:4a:12:f6:77:d7:89:cb:96:7e: 89:91:1a:36:54:82:4e:de:f1:27:bc:44:f5:51:56:e5:a1:dc: a1:ad:11:b2:d1:c3:77:e5:5d:ff:75:59:d6:94:28:d9:1e:06: f9:10:3d:84:6d:ef:98:d4:cb:d3:72:4f:06:c5:9a:39:72:5b: 93:bb:de:b6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUAYpAkSyAtvJP2xWw+i1Adqij1AIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjZaFw0yNzAxMTkwMjI3MjZaMDMxMTAvBgNV BAMTKDBDMDcxQUIyQzMyQzUyRUEyQzc5QkU2REUwMzE0MjU5NTI1Q0YyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbt3DM9/W6rArFZH+ZTjLvPWen HKlA3T9xE1jClbqzd6Ya6PXHZ1iD2Xml+MhKtUkWkkPkWnMclullLKCWM0FeamEH Mrp6J9234REQKXPkiZK7T7vuvtk5yKrSiHDdeT6aG6xnMIEIhUqVU28HSPrU2Dim t/SEw2ti2JmqH5XYthQcB74OuLZgCk850ly3dhpGbZbL3icRQKyUDMG9T4mlWubB GWpHkKOPhiTC9OcYTV7r3SkenTwJDzt2EoC66H7TvqNQ8zqPx2NuL0fKk06c4D0V UG4/w99c2RKaHAvZekXqbtLVUm+2zuA/ga5noUc2oD+vKKVBG9Q4wbxZmip7AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUDAcassMsUuoseb5t4DFCWVJc8mAwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzIzNTMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNDM0MzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+h/DANBgkqhkiG9w0BAQsFAAOCAQEABOfuEE09iPVnL1VtHuNK bE9EiNThpi78BBclKjaHzTj4sL4FMKxo3lqVjQqrbK0EvRzFU7tN9TWXWUIEHlHa Ifs/PHH4ahQB8xx9o8N8pkA8ei1mKwYe5SJjpOzzcLIABDHueXN9ZhI9kEbKxJWk l2bZDjWipGfC/ERCjBE6IJycyWZF+itFrT6k8Xieu6xonUqh4g+aq7TSYah8maYA XWu6vb3OYM4uknUVzYzblYlnnUoHIhyiNW6Ye7dvShL2d9eJy5Z+iZEaNlSCTt7x J7xE9VFW5aHcoa0RstHDd+Vd/3VZ1pQo2R4G+RA9hG3vmNTL03JPBsWaOXJbk7ve tg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:42 2026 by rpki-client