This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136322e302e302f31352d3234203d3e2037363431.roa File: 3232332e3136322e302e302f31352d3234203d3e2037363431.roa (raw, json) Hash identifier: M9/MrcCVw9qs1212Emot70/aYGHyxH0ZPwMs4g1FVq4= Subject key identifier: 27:EA:E6:41:93:34:69:8F:AD:20:64:39:E8:B0:AD:2C:9B:84:FB:1B Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 5C91DF22F373B0DFC875C5F20AE00486E15488A7 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136322e302e302f31352d3234203d3e2037363431.roa Signing time: Tue 20 Jan 2026 02:28:27 +0000 ROA not before: Tue 20 Jan 2026 02:23:27 +0000 ROA not after: Tue 19 Jan 2027 02:28:27 +0000 asID: 7641 IP address blocks: 223.162.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:91:df:22:f3:73:b0:df:c8:75:c5:f2:0a:e0:04:86:e1:54:88:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:23:27 2026 GMT Not After : Jan 19 02:28:27 2027 GMT Subject: CN=27EAE6419334698FAD206439E8B0AD2C9B84FB1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:36:29:bc:14:1e:b7:f6:5c:75:54:a5:91: c7:42:8f:0d:00:9b:a6:72:fb:f9:d8:78:b9:97:2b: 37:e2:d2:80:1d:fb:33:8b:2a:c5:a2:6b:df:8a:da: b9:b4:d2:95:8c:48:4c:5f:c3:dc:a6:7d:f1:fa:e6: da:9c:5b:de:6a:84:6d:0e:ef:eb:3b:1c:9e:37:52: 16:85:41:8f:d1:d6:cf:50:85:a0:69:f8:6c:92:f9: cc:0c:fc:6d:cf:ec:a2:d7:d7:88:b4:30:b3:94:54: 2e:dd:a0:b1:89:09:a4:04:9a:4f:31:15:c6:4e:ac: 90:bd:47:14:50:bb:ef:97:0b:5d:e6:58:b5:1c:ee: 60:63:fd:57:0c:67:0e:40:81:3e:7b:ef:02:26:8a: 17:f8:23:9c:86:81:cf:dd:1c:f9:ba:9c:6f:7b:58: a4:19:9d:a5:26:99:55:de:19:b1:23:22:d7:04:ff: a4:83:0b:e2:3f:cc:9a:03:cd:b0:84:4e:a1:b6:19: 42:5e:6e:45:aa:7f:08:32:33:0b:c9:ce:e2:c2:23: d4:ad:20:48:7b:06:97:5a:4c:cb:7e:d8:ec:29:ea: 06:fc:a2:47:10:3d:e3:d9:c6:f7:72:fc:07:4d:22: 2d:ed:a1:72:8e:57:4b:51:52:76:e5:b9:1b:5a:6a: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EA:E6:41:93:34:69:8F:AD:20:64:39:E8:B0:AD:2C:9B:84:FB:1B X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136322e302e302f31352d3234203d3e2037363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.162.0.0/15 Signature Algorithm: sha256WithRSAEncryption 17:a4:7c:15:18:7f:f5:7e:1e:89:35:ec:59:c4:cf:00:df:35: 48:ac:2e:4e:de:7c:ca:4d:96:a9:2c:1a:d7:86:73:89:85:7a: 72:7b:fa:c9:7c:1f:d6:06:cf:f3:5d:a4:c2:e6:37:05:12:62: a8:ba:fc:2c:91:6c:f6:c9:ef:7c:60:75:64:86:16:9d:06:94: 5e:e0:9a:d0:a7:4a:23:6b:9b:2b:9e:68:fc:89:67:33:01:e6: a2:05:dc:fe:04:71:79:5a:9a:98:a7:e5:56:8e:0f:40:4a:04: 63:02:66:79:72:fa:a6:c1:b1:51:01:09:e4:21:83:86:e5:66: d0:f7:54:45:6b:85:06:6b:0a:7a:64:d2:22:11:09:ed:ae:f1: ba:a4:69:ca:16:b6:66:82:ee:ae:83:9e:b4:a7:9c:45:fd:11: 51:3a:db:15:04:d2:89:94:de:34:0c:5a:cc:fc:5d:0d:a3:6a: 0c:34:76:d2:e4:dd:ff:58:54:62:a7:c7:18:4e:8a:12:06:c8: 3f:ca:f3:4e:1b:62:3e:dd:77:80:0f:13:0b:3f:fc:34:20:79: 5d:95:89:d3:ba:7d:db:9d:5d:07:d6:6c:72:c9:79:87:e1:94: f0:7e:9a:68:ea:e8:ef:bc:2a:0d:d3:f7:89:0b:22:f2:43:ea: 68:d2:1e:34 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUXJHfIvNzsN/IdcXyCuAEhuFUiKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIzMjdaFw0yNzAxMTkwMjI4MjdaMDMxMTAvBgNV BAMTKDI3RUFFNjQxOTMzNDY5OEZBRDIwNjQzOUU4QjBBRDJDOUI4NEZCMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKBTYpvBQet/ZcdVSlkcdCjw0A m6Zy+/nYeLmXKzfi0oAd+zOLKsWia9+K2rm00pWMSExfw9ymffH65tqcW95qhG0O 7+s7HJ43UhaFQY/R1s9QhaBp+GyS+cwM/G3P7KLX14i0MLOUVC7doLGJCaQEmk8x FcZOrJC9RxRQu++XC13mWLUc7mBj/VcMZw5AgT577wImihf4I5yGgc/dHPm6nG97 WKQZnaUmmVXeGbEjItcE/6SDC+I/zJoDzbCETqG2GUJebkWqfwgyMwvJzuLCI9St IEh7BpdaTMt+2Owp6gb8okcQPePZxvdy/AdNIi3toXKOV0tRUnbluRtaagJ3AgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUJ+rmQZM0aY+tIGQ56LCtLJuE+xswHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMjMzMmUzMTM2 MzIyZTMwMmUzMDJmMzEzNTJkMzIzNDIwM2QzZTIwMzczNjM0MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwHfojANBgkqhkiG9w0BAQsFAAOCAQEAF6R8FRh/9X4eiTXsWcTPAN81SKwuTt58 yk2WqSwa14ZziYV6cnv6yXwf1gbP812kwuY3BRJiqLr8LJFs9snvfGB1ZIYWnQaU XuCa0KdKI2ubK55o/IlnMwHmogXc/gRxeVqamKflVo4PQEoEYwJmeXL6psGxUQEJ 5CGDhuVm0PdURWuFBmsKemTSIhEJ7a7xuqRpyha2ZoLuroOetKecRf0RUTrbFQTS iZTeNAxazPxdDaNqDDR20uTd/1hUYqfHGE6KEgbIP8rzThtiPt13gA8TCz/8NCB5 XZWJ07p9251dB9Zscsl5h+GU8H6aaOro77wqDdP3iQsi8kPqaNIeNA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:45 2026 by rpki-client