This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3232322e3132352e302e302f31362d3234203d3e203137393632.roa File: 3232322e3132352e302e302f31362d3234203d3e203137393632.roa (raw, json) Hash identifier: XVlPVtnxFUqwjLYUkxXF4wjBVVEYWgIOUL8vy17tBWc= Subject key identifier: 69:E7:23:60:68:20:A1:35:F6:AB:0F:A3:24:3E:A1:1B:42:2A:B6:14 Certificate issuer: /CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Certificate serial: 230EBD2F4529DECE021642ADE5EA083DFB8F622C Authority key identifier: AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3232322e3132352e302e302f31362d3234203d3e203137393632.roa Signing time: Tue 20 Jan 2026 02:14:15 +0000 ROA not before: Tue 20 Jan 2026 02:09:15 +0000 ROA not after: Tue 19 Jan 2027 02:14:15 +0000 asID: 17962 IP address blocks: 222.125.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0e:bd:2f:45:29:de:ce:02:16:42:ad:e5:ea:08:3d:fb:8f:62:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Validity Not Before: Jan 20 02:09:15 2026 GMT Not After : Jan 19 02:14:15 2027 GMT Subject: CN=69E723606820A135F6AB0FA3243EA11B422AB614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:07:31:b0:c3:d9:eb:94:4d:12:29:58:95:10: c8:80:4c:04:11:50:0b:78:81:e3:7a:57:6e:96:86: b5:71:68:3a:dc:5c:7f:57:88:37:c1:83:4e:0b:3c: 31:28:e9:e2:a6:96:f0:25:7c:0a:b3:1c:df:d5:08: 2c:a2:1c:0b:ce:ea:df:77:62:3d:c3:b0:45:ee:67: 87:e6:6d:3f:be:65:69:af:99:38:87:82:d5:19:d5: 58:5b:80:86:4c:c4:fb:9e:7a:08:7a:78:93:b0:c4: d1:a5:1a:59:3c:86:76:36:16:75:ed:9c:48:e0:5e: d1:e5:dc:44:cb:4b:32:eb:cf:4c:e0:cb:43:0b:a0: 84:a3:1a:5b:da:e3:f6:2e:88:a8:0b:20:db:48:64: 7d:38:94:b3:2c:a9:ef:59:20:c4:80:b1:61:3b:f4: 9a:a2:31:18:3e:ce:cd:0a:2a:10:13:c3:bc:4b:2a: 3c:da:bb:f1:68:ad:e8:a6:b5:54:75:b6:a7:ea:0c: 29:47:11:e8:16:10:68:1d:fc:fa:ff:67:30:79:42: 87:2f:2e:f6:14:ea:78:31:ab:f7:73:d3:1b:b4:2c: 32:e5:16:85:f8:cd:45:29:e1:f4:87:b6:b1:02:8a: 4e:cd:d6:6d:1f:6e:02:b2:f1:87:d0:fb:43:ce:2d: 1e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E7:23:60:68:20:A1:35:F6:AB:0F:A3:24:3E:A1:1B:42:2A:B6:14 X509v3 Authority Key Identifier: keyid:AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3232322e3132352e302e302f31362d3234203d3e203137393632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 222.125.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1f:08:0e:38:0b:70:fd:35:c0:c1:d6:b1:2f:52:97:b4:8c:85: 30:d8:e6:37:f2:1c:be:1c:02:e3:ad:38:00:19:a5:f5:f0:ce: 03:10:7f:f1:a4:b3:35:38:1b:8d:87:db:9a:b6:27:f5:12:67: 8c:c0:6c:60:9e:a2:1e:9d:e6:3f:be:5d:fd:73:39:03:e1:3e: a9:ff:9a:4d:81:25:b3:92:98:e9:4e:ec:6c:bd:8a:83:3e:2c: 0b:96:96:36:9e:7b:c8:87:8b:54:58:54:e2:6a:0a:a3:ef:fe: 48:5f:7b:85:a4:74:ff:d7:c6:92:a9:6e:92:c9:2b:df:0d:67: a9:00:7a:e6:2d:b3:88:eb:43:ea:e5:24:33:d0:fd:5d:a0:86: 02:e1:66:6c:40:f1:2b:b4:27:a4:6f:4a:46:df:f4:7d:77:dd: 19:4c:4e:b7:9b:25:02:4d:35:6d:7c:43:ab:8f:ee:20:93:a8: c7:42:e0:d6:b7:5d:18:f1:1d:81:36:66:a1:93:ce:47:e7:36: 17:3b:9b:36:a1:4e:53:c9:ae:ba:46:a9:91:11:8b:d6:9c:76: 0f:c4:6a:1a:fe:b0:8b:8c:1a:ec:ca:e1:05:49:25:8b:82:b0: ae:27:d8:d6:76:f0:ed:bc:8c:6a:15:9b:59:6c:73:67:fe:67: b1:c0:b3:c1 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUIw69L0Up3s4CFkKt5eoIPfuPYiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0 QjRCRDQyNjAeFw0yNjAxMjAwMjA5MTVaFw0yNzAxMTkwMjE0MTVaMDMxMTAvBgNV BAMTKDY5RTcyMzYwNjgyMEExMzVGNkFCMEZBMzI0M0VBMTFCNDIyQUI2MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRBzGww9nrlE0SKViVEMiATAQR UAt4geN6V26WhrVxaDrcXH9XiDfBg04LPDEo6eKmlvAlfAqzHN/VCCyiHAvO6t93 Yj3DsEXuZ4fmbT++ZWmvmTiHgtUZ1VhbgIZMxPueegh6eJOwxNGlGlk8hnY2FnXt nEjgXtHl3ETLSzLrz0zgy0MLoISjGlva4/YuiKgLINtIZH04lLMsqe9ZIMSAsWE7 9JqiMRg+zs0KKhATw7xLKjzau/ForeimtVR1tqfqDClHEegWEGgd/Pr/ZzB5Qocv LvYU6ngxq/dz0xu0LDLlFoX4zUUp4fSHtrECik7N1m0fbgKy8YfQ+0POLR63AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUaecjYGggoTX2qw+jJD6hG0IqthQwHwYDVR0j BBgwFoAUrdeakGE8n6LtEpTHf9uwh0tL1CYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzE0NDE5My8wL0FERDc5QTkwNjEzQzlGQTJFRDEyOTRDNzdGREJC MDg3NEI0QkQ0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0QjRCRDQyNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MTQ0MTkzLzAvMzIzMjMyMmUzMTMy MzUyZTMwMmUzMDJmMzEzNjJkMzIzNDIwM2QzZTIwMzEzNzM5MzYzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAN59MA0GCSqGSIb3DQEBCwUAA4IBAQAfCA44C3D9NcDB1rEvUpe0jIUw2OY3 8hy+HALjrTgAGaX18M4DEH/xpLM1OBuNh9uatif1EmeMwGxgnqIeneY/vl39czkD 4T6p/5pNgSWzkpjpTuxsvYqDPiwLlpY2nnvIh4tUWFTiagqj7/5IX3uFpHT/18aS qW6SySvfDWepAHrmLbOI60Pq5SQz0P1doIYC4WZsQPErtCekb0pG3/R9d90ZTE63 myUCTTVtfEOrj+4gk6jHQuDWt10Y8R2BNmahk85H5zYXO5s2oU5Tya66RqmREYvW nHYPxGoa/rCLjBrsyuEFSSWLgrCuJ9jWdvDtvIxqFZtZbHNn/mexwLPB -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:17 2026 by rpki-client