This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3232332e3231322e302e302f31352d3234203d3e203137393632.roa File: 3232332e3231322e302e302f31352d3234203d3e203137393632.roa (raw, json) Hash identifier: VIMZpXymVqfAjQ2dMLSK6u00VThYhUs8pkCRyuUxGBM= Subject key identifier: ED:16:EC:02:39:48:D3:0D:B6:5A:FF:22:2C:7E:50:F3:56:E7:89:CE Certificate issuer: /CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Certificate serial: 472A0ACB89AF766E36E3B3459D91160538E991DB Authority key identifier: AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3232332e3231322e302e302f31352d3234203d3e203137393632.roa Signing time: Tue 20 Jan 2026 02:14:15 +0000 ROA not before: Tue 20 Jan 2026 02:09:15 +0000 ROA not after: Tue 19 Jan 2027 02:14:15 +0000 asID: 17962 IP address blocks: 223.212.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2a:0a:cb:89:af:76:6e:36:e3:b3:45:9d:91:16:05:38:e9:91:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Validity Not Before: Jan 20 02:09:15 2026 GMT Not After : Jan 19 02:14:15 2027 GMT Subject: CN=ED16EC023948D30DB65AFF222C7E50F356E789CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:7c:98:29:ca:fe:41:39:05:59:76:7a:59: d1:21:1a:03:67:a7:24:25:8b:99:61:d3:1a:a4:01: 9b:d1:3f:d8:5e:bd:ea:f7:b3:e7:77:76:08:c4:b7: bd:cc:65:60:df:81:a7:79:a1:af:92:25:ef:98:61: a1:03:a9:04:44:ec:db:2c:ad:1d:ff:a1:23:ff:37: e8:b0:0d:e5:1f:ed:20:e8:3a:90:d7:39:eb:33:4a: ff:17:b4:c7:ac:be:9e:1b:ac:76:a6:02:d8:27:1f: 08:bf:fe:02:6f:5c:8c:5c:26:ca:c7:ac:b5:5f:f7: cb:27:08:3f:32:f6:59:87:18:0c:e0:64:0d:4d:64: 5c:3a:e8:0e:da:96:e2:a7:6d:48:7f:8c:9b:a2:d5: e8:d7:f2:16:d7:14:bd:64:4e:c3:ea:3d:e0:30:4a: 19:a7:a0:46:a6:ac:72:7c:4f:a1:af:db:df:d5:9c: 44:7f:61:65:9d:45:a2:d0:1b:e4:45:02:b0:5b:3d: 3a:6b:4a:d7:f5:3d:d9:28:b3:a3:d7:94:c4:b5:51: f5:cb:e3:0c:79:59:57:89:63:59:7d:20:40:25:eb: 5d:8b:cc:6b:81:5d:10:88:d8:b6:49:54:54:24:9c: e7:df:be:bd:76:b8:8a:60:1f:8d:95:ce:ee:55:45: fd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:16:EC:02:39:48:D3:0D:B6:5A:FF:22:2C:7E:50:F3:56:E7:89:CE X509v3 Authority Key Identifier: keyid:AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3232332e3231322e302e302f31352d3234203d3e203137393632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.212.0.0/15 Signature Algorithm: sha256WithRSAEncryption 55:f5:e0:51:64:f3:ca:d7:81:19:0a:ed:be:7b:e6:c5:73:d0: 5d:62:16:99:c9:14:47:4e:28:1d:a8:b3:ea:54:a0:71:de:91: b2:9d:8e:77:0a:02:70:ec:33:da:30:df:2b:d1:3b:f4:89:b8: 2c:e9:37:81:ca:a4:0d:1e:8a:f3:f4:62:1d:f9:99:bf:24:fb: 28:f2:64:f0:43:e5:2a:79:13:e0:4c:5d:ac:c9:71:46:1b:66: 8e:c6:0e:cf:22:34:91:38:2a:cb:67:1c:a6:f4:f5:2f:e2:7e: 69:0b:28:33:4c:74:c2:e2:d8:39:d4:cb:ec:0b:a1:7a:b6:6f: 14:20:d2:f8:7c:ef:f3:c5:81:e3:7e:df:6b:e9:cb:89:7b:7c: 4b:24:de:74:71:86:f3:c6:46:fd:3c:9d:ed:cf:59:ae:e0:e0: 4b:a8:07:97:42:7b:fb:88:96:f0:fb:b3:45:d2:b1:ad:42:e1: bb:8a:d7:0f:97:aa:49:1d:4c:63:6d:ee:7b:5b:e3:54:58:62: 32:13:59:ee:0e:44:31:3f:96:b9:18:2b:ff:23:21:64:31:4c: 6d:7d:34:73:21:68:b0:26:80:90:96:90:ad:09:da:b8:cc:07: 7d:93:29:e8:67:b9:64:fa:9d:56:57:28:a5:29:6c:a0:37:22: d3:41:75:59 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIURyoKy4mvdm4247NFnZEWBTjpkdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0 QjRCRDQyNjAeFw0yNjAxMjAwMjA5MTVaFw0yNzAxMTkwMjE0MTVaMDMxMTAvBgNV BAMTKEVEMTZFQzAyMzk0OEQzMERCNjVBRkYyMjJDN0U1MEYzNTZFNzg5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5pHyYKcr+QTkFWXZ6WdEhGgNn pyQli5lh0xqkAZvRP9hever3s+d3dgjEt73MZWDfgad5oa+SJe+YYaEDqQRE7Nss rR3/oSP/N+iwDeUf7SDoOpDXOeszSv8XtMesvp4brHamAtgnHwi//gJvXIxcJsrH rLVf98snCD8y9lmHGAzgZA1NZFw66A7aluKnbUh/jJui1ejX8hbXFL1kTsPqPeAw ShmnoEamrHJ8T6Gv29/VnER/YWWdRaLQG+RFArBbPTprStf1Pdkos6PXlMS1UfXL 4wx5WVeJY1l9IEAl612LzGuBXRCI2LZJVFQknOffvr12uIpgH42Vzu5VRf2tAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQU7RbsAjlI0w22Wv8iLH5Q81bnic4wHwYDVR0j BBgwFoAUrdeakGE8n6LtEpTHf9uwh0tL1CYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzE0NDE5My8wL0FERDc5QTkwNjEzQzlGQTJFRDEyOTRDNzdGREJC MDg3NEI0QkQ0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0QjRCRDQyNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MTQ0MTkzLzAvMzIzMjMzMmUzMjMx MzIyZTMwMmUzMDJmMzEzNTJkMzIzNDIwM2QzZTIwMzEzNzM5MzYzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAd/UMA0GCSqGSIb3DQEBCwUAA4IBAQBV9eBRZPPK14EZCu2+e+bFc9BdYhaZ yRRHTigdqLPqVKBx3pGynY53CgJw7DPaMN8r0Tv0ibgs6TeByqQNHorz9GId+Zm/ JPso8mTwQ+UqeRPgTF2syXFGG2aOxg7PIjSROCrLZxym9PUv4n5pCygzTHTC4tg5 1MvsC6F6tm8UINL4fO/zxYHjft9r6cuJe3xLJN50cYbzxkb9PJ3tz1mu4OBLqAeX Qnv7iJbw+7NF0rGtQuG7itcPl6pJHUxjbe57W+NUWGIyE1nuDkQxP5a5GCv/IyFk MUxtfTRzIWiwJoCQlpCtCdq4zAd9kynoZ7lk+p1WVyilKWygNyLTQXVZ -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:44 2026 by rpki-client