This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3232302e3234332e3234382e302f32342d3234203d3e203534393934.roa File: 3232302e3234332e3234382e302f32342d3234203d3e203534393934.roa (raw, json) Hash identifier: ktVeTgessk6xRjmQOhmm5CHyeA7OAmRW1PFH8DCbCvo= Subject key identifier: CE:EE:2C:89:15:78:43:8B:51:1D:39:1B:E0:AC:D2:73:11:C4:9E:DE Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE Certificate serial: 556C6284EDB3CC085C6D9B287D3DA5DA8BBE3F1C Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3232302e3234332e3234382e302f32342d3234203d3e203534393934.roa Signing time: Tue 20 Jan 2026 02:26:10 +0000 ROA not before: Tue 20 Jan 2026 02:21:10 +0000 ROA not after: Tue 19 Jan 2027 02:26:10 +0000 asID: 54994 IP address blocks: 220.243.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 14:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:6c:62:84:ed:b3:cc:08:5c:6d:9b:28:7d:3d:a5:da:8b:be:3f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE Validity Not Before: Jan 20 02:21:10 2026 GMT Not After : Jan 19 02:26:10 2027 GMT Subject: CN=CEEE2C891578438B511D391BE0ACD27311C49EDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:59:cd:a3:42:ea:32:01:67:1f:39:3c:03:bd: e6:d8:b8:18:fe:e1:35:83:36:23:f1:10:7d:65:84: 89:33:e5:f4:7d:4a:59:9e:24:25:ef:69:3c:36:07: 82:ca:03:a4:4b:3f:52:22:19:fe:08:89:4b:f8:1f: 87:59:0d:17:37:28:48:2e:ae:7a:94:d6:45:65:f6: 64:9a:c3:97:2b:53:24:9a:9c:bb:f3:10:30:9d:62: 71:c0:3d:94:29:db:6c:16:7e:8a:d6:09:0c:d2:2a: ee:6a:01:58:9b:9d:6e:0c:9f:b1:ae:ce:87:b6:07: 83:49:75:12:3f:84:11:4c:51:c0:a2:a9:4e:59:d4: 42:d6:fc:da:4b:d6:2b:c8:22:e6:57:3b:7d:eb:76: 91:f6:4e:50:64:2a:34:5b:16:af:7d:25:50:b4:cf: 95:7c:25:18:bb:03:c8:06:6a:9c:7a:c0:c1:57:5a: 1d:51:ee:ef:a6:e9:9a:16:6e:51:74:6c:8a:89:c1: cf:35:00:a5:8b:9e:ce:a6:d6:e0:c6:f4:de:b1:3f: ec:d8:56:3f:a2:ef:5f:84:bb:a7:c8:e5:47:0c:7c: e2:28:c5:ba:af:9f:19:d1:4d:f5:15:cb:b6:e4:30: 3e:f7:dc:85:58:14:dd:6d:d6:6e:23:46:00:9c:8b: 2b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EE:2C:89:15:78:43:8B:51:1D:39:1B:E0:AC:D2:73:11:C4:9E:DE X509v3 Authority Key Identifier: keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3232302e3234332e3234382e302f32342d3234203d3e203534393934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.243.248.0/24 Signature Algorithm: sha256WithRSAEncryption 01:59:e5:86:51:2d:3e:c8:98:0b:c2:f5:39:5e:ee:82:12:77: 79:29:fb:f3:92:7e:0d:37:a2:80:29:57:65:03:cf:5b:fe:68: 72:27:1d:3a:c1:86:bb:2a:0f:f3:fa:01:ae:4b:df:1c:e4:4e: 86:ae:e2:77:b8:82:ef:9c:d7:20:75:7c:25:b1:93:62:96:9d: 52:61:72:86:12:71:95:34:3e:39:64:8c:4a:fc:19:84:dd:94: c2:89:62:b7:8b:c3:28:6f:b5:10:fc:15:17:6e:8a:25:11:d8: 68:c1:28:77:48:95:f9:73:99:03:3e:1a:c5:a1:d8:59:b1:92: 5f:42:3f:86:bc:f7:dc:62:14:c6:5a:b4:0c:86:82:83:b1:5c: 93:25:78:4c:3b:3c:a4:24:db:05:83:ad:28:26:69:5f:c4:1a: 20:4b:be:d8:ba:e0:ef:e9:cf:25:91:97:15:dd:d3:5f:d0:55: 62:dc:a8:fe:5e:bf:1c:34:dc:54:e8:31:98:54:12:75:7c:83: 43:45:34:d0:58:0a:e1:bd:18:14:d6:72:67:4e:e7:60:22:88: fd:80:81:13:c3:c5:98:0c:ea:8e:c1:ef:23:14:6b:f8:4e:0e: b0:a6:e7:1f:c2:7c:e1:ac:63:d4:45:a0:57:06:91:dc:1b:d4: 79:b6:2a:ab -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUVWxihO2zzAhcbZsofT2l2ou+PxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0 MjNBOTBBRTAeFw0yNjAxMjAwMjIxMTBaFw0yNzAxMTkwMjI2MTBaMDMxMTAvBgNV BAMTKENFRUUyQzg5MTU3ODQzOEI1MTFEMzkxQkUwQUNEMjczMTFDNDlFREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNWc2jQuoyAWcfOTwDvebYuBj+ 4TWDNiPxEH1lhIkz5fR9SlmeJCXvaTw2B4LKA6RLP1IiGf4IiUv4H4dZDRc3KEgu rnqU1kVl9mSaw5crUySanLvzEDCdYnHAPZQp22wWforWCQzSKu5qAVibnW4Mn7Gu zoe2B4NJdRI/hBFMUcCiqU5Z1ELW/NpL1ivIIuZXO33rdpH2TlBkKjRbFq99JVC0 z5V8JRi7A8gGapx6wMFXWh1R7u+m6ZoWblF0bIqJwc81AKWLns6m1uDG9N6xP+zY Vj+i71+Eu6fI5UcMfOIoxbqvnxnRTfUVy7bkMD733IVYFN1t1m4jRgCciyv5AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUzu4siRV4Q4tRHTkb4KzScxHEnt4wHwYDVR0j BBgwFoAU1VSQ+4hVUjB6HSceAlE7TUI6kK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTk4Mjg1MC8wL0Q1NTQ5MEZCODg1NTUyMzA3QTFEMjcxRTAyNTEz QjRENDIzQTkwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0MjNBOTBBRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5ODI4NTAvMC8zMjMyMzAyZTMy MzQzMzJlMzIzNDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNDM5MzkzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANzz+DANBgkqhkiG9w0BAQsFAAOCAQEAAVnlhlEtPsiYC8L1OV7u ghJ3eSn785J+DTeigClXZQPPW/5ocicdOsGGuyoP8/oBrkvfHOROhq7id7iC75zX IHV8JbGTYpadUmFyhhJxlTQ+OWSMSvwZhN2Uwolit4vDKG+1EPwVF26KJRHYaMEo d0iV+XOZAz4axaHYWbGSX0I/hrz33GIUxlq0DIaCg7FckyV4TDs8pCTbBYOtKCZp X8QaIEu+2Lrg7+nPJZGXFd3TX9BVYtyo/l6/HDTcVOgxmFQSdXyDQ0U00FgK4b0Y FNZyZ07nYCKI/YCBE8PFmAzqjsHvIxRr+E4OsKbnH8J84axj1EWgVwaR3BvUebYq qw== -----END CERTIFICATE-----Generated at Tue Jan 20 07:49:30 2026 by rpki-client