This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3232332e32392e3235322e302f32322d3234203d3e203631333137.roa File: 3232332e32392e3235322e302f32322d3234203d3e203631333137.roa (raw, json) Hash identifier: APo4uBD4EPn74Kts2LVTa+C1AuxcshzFGASdtRo4hKg= Subject key identifier: B8:DC:50:F6:DE:A0:3F:27:28:89:60:55:49:64:87:CD:CF:00:A9:7C Certificate issuer: /CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8 Certificate serial: 3A70AD85883CFDC83BD2EC7CDC19EEB22E83B9B2 Authority key identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3232332e32392e3235322e302f32322d3234203d3e203631333137.roa Signing time: Tue 20 Jan 2026 02:08:21 +0000 ROA not before: Tue 20 Jan 2026 02:03:21 +0000 ROA not after: Tue 19 Jan 2027 02:08:21 +0000 asID: 61317 IP address blocks: 223.29.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 13:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:70:ad:85:88:3c:fd:c8:3b:d2:ec:7c:dc:19:ee:b2:2e:83:b9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8 Validity Not Before: Jan 20 02:03:21 2026 GMT Not After : Jan 19 02:08:21 2027 GMT Subject: CN=B8DC50F6DEA03F2728896055496487CDCF00A97C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:af:ed:bc:7f:82:f3:77:6b:1a:74:dd:c7:eb: 11:31:ff:ce:5c:16:ca:53:62:cb:de:2a:e4:b6:12: 5d:c0:bf:dd:b4:aa:ce:81:56:14:47:d7:46:b5:d7: 65:59:39:a4:a8:b5:31:11:2e:9c:8c:97:84:92:c3: 96:de:f5:b0:0c:38:7e:55:41:4f:bf:eb:4a:4b:1f: 5e:44:57:65:c2:f1:b6:ce:3c:81:26:ee:2f:67:5e: 47:98:d8:58:1b:17:d6:d9:84:0a:8a:3c:aa:12:de: 40:c8:ca:6f:29:d9:74:fd:ab:67:16:02:f0:97:06: d6:4e:49:e4:de:43:f8:5c:02:48:4f:90:e6:24:ed: 31:53:19:17:e1:37:bc:76:b0:17:bb:fb:03:11:b2: 24:25:7f:35:92:3f:b8:46:c6:69:f3:fd:25:0d:a4: d3:8e:ba:59:5a:f6:d7:40:f1:c5:08:14:e7:e5:fe: c3:b1:28:76:81:07:50:06:de:52:77:a9:d1:c0:57: 79:89:19:6c:3c:b3:f7:b6:56:fa:a2:f4:29:e0:b3: 2d:c1:b6:12:33:ff:5f:42:0b:e0:81:2c:9c:63:3a: 80:62:64:89:8d:8d:25:94:8a:91:55:a7:b9:26:59: c0:cd:86:cd:bd:95:2c:02:e7:7d:6c:e7:21:1e:47: 21:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DC:50:F6:DE:A0:3F:27:28:89:60:55:49:64:87:CD:CF:00:A9:7C X509v3 Authority Key Identifier: keyid:9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3232332e32392e3235322e302f32322d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.29.252.0/22 Signature Algorithm: sha256WithRSAEncryption 48:b4:7e:c3:c2:4b:cc:fc:c7:02:91:f8:5a:2d:ab:07:7d:d4: e7:9d:65:e1:c0:c9:71:e7:a0:cd:bc:c2:e4:1d:9f:9f:8d:63: 66:94:40:19:41:ad:68:52:c6:f2:ee:a4:a0:35:ad:ac:55:10: a9:c8:c9:36:bd:f5:3a:01:c3:3c:8b:8a:25:b9:e3:a8:46:4d: 32:ac:5f:38:3b:14:8e:61:c8:84:58:5a:e9:8c:a0:f6:3f:b6: 9f:0a:05:e7:d4:3e:fe:65:e0:f0:a4:47:58:a0:fc:43:e4:ba: c0:96:01:fd:00:ff:30:cc:bf:73:89:01:c2:0d:1a:f6:b0:71: 5e:e7:a2:5d:68:d3:2e:c2:ad:62:b5:8a:a4:ae:75:99:d5:41: 14:b1:d2:2c:03:09:47:c4:bf:51:30:54:58:26:25:a9:42:b6: a8:a2:07:63:6a:b5:91:8d:1e:b1:1c:68:1a:d8:18:5f:e0:cd: 40:c0:8c:15:df:fe:63:9d:01:08:48:8e:eb:d8:f1:79:1a:c7: 4c:32:7b:74:71:07:d3:c3:28:83:78:5b:ad:54:9e:e5:8f:fd: 1a:fa:56:78:e5:77:94:f6:c4:42:91:37:f3:63:73:32:6e:c8: 2d:98:6e:bf:4a:d3:bc:01:93:6a:e2:0a:ca:0f:29:b1:a2:18: 8e:ec:ea:9e -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUOnCthYg8/cg70ux83Bnusi6DubIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMz OERCQzVDODAeFw0yNjAxMjAwMjAzMjFaFw0yNzAxMTkwMjA4MjFaMDMxMTAvBgNV BAMTKEI4REM1MEY2REVBMDNGMjcyODg5NjA1NTQ5NjQ4N0NEQ0YwMEE5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCar+28f4Lzd2sadN3H6xEx/85c FspTYsveKuS2El3Av920qs6BVhRH10a112VZOaSotTERLpyMl4SSw5be9bAMOH5V QU+/60pLH15EV2XC8bbOPIEm7i9nXkeY2FgbF9bZhAqKPKoS3kDIym8p2XT9q2cW AvCXBtZOSeTeQ/hcAkhPkOYk7TFTGRfhN7x2sBe7+wMRsiQlfzWSP7hGxmnz/SUN pNOOulla9tdA8cUIFOfl/sOxKHaBB1AG3lJ3qdHAV3mJGWw8s/e2Vvqi9Cngsy3B thIz/19CC+CBLJxjOoBiZImNjSWUipFVp7kmWcDNhs29lSwC531s5yEeRyEvAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUuNxQ9t6gPycoiWBVSWSHzc8AqXwwHwYDVR0j BBgwFoAUnnvrgQIzNppH1C2Bp/UIQzjbxcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTgyMTY5OC8wLzlFN0JFQjgxMDIzMzM2OUE0N0Q0MkQ4MUE3RjUw ODQzMzhEQkM1QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMzOERCQzVDOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTgyMTY5OC8wLzMyMzIzMzJlMzIz OTJlMzIzNTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAt8d/DANBgkqhkiG9w0BAQsFAAOCAQEASLR+w8JLzPzHApH4Wi2rB33U 551l4cDJceegzbzC5B2fn41jZpRAGUGtaFLG8u6koDWtrFUQqcjJNr31OgHDPIuK JbnjqEZNMqxfODsUjmHIhFha6Yyg9j+2nwoF59Q+/mXg8KRHWKD8Q+S6wJYB/QD/ MMy/c4kBwg0a9rBxXueiXWjTLsKtYrWKpK51mdVBFLHSLAMJR8S/UTBUWCYlqUK2 qKIHY2q1kY0esRxoGtgYX+DNQMCMFd/+Y50BCEiO69jxeRrHTDJ7dHEH08Mog3hb rVSe5Y/9GvpWeOV3lPbEQpE382NzMm7ILZhuv0rTvAGTauIKyg8psaIYjuzqng== -----END CERTIFICATE-----Generated at Fri Jan 23 02:20:07 2026 by rpki-client