This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3232332e32392e3235322e302f32342d3234203d3e20323039313738.roa File: 3232332e32392e3235322e302f32342d3234203d3e20323039313738.roa (raw, json) Hash identifier: OBMQ56pZdTR1x5lxXIbn/ktqswc87k8umxe+oHiGTBw= Subject key identifier: 7E:69:64:95:3D:59:4F:67:E2:40:63:1A:4E:E3:8F:60:F8:91:26:CA Certificate issuer: /CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8 Certificate serial: 61D1AC6E5B1366F93C8E61368AEB2336563E4451 Authority key identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3232332e32392e3235322e302f32342d3234203d3e20323039313738.roa Signing time: Tue 20 Jan 2026 02:08:19 +0000 ROA not before: Tue 20 Jan 2026 02:03:19 +0000 ROA not after: Tue 19 Jan 2027 02:08:19 +0000 asID: 209178 IP address blocks: 223.29.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 13:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d1:ac:6e:5b:13:66:f9:3c:8e:61:36:8a:eb:23:36:56:3e:44:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8 Validity Not Before: Jan 20 02:03:19 2026 GMT Not After : Jan 19 02:08:19 2027 GMT Subject: CN=7E6964953D594F67E240631A4EE38F60F89126CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:fd:35:c4:77:f4:77:73:8c:d2:f5:d8:91: 0f:e1:2b:19:ed:1c:e2:85:78:e8:de:83:29:d7:8e: 54:9c:7f:fb:7d:aa:4e:d7:2c:a3:0a:9a:a5:1d:2c: bf:be:e1:3f:26:ec:a0:83:ba:37:c1:0d:d3:b4:72: 05:cc:a0:15:76:cd:c4:70:ad:b3:cc:89:62:18:31: 2c:0e:22:cc:be:bf:9e:34:77:e0:4a:61:47:b0:ce: b4:c2:28:d2:e6:b1:cb:34:e3:c7:9f:6a:62:b3:be: 42:ba:bc:21:0f:d3:e3:c0:ff:7d:99:28:a9:d5:1c: 32:05:e7:7f:91:85:2c:10:43:af:e1:bc:9b:23:e9: 2e:dd:f7:3f:4f:ca:bf:03:d1:f0:39:36:7a:3c:af: 2c:06:52:70:a9:38:a3:d8:b5:ef:13:d3:b5:30:1a: 2f:51:49:b5:b8:5c:65:5c:3b:e9:32:6e:9b:68:d0: 8f:61:ed:e9:8a:9b:e2:a8:f3:df:79:24:1d:0c:65: b9:7d:9e:8f:8d:8b:b5:08:83:ff:5f:13:89:5d:4d: da:36:47:59:2b:d7:3f:c1:c7:9c:db:6d:cc:a9:1b: f3:9a:dd:29:41:79:75:16:bc:74:8d:7d:88:f3:bf: 95:b2:4b:5d:b0:f7:9e:3a:e3:be:5c:34:51:95:f2: 7a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:69:64:95:3D:59:4F:67:E2:40:63:1A:4E:E3:8F:60:F8:91:26:CA X509v3 Authority Key Identifier: keyid:9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3232332e32392e3235322e302f32342d3234203d3e20323039313738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.29.252.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:a0:bb:fc:fc:42:0d:d9:5b:08:31:8d:78:e2:2d:33:26:c9: 28:6f:52:79:41:73:c3:b6:9d:28:77:b2:2d:b6:96:c9:de:41: 3a:1f:80:c8:f9:36:b2:ec:79:21:cf:c2:36:35:30:bd:53:88: de:bc:12:21:5b:69:72:e5:07:5c:67:ad:5f:d5:df:2e:db:d6: a0:20:ad:bd:6d:db:23:98:f6:3b:17:66:66:59:4c:a2:93:9e: 46:94:a3:87:b0:55:76:e6:91:0e:81:90:7a:69:95:fc:92:84: fa:78:2c:91:46:b4:5a:91:87:02:82:68:65:ca:ed:15:6a:2b: d2:49:ba:3a:0a:55:1a:24:66:ff:3a:fd:ed:a4:59:ba:64:d0: fa:48:17:f0:25:df:8d:41:9e:74:10:13:00:ca:6b:60:cb:33: 02:b5:ba:10:e6:ca:9d:f6:1c:18:24:78:b1:7c:ad:f6:10:8f: 55:63:f2:b1:65:1f:62:04:09:11:97:4e:a2:6e:36:47:6d:16: f0:bf:ac:cd:0b:bd:f6:3f:43:ac:3d:fa:4b:3a:1d:b9:44:cf: 11:5b:35:2c:32:a0:e7:5e:a4:df:a7:01:04:eb:0d:64:7f:e6: 29:a8:19:77:ca:13:c5:c3:63:b2:2c:ec:ba:8d:60:09:c9:a4: cf:60:34:0a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYdGsblsTZvk8jmE2iusjNlY+RFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMz OERCQzVDODAeFw0yNjAxMjAwMjAzMTlaFw0yNzAxMTkwMjA4MTlaMDMxMTAvBgNV BAMTKDdFNjk2NDk1M0Q1OTRGNjdFMjQwNjMxQTRFRTM4RjYwRjg5MTI2Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZPf01xHf0d3OM0vXYkQ/hKxnt HOKFeOjegynXjlScf/t9qk7XLKMKmqUdLL++4T8m7KCDujfBDdO0cgXMoBV2zcRw rbPMiWIYMSwOIsy+v540d+BKYUewzrTCKNLmscs048efamKzvkK6vCEP0+PA/32Z KKnVHDIF53+RhSwQQ6/hvJsj6S7d9z9Pyr8D0fA5Nno8rywGUnCpOKPYte8T07Uw Gi9RSbW4XGVcO+kybpto0I9h7emKm+Ko8995JB0MZbl9no+Ni7UIg/9fE4ldTdo2 R1kr1z/Bx5zbbcypG/Oa3SlBeXUWvHSNfYjzv5WyS12w9546475cNFGV8nqFAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUfmlklT1ZT2fiQGMaTuOPYPiRJsowHwYDVR0j BBgwFoAUnnvrgQIzNppH1C2Bp/UIQzjbxcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTgyMTY5OC8wLzlFN0JFQjgxMDIzMzM2OUE0N0Q0MkQ4MUE3RjUw ODQzMzhEQkM1QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMzOERCQzVDOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE4MjE2OTgvMC8zMjMyMzMyZTMy MzkyZTMyMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzOTMxMzczOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAN8d/DANBgkqhkiG9w0BAQsFAAOCAQEAXqC7/PxCDdlbCDGNeOIt MybJKG9SeUFzw7adKHeyLbaWyd5BOh+AyPk2sux5Ic/CNjUwvVOI3rwSIVtpcuUH XGetX9XfLtvWoCCtvW3bI5j2OxdmZllMopOeRpSjh7BVduaRDoGQemmV/JKE+ngs kUa0WpGHAoJoZcrtFWor0km6OgpVGiRm/zr97aRZumTQ+kgX8CXfjUGedBATAMpr YMszArW6EObKnfYcGCR4sXyt9hCPVWPysWUfYgQJEZdOom42R20W8L+szQu99j9D rD36SzoduUTPEVs1LDKg516k36cBBOsNZH/mKagZd8oTxcNjsizsuo1gCcmkz2A0 Cg== -----END CERTIFICATE-----Generated at Fri Jan 23 02:20:50 2026 by rpki-client