This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3232332e32392e3235322e302f32342d3234203d3e20383334.roa File: 3232332e32392e3235322e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 5bSDuL4jI47FDKsWjWVl3O80kE0pzt4awNiMYO49IWI= Subject key identifier: 24:5D:F1:51:29:A7:89:BD:AC:65:91:B2:BD:86:CE:89:4A:99:A7:C3 Certificate issuer: /CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8 Certificate serial: 3CD252753E8214FDA716810B4D152A255455BB80 Authority key identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3232332e32392e3235322e302f32342d3234203d3e20383334.roa Signing time: Tue 20 Jan 2026 02:08:19 +0000 ROA not before: Tue 20 Jan 2026 02:03:19 +0000 ROA not after: Tue 19 Jan 2027 02:08:19 +0000 asID: 834 IP address blocks: 223.29.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 13:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d2:52:75:3e:82:14:fd:a7:16:81:0b:4d:15:2a:25:54:55:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8 Validity Not Before: Jan 20 02:03:19 2026 GMT Not After : Jan 19 02:08:19 2027 GMT Subject: CN=245DF15129A789BDAC6591B2BD86CE894A99A7C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d1:6d:4a:b7:ae:1c:4d:4d:bd:87:73:55:00: d3:6d:32:f3:31:bc:fb:23:f0:fb:e6:a5:97:65:4e: 07:b5:a1:6e:c3:88:de:a2:1a:e0:b1:91:1d:6e:3c: 44:1d:8a:af:75:c2:9c:75:26:c0:82:63:84:fd:7d: f1:a7:c3:3a:2f:ff:23:e5:95:bc:6c:ea:0d:01:6a: 14:27:ed:2d:2a:63:1b:54:4e:60:e5:26:f9:46:74: da:19:e0:00:22:c3:5e:3f:dd:e0:c2:44:ff:8a:f2: 3f:32:06:5b:70:e8:3b:d5:30:95:11:2b:e8:91:47: 2b:0d:dd:31:43:6c:ce:b8:e1:e3:96:6e:3f:2e:d8: f7:e8:c5:d6:50:ed:ca:af:e4:10:90:1c:86:63:7a: 1d:90:94:ac:d2:e8:b5:f0:ac:b3:ca:68:18:d4:e2: c2:b4:e5:ff:fd:b7:c0:eb:0b:17:39:02:1c:8b:0f: 13:4f:2f:0f:d9:e1:b6:c0:f5:84:72:e6:d6:ad:ab: b4:7a:5d:c1:64:6a:b4:09:3d:ee:12:01:40:28:8a: 79:3c:e5:4d:4b:8f:ab:94:1e:f1:55:fc:63:3f:b4: ab:48:10:38:43:92:c0:77:2a:a2:eb:45:d0:6b:0d: 2a:fe:4a:76:80:45:90:17:93:62:61:03:98:84:36: aa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5D:F1:51:29:A7:89:BD:AC:65:91:B2:BD:86:CE:89:4A:99:A7:C3 X509v3 Authority Key Identifier: keyid:9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3232332e32392e3235322e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.29.252.0/24 Signature Algorithm: sha256WithRSAEncryption b9:2e:3f:c5:d1:2e:db:21:87:a7:c5:3c:ad:4b:8c:3b:05:4f: 90:16:81:b7:64:95:f1:db:07:2d:fc:14:d2:06:32:fd:21:5c: ca:d8:67:3d:da:7a:ac:e5:57:e0:f0:a9:9f:ea:e0:65:69:3f: 67:a3:7e:75:e8:de:46:44:0e:14:75:36:a6:92:f6:45:44:db: 8e:90:10:4c:13:a3:1a:bb:bf:d0:09:1b:ea:90:c1:0d:d2:0c: d0:3b:11:d5:c2:1a:fe:da:cf:a9:e7:e6:9e:ec:ab:ff:89:b3: 75:28:04:f7:38:6e:a1:a4:e4:6d:32:d9:64:22:69:ef:49:aa: db:68:5b:20:17:5a:60:85:80:5b:1d:e9:1c:1f:4e:fe:3c:3d: a0:2e:a2:64:b0:51:91:e3:f5:75:3a:fd:25:db:ea:05:3c:21: 7f:6f:66:74:b6:24:f0:de:c3:fa:a5:6a:7e:47:12:53:dd:8c: 8f:93:5e:1e:18:54:17:f1:a4:a3:1c:0c:12:50:ce:ef:a2:88: 78:80:40:2c:44:b7:b7:ba:b2:2b:2e:a7:7d:f0:fa:b1:72:35: 25:c3:40:26:d3:7e:37:bc:c2:9a:ec:be:62:49:5d:57:41:36: 98:bc:79:80:2b:e6:a7:6e:2a:d3:0e:4d:bd:7a:04:8a:4f:cd: 03:f7:71:36 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUPNJSdT6CFP2nFoELTRUqJVRVu4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMz OERCQzVDODAeFw0yNjAxMjAwMjAzMTlaFw0yNzAxMTkwMjA4MTlaMDMxMTAvBgNV BAMTKDI0NURGMTUxMjlBNzg5QkRBQzY1OTFCMkJEODZDRTg5NEE5OUE3QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx0W1Kt64cTU29h3NVANNtMvMx vPsj8PvmpZdlTge1oW7DiN6iGuCxkR1uPEQdiq91wpx1JsCCY4T9ffGnwzov/yPl lbxs6g0BahQn7S0qYxtUTmDlJvlGdNoZ4AAiw14/3eDCRP+K8j8yBltw6DvVMJUR K+iRRysN3TFDbM644eOWbj8u2PfoxdZQ7cqv5BCQHIZjeh2QlKzS6LXwrLPKaBjU 4sK05f/9t8DrCxc5AhyLDxNPLw/Z4bbA9YRy5tatq7R6XcFkarQJPe4SAUAoink8 5U1Lj6uUHvFV/GM/tKtIEDhDksB3KqLrRdBrDSr+SnaARZAXk2JhA5iENqo1AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUJF3xUSmnib2sZZGyvYbOiUqZp8MwHwYDVR0j BBgwFoAUnnvrgQIzNppH1C2Bp/UIQzjbxcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTgyMTY5OC8wLzlFN0JFQjgxMDIzMzM2OUE0N0Q0MkQ4MUE3RjUw ODQzMzhEQkM1QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMzOERCQzVDOC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxODIxNjk4LzAvMzIzMjMzMmUzMjM5 MmUzMjM1MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADfHfwwDQYJKoZIhvcNAQELBQADggEBALkuP8XRLtshh6fFPK1LjDsFT5AWgbdk lfHbBy38FNIGMv0hXMrYZz3aeqzlV+DwqZ/q4GVpP2ejfnXo3kZEDhR1NqaS9kVE 246QEEwToxq7v9AJG+qQwQ3SDNA7EdXCGv7az6nn5p7sq/+Js3UoBPc4bqGk5G0y 2WQiae9JqttoWyAXWmCFgFsd6RwfTv48PaAuomSwUZHj9XU6/SXb6gU8IX9vZnS2 JPDew/qlan5HElPdjI+TXh4YVBfxpKMcDBJQzu+iiHiAQCxEt7e6sisup33w+rFy NSXDQCbTfje8wprsvmJJXVdBNpi8eYAr5qduKtMOTb16BIpPzQP3cTY= -----END CERTIFICATE-----Generated at Fri Jan 23 02:20:08 2026 by rpki-client