This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3232332e32392e3235332e302f32342d3234203d3e203630373231.roa File: 3232332e32392e3235332e302f32342d3234203d3e203630373231.roa (raw, json) Hash identifier: F6AwehFa25uDRdEokl5mRgN7q7Si/9qGdRXmBCZePow= Subject key identifier: D6:0C:D4:D5:BC:34:00:01:E2:57:ED:7A:98:82:55:7C:02:5E:34:57 Certificate issuer: /CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8 Certificate serial: 2A97366F6A0D4DBF6AE0CC169B72D40E75F41144 Authority key identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3232332e32392e3235332e302f32342d3234203d3e203630373231.roa Signing time: Tue 20 Jan 2026 02:08:20 +0000 ROA not before: Tue 20 Jan 2026 02:03:20 +0000 ROA not after: Tue 19 Jan 2027 02:08:20 +0000 asID: 60721 IP address blocks: 223.29.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 13:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:97:36:6f:6a:0d:4d:bf:6a:e0:cc:16:9b:72:d4:0e:75:f4:11:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8 Validity Not Before: Jan 20 02:03:20 2026 GMT Not After : Jan 19 02:08:20 2027 GMT Subject: CN=D60CD4D5BC340001E257ED7A9882557C025E3457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:91:a3:be:78:10:36:38:08:7c:01:45:86:38: 22:15:84:8e:14:8a:23:c7:4b:12:99:4d:3d:8e:a4: 0a:1a:2b:51:82:c1:6a:6d:2d:b1:ba:e7:0e:fb:e4: 59:7f:4f:3e:88:11:95:cf:de:79:1e:e4:cb:62:c1: 15:1c:9f:81:9e:55:84:d2:e0:61:23:62:28:47:33: 38:f2:a3:da:e4:12:33:b5:fc:e0:8d:d9:14:50:86: e3:a3:e4:67:7e:9a:d2:13:14:99:ae:1e:5f:e3:d0: eb:56:ba:f2:8b:d9:d8:98:3c:bb:40:11:c2:81:f7: 14:82:2f:2d:df:f4:99:3a:38:fe:15:b1:91:0a:28: 5a:1b:14:87:9c:b8:83:91:c4:be:12:2e:5f:b6:ba: 7a:fc:31:54:dc:ae:65:af:13:7f:a0:d6:0a:16:ca: 6a:b6:bb:e3:8f:da:b6:ad:b8:70:e2:b3:cf:07:3a: 75:65:2a:bf:4e:ff:c3:57:90:4f:64:7b:05:20:f0: f2:2e:d4:b0:3b:37:43:7d:9e:e5:51:22:f7:0f:fa: 8c:5a:70:c2:b3:7d:ad:a6:e9:74:b2:9e:b7:94:0c: 3d:cd:02:91:b4:91:3f:77:b9:38:92:f7:91:f6:b6: 64:f9:96:5f:a8:b6:cc:16:7a:44:f0:21:ec:4f:ab: 64:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0C:D4:D5:BC:34:00:01:E2:57:ED:7A:98:82:55:7C:02:5E:34:57 X509v3 Authority Key Identifier: keyid:9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3232332e32392e3235332e302f32342d3234203d3e203630373231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.29.253.0/24 Signature Algorithm: sha256WithRSAEncryption 57:04:6a:2a:ea:f7:aa:e7:ad:6b:2e:a1:16:a7:c1:d4:d7:74: ac:67:04:32:7e:af:91:0c:a5:44:4f:d0:79:6f:bf:ec:e6:51: 4b:c8:39:2c:e4:f3:5c:17:27:e0:29:ca:cf:aa:dd:1a:94:00: 1e:3b:5b:ea:9d:90:99:45:f6:a4:67:ea:20:d3:fe:c4:63:93: a4:b9:ca:d1:16:4f:8b:f9:fc:97:18:9e:c3:04:65:41:64:99: a6:d0:8f:2f:e5:95:2b:7f:fb:72:a1:d2:9e:8c:60:ab:e5:d8: 82:32:d5:b1:d6:ba:4f:ee:b6:0f:f5:44:ee:6c:d9:ce:36:97: 0d:e4:0e:b3:b8:2a:f1:92:e6:da:ac:8c:6b:6c:39:68:a2:a5: 57:7c:22:93:9f:c7:5d:0c:b8:fc:ae:0d:d5:ec:d1:af:f3:fe: 26:22:ce:93:36:33:ff:de:49:3d:fe:65:4a:d3:b9:a7:24:5c: a5:ea:89:79:aa:63:26:76:82:ac:a3:b7:b2:75:9b:65:95:ac: 7e:95:02:db:ad:c1:d3:07:b0:64:c5:80:1c:72:75:eb:54:fd: 04:6d:91:97:45:89:5a:66:18:ee:01:2c:f8:e9:99:1f:0f:99: 33:b4:f1:be:1b:da:1a:02:b5:7c:65:9f:9a:0c:de:d7:29:f1: b7:cf:10:c4 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUKpc2b2oNTb9q4MwWm3LUDnX0EUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMz OERCQzVDODAeFw0yNjAxMjAwMjAzMjBaFw0yNzAxMTkwMjA4MjBaMDMxMTAvBgNV BAMTKEQ2MENENEQ1QkMzNDAwMDFFMjU3RUQ3QTk4ODI1NTdDMDI1RTM0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrkaO+eBA2OAh8AUWGOCIVhI4U iiPHSxKZTT2OpAoaK1GCwWptLbG65w775Fl/Tz6IEZXP3nke5MtiwRUcn4GeVYTS 4GEjYihHMzjyo9rkEjO1/OCN2RRQhuOj5Gd+mtITFJmuHl/j0OtWuvKL2diYPLtA EcKB9xSCLy3f9Jk6OP4VsZEKKFobFIecuIORxL4SLl+2unr8MVTcrmWvE3+g1goW ymq2u+OP2ratuHDis88HOnVlKr9O/8NXkE9kewUg8PIu1LA7N0N9nuVRIvcP+oxa cMKzfa2m6XSynreUDD3NApG0kT93uTiS95H2tmT5ll+otswWekTwIexPq2TBAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU1gzU1bw0AAHiV+16mIJVfAJeNFcwHwYDVR0j BBgwFoAUnnvrgQIzNppH1C2Bp/UIQzjbxcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTgyMTY5OC8wLzlFN0JFQjgxMDIzMzM2OUE0N0Q0MkQ4MUE3RjUw ODQzMzhEQkM1QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMzOERCQzVDOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTgyMTY5OC8wLzMyMzIzMzJlMzIz OTJlMzIzNTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMDM3MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAN8d/TANBgkqhkiG9w0BAQsFAAOCAQEAVwRqKur3quetay6hFqfB1Nd0 rGcEMn6vkQylRE/QeW+/7OZRS8g5LOTzXBcn4CnKz6rdGpQAHjtb6p2QmUX2pGfq INP+xGOTpLnK0RZPi/n8lxiewwRlQWSZptCPL+WVK3/7cqHSnoxgq+XYgjLVsda6 T+62D/VE7mzZzjaXDeQOs7gq8ZLm2qyMa2w5aKKlV3wik5/HXQy4/K4N1ezRr/P+ JiLOkzYz/95JPf5lStO5pyRcpeqJeapjJnaCrKO3snWbZZWsfpUC263B0wewZMWA HHJ161T9BG2Rl0WJWmYY7gEs+OmZHw+ZM7TxvhvaGgK1fGWfmgze1ynxt88QxA== -----END CERTIFICATE-----Generated at Fri Jan 23 02:20:07 2026 by rpki-client