This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3232332e32392e3235342e302f32342d3234203d3e203630373231.roa File: 3232332e32392e3235342e302f32342d3234203d3e203630373231.roa (raw, json) Hash identifier: liIC8Ddh2UUh7zws7slw20hc7Km/vnbct4+RUrbc7oc= Subject key identifier: 0D:70:33:14:92:1B:8C:34:FB:48:34:6C:5C:4F:42:97:6A:9C:CE:F0 Certificate issuer: /CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8 Certificate serial: 57146B8FF933FC2F6C044BD4B373986BC35698C5 Authority key identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3232332e32392e3235342e302f32342d3234203d3e203630373231.roa Signing time: Tue 20 Jan 2026 02:08:19 +0000 ROA not before: Tue 20 Jan 2026 02:03:19 +0000 ROA not after: Tue 19 Jan 2027 02:08:19 +0000 asID: 60721 IP address blocks: 223.29.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 13:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:14:6b:8f:f9:33:fc:2f:6c:04:4b:d4:b3:73:98:6b:c3:56:98:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8 Validity Not Before: Jan 20 02:03:19 2026 GMT Not After : Jan 19 02:08:19 2027 GMT Subject: CN=0D703314921B8C34FB48346C5C4F42976A9CCEF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:df:f4:23:13:49:bf:09:68:cf:3a:95:9d:fb: 7c:43:88:98:ae:ab:77:cf:d2:46:fe:da:f5:81:22: ba:99:d7:47:7c:0d:0b:90:50:0e:b7:2b:7a:0e:a6: 4a:95:78:3d:c8:16:b2:f8:19:07:24:cd:09:03:0a: 57:dd:77:97:57:20:f5:59:bb:be:e9:44:09:a8:a8: b6:89:60:b7:de:96:d3:1f:fc:22:9e:8f:e1:13:ac: c8:58:a5:80:f6:2a:10:18:97:6c:a8:66:c0:a3:3c: 03:18:fd:ee:80:df:c9:9f:68:bc:64:6e:d2:30:9c: e1:d0:01:2e:ae:29:62:65:84:48:f9:c8:79:ee:9c: 76:74:63:a8:c7:29:d7:81:ff:66:00:ce:df:f0:03: 4c:dd:39:b0:56:a5:53:7b:0d:e6:da:6d:05:93:91: 4d:a4:9d:ac:22:2b:ec:a0:96:34:ac:06:14:5c:46: 46:51:5e:de:65:45:02:67:1d:29:c2:20:39:67:5b: e8:13:59:69:4b:7a:3d:e4:15:ea:2c:88:9f:7a:6c: 07:09:7f:9d:01:b1:b5:a2:c6:ad:2f:1b:0f:dc:bc: 19:74:68:80:1b:5f:6a:34:f8:04:4a:08:f5:52:2c: 9d:bc:0e:61:1f:94:a0:f9:88:cd:f8:ca:32:95:3e: 47:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:70:33:14:92:1B:8C:34:FB:48:34:6C:5C:4F:42:97:6A:9C:CE:F0 X509v3 Authority Key Identifier: keyid:9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3232332e32392e3235342e302f32342d3234203d3e203630373231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.29.254.0/24 Signature Algorithm: sha256WithRSAEncryption 12:f9:66:d9:94:4f:f5:59:5d:95:d1:ce:31:fc:39:2c:1e:5e: f4:8e:58:08:15:ba:6d:fb:82:54:ce:68:93:53:b1:37:ad:13: 78:72:8f:26:3e:fd:40:f4:25:5e:e2:43:5f:95:6b:3f:4d:2f: af:27:78:d5:b1:a4:13:f5:8a:ef:fb:1e:32:55:48:11:87:17: a1:03:46:ab:40:36:9f:dd:01:b2:53:f8:e6:0c:16:ba:91:1c: 80:fe:d7:f6:5b:37:72:18:bd:62:1a:13:fd:f1:14:04:ea:ac: 5f:9a:48:00:ae:e1:50:2b:5d:b1:6a:5c:ff:2d:09:90:d9:5f: ed:c5:2a:7a:7b:9b:35:b4:51:24:f0:30:0f:0d:9d:7e:97:62: 1c:c9:bb:da:8a:44:10:7d:ae:20:11:dd:fa:db:ac:93:b8:55: 0f:90:4f:0a:94:68:65:50:e9:85:94:10:83:8b:aa:8e:c7:82: 1b:0d:a1:89:88:96:a7:0e:94:16:fd:df:23:85:ad:5c:04:9a: b7:03:00:0d:5d:1c:54:dc:dc:a4:97:4c:de:87:4b:ff:16:98: 8e:dc:f0:0d:89:8f:0e:f1:3e:d2:a7:2e:c5:46:69:73:74:87: 22:b2:7d:61:b8:70:bb:38:db:46:06:21:ac:c0:4c:e2:44:33: a6:6a:51:fa -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUVxRrj/kz/C9sBEvUs3OYa8NWmMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMz OERCQzVDODAeFw0yNjAxMjAwMjAzMTlaFw0yNzAxMTkwMjA4MTlaMDMxMTAvBgNV BAMTKDBENzAzMzE0OTIxQjhDMzRGQjQ4MzQ2QzVDNEY0Mjk3NkE5Q0NFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg3/QjE0m/CWjPOpWd+3xDiJiu q3fP0kb+2vWBIrqZ10d8DQuQUA63K3oOpkqVeD3IFrL4GQckzQkDClfdd5dXIPVZ u77pRAmoqLaJYLfeltMf/CKej+ETrMhYpYD2KhAYl2yoZsCjPAMY/e6A38mfaLxk btIwnOHQAS6uKWJlhEj5yHnunHZ0Y6jHKdeB/2YAzt/wA0zdObBWpVN7DebabQWT kU2knawiK+ygljSsBhRcRkZRXt5lRQJnHSnCIDlnW+gTWWlLej3kFeosiJ96bAcJ f50BsbWixq0vGw/cvBl0aIAbX2o0+ARKCPVSLJ28DmEflKD5iM34yjKVPkebAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUDXAzFJIbjDT7SDRsXE9Cl2qczvAwHwYDVR0j BBgwFoAUnnvrgQIzNppH1C2Bp/UIQzjbxcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTgyMTY5OC8wLzlFN0JFQjgxMDIzMzM2OUE0N0Q0MkQ4MUE3RjUw ODQzMzhEQkM1QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMzOERCQzVDOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTgyMTY5OC8wLzMyMzIzMzJlMzIz OTJlMzIzNTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMDM3MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAN8d/jANBgkqhkiG9w0BAQsFAAOCAQEAEvlm2ZRP9VldldHOMfw5LB5e 9I5YCBW6bfuCVM5ok1OxN60TeHKPJj79QPQlXuJDX5VrP00vryd41bGkE/WK7/se MlVIEYcXoQNGq0A2n90BslP45gwWupEcgP7X9ls3chi9YhoT/fEUBOqsX5pIAK7h UCtdsWpc/y0JkNlf7cUqenubNbRRJPAwDw2dfpdiHMm72opEEH2uIBHd+tusk7hV D5BPCpRoZVDphZQQg4uqjseCGw2hiYiWpw6UFv3fI4WtXASatwMADV0cVNzcpJdM 3odL/xaYjtzwDYmPDvE+0qcuxUZpc3SHIrJ9YbhwuzjbRgYhrMBM4kQzpmpR+g== -----END CERTIFICATE-----Generated at Fri Jan 23 02:20:08 2026 by rpki-client