This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3130342e302f32312d3234203d3e2037303138.roa
File: 3138302e3232332e3130342e302f32312d3234203d3e2037303138.roa (raw, json)
Hash identifier: 7NYMYRBnmzociVKsZ7AvGzZaHveJVS/7E5lDxxPE/js=
Subject key identifier: 00:0F:B7:6B:0A:80:2E:66:86:96:B9:1F:F4:60:11:03:CA:F1:F8:14
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 62CDA026D4D7ED4572987B75CB3F988D6A734A8A
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3130342e302f32312d3234203d3e2037303138.roa
Signing time: Tue 20 Jan 2026 02:24:59 +0000
ROA not before: Tue 20 Jan 2026 02:19:59 +0000
ROA not after: Tue 19 Jan 2027 02:24:59 +0000
asID: 7018
IP address blocks: 180.223.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:cd:a0:26:d4:d7:ed:45:72:98:7b:75:cb:3f:98:8d:6a:73:4a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:59 2026 GMT
Not After : Jan 19 02:24:59 2027 GMT
Subject: CN=000FB76B0A802E668696B91FF4601103CAF1F814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:32:61:bf:bc:c2:9b:1c:d4:bf:a3:ff:f7:fb:
54:53:76:f9:d7:09:b3:31:2b:fb:b8:e5:ce:8e:ba:
c8:49:ac:6c:58:d0:e8:2b:f7:3c:b2:09:00:1e:4c:
aa:d0:92:13:99:f5:7c:0f:96:3b:9d:50:aa:59:88:
b4:da:fa:fa:14:35:56:40:f9:2a:e7:d0:19:ed:ca:
5e:25:5d:63:d6:2a:f0:6a:dd:b8:ad:19:54:b7:0c:
b5:bd:f5:f5:83:11:4e:d0:e3:5d:2d:7c:8d:f8:a8:
52:f5:99:76:2a:8a:7e:7e:d4:cd:af:96:38:ef:81:
6e:4e:c2:71:22:40:40:cd:da:28:69:0c:73:f1:38:
84:21:8b:95:c7:aa:aa:51:7e:44:0c:6a:0b:b1:9a:
75:d1:2f:b0:b4:86:3c:1e:a7:0a:9e:8a:53:22:a1:
e2:71:61:49:74:06:55:6d:d2:9d:8c:45:5f:80:e5:
3a:38:65:5a:25:c0:2b:5d:b5:24:05:07:ed:3f:20:
94:46:38:1e:06:14:d9:e3:20:73:d4:58:2c:34:d5:
86:bb:62:8e:15:ad:a5:12:bc:d3:93:aa:83:63:82:
13:46:ad:54:0f:c7:5b:d7:f5:da:00:6e:e6:f9:92:
e8:9f:82:25:ff:d7:71:d4:8b:00:06:64:65:ce:11:
35:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0F:B7:6B:0A:80:2E:66:86:96:B9:1F:F4:60:11:03:CA:F1:F8:14
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3130342e302f32312d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.104.0/21
Signature Algorithm: sha256WithRSAEncryption
06:dd:11:cf:f1:75:b0:12:c2:f9:e2:c4:dd:34:bc:db:37:0f:
8b:77:60:1e:1c:f2:fa:b8:13:54:b8:ea:11:e5:4c:78:ec:40:
99:c1:c1:9c:31:81:e3:cf:d7:64:6e:ed:ce:1f:20:f1:52:40:
d0:e9:c0:f9:ac:f4:60:61:b2:84:40:7f:36:3e:4a:ec:3e:0f:
25:07:72:b2:18:65:bd:7a:32:79:37:a4:de:a3:2a:16:50:5b:
f8:c6:fe:6d:c7:0e:43:bc:8c:80:0a:c8:14:c6:d2:b6:b8:ce:
60:a1:b5:10:f9:83:ac:5c:bf:50:92:db:85:d4:d2:7e:83:88:
7d:32:54:33:6f:52:fd:4f:3a:6f:63:79:39:79:0e:6c:ab:c2:
91:74:98:80:2b:0d:d9:e4:92:d4:b8:e3:2c:f4:f9:27:a3:6e:
32:16:18:e6:5a:08:87:c6:dd:58:de:3b:d4:a9:4b:ee:97:42:
7e:df:a8:76:b3:fd:b4:ec:ad:7b:78:1a:6a:fb:3f:31:34:99:
50:4c:a5:3a:ba:34:be:20:13:14:25:6a:63:85:99:f6:55:bc:
8d:1b:62:90:09:97:1d:21:25:60:71:2a:f9:16:21:16:85:6a:
2a:e9:fb:f0:f4:6f:e8:6c:f5:a5:a4:9c:38:59:5e:d4:8f:a7:
0e:d7:30:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:42 2026 by rpki-client