This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3131362e302f32322d3234203d3e20393834.roa
File: 3138302e3232332e3131362e302f32322d3234203d3e20393834.roa (raw, json)
Hash identifier: Huwlj8Gu5PWl+Sk5ABtMZYXWRu21SQMGhdlolipu1JI=
Subject key identifier: E5:E3:90:39:80:3D:D4:9F:F0:01:3B:6F:07:14:2E:35:41:B1:CB:F1
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 46F013CAB657ACFEA3F34D7FCA1F025239E8B0B2
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3131362e302f32322d3234203d3e20393834.roa
Signing time: Tue 20 Jan 2026 02:24:54 +0000
ROA not before: Tue 20 Jan 2026 02:19:54 +0000
ROA not after: Tue 19 Jan 2027 02:24:54 +0000
asID: 984
IP address blocks: 180.223.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f0:13:ca:b6:57:ac:fe:a3:f3:4d:7f:ca:1f:02:52:39:e8:b0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:54 2026 GMT
Not After : Jan 19 02:24:54 2027 GMT
Subject: CN=E5E39039803DD49FF0013B6F07142E3541B1CBF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:c4:f0:37:b1:fd:70:d7:05:38:19:77:40:
98:6b:2e:e6:bf:05:54:1a:43:b6:07:fc:24:37:55:
29:be:60:62:d1:97:23:3a:bc:d7:bf:63:d6:7d:93:
d8:01:b1:d9:2c:ef:c7:b1:91:a1:62:ba:60:a8:36:
90:6d:91:84:23:a6:2e:4b:a1:97:ba:84:44:ef:53:
c0:0d:ce:29:36:54:71:c3:f6:e4:b6:0f:60:cb:d3:
23:4e:4a:46:15:b2:3a:cd:0d:b5:d4:26:86:14:43:
2d:6a:13:0a:b9:cd:a2:33:6c:15:9b:94:1b:dc:26:
82:3c:52:c6:9c:f1:3d:d6:14:da:3b:8c:62:78:cd:
26:9e:0f:58:df:a9:bc:d7:c1:69:ba:66:73:fb:e0:
2c:30:98:07:c6:bc:5e:79:5c:58:80:de:8f:da:7e:
d3:53:39:63:29:61:4f:8b:ca:46:6f:ca:93:66:97:
6c:b8:5d:2b:de:60:73:21:48:3b:57:57:f2:14:df:
47:7f:78:07:93:2b:96:a2:80:08:8e:a8:24:6f:9f:
0a:f1:4f:c3:49:28:11:5e:d3:8d:35:ee:f9:ce:26:
41:66:2c:7b:f1:91:12:37:03:cd:ec:28:2a:18:8b:
e5:7e:1b:8a:1f:da:a2:d6:a4:e1:58:66:4f:51:35:
9d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E3:90:39:80:3D:D4:9F:F0:01:3B:6F:07:14:2E:35:41:B1:CB:F1
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3131362e302f32322d3234203d3e20393834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.116.0/22
Signature Algorithm: sha256WithRSAEncryption
72:2b:4b:fa:3d:d4:c0:21:e8:c9:61:8f:18:5c:4b:be:16:55:
ef:ad:5f:b3:8c:ed:0d:a2:5a:9f:7e:a9:56:ad:a7:48:00:03:
66:19:4d:a8:e7:ae:18:f6:1c:3d:f1:da:10:7e:1a:cc:6f:62:
1b:bb:dd:3a:a6:b5:65:0d:d3:aa:8f:8d:b1:38:c5:e5:28:20:
77:c4:6c:9f:27:4c:a5:27:9b:3c:0a:58:b6:6a:5f:a7:da:0b:
72:75:8b:9b:c1:e1:7a:49:3c:83:ce:24:0d:1d:84:ea:67:c7:
4a:2d:c9:c5:be:c1:e1:87:8a:ff:30:d3:69:a5:ea:a4:a9:6f:
de:a5:c0:14:b2:22:d5:2d:cd:c5:f6:39:d8:ca:43:c1:32:a8:
f2:bc:ce:70:8f:04:c8:e6:d0:67:a8:81:2e:d7:e7:d4:92:0f:
a1:c6:f6:8d:c4:c9:34:d1:6d:85:d0:cc:70:c9:3a:5f:a7:77:
4d:f2:f1:ba:7d:1e:10:94:c9:e9:4e:b1:9e:03:3b:d5:e5:18:
66:10:95:56:42:7b:3e:c5:ea:5b:79:1a:0a:6d:84:bf:41:f1:
88:69:03:d1:00:1d:bb:a2:a2:e9:ed:4d:54:72:40:fe:0a:1f:
04:30:be:30:59:66:5b:f6:12:61:7c:cc:d8:bc:0d:37:7f:27:
cb:87:0c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:44 2026 by rpki-client