This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132302e302f32322d3234203d3e203130313033.roa File: 3138302e3232332e3132302e302f32322d3234203d3e203130313033.roa (raw, json) Hash identifier: IhIWiKKkM8nfbRb9clmpZ/cXCUODAdsHIcekgV4HEXg= Subject key identifier: 97:70:74:84:1A:B1:B0:C3:9B:2F:41:4A:59:8B:2D:53:5C:30:82:B0 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 109F4F348B6AC0DD55693D8050829B63385058D4 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132302e302f32322d3234203d3e203130313033.roa Signing time: Tue 20 Jan 2026 02:24:54 +0000 ROA not before: Tue 20 Jan 2026 02:19:54 +0000 ROA not after: Tue 19 Jan 2027 02:24:54 +0000 asID: 10103 IP address blocks: 180.223.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:9f:4f:34:8b:6a:c0:dd:55:69:3d:80:50:82:9b:63:38:50:58:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:54 2026 GMT Not After : Jan 19 02:24:54 2027 GMT Subject: CN=977074841AB1B0C39B2F414A598B2D535C3082B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fb:e0:3e:d2:01:26:4b:91:b6:b8:ea:08:51: f6:1f:e3:a8:44:6c:2c:40:91:3a:cb:a7:bb:32:3c: 11:21:cd:a1:4f:76:ae:11:85:c5:3d:c6:1c:30:f4: 45:86:ab:ec:6c:61:7c:68:07:12:5f:04:c1:ef:3e: c4:80:78:6b:b7:c5:ee:05:8f:8b:52:c6:61:00:46: 26:31:68:8a:78:b3:54:75:fc:fd:b2:4e:f8:86:ae: 21:06:ed:19:0e:21:33:56:85:ec:82:dd:73:1a:c6: 8d:fc:34:77:d9:37:18:6f:79:7b:36:25:94:01:50: e5:47:bc:ac:7c:9d:90:c9:ff:8e:bf:d2:3c:00:e3: 78:5b:50:48:65:aa:46:00:0b:90:60:db:b1:7f:c8: f2:cd:c4:39:b2:9c:8d:6f:65:93:54:8d:85:76:30: 74:63:d1:b0:95:66:5d:3f:37:0d:92:3d:5f:a9:9f: b9:2e:f1:8b:c3:0f:16:55:97:d4:22:a1:99:55:1f: 69:1e:c1:cd:9a:a6:24:46:bc:bc:9f:36:37:ba:97: 4e:58:c4:d5:ca:75:2c:30:c6:1e:ee:71:b2:9c:f4: 47:0f:0b:ad:be:99:0d:da:ad:45:e5:02:e4:c5:48: ce:12:b7:0b:03:f1:19:27:41:61:bb:59:77:69:0f: ab:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:70:74:84:1A:B1:B0:C3:9B:2F:41:4A:59:8B:2D:53:5C:30:82:B0 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132302e302f32322d3234203d3e203130313033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.120.0/22 Signature Algorithm: sha256WithRSAEncryption c1:1d:9a:4a:13:1a:02:ac:e3:03:20:dd:22:fe:79:5e:be:12: dc:59:03:47:2e:1f:13:44:6f:cd:47:4d:2f:c1:78:09:f7:fb: f6:9d:b5:6a:3d:f5:bd:60:65:6d:8f:0a:ee:d7:dc:10:25:3f: 2c:db:a2:c7:6a:d6:27:92:90:96:19:08:a7:9f:2c:2e:20:32: a6:07:77:e7:ba:83:1b:c8:dd:d3:85:31:21:50:69:8b:cc:b6: e3:31:72:2c:a6:61:50:98:ea:7d:3b:77:95:39:7b:41:b0:24: 57:96:cc:a1:ce:c1:30:0c:01:6e:d1:0b:91:59:66:12:7c:55: a9:59:a8:ff:2e:8d:7d:ab:06:03:07:81:a1:6d:bc:45:3c:0d: 47:25:08:3c:2d:f7:64:21:0a:8a:22:3c:4f:7d:12:3c:b2:6b: 33:aa:8b:2e:44:78:51:eb:08:65:e5:aa:b4:87:fd:08:5f:c0: 67:92:c4:17:c9:6f:93:fb:cd:b5:45:ed:b3:9a:bc:ef:7a:cb: 0d:ff:21:9c:8a:22:d0:e4:4a:2f:2d:9f:08:2a:2a:88:d0:8b: 0a:92:3e:0e:80:4d:9f:0a:83:50:ee:4e:66:69:da:07:ad:80: 3c:0c:91:c4:a0:87:4e:77:09:fc:7e:a5:8e:97:53:33:74:7d: 32:67:f6:d9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEJ9PNItqwN1VaT2AUIKbYzhQWNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTRaFw0yNzAxMTkwMjI0NTRaMDMxMTAvBgNV BAMTKDk3NzA3NDg0MUFCMUIwQzM5QjJGNDE0QTU5OEIyRDUzNUMzMDgyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo++A+0gEmS5G2uOoIUfYf46hE bCxAkTrLp7syPBEhzaFPdq4RhcU9xhww9EWGq+xsYXxoBxJfBMHvPsSAeGu3xe4F j4tSxmEARiYxaIp4s1R1/P2yTviGriEG7RkOITNWheyC3XMaxo38NHfZNxhveXs2 JZQBUOVHvKx8nZDJ/46/0jwA43hbUEhlqkYAC5Bg27F/yPLNxDmynI1vZZNUjYV2 MHRj0bCVZl0/Nw2SPV+pn7ku8YvDDxZVl9QioZlVH2kewc2apiRGvLyfNje6l05Y xNXKdSwwxh7ucbKc9EcPC62+mQ3arUXlAuTFSM4StwsD8RknQWG7WXdpD6tNAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUl3B0hBqxsMObL0FKWYstU1wwgrAwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1OTY5MjkvMC8zMTM4MzAyZTMy MzIzMzJlMzEzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzMDMxMzAzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEArTfeDANBgkqhkiG9w0BAQsFAAOCAQEAwR2aShMaAqzjAyDdIv55 Xr4S3FkDRy4fE0RvzUdNL8F4Cff79p21aj31vWBlbY8K7tfcECU/LNuix2rWJ5KQ lhkIp58sLiAypgd357qDG8jd04UxIVBpi8y24zFyLKZhUJjqfTt3lTl7QbAkV5bM oc7BMAwBbtELkVlmEnxVqVmo/y6NfasGAweBoW28RTwNRyUIPC33ZCEKiiI8T30S PLJrM6qLLkR4UesIZeWqtIf9CF/AZ5LEF8lvk/vNtUXts5q873rLDf8hnIoi0ORK Ly2fCCoqiNCLCpI+DoBNnwqDUO5OZmnaB62APAyRxKCHTncJ/H6ljpdTM3R9Mmf2 2Q== -----END CERTIFICATE-----Generated at Wed Jan 21 14:13:43 2026 by rpki-client