This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132302e302f32322d3234203d3e203138383131.roa File: 3138302e3232332e3132302e302f32322d3234203d3e203138383131.roa (raw, json) Hash identifier: rJ84Aj5E10oVleSMOT9HXLWG3u/HvVzWxBzN7vRqhQY= Subject key identifier: 2A:A1:EE:F5:C9:7C:5D:A0:6C:F5:E9:99:16:33:70:EB:3A:C7:9D:F4 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 452015491941377C62C997A77FC72B3C69AFF21A Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132302e302f32322d3234203d3e203138383131.roa Signing time: Tue 20 Jan 2026 02:24:56 +0000 ROA not before: Tue 20 Jan 2026 02:19:56 +0000 ROA not after: Tue 19 Jan 2027 02:24:56 +0000 asID: 18811 IP address blocks: 180.223.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:20:15:49:19:41:37:7c:62:c9:97:a7:7f:c7:2b:3c:69:af:f2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:56 2026 GMT Not After : Jan 19 02:24:56 2027 GMT Subject: CN=2AA1EEF5C97C5DA06CF5E999163370EB3AC79DF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:62:50:52:b8:d0:73:74:b8:f2:9c:7e:03: 8b:ed:31:10:11:d5:df:d5:58:84:55:65:c4:22:f5: cb:89:ef:26:a5:a6:1a:78:5b:19:82:04:c8:af:65: bf:a2:ba:dc:82:01:b5:ca:66:54:4a:a1:56:d5:57: 34:99:58:9c:2c:54:71:5e:e8:1f:8e:f7:bf:ef:91: ef:45:d4:45:3f:6e:b4:3a:4d:8a:15:36:d2:8b:a8: e1:ea:ee:0a:aa:b3:b9:fa:4d:25:be:a4:54:16:8f: cf:2f:af:95:dd:cc:c8:28:41:f8:fe:42:f7:81:a9: 57:78:87:56:b4:de:9d:1f:56:89:03:f5:45:85:a3: 7b:e1:bb:60:bd:67:54:75:67:59:7c:64:bb:a7:dd: 75:35:9d:18:ad:28:2f:bb:27:f3:7e:41:54:55:34: 3b:96:8b:e5:fc:b2:1c:17:bc:6d:ad:7c:9c:07:b4: 31:4f:b1:d7:26:d3:54:fa:59:f2:25:b3:a0:dd:ca: c2:3c:6a:95:86:40:a8:d5:35:6c:fe:32:4c:cf:46: ad:d4:52:e2:2f:32:51:79:c9:b7:f8:a5:12:59:19: bc:77:c5:33:c8:ea:31:51:2d:2e:d4:f0:6f:49:9b: a4:2b:6c:a6:d1:e0:79:e8:18:9d:76:20:91:87:2d: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A1:EE:F5:C9:7C:5D:A0:6C:F5:E9:99:16:33:70:EB:3A:C7:9D:F4 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132302e302f32322d3234203d3e203138383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.120.0/22 Signature Algorithm: sha256WithRSAEncryption 15:68:28:3b:7a:f1:23:a0:a0:62:ce:a4:f5:fb:e7:09:90:75: 98:22:39:84:cc:e2:f7:74:7a:1f:07:f2:d2:1f:52:01:39:ef: 4a:5a:a2:5b:5f:79:3a:45:4c:57:6b:5f:6b:42:ce:19:23:77: c5:3e:17:47:70:f7:5e:4e:00:80:ed:3a:dc:e2:c3:dc:f7:e4: 05:ff:f4:bc:b1:d7:89:d9:2e:6e:c5:d7:7d:e8:e1:2d:73:03: ee:4c:6e:e8:46:2a:69:c9:77:e9:27:79:45:a4:1a:66:d3:ee: 80:de:50:67:19:d7:46:fd:58:08:0a:a2:8f:29:09:36:e9:fa: 02:ba:6c:6b:6a:9e:16:f1:89:d9:81:8e:c8:f8:df:0f:41:23: 89:7e:72:50:87:c2:ee:38:f4:5f:15:5a:ad:6d:0c:21:41:a3: f1:2c:a0:8a:9a:90:d6:3a:0a:db:5a:73:32:1e:c3:ef:e1:7d: 7f:d2:3a:23:c1:5a:b6:7c:0d:fc:c4:4a:6b:a7:44:4f:27:53: 8a:51:db:1d:d0:14:71:61:21:8c:a1:30:15:6d:81:1c:01:04: ca:89:03:cb:0c:2a:79:44:de:ee:46:01:42:2d:21:fa:9f:69: 47:19:fb:ea:a2:7c:ba:d1:9b:57:1f:02:63:56:74:3c:bb:87: bf:4f:99:64 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIURSAVSRlBN3xiyZenf8crPGmv8howDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTZaFw0yNzAxMTkwMjI0NTZaMDMxMTAvBgNV BAMTKDJBQTFFRUY1Qzk3QzVEQTA2Q0Y1RTk5OTE2MzM3MEVCM0FDNzlERjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vWJQUrjQc3S48px+A4vtMRAR 1d/VWIRVZcQi9cuJ7yalphp4WxmCBMivZb+iutyCAbXKZlRKoVbVVzSZWJwsVHFe 6B+O97/vke9F1EU/brQ6TYoVNtKLqOHq7gqqs7n6TSW+pFQWj88vr5XdzMgoQfj+ QveBqVd4h1a03p0fVokD9UWFo3vhu2C9Z1R1Z1l8ZLun3XU1nRitKC+7J/N+QVRV NDuWi+X8shwXvG2tfJwHtDFPsdcm01T6WfIls6DdysI8apWGQKjVNWz+MkzPRq3U UuIvMlF5ybf4pRJZGbx3xTPI6jFRLS7U8G9Jm6QrbKbR4HnoGJ12IJGHLSoZAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUKqHu9cl8XaBs9emZFjNw6zrHnfQwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1OTY5MjkvMC8zMTM4MzAyZTMy MzIzMzJlMzEzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzODM4MzEzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEArTfeDANBgkqhkiG9w0BAQsFAAOCAQEAFWgoO3rxI6CgYs6k9fvn CZB1mCI5hMzi93R6Hwfy0h9SATnvSlqiW195OkVMV2tfa0LOGSN3xT4XR3D3Xk4A gO063OLD3PfkBf/0vLHXidkubsXXfejhLXMD7kxu6EYqacl36Sd5RaQaZtPugN5Q ZxnXRv1YCAqijykJNun6Arpsa2qeFvGJ2YGOyPjfD0EjiX5yUIfC7jj0XxVarW0M IUGj8SygipqQ1joK21pzMh7D7+F9f9I6I8FatnwN/MRKa6dETydTilHbHdAUcWEh jKEwFW2BHAEEyokDywwqeUTe7kYBQi0h+p9pRxn76qJ8utGbVx8CY1Z0PLuHv0+Z ZA== -----END CERTIFICATE-----Generated at Wed Jan 21 11:25:56 2026 by rpki-client