This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132342e302f32322d3234203d3e20333938373034.roa
File: 3138302e3232332e3132342e302f32322d3234203d3e20333938373034.roa (raw, json)
Hash identifier: 5ZXKlcZGsTsKOxHC6UaM9TwmjbPpHEdmMTHtnbK7HY4=
Subject key identifier: 15:63:B7:58:3D:8A:27:BD:03:AF:D6:86:70:AE:25:9D:7B:A2:30:73
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 37F5B367809D8CDD3BD3E606C77FA925F46CB611
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132342e302f32322d3234203d3e20333938373034.roa
Signing time: Tue 20 Jan 2026 02:24:59 +0000
ROA not before: Tue 20 Jan 2026 02:19:59 +0000
ROA not after: Tue 19 Jan 2027 02:24:59 +0000
asID: 398704
IP address blocks: 180.223.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f5:b3:67:80:9d:8c:dd:3b:d3:e6:06:c7:7f:a9:25:f4:6c:b6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:59 2026 GMT
Not After : Jan 19 02:24:59 2027 GMT
Subject: CN=1563B7583D8A27BD03AFD68670AE259D7BA23073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8c:02:11:34:a1:ae:2a:2c:51:fb:1d:b2:19:
81:e2:ab:d3:10:21:a5:15:86:cd:ce:7d:43:61:18:
68:d6:1f:c4:16:d4:b3:d5:7e:c6:e4:9c:e3:b9:18:
e1:25:10:e2:07:72:42:b7:66:2e:83:67:7f:20:bb:
0a:1a:23:53:bd:a5:4d:39:2d:5a:fb:bd:b1:5f:0a:
1a:25:67:1b:fd:eb:07:37:7f:dc:e7:fd:2e:09:c0:
f5:74:99:76:97:f9:76:75:d7:f0:7a:10:87:c9:a0:
5c:4b:82:86:9e:f4:38:0f:59:db:5c:48:8d:1d:05:
c0:d8:8a:ee:5a:55:09:60:5f:c3:02:d5:eb:44:38:
ae:e8:b2:20:3d:38:a4:9f:65:0f:95:b6:af:03:92:
b4:f5:07:be:b6:3d:d8:1c:8f:5b:63:ca:4f:a2:a9:
b8:9b:7e:66:a4:cb:5b:e7:97:66:50:d1:c0:45:b2:
f4:9e:5f:64:82:99:8e:1a:46:e1:aa:14:c7:e3:54:
b5:77:77:22:3e:8f:f4:e6:4b:5c:1d:d7:3b:7f:94:
e0:34:01:e2:47:e5:8e:62:a0:10:d3:0b:c7:6a:06:
13:f8:98:11:40:49:1c:7d:ec:96:fb:cd:47:c1:52:
fd:59:6a:f7:c8:2d:1b:57:74:fe:87:7f:a0:e1:83:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:63:B7:58:3D:8A:27:BD:03:AF:D6:86:70:AE:25:9D:7B:A2:30:73
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132342e302f32322d3234203d3e20333938373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.124.0/22
Signature Algorithm: sha256WithRSAEncryption
01:0f:a3:54:21:b9:e2:ff:13:62:5c:53:32:de:2b:95:91:55:
39:eb:d8:04:30:69:c6:ca:20:a7:98:95:20:ad:da:55:a0:e7:
d9:0f:8f:27:3d:6f:cb:e3:2e:c5:bc:72:ff:22:65:91:24:a9:
80:d3:35:41:99:e3:38:d9:6d:af:d2:58:f2:d6:11:ad:22:42:
e8:ae:3f:15:4c:41:9e:c9:9d:75:52:6f:1c:1c:2f:ba:8e:d5:
4a:6e:a9:ed:d9:ab:95:5b:87:2c:81:f0:db:60:e3:19:27:36:
9a:1c:2e:28:7a:3d:cf:c0:bb:9f:1c:2c:5f:e6:a0:c6:26:ec:
d8:28:89:6b:e0:81:c4:56:55:45:84:79:eb:64:c4:fd:16:ef:
25:cd:fd:0a:0a:04:8e:3e:be:7c:fe:8f:fc:b6:2c:75:0e:c0:
c2:5d:56:91:e5:05:85:d1:75:0e:c5:92:fe:f7:46:97:d5:71:
a5:b1:a0:f0:b6:f3:a0:dd:bf:a4:a0:64:04:d8:17:57:30:7b:
ac:33:c1:6d:36:0a:8b:3e:c5:c5:6d:97:27:4a:bd:dd:8a:83:
69:1f:55:11:2e:a6:1d:14:97:08:eb:de:1b:4e:ed:da:c3:8f:
b4:e2:33:ce:e7:66:cf:01:3c:ff:e5:61:4a:ae:86:c4:0d:48:
aa:3e:04:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:28 2026 by rpki-client