This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132342e302f32322d3234203d3e2034373636.roa
File: 3138302e3232332e3132342e302f32322d3234203d3e2034373636.roa (raw, json)
Hash identifier: FQxHlRVvK0hZ3hqXwim0kZEnMq+uyOtbBgfCiHD9zZE=
Subject key identifier: C1:F2:C5:14:2F:DE:41:E9:B7:BB:64:E9:8D:B0:1B:A6:93:85:51:58
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 22B0BB7C45ED3BBB5396FA94007D829BEAFA666A
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132342e302f32322d3234203d3e2034373636.roa
Signing time: Tue 20 Jan 2026 02:24:52 +0000
ROA not before: Tue 20 Jan 2026 02:19:52 +0000
ROA not after: Tue 19 Jan 2027 02:24:52 +0000
asID: 4766
IP address blocks: 180.223.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b0:bb:7c:45:ed:3b:bb:53:96:fa:94:00:7d:82:9b:ea:fa:66:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:52 2026 GMT
Not After : Jan 19 02:24:52 2027 GMT
Subject: CN=C1F2C5142FDE41E9B7BB64E98DB01BA693855158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:43:f9:a8:17:a7:2e:e7:46:21:b3:35:73:
ff:59:d8:15:7f:bf:f8:cd:2b:a0:8b:b5:89:ed:cd:
fb:52:88:33:b4:b9:8c:47:30:2a:19:b5:6f:81:69:
2f:87:4d:3b:90:63:2d:cc:11:46:bc:ca:5e:a0:23:
41:e8:c5:55:ef:47:22:be:a9:a4:3c:85:63:14:e0:
10:c4:20:06:c2:42:63:b3:76:1b:88:1a:9d:23:27:
3d:d0:c7:4e:d5:1f:46:0f:3f:cb:ea:02:8d:e7:4c:
0a:f4:f1:b6:af:d3:63:42:b3:84:bd:11:14:e1:d8:
06:8e:76:98:79:67:06:4a:57:a9:b2:c3:cd:85:e6:
a2:04:44:b7:90:e2:cb:78:48:57:2d:33:f2:56:14:
e0:52:40:d3:41:9c:10:cf:a4:53:55:1c:49:00:ac:
47:5c:a6:12:cc:b2:7d:b2:54:ba:11:45:54:d8:ce:
8c:1b:0e:dc:28:8c:f3:28:a6:47:c8:70:85:f2:37:
ce:19:86:7f:30:18:db:11:88:ce:5c:b5:d0:34:b1:
f4:c4:aa:11:11:c5:ad:bd:fb:0d:3a:9d:45:4a:c3:
59:0a:0e:c3:f8:9b:ab:e6:70:8b:ae:a5:38:13:88:
c3:2d:da:6f:ce:b5:e0:4b:e9:fa:68:53:59:d4:68:
b4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F2:C5:14:2F:DE:41:E9:B7:BB:64:E9:8D:B0:1B:A6:93:85:51:58
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132342e302f32322d3234203d3e2034373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.124.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:32:0b:1b:43:04:15:03:8e:34:32:df:34:08:3c:31:39:7b:
1a:b0:ec:0f:be:25:10:fc:c8:49:8b:9f:62:44:1f:de:07:af:
45:18:8a:ee:15:3e:d4:2f:27:17:76:ee:8a:d0:6d:59:86:bd:
ee:f2:d5:71:b0:68:6b:b4:7a:e3:ec:ce:25:ae:5a:bb:e1:7c:
21:2b:02:a2:b5:f9:31:91:b2:f6:db:74:59:44:c6:88:1b:c7:
73:ab:de:3a:10:4a:79:12:35:70:4b:66:9d:1d:e2:ac:f9:22:
d4:4b:98:88:c3:2e:c9:6e:54:98:73:b9:ec:a9:76:db:f0:6f:
46:7e:f6:52:23:9b:72:88:be:01:28:ee:c7:aa:e0:49:dd:d5:
15:ab:fb:86:f7:25:41:6d:eb:02:35:8e:e7:c6:ff:b7:c2:22:
f7:5e:89:7e:e4:14:20:82:ba:2e:6f:13:aa:c7:b9:94:48:e3:
ee:b2:13:3a:dc:0d:d7:0c:5b:80:d1:ab:51:5c:5d:48:eb:10:
e3:38:c5:ba:f0:d6:0a:15:3e:dc:a7:27:28:40:96:27:a0:df:
64:32:9b:ec:78:96:2c:80:19:16:b2:da:d9:ea:34:76:77:5e:
5f:90:08:a8:c7:c5:21:45:e5:49:f0:81:a6:e8:35:2b:cb:38:
a2:89:33:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:12:42 2026 by rpki-client