This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132342e302f32322d3234203d3e2037303138.roa
File: 3138302e3232332e3132342e302f32322d3234203d3e2037303138.roa (raw, json)
Hash identifier: jmFwOQpp4tb4Ht1YsxpS2YTmK5Kt7ntI6HYUQlSRnC8=
Subject key identifier: 27:B5:F3:87:F9:1F:17:2E:8E:F2:F7:75:BD:76:F0:CD:4A:88:E7:03
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 73B8ABAE5CAD2C416DEA66A9D261EC0D4C3D22C0
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132342e302f32322d3234203d3e2037303138.roa
Signing time: Tue 20 Jan 2026 02:25:00 +0000
ROA not before: Tue 20 Jan 2026 02:20:00 +0000
ROA not after: Tue 19 Jan 2027 02:25:00 +0000
asID: 7018
IP address blocks: 180.223.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b8:ab:ae:5c:ad:2c:41:6d:ea:66:a9:d2:61:ec:0d:4c:3d:22:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:20:00 2026 GMT
Not After : Jan 19 02:25:00 2027 GMT
Subject: CN=27B5F387F91F172E8EF2F775BD76F0CD4A88E703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a5:b9:ee:ad:05:72:be:1f:69:bb:ae:04:5f:
64:ad:85:32:fb:55:83:9c:72:61:96:d6:92:29:b3:
c4:aa:5f:d0:84:97:c4:57:d9:ff:78:43:d0:ad:08:
5a:de:4c:c1:91:59:b7:b7:3c:eb:4a:64:e7:4b:c5:
28:30:53:a7:66:13:e7:88:75:b1:b2:1e:77:c6:41:
4f:ec:3e:6f:2e:db:25:02:c8:79:fc:be:ca:24:f8:
65:df:05:4f:92:a9:6e:59:c1:7c:64:04:cb:e4:5f:
78:21:03:35:9d:22:bf:84:2a:a5:c7:fe:fe:83:9d:
30:d0:d7:2f:24:99:a4:d3:8c:aa:ca:c0:18:c9:be:
cd:c4:28:57:51:f9:6b:7e:0a:aa:dc:cd:71:d2:3c:
41:4c:7c:21:21:6e:b7:88:fb:6c:36:c1:cb:f0:80:
82:0c:2a:6b:00:32:67:ed:60:98:83:ad:4e:63:5c:
e2:8c:45:57:a7:f2:d7:21:0b:c3:b1:8a:59:b8:50:
27:31:d9:dc:91:34:fd:2c:7c:33:1d:d8:c9:ee:cb:
9a:d3:86:2e:88:a9:a6:60:59:ac:21:6f:38:36:6c:
46:6b:b9:2e:a6:3b:bd:e4:46:dc:d3:71:86:3f:62:
42:1e:36:23:f9:b4:f9:93:0b:1b:01:e6:af:c8:2f:
d8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B5:F3:87:F9:1F:17:2E:8E:F2:F7:75:BD:76:F0:CD:4A:88:E7:03
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132342e302f32322d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:73:dc:41:17:6c:70:41:98:7b:9d:d5:59:ab:c9:d0:7f:4a:
84:fc:c0:6a:a2:92:47:92:c4:61:e0:db:f9:57:a8:d5:1c:b3:
78:6a:f6:19:93:62:7c:5b:89:a8:70:0e:a7:f2:62:f6:92:0b:
58:ab:ab:f3:3b:34:10:f4:36:3e:cb:f7:13:d9:5d:b7:a5:c4:
e6:1f:6d:53:38:a1:31:6b:66:b9:14:eb:71:ce:4f:09:d1:b0:
aa:b6:22:d7:50:fe:e8:e0:76:98:f2:a7:b9:0f:0b:01:b3:22:
42:2d:98:72:79:04:79:7e:ee:66:4c:03:8d:0d:f7:e4:ae:8b:
ab:c4:1e:cc:68:9e:87:1e:6e:83:ac:81:a6:af:3f:08:58:38:
7e:54:db:ff:cb:61:4f:d5:65:2a:3a:b2:09:5f:38:82:da:4c:
8b:60:99:94:f4:84:60:48:0a:0d:4e:1f:26:d7:f9:e8:9a:d0:
6b:b2:fc:24:0b:4a:24:7e:b9:9c:4e:ec:d2:f4:10:53:89:38:
c5:31:10:e4:21:55:46:07:ff:18:c7:ea:c7:09:16:4e:79:99:
48:e4:27:07:ce:bf:78:dc:ac:e5:4e:8a:2e:60:fc:50:27:75:
8d:e3:9d:a1:dc:48:d7:9e:2f:06:4e:c8:19:13:e6:43:2e:5a:
7f:23:c2:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:12:48 2026 by rpki-client