This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132342e302f32342d3234203d3e20333938373034.roa File: 3138302e3232332e3132342e302f32342d3234203d3e20333938373034.roa (raw, json) Hash identifier: +0bfGgw77vGNCMua/7JuVv30XFmuzsvTfm08IZTLWnE= Subject key identifier: 34:2D:4F:DA:A3:9D:02:E6:88:D3:D4:82:00:B5:76:F6:9F:56:F6:C6 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 598CDA71F02032D1DAD89EA00351D5FC72EAF2F7 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132342e302f32342d3234203d3e20333938373034.roa Signing time: Tue 20 Jan 2026 02:24:56 +0000 ROA not before: Tue 20 Jan 2026 02:19:56 +0000 ROA not after: Tue 19 Jan 2027 02:24:56 +0000 asID: 398704 IP address blocks: 180.223.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:8c:da:71:f0:20:32:d1:da:d8:9e:a0:03:51:d5:fc:72:ea:f2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:56 2026 GMT Not After : Jan 19 02:24:56 2027 GMT Subject: CN=342D4FDAA39D02E688D3D48200B576F69F56F6C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4f:0c:63:b9:9f:e4:af:f7:a8:e1:09:d6:ab: 39:d7:81:b6:70:48:10:86:3b:73:33:f9:c8:04:d8: 94:c4:25:40:79:8a:b5:54:64:13:bd:01:94:0f:f9: 5c:4d:4b:52:8d:4e:4a:50:f8:e4:df:d0:ff:e9:07: 03:99:a1:39:77:9e:a9:25:dd:f8:c9:1e:20:1f:9d: ee:65:17:c0:e8:5d:6e:d2:57:b8:9d:a4:e9:b7:dd: d2:44:7b:c6:c6:af:d5:82:16:0e:13:dd:9f:d2:ba: c8:81:1a:89:d8:a5:93:5f:f9:e7:22:db:4c:58:e3: 4b:73:a4:b7:52:b5:dc:02:5b:fd:dc:43:85:0f:ca: 18:59:73:cb:73:c1:b7:5b:dd:cb:45:85:87:08:0f: 18:d5:bf:b1:74:c3:cd:65:c9:94:ac:3e:b7:69:92: 1c:81:a7:11:50:ff:9c:d5:27:62:64:a4:79:e5:8c: f5:5e:86:07:f0:18:dd:c4:27:ce:e1:70:2c:97:7a: 7a:36:52:3d:be:20:f9:80:1f:5e:a5:a6:f0:e1:07: af:1e:79:5b:12:d5:2d:2b:fe:8d:84:97:86:f2:fc: 21:17:62:59:ef:d0:70:3a:eb:14:30:ee:f7:5e:dd: ca:34:b4:0d:92:76:59:b8:8a:de:36:01:50:98:64: 0f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2D:4F:DA:A3:9D:02:E6:88:D3:D4:82:00:B5:76:F6:9F:56:F6:C6 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132342e302f32342d3234203d3e20333938373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.124.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:54:e1:d3:2a:e2:24:cb:02:9f:06:ef:75:59:c8:7d:28:2a: 10:46:d9:12:2d:0f:e1:57:ae:e6:37:da:0c:ce:dd:29:19:af: 09:52:5b:53:54:2f:28:a2:5f:73:fb:c1:c4:20:55:21:8b:13: 42:53:1b:36:a2:44:01:c5:f6:2c:73:d7:16:08:74:78:3a:04: 51:95:1d:c5:75:91:d2:69:27:50:cd:f7:d0:1d:0e:4c:15:34: a6:e7:95:ca:06:d7:d3:b1:56:10:d7:d9:88:93:cd:ba:4a:b3: 11:27:88:91:8b:f4:11:4f:8d:eb:ed:be:3f:30:cc:30:e6:de: f6:40:41:f0:24:cb:f0:55:1b:3d:95:86:5e:d3:44:c7:8b:d3: 6a:e2:e9:69:51:d4:fe:c3:57:20:5d:da:24:11:55:29:12:61: 9e:b9:98:6d:3b:5f:4b:53:ab:cb:68:eb:1f:53:48:cd:5e:e1: eb:fe:21:b3:36:bc:65:e7:62:15:52:4e:97:af:92:a9:d3:96: db:79:eb:0f:05:9d:06:f2:6f:43:cd:05:13:ce:5a:43:a9:88: c2:7d:4e:27:5b:9b:b9:8f:a8:a9:5c:fc:d8:41:6f:c3:b8:b6: 79:d9:3d:eb:a3:b9:09:6d:50:89:51:8e:92:7b:10:d1:04:78: e7:e0:58:d3 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUWYzacfAgMtHa2J6gA1HV/HLq8vcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTZaFw0yNzAxMTkwMjI0NTZaMDMxMTAvBgNV BAMTKDM0MkQ0RkRBQTM5RDAyRTY4OEQzRDQ4MjAwQjU3NkY2OUY1NkY2QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmTwxjuZ/kr/eo4QnWqznXgbZw SBCGO3Mz+cgE2JTEJUB5irVUZBO9AZQP+VxNS1KNTkpQ+OTf0P/pBwOZoTl3nqkl 3fjJHiAfne5lF8DoXW7SV7idpOm33dJEe8bGr9WCFg4T3Z/SusiBGonYpZNf+eci 20xY40tzpLdStdwCW/3cQ4UPyhhZc8tzwbdb3ctFhYcIDxjVv7F0w81lyZSsPrdp khyBpxFQ/5zVJ2JkpHnljPVehgfwGN3EJ87hcCyXeno2Uj2+IPmAH16lpvDhB68e eVsS1S0r/o2El4by/CEXYlnv0HA66xQw7vde3co0tA2Sdlm4it42AVCYZA9dAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUNC1P2qOdAuaI09SCALV29p9W9sYwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUz MjMyMzMyZTMxMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzODM3MzAz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEALTffDANBgkqhkiG9w0BAQsFAAOCAQEAClTh0yriJMsCnwbv dVnIfSgqEEbZEi0P4Veu5jfaDM7dKRmvCVJbU1QvKKJfc/vBxCBVIYsTQlMbNqJE AcX2LHPXFgh0eDoEUZUdxXWR0mknUM330B0OTBU0pueVygbX07FWENfZiJPNukqz ESeIkYv0EU+N6+2+PzDMMObe9kBB8CTL8FUbPZWGXtNEx4vTauLpaVHU/sNXIF3a JBFVKRJhnrmYbTtfS1Ory2jrH1NIzV7h6/4hsza8ZediFVJOl6+SqdOW23nrDwWd BvJvQ80FE85aQ6mIwn1OJ1ubuY+oqVz82EFvw7i2edk966O5CW1QiVGOknsQ0QR4 5+BY0w== -----END CERTIFICATE-----Generated at Wed Jan 21 14:12:46 2026 by rpki-client