This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31382d3234203d3e2039333034.roa
File: 3138302e3232332e3132382e302f31382d3234203d3e2039333034.roa (raw, json)
Hash identifier: mUcWzd1s5ZYCrImgywJAC3JMiONP6d7QF6waGHVPhBQ=
Subject key identifier: F6:38:28:D5:60:73:DD:14:52:F8:10:6E:6D:D6:28:55:8C:E7:1F:1A
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 01BDA7973FD365C5C551354DBCC67E96E3BCC335
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31382d3234203d3e2039333034.roa
Signing time: Tue 20 Jan 2026 02:24:57 +0000
ROA not before: Tue 20 Jan 2026 02:19:57 +0000
ROA not after: Tue 19 Jan 2027 02:24:57 +0000
asID: 9304
IP address blocks: 180.223.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:bd:a7:97:3f:d3:65:c5:c5:51:35:4d:bc:c6:7e:96:e3:bc:c3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:57 2026 GMT
Not After : Jan 19 02:24:57 2027 GMT
Subject: CN=F63828D56073DD1452F8106E6DD628558CE71F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:3f:59:c6:70:46:e4:7d:d3:87:ac:c8:d3:
9a:49:fc:67:ad:94:38:8c:1c:a0:bd:20:1b:f1:5e:
af:b0:85:1a:fe:92:9c:9e:99:26:69:75:5d:dc:53:
dd:7f:24:83:ce:4b:72:2c:c6:5b:67:e5:a2:4a:f0:
a8:7d:79:e6:6b:0f:58:c9:9c:9e:a8:de:03:bc:7d:
a9:20:ef:3a:b0:06:9e:f0:78:f0:5b:96:b9:ef:1e:
a4:be:a2:58:45:34:1c:af:cc:49:ce:76:59:f7:a8:
46:cb:54:ec:ef:57:2e:fd:bd:5a:91:92:20:43:77:
fe:2b:7f:a5:d8:2c:78:a6:9c:91:88:64:6c:6f:c1:
a2:15:ba:78:04:39:22:02:63:05:3a:a0:8f:ed:ca:
3d:63:d5:dd:d6:19:66:82:e6:2b:bc:67:eb:42:f8:
db:e4:1d:2f:5a:f5:88:f6:0c:7f:a0:c5:cc:a4:35:
6c:01:13:be:45:ee:ab:2d:ee:32:3f:33:f2:93:41:
56:a2:68:9e:da:57:d9:5e:4e:b7:ff:da:ea:6c:4b:
33:61:24:b2:cb:d6:94:a9:0c:dc:9e:fe:95:f5:82:
45:83:18:d7:33:5e:51:cf:5c:66:e0:43:ac:e5:93:
22:28:e7:c0:b5:5f:00:65:68:7e:af:c4:bc:8e:93:
21:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:38:28:D5:60:73:DD:14:52:F8:10:6E:6D:D6:28:55:8C:E7:1F:1A
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31382d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.128.0/18
Signature Algorithm: sha256WithRSAEncryption
8e:56:2f:0c:66:53:f5:64:21:16:08:52:8c:b7:ef:05:d2:33:
69:f9:07:93:1f:6c:df:33:3d:27:b6:4c:29:3b:7e:1e:6a:82:
78:56:31:7c:62:b0:70:48:17:09:f3:cc:10:71:4e:75:a3:59:
20:f7:b2:49:81:1c:f7:95:07:a3:4b:63:3e:2e:93:73:51:d3:
53:87:f5:29:55:f1:8c:f6:f3:60:04:50:bc:41:43:da:c4:cd:
77:3c:70:4d:64:d9:f6:3c:ad:c6:20:39:bd:ce:fb:65:3d:11:
4c:f0:42:58:3c:36:dc:b1:e2:ef:ea:02:17:40:56:43:f3:1e:
1c:7d:8f:2c:12:59:b1:73:56:8e:13:38:0b:a7:12:b4:60:2b:
0e:98:49:8d:40:1a:60:c1:23:80:c1:3e:82:3c:1f:c0:26:59:
cd:5b:e5:3f:95:69:4b:0e:60:d3:80:b3:d6:2f:83:62:82:b4:
e2:4b:eb:8d:bf:5f:da:52:8f:54:2d:96:75:30:73:81:97:eb:
3b:4f:e3:d1:9d:ca:60:04:e9:ca:10:c4:21:31:79:ef:e0:22:
6d:c9:ca:91:16:7b:3e:44:87:f0:32:ba:dc:09:f7:30:87:61:
ec:e8:17:ec:aa:6a:3b:c3:62:12:f5:96:dd:87:7a:c5:3c:9d:
ac:15:c3:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:27 2026 by rpki-client