This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3139322e302f32312d3234203d3e20333938373034.roa
File: 3138302e3232332e3139322e302f32312d3234203d3e20333938373034.roa (raw, json)
Hash identifier: 1/7LrWa4S5j2VwUbqQu8zpsBzRGdiT3KPzTbJsPxIIw=
Subject key identifier: 15:1E:40:C3:2D:1E:70:BD:AD:9C:E8:CC:34:D5:B0:42:67:F7:EC:35
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 7395AD65F2CBD974B7FF242896D2282496317D48
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3139322e302f32312d3234203d3e20333938373034.roa
Signing time: Tue 20 Jan 2026 02:24:53 +0000
ROA not before: Tue 20 Jan 2026 02:19:53 +0000
ROA not after: Tue 19 Jan 2027 02:24:53 +0000
asID: 398704
IP address blocks: 180.223.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:95:ad:65:f2:cb:d9:74:b7:ff:24:28:96:d2:28:24:96:31:7d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:53 2026 GMT
Not After : Jan 19 02:24:53 2027 GMT
Subject: CN=151E40C32D1E70BDAD9CE8CC34D5B04267F7EC35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:5a:5c:0c:dd:46:15:92:61:cb:e1:9d:9d:
34:5d:2b:d9:4e:9d:2d:25:f2:de:30:8d:ca:2a:46:
90:82:96:0a:85:57:16:0d:09:39:26:c6:15:75:3b:
c5:ec:da:a0:6d:76:da:aa:46:11:65:2c:a5:a6:d3:
1f:30:f5:30:59:f0:55:3c:15:fb:e7:44:84:bd:56:
9b:79:8a:f5:c4:56:77:b3:81:57:bd:8c:4f:ad:4d:
8b:e4:d7:ef:f1:97:06:f2:5f:67:2a:7b:c3:c3:10:
42:d7:93:8b:05:f0:f9:78:d0:e0:48:29:c3:9a:2f:
d9:f5:c2:d0:11:7e:3a:82:2a:71:16:f0:3e:fa:a6:
a7:d9:b6:4c:6d:90:89:61:35:53:8d:82:f4:c3:02:
fc:89:09:2a:db:61:62:f2:d0:80:c3:8e:d0:7e:8a:
77:a3:b1:4b:ee:f1:e5:25:79:a7:d6:a0:81:8b:ce:
c1:69:1d:b4:2e:ff:3e:32:65:f5:cf:d0:3e:4f:a6:
8d:ab:5d:21:e3:74:f4:6b:15:07:d7:b0:71:ac:f2:
04:29:53:e6:7f:b7:e2:43:82:86:4e:a7:13:ea:11:
4d:76:7e:99:48:da:b6:58:7a:57:44:15:00:e1:b6:
d2:da:54:f1:5f:1e:95:38:78:4e:ce:70:88:e7:9d:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1E:40:C3:2D:1E:70:BD:AD:9C:E8:CC:34:D5:B0:42:67:F7:EC:35
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3139322e302f32312d3234203d3e20333938373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.192.0/21
Signature Algorithm: sha256WithRSAEncryption
84:3e:90:fe:20:c4:70:5e:4d:a7:97:91:ab:f5:41:13:3e:3c:
73:e0:0b:ed:c6:b0:b7:ff:b8:0a:e8:c4:a0:52:c0:63:57:f2:
55:96:56:a0:cc:c4:09:df:68:82:4c:dd:50:86:b3:40:a2:7a:
2b:68:e9:5d:ef:48:6e:8a:74:4c:94:5d:45:82:9a:c8:e4:f8:
bf:b9:4c:73:27:34:70:7b:8c:74:6e:59:d5:3c:3a:61:57:91:
cd:5a:de:26:a5:b9:8f:af:64:db:55:5d:9b:f1:b0:f7:71:06:
da:b9:ce:21:bf:b2:d3:06:cc:86:8e:7b:4d:ab:ed:e5:20:21:
f0:72:2c:4e:e7:03:35:d3:e9:25:26:bd:fe:7d:37:9f:61:c4:
32:75:7c:af:5c:1e:13:57:9c:ed:3b:17:9a:fe:50:87:97:f7:
88:f2:ec:ac:f4:36:e5:ea:2f:5f:a8:d0:b5:9b:3a:f0:77:c6:
af:3c:ae:17:0c:40:91:d7:22:a4:43:be:9f:3f:78:4f:b2:45:
00:2d:dd:4d:e1:9a:07:ab:ac:4e:de:be:84:98:34:4f:28:2e:
73:a9:ad:2a:8b:56:94:6e:e3:c4:42:00:02:72:61:af:1b:a4:
66:e9:67:77:7a:05:12:27:2b:12:be:f8:fc:8d:b0:08:56:ee:
58:ba:6f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:14:50 2026 by rpki-client