This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3139362e302f32342d3234203d3e2032393134.roa
File: 3138302e3232332e3139362e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: 5hIutRMhd6Qza2Q7E03DGhZks1LY/gkCRfDmK3ro5IU=
Subject key identifier: D4:E1:20:19:3E:5E:4A:33:4C:95:83:B9:F9:FC:CF:2F:6B:10:1A:23
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 7B4ADA3AA19ED9ACE8EF1A08D161BE9AB24FFB3D
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3139362e302f32342d3234203d3e2032393134.roa
Signing time: Tue 20 Jan 2026 02:24:59 +0000
ROA not before: Tue 20 Jan 2026 02:19:59 +0000
ROA not after: Tue 19 Jan 2027 02:24:59 +0000
asID: 2914
IP address blocks: 180.223.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:4a:da:3a:a1:9e:d9:ac:e8:ef:1a:08:d1:61:be:9a:b2:4f:fb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:59 2026 GMT
Not After : Jan 19 02:24:59 2027 GMT
Subject: CN=D4E120193E5E4A334C9583B9F9FCCF2F6B101A23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:29:6f:a6:fa:ac:63:37:0c:1e:5c:7b:4a:
af:ce:80:0d:b6:4d:53:b9:3c:37:e7:27:4c:7b:cc:
2d:7b:24:e8:3b:b2:cd:cb:59:38:df:76:8c:0a:d1:
fc:12:50:f9:46:72:f4:5a:d6:f1:d8:f3:d6:63:7e:
8e:7e:e7:78:71:b2:24:4f:8c:6d:e4:16:e7:ba:00:
eb:71:83:8d:54:c0:7b:8b:33:6a:22:5c:d7:63:e5:
56:33:cc:a7:2d:d9:cf:6b:06:52:c8:ae:24:27:9d:
35:6e:2e:0f:2b:99:27:87:03:8d:f6:27:27:52:d7:
a6:3b:23:5a:6f:cb:7a:df:3d:23:e6:29:9d:f2:ae:
c1:05:70:8e:bc:3d:f1:a6:fa:60:8c:3d:bd:81:a5:
28:e1:a7:c7:df:8e:cb:b6:fc:f4:ea:09:04:69:d0:
9c:6b:75:d4:60:57:a7:af:7f:64:0c:9f:8a:b4:b7:
11:e0:fb:49:96:0c:96:ce:1c:85:6d:21:73:c7:19:
c0:ed:25:d0:d4:70:de:c8:c9:08:8d:8d:52:3c:7d:
d0:87:9a:c9:a0:b6:10:f2:76:f4:d9:8b:74:ff:83:
d1:16:23:2a:26:1e:3c:a1:77:86:d2:79:3f:13:ff:
9f:77:fe:d9:66:c9:2b:ad:d7:4b:f2:82:92:e3:77:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E1:20:19:3E:5E:4A:33:4C:95:83:B9:F9:FC:CF:2F:6B:10:1A:23
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3139362e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.196.0/24
Signature Algorithm: sha256WithRSAEncryption
03:85:8b:cf:48:35:4d:63:7a:e4:e4:6c:17:60:68:a8:e1:0b:
bd:f1:2b:16:59:0c:49:3c:2f:ca:e9:ac:94:92:7b:97:0c:37:
0a:b9:41:b3:02:01:99:7c:74:85:60:79:52:7d:94:74:f0:b2:
7c:54:cb:80:82:10:11:06:9c:98:1e:07:14:19:fc:ee:02:13:
d2:40:70:7c:80:05:5b:e5:2d:5e:f1:c8:87:9d:fc:0d:fb:e6:
7b:da:81:26:dd:8d:62:9d:07:16:c7:bd:da:cd:e0:f1:fc:c8:
46:01:d2:6a:6b:48:9d:3d:0b:6d:73:a5:89:30:ec:31:79:70:
65:a9:b9:6a:64:42:42:88:d6:b0:57:ee:c4:cb:02:86:aa:68:
c7:f7:6b:3a:05:be:9a:19:17:b8:7d:12:5e:b9:0c:36:3c:03:
30:8b:b6:9a:b6:87:2b:6f:c0:30:2f:8e:f8:30:3e:d6:b8:8b:
a6:f3:6e:3d:ce:34:ff:6b:20:98:77:8b:4c:37:ba:49:62:24:
71:d4:6c:5c:d3:ea:e5:5a:5c:4b:db:01:61:55:af:7d:3a:73:
e5:8f:8d:7f:b3:26:ab:64:f0:69:f1:79:25:57:6f:de:49:ad:
f7:36:f0:ab:78:aa:13:b8:1b:1b:d9:12:17:0a:e5:6d:5a:5d:
bc:10:8a:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:49 2026 by rpki-client