This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230332e302f32342d3234203d3e2032393134.roa
File: 3138302e3232332e3230332e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: 9JEbRrTquhXPujTNJuxCapBGR+bdWRfIIuWIJRI/By8=
Subject key identifier: 05:81:33:7F:51:24:D2:FB:69:F1:1F:9E:26:CD:A2:B0:2B:6F:CA:1D
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 63AFB21F55A68264F1E8647EFA40C88F871F6786
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230332e302f32342d3234203d3e2032393134.roa
Signing time: Tue 20 Jan 2026 02:24:59 +0000
ROA not before: Tue 20 Jan 2026 02:19:59 +0000
ROA not after: Tue 19 Jan 2027 02:24:59 +0000
asID: 2914
IP address blocks: 180.223.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:af:b2:1f:55:a6:82:64:f1:e8:64:7e:fa:40:c8:8f:87:1f:67:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:59 2026 GMT
Not After : Jan 19 02:24:59 2027 GMT
Subject: CN=0581337F5124D2FB69F11F9E26CDA2B02B6FCA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:17:a8:f5:12:8f:c3:6b:a4:79:cf:63:8a:
84:9a:c6:4a:30:3b:47:30:48:d7:fe:f8:91:2a:57:
0d:6f:84:a5:70:bb:5c:af:b0:70:9c:97:fa:1c:3e:
dd:50:65:0c:43:99:83:33:63:29:5d:b0:ad:75:80:
72:49:66:fb:e0:34:cb:44:a5:f3:74:2f:40:a0:18:
18:20:45:61:84:fa:9a:4d:d9:9b:d4:8c:32:48:e4:
82:cf:96:05:89:fc:ab:9d:f5:92:6a:50:ac:6b:c2:
08:44:74:ea:d8:c5:79:25:eb:cd:41:88:fb:ea:2c:
fb:90:c5:c1:85:46:eb:25:c4:88:2a:48:cd:5f:77:
09:fe:d4:9c:1d:14:cc:6d:66:36:00:52:51:4b:56:
2f:72:0c:7f:5b:3b:6a:75:ad:92:61:ce:e2:c2:3a:
64:d4:ec:04:5d:87:01:3e:48:07:37:2c:0b:e1:89:
85:7d:6a:25:6e:ee:d7:51:1f:b8:d0:85:ba:74:8a:
99:34:e4:e8:d9:4b:cc:6a:7e:ef:3b:b0:5f:17:96:
9e:ec:94:b1:ad:32:36:3f:b5:58:84:7a:0e:ed:76:
08:49:8b:f3:02:61:97:3a:03:92:d6:e9:31:c3:d2:
86:a6:44:21:8e:43:8b:f1:7f:2e:c7:e9:c2:6f:85:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:81:33:7F:51:24:D2:FB:69:F1:1F:9E:26:CD:A2:B0:2B:6F:CA:1D
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230332e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.203.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b9:20:55:14:62:35:ee:0f:55:cd:bd:1c:9c:38:39:71:0d:
33:7a:17:92:75:ed:8f:bf:16:2b:46:13:74:0a:90:b6:73:e7:
7a:39:73:05:69:3b:00:7f:c7:6c:94:23:95:58:07:0f:23:48:
a4:18:8c:64:9d:d4:c9:d7:ca:a3:ab:12:74:8e:23:f1:ee:e4:
64:61:b4:91:78:60:05:d1:07:8d:0a:a7:51:a6:62:7c:4b:75:
a5:93:a9:9a:3a:1e:1a:d1:9b:29:a1:15:b6:48:90:c5:65:0b:
1c:3b:29:1a:3d:bb:d9:94:61:a2:93:e5:5d:03:a9:1b:5a:57:
d2:7f:ef:74:c0:b3:2f:81:fd:2d:74:31:55:46:bb:4c:2a:7b:
b3:1a:03:c9:a5:c8:0b:af:bc:cd:86:4f:50:e2:1a:1c:f2:ed:
cd:b9:00:f3:ed:29:3b:0e:cf:f0:e7:ee:86:ac:ff:aa:c3:48:
e9:bf:8c:57:98:77:ea:a7:9d:24:53:89:d0:b9:f8:69:f0:f0:
71:ee:b3:9b:0b:b6:99:75:03:9e:4f:dd:82:6e:28:3b:b3:9e:
8b:68:de:14:2b:7d:c9:f7:63:d2:b8:a1:cd:94:ab:bc:13:66:
c1:99:b7:66:47:14:5c:6d:ab:38:47:71:8b:e0:9b:d1:81:9d:
aa:7a:6f:d7
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUY6+yH1WmgmTx6GR++kDIj4cfZ4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw
NkNERDJDRTAeFw0yNjAxMjAwMjE5NTlaFw0yNzAxMTkwMjI0NTlaMDMxMTAvBgNV
BAMTKDA1ODEzMzdGNTEyNEQyRkI2OUYxMUY5RTI2Q0RBMkIwMkI2RkNBMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQBeo9RKPw2ukec9jioSaxkow
O0cwSNf++JEqVw1vhKVwu1yvsHCcl/ocPt1QZQxDmYMzYyldsK11gHJJZvvgNMtE
pfN0L0CgGBggRWGE+ppN2ZvUjDJI5ILPlgWJ/Kud9ZJqUKxrwghEdOrYxXkl681B
iPvqLPuQxcGFRuslxIgqSM1fdwn+1JwdFMxtZjYAUlFLVi9yDH9bO2p1rZJhzuLC
OmTU7ARdhwE+SAc3LAvhiYV9aiVu7tdRH7jQhbp0ipk05OjZS8xqfu87sF8Xlp7s
lLGtMjY/tViEeg7tdghJi/MCYZc6A5LW6THD0oamRCGOQ4vxfy7H6cJvhToHAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUBYEzf1Ek0vtp8R+eJs2isCtvyh0wHwYDVR0j
BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0
RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU5MTE5NTcyMTU5NjkyOS8wLzMxMzgzMDJlMzIz
MjMzMmUzMjMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEALTfyzANBgkqhkiG9w0BAQsFAAOCAQEAZLkgVRRiNe4PVc29HJw4OXEN
M3oXknXtj78WK0YTdAqQtnPnejlzBWk7AH/HbJQjlVgHDyNIpBiMZJ3UydfKo6sS
dI4j8e7kZGG0kXhgBdEHjQqnUaZifEt1pZOpmjoeGtGbKaEVtkiQxWULHDspGj27
2ZRhopPlXQOpG1pX0n/vdMCzL4H9LXQxVUa7TCp7sxoDyaXIC6+8zYZPUOIaHPLt
zbkA8+0pOw7P8Ofuhqz/qsNI6b+MV5h36qedJFOJ0Ln4afDwce6zmwu2mXUDnk/d
gm4oO7Oei2jeFCt9yfdj0rihzZSrvBNmwZm3ZkcUXG2rOEdxi+Cb0YGdqnpv1w==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:29 2026 by rpki-client