This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230342e302f32322d3234203d3e203130313033.roa
File: 3138302e3232332e3230342e302f32322d3234203d3e203130313033.roa (raw, json)
Hash identifier: aGx2F8wuKghapSsJZwD/DvC343TsQcyn8K0LPNwoCJo=
Subject key identifier: 7D:00:6E:F8:32:F9:8C:4C:7F:94:15:90:CC:8A:5C:69:41:0C:EC:49
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 52D3B7502E34ADBD9B7A36F95505937BC73C6E09
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230342e302f32322d3234203d3e203130313033.roa
Signing time: Tue 20 Jan 2026 02:25:00 +0000
ROA not before: Tue 20 Jan 2026 02:20:00 +0000
ROA not after: Tue 19 Jan 2027 02:25:00 +0000
asID: 10103
IP address blocks: 180.223.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:d3:b7:50:2e:34:ad:bd:9b:7a:36:f9:55:05:93:7b:c7:3c:6e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:20:00 2026 GMT
Not After : Jan 19 02:25:00 2027 GMT
Subject: CN=7D006EF832F98C4C7F941590CC8A5C69410CEC49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:a2:c0:f2:bb:10:54:28:68:0e:7b:9d:8a:
be:0f:21:93:6d:b7:27:01:5e:6f:a1:19:2d:9d:23:
82:0a:2f:6e:8b:dd:c2:ce:70:99:f8:03:7f:45:b3:
2f:e5:2c:bf:d8:a2:24:7e:69:76:8d:56:a5:02:ae:
fb:9a:f2:40:dc:aa:03:68:2d:1d:8c:9e:18:9d:ff:
80:af:56:00:9e:30:38:51:65:b8:9f:7f:e0:26:97:
a6:b4:f0:23:76:bd:44:c5:76:0e:4d:95:55:dc:f2:
72:78:df:53:1a:c8:76:aa:18:75:22:af:41:18:3b:
72:f2:44:c8:8b:ef:6e:be:49:35:76:c7:3f:44:2c:
e6:af:6f:c8:78:a0:c7:af:95:99:1b:6f:1a:b4:f7:
d3:26:6d:79:39:67:48:bf:6a:f9:21:95:83:95:b9:
f3:ac:a8:d6:73:f6:98:2b:ed:77:a2:3e:24:87:2e:
c4:e3:37:b7:22:2d:bd:fa:fb:3f:4b:91:2f:9b:dd:
89:cc:1d:c0:8e:c1:f8:f4:04:7b:4c:ef:a5:9c:35:
a2:bb:2f:24:60:7e:0b:ca:7d:6c:61:c9:47:39:b1:
03:da:ba:4d:e5:e2:df:30:88:73:cb:08:65:92:1b:
6a:bb:af:ab:6b:41:b1:ea:b1:29:53:2d:a9:c8:3c:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:00:6E:F8:32:F9:8C:4C:7F:94:15:90:CC:8A:5C:69:41:0C:EC:49
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230342e302f32322d3234203d3e203130313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.204.0/22
Signature Algorithm: sha256WithRSAEncryption
69:8a:9f:f3:4f:c5:9d:8a:ba:29:4a:52:f1:97:92:84:3a:76:
87:8f:9d:c0:9f:78:d5:48:ef:35:ff:ee:37:04:a1:70:da:f4:
78:58:8e:b5:4b:71:0d:cf:3a:82:dd:05:15:33:f0:2c:77:a5:
b9:09:56:8b:0c:1b:87:0e:7a:74:75:94:4b:ba:fb:a1:dd:a8:
21:19:51:d2:ee:cb:f4:ce:4e:11:51:84:d3:93:f3:96:e5:0f:
16:53:fe:27:b6:62:9b:67:ff:2d:9c:1c:96:b3:32:2a:04:d8:
c6:39:93:ed:7e:bd:20:69:83:06:99:1a:6e:45:34:dd:c2:48:
ce:87:c3:d1:e3:78:f2:60:b7:07:c4:54:c5:65:a2:62:07:84:
13:79:e4:2c:c8:e1:e6:80:f2:a5:43:74:c8:d3:87:9d:48:42:
2e:31:c9:33:91:57:eb:b9:12:ac:14:ee:eb:37:d3:7d:e0:cc:
b9:7c:fe:42:a8:c9:1f:92:4f:ec:33:6e:45:a4:fd:39:eb:81:
44:d3:be:38:8d:d1:67:5a:ad:a0:9a:e0:b7:dc:63:c0:3f:e2:
cb:3a:fd:90:a7:48:53:9f:7a:e6:3a:f7:90:04:5f:5c:22:3d:
22:00:89:d2:e3:bb:d6:26:7b:23:8f:79:3e:43:55:97:d4:db:
35:a5:c4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:43 2026 by rpki-client