This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230342e302f32322d3234203d3e203138383131.roa File: 3138302e3232332e3230342e302f32322d3234203d3e203138383131.roa (raw, json) Hash identifier: eg+gs0VLbxJVwNINdsE273KZzzL982irwVUgBrLfGNU= Subject key identifier: 38:09:8C:D5:BD:8D:67:04:A5:B9:45:72:FB:68:25:B1:14:49:23:04 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 14777DB277FEC9517FEF7AF6418762937B44C48F Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230342e302f32322d3234203d3e203138383131.roa Signing time: Tue 20 Jan 2026 02:24:59 +0000 ROA not before: Tue 20 Jan 2026 02:19:59 +0000 ROA not after: Tue 19 Jan 2027 02:24:59 +0000 asID: 18811 IP address blocks: 180.223.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:77:7d:b2:77:fe:c9:51:7f:ef:7a:f6:41:87:62:93:7b:44:c4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:59 2026 GMT Not After : Jan 19 02:24:59 2027 GMT Subject: CN=38098CD5BD8D6704A5B94572FB6825B114492304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:4e:59:bb:c4:32:7d:58:c1:4c:de:36:43: 68:a2:cc:f2:42:ba:5e:32:2d:70:34:24:72:3f:70: 3b:84:e3:58:bd:d2:df:a2:96:a0:91:72:05:4b:2e: 4b:49:e7:87:49:de:c5:11:45:10:7a:f5:a7:96:eb: 07:1b:34:4a:99:a9:06:f9:7e:0a:2c:96:24:34:3c: b5:b9:70:31:7c:19:1f:44:9d:a3:ea:20:2b:e8:74: 9a:04:25:29:8d:81:3e:83:82:d2:de:07:9f:d9:02: 5a:38:cb:72:35:74:c1:2e:1b:ff:e1:b6:39:39:cb: 77:f7:48:03:cc:ae:21:ae:f4:02:ec:b8:e3:ee:af: fd:e2:73:a4:e0:a6:b1:17:2f:7f:00:0f:29:46:85: 96:eb:df:7c:9c:c5:58:3c:b4:51:db:46:ca:78:28: bb:ae:1e:d0:e9:f4:62:00:4c:11:19:4b:7f:c3:f6: 01:a7:ea:d9:7f:db:39:3b:10:b9:42:34:09:1a:e1: e3:54:ed:a9:0f:48:30:7c:f2:ca:e9:a7:ca:88:6f: b0:c5:21:48:85:a8:be:3b:b8:6a:a0:95:1d:f1:f8: a4:ab:51:d3:83:47:27:7a:c2:fc:b7:45:d8:0c:f0: 4d:b2:d2:17:4a:9c:65:9c:3e:c0:ce:19:13:cc:cf: ca:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:09:8C:D5:BD:8D:67:04:A5:B9:45:72:FB:68:25:B1:14:49:23:04 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230342e302f32322d3234203d3e203138383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.204.0/22 Signature Algorithm: sha256WithRSAEncryption af:29:ac:87:1b:ad:82:73:40:08:92:2b:f4:bf:03:3d:bf:80: 29:ec:e3:e4:bc:54:a8:14:ae:49:23:be:38:0f:ce:49:a3:a6: 20:c0:46:bc:8c:9e:3c:8c:f1:6d:21:b5:0a:c6:eb:6f:b1:60: e3:15:11:0f:c8:9a:a2:18:57:db:3e:46:f9:ab:e9:4a:6c:ba: 8f:e8:3c:4b:cf:e4:23:bd:e9:2f:95:bb:ee:1d:b8:8f:45:d8: 85:94:12:48:76:f9:bc:91:8d:c6:fc:78:11:c5:2c:83:dd:c3: 02:b1:d9:4c:ac:8e:7b:87:95:b0:3a:13:c7:e7:ec:b0:15:84: 25:c7:64:d0:7a:05:73:c0:ab:1c:53:7a:b5:f5:7e:b5:38:fb: 28:fa:e3:8b:66:78:c6:bb:26:cf:fe:3a:c9:09:b7:a0:d3:2c: ff:b7:0f:2d:22:68:b8:f1:f9:3f:d8:f4:43:da:17:fa:34:2e: 76:db:a4:e6:e8:70:9f:01:0b:a6:08:38:6d:f1:b3:8c:80:f2: b4:c2:47:98:60:e6:53:db:de:a9:02:10:b6:60:1b:fd:8d:b2: f5:6e:2f:8c:08:92:98:1d:82:87:ff:e0:6e:82:38:cf:e1:20: aa:e7:7f:62:90:2e:78:78:df:e1:75:78:49:c0:6c:a9:86:84: 3b:ce:b1:ec -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUFHd9snf+yVF/73r2QYdik3tExI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTlaFw0yNzAxMTkwMjI0NTlaMDMxMTAvBgNV BAMTKDM4MDk4Q0Q1QkQ4RDY3MDRBNUI5NDU3MkZCNjgyNUIxMTQ0OTIzMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JU5Zu8QyfVjBTN42Q2iizPJC ul4yLXA0JHI/cDuE41i90t+ilqCRcgVLLktJ54dJ3sURRRB69aeW6wcbNEqZqQb5 fgosliQ0PLW5cDF8GR9EnaPqICvodJoEJSmNgT6DgtLeB5/ZAlo4y3I1dMEuG//h tjk5y3f3SAPMriGu9ALsuOPur/3ic6TgprEXL38ADylGhZbr33ycxVg8tFHbRsp4 KLuuHtDp9GIATBEZS3/D9gGn6tl/2zk7ELlCNAka4eNU7akPSDB88srpp8qIb7DF IUiFqL47uGqglR3x+KSrUdODRyd6wvy3RdgM8E2y0hdKnGWcPsDOGRPMz8pHAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUOAmM1b2NZwSluUVy+2glsRRJIwQwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1OTY5MjkvMC8zMTM4MzAyZTMy MzIzMzJlMzIzMDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzODM4MzEzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEArTfzDANBgkqhkiG9w0BAQsFAAOCAQEArymshxutgnNACJIr9L8D Pb+AKezj5LxUqBSuSSO+OA/OSaOmIMBGvIyePIzxbSG1Csbrb7Fg4xURD8iaohhX 2z5G+avpSmy6j+g8S8/kI73pL5W77h24j0XYhZQSSHb5vJGNxvx4EcUsg93DArHZ TKyOe4eVsDoTx+fssBWEJcdk0HoFc8CrHFN6tfV+tTj7KPrji2Z4xrsmz/46yQm3 oNMs/7cPLSJouPH5P9j0Q9oX+jQudtuk5uhwnwELpgg4bfGzjIDytMJHmGDmU9ve qQIQtmAb/Y2y9W4vjAiSmB2Ch//gboI4z+Egqud/YpAueHjf4XV4ScBsqYaEO86x 7A== -----END CERTIFICATE-----Generated at Wed Jan 21 11:25:56 2026 by rpki-client