This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230342e302f32322d3234203d3e20333938373034.roa File: 3138302e3232332e3230342e302f32322d3234203d3e20333938373034.roa (raw, json) Hash identifier: kNJIX/w1m47YUKuhOUg1CcCBBLftg7jQLihztoxSdiA= Subject key identifier: ED:D8:D1:66:AB:B7:97:8F:0A:AC:33:73:C2:A0:C3:81:76:58:77:47 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 591B181046EEF93EDB44A9C18D556C4B41D4DCA7 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230342e302f32322d3234203d3e20333938373034.roa Signing time: Tue 20 Jan 2026 02:24:55 +0000 ROA not before: Tue 20 Jan 2026 02:19:55 +0000 ROA not after: Tue 19 Jan 2027 02:24:55 +0000 asID: 398704 IP address blocks: 180.223.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1b:18:10:46:ee:f9:3e:db:44:a9:c1:8d:55:6c:4b:41:d4:dc:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:55 2026 GMT Not After : Jan 19 02:24:55 2027 GMT Subject: CN=EDD8D166ABB7978F0AAC3373C2A0C38176587747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:8f:e1:6f:c9:f8:50:f2:d3:12:b7:02:1c: d4:cc:03:ab:5c:5b:18:bb:48:22:40:41:4e:98:fb: 50:3f:c4:3d:56:01:25:48:4a:65:d4:eb:74:a8:57: f0:5e:98:32:25:ff:4d:77:19:58:2f:62:7b:1c:48: c8:46:8e:ae:6e:e3:c0:46:b3:18:c0:d0:ee:f4:86: 64:ad:bf:b9:56:f6:19:4c:1f:1c:1b:aa:41:f5:db: 4c:4e:f2:b9:3d:57:07:98:a8:f2:b2:51:16:42:67: b3:db:b4:65:61:f9:31:d0:89:0b:f5:76:bf:43:78: d1:2e:11:4b:68:64:fe:72:cb:0f:0f:11:de:38:40: 9f:90:6c:7c:f9:28:3a:7e:b4:f5:d0:39:03:22:7f: 17:26:c3:a5:3f:23:48:07:00:42:43:87:f1:42:aa: 21:32:a5:66:41:60:97:cf:38:57:79:bc:59:42:9c: 30:80:27:33:44:bb:4a:64:49:a3:4f:8b:03:2b:95: c3:be:dd:b5:cf:9b:fc:4f:a7:de:a5:f5:06:a7:13: 4a:4a:c8:16:d2:1c:1f:51:ce:fd:8d:9d:3b:0c:de: e2:a1:15:3b:b8:36:eb:1a:e1:26:b5:1b:e2:bc:c0: db:6b:30:d3:4c:d6:c4:5d:54:d0:e5:a0:37:b3:f0: 34:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D8:D1:66:AB:B7:97:8F:0A:AC:33:73:C2:A0:C3:81:76:58:77:47 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230342e302f32322d3234203d3e20333938373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.204.0/22 Signature Algorithm: sha256WithRSAEncryption c3:ce:02:eb:74:4b:4c:d4:4d:6c:22:a7:3e:2e:90:25:77:45: 1d:dc:2b:f2:ac:4d:91:7e:01:5d:c2:75:09:e0:cd:20:c0:b4: 78:d8:fd:cd:10:9b:f3:ab:c3:ea:5d:90:47:cd:de:69:93:1d: af:ee:58:a1:95:87:cf:84:74:1f:88:56:cd:3e:f6:1e:62:87: 1a:99:79:60:6f:99:51:3f:db:e9:3b:df:61:6d:50:4f:42:32: c9:85:40:de:d4:d7:f6:8a:a3:42:9f:b4:33:ae:80:b1:3f:b5: 1d:24:4d:54:c6:27:dc:2e:78:f1:62:38:54:7c:6b:2d:64:a7: 98:ce:32:bb:7b:21:21:d8:2f:c5:da:49:47:04:96:48:ec:5d: 5f:8b:24:0a:0e:12:86:cc:f4:ca:de:72:82:ca:49:9e:87:7c: 08:f0:4a:e1:64:e3:f3:6f:4f:37:03:0d:b4:3c:14:b3:9a:e7: 03:2f:d5:73:e5:5f:41:1f:b5:b6:9b:77:2a:65:19:d2:a6:52: a1:98:bc:b7:c0:05:c5:80:2b:2a:8d:75:b1:48:d2:e5:80:ac: 53:7b:d4:a5:dc:83:0f:0f:e6:cc:f3:55:df:38:b3:0e:a2:e9: 1f:92:10:de:5f:d8:85:e0:51:c5:1f:a9:38:21:f6:62:24:09: 85:60:28:d4 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUWRsYEEbu+T7bRKnBjVVsS0HU3KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTVaFw0yNzAxMTkwMjI0NTVaMDMxMTAvBgNV BAMTKEVERDhEMTY2QUJCNzk3OEYwQUFDMzM3M0MyQTBDMzgxNzY1ODc3NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9o/hb8n4UPLTErcCHNTMA6tc Wxi7SCJAQU6Y+1A/xD1WASVISmXU63SoV/BemDIl/013GVgvYnscSMhGjq5u48BG sxjA0O70hmStv7lW9hlMHxwbqkH120xO8rk9VweYqPKyURZCZ7PbtGVh+THQiQv1 dr9DeNEuEUtoZP5yyw8PEd44QJ+QbHz5KDp+tPXQOQMifxcmw6U/I0gHAEJDh/FC qiEypWZBYJfPOFd5vFlCnDCAJzNEu0pkSaNPiwMrlcO+3bXPm/xPp96l9QanE0pK yBbSHB9Rzv2NnTsM3uKhFTu4Nusa4Sa1G+K8wNtrMNNM1sRdVNDloDez8DQXAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQU7djRZqu3l48KrDNzwqDDgXZYd0cwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUz MjMyMzMyZTMyMzAzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMzMzkzODM3MzAz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEArTfzDANBgkqhkiG9w0BAQsFAAOCAQEAw84C63RLTNRNbCKn Pi6QJXdFHdwr8qxNkX4BXcJ1CeDNIMC0eNj9zRCb86vD6l2QR83eaZMdr+5YoZWH z4R0H4hWzT72HmKHGpl5YG+ZUT/b6TvfYW1QT0IyyYVA3tTX9oqjQp+0M66AsT+1 HSRNVMYn3C548WI4VHxrLWSnmM4yu3shIdgvxdpJRwSWSOxdX4skCg4Shsz0yt5y gspJnod8CPBK4WTj829PNwMNtDwUs5rnAy/Vc+VfQR+1tpt3KmUZ0qZSoZi8t8AF xYArKo11sUjS5YCsU3vUpdyDDw/mzPNV3zizDqLpH5IQ3l/YheBRxR+pOCH2YiQJ hWAo1A== -----END CERTIFICATE-----Generated at Wed Jan 21 14:13:46 2026 by rpki-client