This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230362e302f32342d3234203d3e2032393134.roa
File: 3138302e3232332e3230362e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: stgMzCAEj4uLrjfQ6Jy2bDtGIWxQOl4uHGXQqHgjVI8=
Subject key identifier: 2D:7B:B0:CA:1A:EA:86:DB:1E:BD:D8:01:B6:29:D4:F9:A1:F1:4A:21
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 27F66DDB51576D339AB809693E6992660964FFD4
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230362e302f32342d3234203d3e2032393134.roa
Signing time: Tue 20 Jan 2026 02:24:55 +0000
ROA not before: Tue 20 Jan 2026 02:19:55 +0000
ROA not after: Tue 19 Jan 2027 02:24:55 +0000
asID: 2914
IP address blocks: 180.223.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f6:6d:db:51:57:6d:33:9a:b8:09:69:3e:69:92:66:09:64:ff:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:55 2026 GMT
Not After : Jan 19 02:24:55 2027 GMT
Subject: CN=2D7BB0CA1AEA86DB1EBDD801B629D4F9A1F14A21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:6f:65:80:0a:53:db:62:d2:7f:fd:b2:02:
76:40:ce:5f:c0:ca:89:37:f9:a2:0a:ec:84:00:73:
a2:16:1e:b9:6d:99:a7:d3:65:ee:89:92:0b:62:a3:
3f:43:f7:da:88:23:21:91:95:e3:02:e1:25:c1:2a:
f6:a8:ad:e0:4a:1d:5d:9b:78:8c:a3:70:71:f9:89:
2e:9b:48:42:09:e7:8e:08:67:74:97:9a:f0:16:6b:
57:c0:89:7f:c6:9b:54:b3:52:ec:58:29:12:34:49:
9d:26:90:55:52:ea:7b:95:57:9f:d2:7c:e4:8f:96:
ae:cc:a5:43:e2:02:12:22:6b:e5:09:5d:eb:58:59:
1b:2c:b3:e1:32:89:27:cd:ee:ff:60:0c:66:71:c1:
75:10:9d:43:d5:58:90:4f:aa:35:20:f7:89:fc:03:
19:0d:4d:8a:8d:cd:f2:6a:e2:e8:95:9e:74:20:59:
f0:0d:72:1a:d1:4a:d9:03:c7:32:5e:71:08:00:78:
ba:40:48:68:9c:c8:5e:1d:4d:5b:3c:9a:89:9a:1d:
14:ba:3d:19:59:a1:d3:43:4e:34:55:eb:98:40:2c:
af:8e:8b:1f:a7:b1:a5:04:98:c9:78:36:93:ce:85:
b0:e1:4c:11:d6:28:45:b9:f3:4f:03:47:7f:55:29:
e0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7B:B0:CA:1A:EA:86:DB:1E:BD:D8:01:B6:29:D4:F9:A1:F1:4A:21
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230362e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.206.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:aa:da:1d:81:15:31:35:34:66:92:1d:ea:d8:1b:38:80:5f:
b5:79:74:25:88:5c:2f:25:fe:fc:ba:04:2f:fa:1f:3e:65:23:
0b:26:e4:0e:12:07:42:be:9e:a0:be:c6:4a:a2:f3:58:5a:a0:
84:17:15:e4:70:8f:fc:2a:7b:60:ae:c7:94:62:0d:03:3b:62:
a5:81:24:5d:db:a0:63:30:e3:96:f4:13:6b:bd:13:ec:9a:93:
ea:11:d9:1b:aa:f7:04:de:c5:be:70:5e:07:23:80:3e:6b:00:
bd:c3:f6:a2:32:ba:a0:80:88:91:13:4e:ec:66:0f:7f:a8:ab:
23:9e:5b:02:f5:f6:f8:d1:69:03:99:85:ed:f6:96:33:88:9b:
96:32:7e:c8:8a:08:c1:42:53:8c:3a:b9:e7:22:bf:06:f2:0c:
05:31:08:e0:c2:34:c6:e3:59:84:3c:ec:c2:54:cf:96:5e:18:
55:a4:a8:c9:c2:72:6a:dc:82:a9:66:fe:a3:79:b5:24:e4:d7:
8c:38:f2:92:2e:5c:c1:5a:cf:97:27:3a:c6:f5:e9:b2:7c:c6:
3f:9f:ca:bc:e5:c8:cb:5f:09:c5:0d:a7:49:5c:11:f6:ff:8a:
23:3a:80:ca:c8:32:90:22:52:9b:d2:ab:95:b1:21:ae:31:3a:
cb:97:eb:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:28 2026 by rpki-client