This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230382e302f32322d3234203d3e203138383131.roa File: 3138302e3232332e3230382e302f32322d3234203d3e203138383131.roa (raw, json) Hash identifier: dmhfpKWt7OlmxihqvzlaTE3Oh8sVq8vpWZHeQZy6Z8c= Subject key identifier: C7:EF:16:0E:7D:B0:04:69:F7:6A:26:79:0E:4F:2A:CD:3D:AB:F8:05 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 23C65C1306D07473E0A9311F98D1398C10C180FA Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230382e302f32322d3234203d3e203138383131.roa Signing time: Tue 20 Jan 2026 02:24:59 +0000 ROA not before: Tue 20 Jan 2026 02:19:59 +0000 ROA not after: Tue 19 Jan 2027 02:24:59 +0000 asID: 18811 IP address blocks: 180.223.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c6:5c:13:06:d0:74:73:e0:a9:31:1f:98:d1:39:8c:10:c1:80:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:59 2026 GMT Not After : Jan 19 02:24:59 2027 GMT Subject: CN=C7EF160E7DB00469F76A26790E4F2ACD3DABF805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:c1:32:2c:19:db:d7:b9:b1:c3:78:ee:24: 53:b4:0a:21:1b:16:49:13:8b:8a:ac:74:df:95:6d: 53:a9:f0:5e:d1:ff:01:8d:1c:22:62:01:79:bf:27: c9:03:50:ec:66:ce:92:83:1b:88:cd:f9:de:2c:a5: d9:f3:a8:7d:bc:2b:d1:18:70:52:35:be:50:1a:48: 0f:07:c6:3d:06:81:7d:61:97:1d:17:79:a9:6d:9a: eb:ea:41:85:0c:6a:e2:02:47:33:c2:5c:54:e3:86: df:ee:58:f4:53:2c:a8:83:6b:55:be:ad:08:64:7c: 42:fd:2d:d0:78:8e:ab:36:1d:04:7a:da:cc:76:3e: 37:27:f8:3f:3e:d6:ef:5e:a0:f4:fe:bd:65:d3:ff: 92:3c:c6:e9:f1:ee:23:c8:6b:df:7f:b8:7d:d8:53: 14:43:9f:8c:9f:02:1f:e0:10:9c:8e:23:0b:00:38: 06:c2:bc:97:9c:02:13:8b:bb:7a:d6:89:f6:47:af: a6:e8:f0:da:60:75:29:e9:41:7b:fa:6f:ac:c6:f5: 67:79:ef:e9:1b:bb:9e:d6:14:e7:27:eb:0f:49:87: 2b:4b:6c:35:f4:85:5a:17:21:9e:06:08:7e:b7:27: f3:ef:b5:aa:05:1f:72:8f:95:f2:29:01:f5:1f:ab: c6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EF:16:0E:7D:B0:04:69:F7:6A:26:79:0E:4F:2A:CD:3D:AB:F8:05 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230382e302f32322d3234203d3e203138383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.208.0/22 Signature Algorithm: sha256WithRSAEncryption b2:87:a3:57:8b:cc:81:b1:0c:b9:ec:22:cc:a7:93:77:e9:a2: df:bc:9c:71:c5:87:38:b5:0e:e0:d0:fa:87:f4:1f:31:e2:2a: ee:31:39:40:dc:6d:73:a1:8d:75:75:4a:b8:39:14:81:1b:fe: 64:61:cf:8c:e8:6f:dc:25:b1:41:7d:d7:d2:01:26:5d:3f:6d: e2:7d:be:c4:fa:8e:da:d0:5a:49:7b:37:c8:55:6d:8f:fc:fd: c3:9c:70:c7:60:08:67:5b:12:7b:f1:cb:ed:f6:83:0d:d9:1e: 8e:82:b5:35:67:82:0e:b7:1b:54:b3:8f:02:94:0b:2f:69:34: 3d:31:0c:f0:69:c8:4e:da:c2:30:d8:ae:79:39:eb:c3:6e:c2: 66:34:fd:f9:71:58:40:40:c2:a3:22:fc:71:40:36:90:f6:f5: a1:ab:f0:84:77:b2:08:e0:6e:ea:b0:5c:e4:e9:f9:9c:3e:6c: 72:82:52:a7:7f:e0:3a:f0:a8:b5:d5:af:7a:8c:e5:34:b1:08: 58:88:67:ae:40:31:39:b9:bd:1a:6c:33:bc:3f:76:1f:40:e5: 3f:3f:da:36:35:6f:2a:c0:5d:c7:c2:14:bd:48:48:15:56:ce: 63:04:db:63:9c:15:77:e2:0b:fd:82:88:a0:f3:b6:07:5c:1d: 21:9d:a5:5b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUI8ZcEwbQdHPgqTEfmNE5jBDBgPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTlaFw0yNzAxMTkwMjI0NTlaMDMxMTAvBgNV BAMTKEM3RUYxNjBFN0RCMDA0NjlGNzZBMjY3OTBFNEYyQUNEM0RBQkY4MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6sEyLBnb17mxw3juJFO0CiEb FkkTi4qsdN+VbVOp8F7R/wGNHCJiAXm/J8kDUOxmzpKDG4jN+d4spdnzqH28K9EY cFI1vlAaSA8Hxj0GgX1hlx0XealtmuvqQYUMauICRzPCXFTjht/uWPRTLKiDa1W+ rQhkfEL9LdB4jqs2HQR62sx2Pjcn+D8+1u9eoPT+vWXT/5I8xunx7iPIa99/uH3Y UxRDn4yfAh/gEJyOIwsAOAbCvJecAhOLu3rWifZHr6bo8NpgdSnpQXv6b6zG9Wd5 7+kbu57WFOcn6w9JhytLbDX0hVoXIZ4GCH63J/PvtaoFH3KPlfIpAfUfq8ZrAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUx+8WDn2wBGn3aiZ5Dk8qzT2r+AUwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1OTY5MjkvMC8zMTM4MzAyZTMy MzIzMzJlMzIzMDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzODM4MzEzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEArTf0DANBgkqhkiG9w0BAQsFAAOCAQEAsoejV4vMgbEMuewizKeT d+mi37ycccWHOLUO4ND6h/QfMeIq7jE5QNxtc6GNdXVKuDkUgRv+ZGHPjOhv3CWx QX3X0gEmXT9t4n2+xPqO2tBaSXs3yFVtj/z9w5xwx2AIZ1sSe/HL7faDDdkejoK1 NWeCDrcbVLOPApQLL2k0PTEM8GnITtrCMNiueTnrw27CZjT9+XFYQEDCoyL8cUA2 kPb1oavwhHeyCOBu6rBc5On5nD5scoJSp3/gOvCotdWveozlNLEIWIhnrkAxObm9 GmwzvD92H0DlPz/aNjVvKsBdx8IUvUhIFVbOYwTbY5wVd+IL/YKIoPO2B1wdIZ2l Ww== -----END CERTIFICATE-----Generated at Wed Jan 21 11:25:55 2026 by rpki-client