This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230382e302f32322d3234203d3e2032393134.roa
File: 3138302e3232332e3230382e302f32322d3234203d3e2032393134.roa (raw, json)
Hash identifier: FczlWBDWs+v10ir3m69nL1xcY6+eAij7U8n5E1LgFjM=
Subject key identifier: E5:24:0F:4F:83:28:3B:95:67:BC:CB:B6:11:FA:3F:50:46:13:EE:FD
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 7B7F59162A3F219E16D7FDB1686260C7368B337C
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230382e302f32322d3234203d3e2032393134.roa
Signing time: Tue 20 Jan 2026 02:24:58 +0000
ROA not before: Tue 20 Jan 2026 02:19:58 +0000
ROA not after: Tue 19 Jan 2027 02:24:58 +0000
asID: 2914
IP address blocks: 180.223.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:7f:59:16:2a:3f:21:9e:16:d7:fd:b1:68:62:60:c7:36:8b:33:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:58 2026 GMT
Not After : Jan 19 02:24:58 2027 GMT
Subject: CN=E5240F4F83283B9567BCCBB611FA3F504613EEFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:73:98:c6:92:08:0f:b0:e2:9e:47:16:7e:
af:4c:ce:6e:5b:22:d9:2c:44:2a:a6:dc:86:bf:e8:
24:19:22:dc:be:7d:06:59:51:fe:87:53:e8:94:a9:
cd:01:d1:9f:f7:01:92:e0:cb:df:8f:77:8b:c0:7a:
54:36:04:b0:0c:ba:81:a3:c6:27:84:c0:2e:07:15:
13:16:fc:2c:c0:05:97:a9:7f:06:c2:4f:32:c3:6c:
0e:78:6e:b2:58:63:ae:e0:4f:4c:f8:56:5b:b8:39:
46:14:0d:88:78:ea:06:db:5a:c3:f7:06:11:99:e0:
ba:93:cf:41:e9:ba:e8:5c:7f:14:f2:31:a7:1f:55:
31:93:70:f9:9c:98:8c:93:ae:02:cf:77:b9:17:cb:
ea:d2:db:27:7f:f5:f8:56:86:3b:dc:84:0d:ab:22:
58:f2:65:bc:fa:81:d6:f5:5a:6e:17:c6:d2:c9:46:
2e:a6:f7:1b:4a:5c:02:aa:34:3f:5c:66:2d:e1:63:
2b:72:ca:b9:5d:19:5d:9c:cd:59:02:7e:01:c9:2b:
0f:40:58:07:d7:cf:c1:76:59:23:7c:7e:a1:ac:7a:
90:30:4b:34:5e:cc:60:04:be:15:bc:cb:40:6a:3e:
53:79:ec:8d:f8:7c:b3:aa:12:1c:39:4c:63:33:12:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:24:0F:4F:83:28:3B:95:67:BC:CB:B6:11:FA:3F:50:46:13:EE:FD
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230382e302f32322d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.208.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:e8:99:df:5c:e1:10:75:06:e1:04:66:fd:9f:11:d9:2f:d1:
86:a9:98:01:82:e4:66:e3:62:a2:d4:e3:20:bf:40:9b:c1:25:
91:2b:6f:26:c4:d1:d6:b2:81:70:6a:85:64:b7:a4:50:da:d9:
d9:0b:02:a3:81:2e:f3:bd:46:dd:b4:d2:e7:0e:8d:e7:1e:b0:
13:2b:eb:db:69:be:39:7f:d9:ff:0b:0c:3d:2f:9d:ea:5d:e3:
4a:4c:76:e0:41:c5:44:83:1c:f2:82:c1:09:58:b8:7f:37:38:
60:d1:1e:91:2a:42:74:47:27:7f:6f:b0:22:15:be:53:fe:24:
ea:cb:13:28:66:f4:fe:3b:7a:32:73:d1:8b:78:b6:e3:d0:4d:
84:98:c8:fd:72:ae:49:c5:a2:e1:be:32:ce:aa:69:4b:bc:43:
5e:71:7c:73:87:0d:e4:0f:e8:33:fb:fa:e9:75:69:c3:61:02:
ca:f0:a9:9f:09:31:78:ca:cb:2e:d1:94:dd:a1:28:12:03:17:
89:52:39:6a:c6:1f:82:3d:03:b3:9b:dc:22:66:0b:8c:5c:be:
3c:50:94:81:63:83:1a:9a:a8:cd:75:7d:ee:32:84:40:92:d4:
80:40:5c:1f:1e:54:ce:21:bd:ea:44:b8:87:56:8c:37:b5:c5:
c9:6e:44:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:44 2026 by rpki-client