This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230392e302f32342d3234203d3e20313532313739.roa File: 3138302e3232332e3230392e302f32342d3234203d3e20313532313739.roa (raw, json) Hash identifier: hpwLkTL0eftct9FrVRSNw2KNlTCz5W5oWSEVy8Wcr24= Subject key identifier: E5:93:E7:B2:00:45:66:5C:B7:95:DB:B1:F9:80:E2:70:ED:92:A0:67 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 0CDEA7E7C0C333932EDDD5F932BF3D0667C9E4F0 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230392e302f32342d3234203d3e20313532313739.roa Signing time: Tue 20 Jan 2026 02:24:54 +0000 ROA not before: Tue 20 Jan 2026 02:19:54 +0000 ROA not after: Tue 19 Jan 2027 02:24:54 +0000 asID: 152179 IP address blocks: 180.223.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:de:a7:e7:c0:c3:33:93:2e:dd:d5:f9:32:bf:3d:06:67:c9:e4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:54 2026 GMT Not After : Jan 19 02:24:54 2027 GMT Subject: CN=E593E7B20045665CB795DBB1F980E270ED92A067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:67:21:f1:f0:85:d2:8b:12:99:4e:c5:36:37: 8d:7a:40:6a:1a:df:91:4e:49:c4:77:ba:75:27:cd: 67:a8:41:fb:f0:b8:ec:0d:cf:34:bf:f3:99:f0:cb: 35:3c:f1:17:0b:64:a0:60:1d:bc:cc:aa:02:dd:22: fb:fc:94:f0:4d:de:7c:63:59:97:2b:df:e7:2f:df: 9d:43:1e:6a:80:56:e9:a1:27:97:a6:ca:81:ac:85: 66:5d:36:52:ab:b7:f4:be:f9:29:8d:e8:3a:41:e9: 3a:dc:48:5d:ad:65:e1:85:0f:6b:8a:d7:7b:ec:49: 72:ca:a9:23:6b:2c:e8:22:39:77:99:d0:ae:fe:e0: 8c:66:bb:1a:5a:65:b8:2a:ff:8e:c6:6f:b5:79:d1: 1d:b5:a5:2b:00:23:c1:ac:fe:3f:7f:ed:0e:fd:91: 5b:91:20:9c:fd:cd:7a:6f:57:c6:89:46:5c:fd:da: 11:9e:c2:91:09:54:43:14:2f:5d:3f:c5:e5:46:80: 6f:d6:77:cc:a1:c8:64:df:3d:92:e6:90:16:51:d8: 94:c1:84:d8:54:2a:76:01:f5:d3:a3:0c:b0:63:83: c6:06:84:20:1e:83:96:00:39:d6:22:2b:10:7d:b9: 8c:c7:c7:ba:ff:f4:f1:2e:9f:29:f7:57:f0:03:35: f0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:93:E7:B2:00:45:66:5C:B7:95:DB:B1:F9:80:E2:70:ED:92:A0:67 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230392e302f32342d3234203d3e20313532313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.209.0/24 Signature Algorithm: sha256WithRSAEncryption 61:8e:ad:3e:b3:96:03:3c:0c:8d:89:30:8b:b0:8a:cd:40:5b: ec:63:9d:4a:83:a8:cd:60:31:f7:9c:b4:46:7a:44:3a:68:36: 0c:c7:13:7f:e7:b6:18:e9:21:04:cd:b9:f2:22:69:a4:70:c4: c8:ad:2d:d0:e9:55:2e:5b:a4:0d:ae:fc:f4:40:cf:77:04:6c: aa:7b:16:05:05:a4:93:b2:0d:a2:c9:56:29:cc:c9:37:b5:02: 52:0a:df:d7:8f:2d:0f:13:97:3f:84:99:c5:bb:6d:8b:1a:17: fe:2b:28:6f:23:2c:5d:25:10:10:c3:45:36:f8:46:88:0a:dd: 2d:02:56:e3:0c:0e:28:6b:9c:a6:db:70:4f:7c:7f:8f:a7:d2: 1b:3b:8c:9d:d5:c1:57:de:b7:1b:4c:e5:04:29:13:90:d9:b2: 7f:b7:ca:0f:1c:f0:84:51:65:a3:0f:7a:76:6f:bd:a2:4c:8b: 07:7e:c0:79:9e:cf:76:f0:35:b7:16:99:c4:9a:c1:76:26:82: 3d:fa:28:5f:b1:69:7c:56:2b:78:10:d4:49:7c:45:11:76:19: 04:54:8d:2b:8a:bd:32:14:74:41:35:e3:7a:d8:f9:db:e0:4c: 62:2b:30:9c:67:48:16:60:df:c8:dc:d9:14:a7:d5:da:f8:6e: 55:1a:ed:17 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUDN6n58DDM5Mu3dX5Mr89BmfJ5PAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTRaFw0yNzAxMTkwMjI0NTRaMDMxMTAvBgNV BAMTKEU1OTNFN0IyMDA0NTY2NUNCNzk1REJCMUY5ODBFMjcwRUQ5MkEwNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbZyHx8IXSixKZTsU2N416QGoa 35FOScR3unUnzWeoQfvwuOwNzzS/85nwyzU88RcLZKBgHbzMqgLdIvv8lPBN3nxj WZcr3+cv351DHmqAVumhJ5emyoGshWZdNlKrt/S++SmN6DpB6TrcSF2tZeGFD2uK 13vsSXLKqSNrLOgiOXeZ0K7+4IxmuxpaZbgq/47Gb7V50R21pSsAI8Gs/j9/7Q79 kVuRIJz9zXpvV8aJRlz92hGewpEJVEMUL10/xeVGgG/Wd8yhyGTfPZLmkBZR2JTB hNhUKnYB9dOjDLBjg8YGhCAeg5YAOdYiKxB9uYzHx7r/9PEunyn3V/ADNfAJAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQU5ZPnsgBFZly3ldux+YDicO2SoGcwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUz MjMyMzMyZTMyMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjMxMzcz OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEALTf0TANBgkqhkiG9w0BAQsFAAOCAQEAYY6tPrOWAzwMjYkw i7CKzUBb7GOdSoOozWAx95y0RnpEOmg2DMcTf+e2GOkhBM258iJppHDEyK0t0OlV LlukDa789EDPdwRsqnsWBQWkk7INoslWKczJN7UCUgrf148tDxOXP4SZxbttixoX /isobyMsXSUQEMNFNvhGiArdLQJW4wwOKGucpttwT3x/j6fSGzuMndXBV963G0zl BCkTkNmyf7fKDxzwhFFlow96dm+9okyLB37AeZ7PdvA1txaZxJrBdiaCPfooX7Fp fFYreBDUSXxFEXYZBFSNK4q9MhR0QTXjetj52+BMYiswnGdIFmDfyNzZFKfV2vhu VRrtFw== -----END CERTIFICATE-----Generated at Wed Jan 21 14:14:48 2026 by rpki-client