This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231322e302f32322d3234203d3e203130313033.roa
File: 3138302e3232332e3231322e302f32322d3234203d3e203130313033.roa (raw, json)
Hash identifier: rJj4i88rCNA6I7x8+u78SStDhNsNXRNH7rLH7C3zJhQ=
Subject key identifier: A3:0F:CA:76:29:CA:C6:3E:08:7D:68:8D:C0:70:94:8C:7F:2D:A2:C8
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 5D54674DB6B730AF15B370549934E5266BD88F64
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231322e302f32322d3234203d3e203130313033.roa
Signing time: Tue 20 Jan 2026 02:24:53 +0000
ROA not before: Tue 20 Jan 2026 02:19:53 +0000
ROA not after: Tue 19 Jan 2027 02:24:53 +0000
asID: 10103
IP address blocks: 180.223.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:54:67:4d:b6:b7:30:af:15:b3:70:54:99:34:e5:26:6b:d8:8f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:53 2026 GMT
Not After : Jan 19 02:24:53 2027 GMT
Subject: CN=A30FCA7629CAC63E087D688DC070948C7F2DA2C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:d5:22:f8:d4:86:b6:30:80:ba:91:55:80:
c6:b6:03:7b:86:ad:1e:e4:90:c8:bd:9d:85:6a:ea:
2e:da:eb:2e:10:a5:1a:4e:74:66:6e:06:60:3e:41:
6f:db:93:c7:60:f4:2e:82:03:ad:32:0b:79:a0:63:
12:c9:c7:91:c7:ec:65:aa:84:e9:89:d3:d3:c3:71:
bf:83:5a:aa:bb:37:85:23:2f:75:f8:89:c2:3e:76:
17:39:ea:02:da:c8:77:19:7a:2e:78:3f:21:89:c3:
9b:47:b8:a4:4e:64:de:c5:f9:11:42:1e:a8:4e:0d:
9c:b3:10:88:0d:e7:16:0d:47:c7:89:4d:f1:8d:d5:
b2:d6:13:73:64:86:00:e6:2e:ba:68:24:6f:1e:99:
c4:df:37:8f:fd:24:54:63:db:37:9d:8a:c8:22:83:
9c:5c:16:b3:04:dc:21:be:ba:be:9b:45:e9:35:5a:
48:e2:70:da:99:bd:16:ae:52:2f:1c:51:d2:84:a3:
7c:87:3f:19:8c:12:71:37:f4:67:0b:77:df:c2:0e:
16:aa:d1:f8:da:70:68:16:da:78:20:f2:ce:6b:98:
ce:0e:cd:a3:6b:b1:6c:cc:a7:14:2d:1d:50:03:39:
f1:24:38:c4:1b:a4:b6:a8:99:21:b3:15:1f:a8:8a:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0F:CA:76:29:CA:C6:3E:08:7D:68:8D:C0:70:94:8C:7F:2D:A2:C8
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231322e302f32322d3234203d3e203130313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.212.0/22
Signature Algorithm: sha256WithRSAEncryption
15:8b:68:47:d7:3c:71:43:2a:0e:85:1d:55:69:c5:63:34:9e:
f0:81:19:61:5e:f6:30:0b:0a:b2:d0:b6:eb:8a:3b:3c:b3:63:
03:4b:c7:72:bc:08:88:aa:d3:91:04:8d:a5:79:63:ab:d0:bd:
62:fc:c0:07:25:9d:eb:66:2b:9c:4a:20:43:2e:45:f0:ff:4d:
5f:43:25:b1:11:ad:3e:bc:eb:e1:6f:fc:55:d2:96:04:19:35:
e2:61:06:c8:a3:54:9a:d9:9f:7f:42:a2:ea:63:96:7e:19:c2:
c1:05:81:fa:6f:51:d2:2d:a5:1e:76:fa:bb:a2:2a:17:a2:a9:
5d:54:5b:9c:ff:2a:f7:4a:90:29:e5:9d:d0:98:50:c8:fb:59:
88:3c:30:4f:5e:e4:e6:d0:a0:06:4f:8a:d3:e2:60:16:0d:4d:
17:5b:51:64:f6:68:9d:29:c9:1a:03:3e:1b:ad:6c:3e:ba:e6:
b8:eb:cb:43:00:68:ad:bf:26:90:27:f8:41:a2:37:5e:d6:09:
4a:77:37:b3:c3:72:4d:9e:31:5a:b1:f2:a8:b5:4e:b7:3d:b6:
66:98:bd:53:1b:c7:0f:e6:07:5b:3b:06:db:a2:88:32:81:2e:
81:07:f0:ca:6e:70:6a:06:9d:a8:c8:cb:db:50:1d:a5:ec:ee:
78:82:b4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:49 2026 by rpki-client