This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231322e302f32322d3234203d3e203138383131.roa File: 3138302e3232332e3231322e302f32322d3234203d3e203138383131.roa (raw, json) Hash identifier: Y4Hs1rV9wpiTeyR7owPK2SyoldXQ+sbk/zCp4eaIHnI= Subject key identifier: DA:23:1C:8B:C3:C9:B7:4D:6E:74:55:3A:EF:4E:CB:C4:94:7C:1B:E1 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 32347B91FC54115AEF83A9FD1D0B5CBB9BD32892 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231322e302f32322d3234203d3e203138383131.roa Signing time: Tue 20 Jan 2026 02:24:59 +0000 ROA not before: Tue 20 Jan 2026 02:19:59 +0000 ROA not after: Tue 19 Jan 2027 02:24:59 +0000 asID: 18811 IP address blocks: 180.223.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:34:7b:91:fc:54:11:5a:ef:83:a9:fd:1d:0b:5c:bb:9b:d3:28:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:59 2026 GMT Not After : Jan 19 02:24:59 2027 GMT Subject: CN=DA231C8BC3C9B74D6E74553AEF4ECBC4947C1BE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:80:a9:7c:97:0d:b6:36:d0:2e:3c:d3:58:b2: ca:95:a7:d9:e8:6d:53:e7:34:cc:a5:a7:fb:b9:56: b9:b6:ee:77:42:2b:98:07:a5:46:67:0c:b6:85:92: 28:d2:55:40:55:5d:8a:a8:d9:c6:9d:19:53:88:1c: cd:fd:89:bf:c9:29:54:61:db:96:79:a4:a8:e5:7c: 12:47:fd:66:af:c7:d2:0f:b9:96:e1:be:d0:93:ad: 87:7b:a2:29:02:b5:95:18:68:66:cc:71:07:5e:c9: 56:93:9a:ae:9d:7d:d4:a1:87:36:d9:ef:a1:eb:ae: 53:69:71:bd:58:1f:a6:38:d2:5d:b9:50:07:96:21: d3:37:45:3f:d7:ca:91:e1:fe:f7:fa:4b:73:e4:fb: 1f:3d:2f:76:68:2d:7d:4a:b7:40:35:5a:e5:fd:84: 80:f7:c7:c3:f3:22:5e:20:fe:f0:36:a0:17:05:03: b1:e6:13:e0:75:93:92:8a:f7:0f:2f:c5:57:44:5a: f8:d5:f4:67:07:a2:9a:6e:88:4f:b0:39:89:7c:de: 5a:a0:a8:3b:43:3d:82:e2:95:a9:12:36:86:32:82: 28:bb:46:7d:00:ca:a7:c9:e3:94:28:20:4d:a0:7b: e6:85:b8:1e:06:fc:2a:91:ea:9a:07:2b:9e:c6:6f: 57:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:23:1C:8B:C3:C9:B7:4D:6E:74:55:3A:EF:4E:CB:C4:94:7C:1B:E1 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231322e302f32322d3234203d3e203138383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.212.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:c1:07:5e:0b:c0:52:6b:57:c1:6d:06:ee:bd:a2:da:26:f0: e0:47:7c:c9:34:18:2d:e2:f4:83:15:d6:c2:07:92:56:81:f7: 05:26:46:a3:69:a7:22:fd:86:19:5f:5b:94:ab:be:21:73:7a: 47:3b:92:27:af:89:e8:8a:53:fe:96:19:83:5e:86:96:b2:27: ed:e3:fe:11:83:64:a9:95:d2:16:0d:99:3d:81:60:b8:13:b5: 58:be:f4:db:f4:83:e3:e7:a7:99:35:6f:80:f1:c4:9c:b4:28: 4c:0b:87:bd:79:1d:5a:88:6f:b1:61:d5:9c:ea:00:39:60:f3: 17:1a:d8:81:bf:b9:42:f7:66:75:00:8a:6c:41:86:19:0b:98: 35:a4:21:7a:4c:f4:aa:ef:38:e7:05:ff:f5:08:16:3a:b4:99: 0c:52:73:66:38:10:f8:a2:33:9c:77:a8:bd:2f:96:e9:f2:ea: fa:42:aa:d3:30:4e:f8:98:4f:eb:25:fb:27:94:8f:4a:ee:ef: 63:e2:c6:f4:c0:3a:74:1c:d3:53:b5:62:df:d5:50:e4:fa:25: 4c:0c:5a:54:bf:f6:36:f4:e8:1e:1b:a1:49:8e:6f:22:fa:78: 1a:89:3c:b7:fe:16:1a:60:eb:4b:c7:40:77:c8:6c:76:14:70: 71:0a:25:0f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMjR7kfxUEVrvg6n9HQtcu5vTKJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTlaFw0yNzAxMTkwMjI0NTlaMDMxMTAvBgNV BAMTKERBMjMxQzhCQzNDOUI3NEQ2RTc0NTUzQUVGNEVDQkM0OTQ3QzFCRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgKl8lw22NtAuPNNYssqVp9no bVPnNMylp/u5Vrm27ndCK5gHpUZnDLaFkijSVUBVXYqo2cadGVOIHM39ib/JKVRh 25Z5pKjlfBJH/Wavx9IPuZbhvtCTrYd7oikCtZUYaGbMcQdeyVaTmq6dfdShhzbZ 76HrrlNpcb1YH6Y40l25UAeWIdM3RT/XypHh/vf6S3Pk+x89L3ZoLX1Kt0A1WuX9 hID3x8PzIl4g/vA2oBcFA7HmE+B1k5KK9w8vxVdEWvjV9GcHoppuiE+wOYl83lqg qDtDPYLilakSNoYygii7Rn0AyqfJ45QoIE2ge+aFuB4G/CqR6poHK57Gb1d3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU2iMci8PJt01udFU6707LxJR8G+EwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1OTY5MjkvMC8zMTM4MzAyZTMy MzIzMzJlMzIzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzODM4MzEzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEArTf1DANBgkqhkiG9w0BAQsFAAOCAQEAPsEHXgvAUmtXwW0G7r2i 2ibw4Ed8yTQYLeL0gxXWwgeSVoH3BSZGo2mnIv2GGV9blKu+IXN6RzuSJ6+J6IpT /pYZg16GlrIn7eP+EYNkqZXSFg2ZPYFguBO1WL702/SD4+enmTVvgPHEnLQoTAuH vXkdWohvsWHVnOoAOWDzFxrYgb+5QvdmdQCKbEGGGQuYNaQhekz0qu845wX/9QgW OrSZDFJzZjgQ+KIznHeovS+W6fLq+kKq0zBO+JhP6yX7J5SPSu7vY+LG9MA6dBzT U7Vi39VQ5PolTAxaVL/2NvToHhuhSY5vIvp4Gok8t/4WGmDrS8dAd8hsdhRwcQol Dw== -----END CERTIFICATE-----Generated at Wed Jan 21 11:25:53 2026 by rpki-client