This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231322e302f32322d3234203d3e2037303138.roa File: 3138302e3232332e3231322e302f32322d3234203d3e2037303138.roa (raw, json) Hash identifier: TJ7sAnzQEskkI6e1pujXvMkPg8sq1Ss1S6USzchSvY0= Subject key identifier: 9A:6D:AC:BB:19:61:69:F2:41:16:08:F8:0B:03:6C:92:8E:34:D4:FC Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 65A53DEF69049C900FCF6DFED95E1481A90D6094 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231322e302f32322d3234203d3e2037303138.roa Signing time: Tue 20 Jan 2026 02:24:59 +0000 ROA not before: Tue 20 Jan 2026 02:19:59 +0000 ROA not after: Tue 19 Jan 2027 02:24:59 +0000 asID: 7018 IP address blocks: 180.223.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a5:3d:ef:69:04:9c:90:0f:cf:6d:fe:d9:5e:14:81:a9:0d:60:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:59 2026 GMT Not After : Jan 19 02:24:59 2027 GMT Subject: CN=9A6DACBB196169F2411608F80B036C928E34D4FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:68:52:30:ab:89:ea:7b:23:e5:8f:55:68:b7: d3:20:8a:c3:50:9c:e0:0a:3e:57:3f:a4:c0:09:f0: c2:8b:5f:43:55:f4:e5:04:a2:db:97:e1:f3:9d:f3: 48:87:6b:3e:fd:2e:4b:22:b5:69:d1:78:21:21:ec: 42:d1:7c:d3:2a:b7:2e:66:41:04:41:a6:97:cb:41: 17:52:b0:5e:c4:9e:10:47:6a:ce:5a:ac:9b:4e:70: 2f:81:1e:f2:6b:4a:b8:28:6b:cf:90:6b:36:92:19: 61:55:97:bc:dd:24:75:5c:d8:d3:56:79:58:5c:0f: 7e:19:21:42:32:eb:75:61:61:fc:9e:19:46:d0:59: d8:14:53:7d:8f:20:ba:b0:38:36:ec:14:e9:fd:e7: eb:74:18:34:97:3f:24:ad:0e:a0:3f:03:c6:f3:40: f1:4a:54:59:e1:75:be:23:64:af:c6:fc:56:50:82: 66:a4:cd:75:d6:c5:0c:e2:e3:46:71:c2:4d:36:a2: 48:15:61:ab:5d:cc:c8:de:51:28:f2:19:c5:09:98: fc:8e:c6:a3:8a:7d:4b:ff:f3:dc:be:0c:06:b1:3b: ad:4b:5d:28:30:1e:31:de:25:a3:31:af:1f:23:ba: 18:a5:43:74:78:50:c3:ed:b3:a9:0d:6a:53:bc:08: c6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6D:AC:BB:19:61:69:F2:41:16:08:F8:0B:03:6C:92:8E:34:D4:FC X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231322e302f32322d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.212.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:c8:a2:b8:ef:e4:a3:66:05:49:62:61:9e:86:3f:59:50:8d: c0:bc:55:e5:37:f9:ba:45:fa:35:88:a2:93:aa:2f:39:f9:98: d2:df:d9:ae:53:56:17:ea:ac:3f:0e:95:d9:33:e5:1d:df:c4: d9:60:97:2c:14:af:3a:a5:dd:93:e3:98:c2:33:03:a9:8d:80: 9c:9f:e6:d6:65:9e:11:91:6f:18:f3:18:ff:14:0b:f5:84:ae: 8c:78:93:21:66:c0:b0:af:f2:a5:f5:49:dc:3d:dd:da:21:42: 3a:6c:61:86:61:b0:54:e3:ae:a0:67:97:97:0b:19:d2:ea:fd: e8:d2:bf:53:5c:06:fa:7b:66:4f:f6:d9:4e:64:55:ee:bd:2f: bd:c4:a1:91:ed:ea:2b:0e:d8:b3:6a:97:80:97:d9:8d:e6:f5: 36:2b:f9:62:44:8a:6b:dd:50:be:0a:75:62:f9:79:5a:f4:51: e5:18:40:68:cb:30:d1:ab:bc:8f:54:86:00:6b:b2:02:53:b8: f2:29:ec:03:73:48:c0:78:ee:44:77:02:16:b7:f8:b6:32:7f: 55:f6:32:ce:74:52:01:1a:25:c3:c5:70:44:fe:13:4f:6d:9a: 6e:0e:02:6d:bf:db:9c:a4:39:58:1d:5c:e3:5b:3c:f7:4f:ff: 58:a6:d9:49 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZaU972kEnJAPz23+2V4UgakNYJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTlaFw0yNzAxMTkwMjI0NTlaMDMxMTAvBgNV BAMTKDlBNkRBQ0JCMTk2MTY5RjI0MTE2MDhGODBCMDM2QzkyOEUzNEQ0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaaFIwq4nqeyPlj1Vot9MgisNQ nOAKPlc/pMAJ8MKLX0NV9OUEotuX4fOd80iHaz79LksitWnReCEh7ELRfNMqty5m QQRBppfLQRdSsF7EnhBHas5arJtOcC+BHvJrSrgoa8+QazaSGWFVl7zdJHVc2NNW eVhcD34ZIUIy63VhYfyeGUbQWdgUU32PILqwODbsFOn95+t0GDSXPyStDqA/A8bz QPFKVFnhdb4jZK/G/FZQgmakzXXWxQzi40Zxwk02okgVYatdzMjeUSjyGcUJmPyO xqOKfUv/89y+DAaxO61LXSgwHjHeJaMxrx8juhilQ3R4UMPts6kNalO8CMYlAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUmm2suxlhafJBFgj4CwNsko401PwwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTE5NTcyMTU5NjkyOS8wLzMxMzgzMDJlMzIz MjMzMmUzMjMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNzMwMzEzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEArTf1DANBgkqhkiG9w0BAQsFAAOCAQEAXMiiuO/ko2YFSWJhnoY/WVCN wLxV5Tf5ukX6NYiik6ovOfmY0t/ZrlNWF+qsPw6V2TPlHd/E2WCXLBSvOqXdk+OY wjMDqY2AnJ/m1mWeEZFvGPMY/xQL9YSujHiTIWbAsK/ypfVJ3D3d2iFCOmxhhmGw VOOuoGeXlwsZ0ur96NK/U1wG+ntmT/bZTmRV7r0vvcShke3qKw7Ys2qXgJfZjeb1 Niv5YkSKa91Qvgp1Yvl5WvRR5RhAaMsw0au8j1SGAGuyAlO48insA3NIwHjuRHcC Frf4tjJ/VfYyznRSARolw8VwRP4TT22abg4Cbb/bnKQ5WB1c41s890//WKbZSQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:13:47 2026 by rpki-client