This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231362e302f32312d3234203d3e2032393134.roa
File: 3138302e3232332e3231362e302f32312d3234203d3e2032393134.roa (raw, json)
Hash identifier: tcv2llL6uom2xWW8HSF3NL4DFzp+bJPOCft2z1avXJk=
Subject key identifier: 9F:2B:6D:37:E7:28:52:38:4C:C4:08:EE:FB:F9:C7:52:0B:82:4F:F6
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 508DD635E41B89FCA10301C7FB6A092B7800968D
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231362e302f32312d3234203d3e2032393134.roa
Signing time: Tue 20 Jan 2026 02:24:55 +0000
ROA not before: Tue 20 Jan 2026 02:19:55 +0000
ROA not after: Tue 19 Jan 2027 02:24:55 +0000
asID: 2914
IP address blocks: 180.223.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:8d:d6:35:e4:1b:89:fc:a1:03:01:c7:fb:6a:09:2b:78:00:96:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:55 2026 GMT
Not After : Jan 19 02:24:55 2027 GMT
Subject: CN=9F2B6D37E72852384CC408EEFBF9C7520B824FF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:de:d3:17:cb:ad:8d:84:a6:09:c0:8f:be:
46:0f:9a:dd:cc:f1:b6:c6:0a:f0:f6:86:94:50:93:
99:f9:5f:c4:8e:dc:3a:8f:51:75:c0:a5:4d:13:a5:
b3:f1:09:67:f1:c6:10:bd:23:b0:57:8b:8b:e4:6a:
ab:25:a5:7d:7a:64:0b:46:3d:1a:60:07:98:ec:26:
44:0a:53:94:f7:41:30:4b:d5:30:3c:cb:ad:16:fb:
70:e0:c7:12:64:43:39:b1:09:2c:ce:ff:7e:c9:49:
24:70:96:e9:6e:93:92:d2:7e:99:10:57:01:68:2c:
54:fa:d0:33:cd:e4:39:2d:c4:41:24:82:fe:30:b1:
46:db:16:9c:93:53:60:93:c3:11:e3:9f:5d:50:49:
24:e0:02:ee:6d:5f:10:b4:a1:53:53:b4:80:31:fa:
ed:e3:bf:c1:ab:96:54:f6:47:4a:90:0f:d9:32:82:
2a:00:73:90:3d:5d:9d:d6:57:65:a8:0c:d9:98:fa:
7f:19:46:da:bd:2f:bb:40:dc:fd:81:b9:de:e8:85:
f8:86:f4:73:b1:89:e2:f0:8f:58:4f:0b:c6:3d:d8:
6b:65:9e:db:40:33:77:c4:37:b8:21:7e:d0:69:d5:
2a:e1:3a:82:f7:78:7f:60:ff:cd:67:9c:ef:2d:88:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2B:6D:37:E7:28:52:38:4C:C4:08:EE:FB:F9:C7:52:0B:82:4F:F6
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231362e302f32312d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.216.0/21
Signature Algorithm: sha256WithRSAEncryption
74:2e:31:37:b8:43:bd:13:21:01:7d:d3:1b:a2:46:56:01:ae:
c4:4e:e1:d2:39:de:33:70:25:8f:75:49:0e:54:2f:a8:c4:64:
1f:58:4a:43:94:db:b8:d3:03:e9:ea:f0:f3:aa:c9:8b:d3:67:
f3:20:a3:f8:3d:ba:c6:a8:39:a1:df:2d:86:8b:e3:48:a5:76:
1d:23:d4:d9:4e:ce:57:0a:ef:75:f1:3f:ed:ac:de:0c:2b:74:
d7:b2:6d:dd:5a:ae:1b:d0:f7:9c:34:b7:23:5a:67:0a:fb:84:
a5:95:fa:87:08:fd:19:ee:9f:83:d9:65:1f:7b:5c:0f:87:b7:
df:19:0d:2b:5b:90:f5:01:04:14:88:7c:29:11:e4:40:0b:7e:
bd:c4:7a:51:4a:e2:1b:cc:d4:73:9a:ef:23:06:49:b9:ce:ff:
6a:35:3b:29:12:32:1f:51:c6:42:9a:f1:19:b4:f9:48:a5:3a:
bb:8b:a5:8d:db:4c:3f:66:5c:22:b0:0f:13:0a:7c:8f:7b:72:
6b:b5:a9:62:65:a7:05:c6:0f:47:f2:5a:61:22:57:e0:88:bb:
73:8f:86:e0:e1:cc:d7:63:af:be:4b:1f:55:85:c0:c8:a7:2f:
b7:5f:9c:4b:34:ba:bb:4a:1c:6d:7b:51:40:ff:8e:bc:0b:57:
65:c1:7e:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:43 2026 by rpki-client