This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3232342e302f32312d3234203d3e2034373636.roa File: 3138302e3232332e3232342e302f32312d3234203d3e2034373636.roa (raw, json) Hash identifier: bIAfitUJnRpqq1J6t0K08veAvRU8mHlx0aM5Gbz0G90= Subject key identifier: 2D:8E:42:2E:E5:06:8B:EF:8C:25:2F:8D:E2:7D:6C:02:9E:71:46:CE Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 14247675221ABA989E9AA46D4D7E424506FAA966 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3232342e302f32312d3234203d3e2034373636.roa Signing time: Tue 20 Jan 2026 02:24:59 +0000 ROA not before: Tue 20 Jan 2026 02:19:59 +0000 ROA not after: Tue 19 Jan 2027 02:24:59 +0000 asID: 4766 IP address blocks: 180.223.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:24:76:75:22:1a:ba:98:9e:9a:a4:6d:4d:7e:42:45:06:fa:a9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:59 2026 GMT Not After : Jan 19 02:24:59 2027 GMT Subject: CN=2D8E422EE5068BEF8C252F8DE27D6C029E7146CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c3:53:7c:81:b5:4e:15:2a:90:58:64:8c:c8: 8f:ed:b1:8a:2c:5c:d8:bd:a7:0c:9b:d0:a2:b1:93: 20:fd:4d:2a:c7:1e:05:3b:d4:fe:1f:88:34:0d:35: 6f:9b:7e:36:5f:00:23:16:11:21:74:10:62:03:91: a4:46:7c:0f:a5:56:13:e9:63:69:3d:84:39:a5:db: 4a:79:86:6d:14:d3:32:25:e1:9c:03:76:c9:e3:81: 6d:ee:02:bf:1b:71:ad:7b:16:c8:fc:d3:39:43:48: 80:79:b1:86:29:ac:b9:48:d3:19:f5:55:4c:37:f6: fe:03:a5:06:9f:54:dc:fb:98:63:1b:21:a1:b0:ac: 97:9d:fe:f1:8d:a3:b8:a0:29:d3:d1:ec:b0:d9:ac: f8:a8:e8:6a:6f:91:63:03:07:52:be:7b:8a:9a:9e: 30:cb:c2:63:c0:8f:7b:e5:8e:7e:2f:d4:e6:98:41: c7:41:a8:a9:60:1f:6a:86:aa:9f:93:59:e1:99:70: 53:e7:94:b3:3f:18:61:20:ac:c7:d1:8c:79:ed:d5: 26:fe:82:84:7c:67:a7:9d:7d:2c:94:88:d8:a1:4f: ae:06:1b:b3:3c:36:25:8d:9b:3c:8f:ff:f1:e0:e6: 6e:7a:e9:44:87:32:a3:43:1c:58:45:dd:13:c1:c4: a1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8E:42:2E:E5:06:8B:EF:8C:25:2F:8D:E2:7D:6C:02:9E:71:46:CE X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3232342e302f32312d3234203d3e2034373636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.224.0/21 Signature Algorithm: sha256WithRSAEncryption bc:22:48:c3:6c:ea:60:f4:cc:96:e3:e3:47:04:93:e7:3a:48: ee:46:b0:04:65:25:c8:77:f3:71:5e:b8:58:09:20:4d:77:50: 61:ef:11:4d:98:55:91:47:46:db:33:41:ef:8d:fc:50:8f:02: 23:cd:3f:bb:70:19:62:a8:7a:c8:16:75:f6:b6:55:94:a7:88: a1:1c:26:0e:ca:35:3e:8c:0f:b7:17:b5:7d:80:5a:88:ca:33: 4e:a0:0b:86:54:55:b5:a2:e1:1b:7e:01:5a:12:17:fa:45:30: f8:5f:40:aa:0b:d6:40:a1:54:fd:e9:fa:26:f4:78:0e:41:f5: fc:8e:54:8e:79:2b:10:e8:d1:b5:b6:45:4d:ac:da:7b:a2:90: cd:6d:2c:22:6f:1a:f1:ba:7a:61:a1:6e:8f:60:c1:dc:9a:fd: cf:8c:03:96:52:b0:c6:41:19:3d:d4:57:5c:0e:d6:18:74:3c: 49:bd:d1:55:51:48:74:72:05:0a:20:09:4b:84:5e:9b:4a:d6: 17:f5:28:d0:ce:35:5d:b9:dd:b3:dc:65:e0:c4:f8:5f:14:44: 7e:07:03:06:1e:75:15:cb:8f:2a:74:f3:93:8c:51:e4:88:0b: 0c:52:eb:59:fd:0d:40:f4:38:84:81:87:92:96:e7:36:5f:57: f1:83:53:86 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUFCR2dSIaupiemqRtTX5CRQb6qWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTlaFw0yNzAxMTkwMjI0NTlaMDMxMTAvBgNV BAMTKDJEOEU0MjJFRTUwNjhCRUY4QzI1MkY4REUyN0Q2QzAyOUU3MTQ2Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPw1N8gbVOFSqQWGSMyI/tsYos XNi9pwyb0KKxkyD9TSrHHgU71P4fiDQNNW+bfjZfACMWESF0EGIDkaRGfA+lVhPp Y2k9hDml20p5hm0U0zIl4ZwDdsnjgW3uAr8bca17Fsj80zlDSIB5sYYprLlI0xn1 VUw39v4DpQafVNz7mGMbIaGwrJed/vGNo7igKdPR7LDZrPio6GpvkWMDB1K+e4qa njDLwmPAj3vljn4v1OaYQcdBqKlgH2qGqp+TWeGZcFPnlLM/GGEgrMfRjHnt1Sb+ goR8Z6edfSyUiNihT64GG7M8NiWNmzyP//Hg5m566USHMqNDHFhF3RPBxKFxAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQULY5CLuUGi++MJS+N4n1sAp5xRs4wHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTE5NTcyMTU5NjkyOS8wLzMxMzgzMDJlMzIz MjMzMmUzMjMyMzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNDM3MzYzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA7Tf4DANBgkqhkiG9w0BAQsFAAOCAQEAvCJIw2zqYPTMluPjRwST5zpI 7kawBGUlyHfzcV64WAkgTXdQYe8RTZhVkUdG2zNB7438UI8CI80/u3AZYqh6yBZ1 9rZVlKeIoRwmDso1PowPtxe1fYBaiMozTqALhlRVtaLhG34BWhIX+kUw+F9AqgvW QKFU/en6JvR4DkH1/I5UjnkrEOjRtbZFTazae6KQzW0sIm8a8bp6YaFuj2DB3Jr9 z4wDllKwxkEZPdRXXA7WGHQ8Sb3RVVFIdHIFCiAJS4Rem0rWF/Uo0M41Xbnds9xl 4MT4XxREfgcDBh51FcuPKnTzk4xR5IgLDFLrWf0NQPQ4hIGHkpbnNl9X8YNThg== -----END CERTIFICATE-----Generated at Wed Jan 21 14:12:43 2026 by rpki-client