This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e203130313033.roa
File: 3138302e3232332e3233322e302f32312d3234203d3e203130313033.roa (raw, json)
Hash identifier: dO01JE0fZCpZI7/oHgMyMVv90QJ3oUaMTXgdCBD0Ni0=
Subject key identifier: 3E:B5:0B:96:A8:E3:12:7C:C1:FA:F3:58:D2:87:E3:2F:BB:E7:C4:5F
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 19AAC3DBA30A1BD55D5466EA1A2B3CD5863AC3D6
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e203130313033.roa
Signing time: Tue 20 Jan 2026 02:24:59 +0000
ROA not before: Tue 20 Jan 2026 02:19:59 +0000
ROA not after: Tue 19 Jan 2027 02:24:59 +0000
asID: 10103
IP address blocks: 180.223.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:aa:c3:db:a3:0a:1b:d5:5d:54:66:ea:1a:2b:3c:d5:86:3a:c3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:59 2026 GMT
Not After : Jan 19 02:24:59 2027 GMT
Subject: CN=3EB50B96A8E3127CC1FAF358D287E32FBBE7C45F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:02:56:d5:06:39:f5:2e:8a:c7:1e:43:27:
1d:64:01:08:76:59:21:9f:e5:e2:66:c8:16:79:e4:
ff:d4:72:ae:5c:3e:fe:72:a4:92:57:9e:0e:b4:82:
22:89:ff:31:f3:68:b9:dc:ea:34:4b:9b:b0:37:f8:
b6:b5:ce:d4:4c:35:b1:14:93:f7:72:99:6a:6a:c7:
1c:3d:49:d9:7f:7e:61:86:e5:dc:b0:10:20:50:55:
2d:8c:85:00:62:84:c5:6a:a6:6e:35:64:08:73:63:
80:3e:bb:be:2c:a4:90:db:a2:28:13:37:97:d8:5b:
fe:8e:99:7c:d3:97:59:0c:50:a5:f6:6b:38:83:0c:
2f:7b:e3:37:48:48:c7:bd:d3:cc:77:3d:7f:20:ef:
57:19:ef:39:0b:19:46:c0:ac:89:4e:d6:da:7e:f4:
fa:5a:0b:83:46:1a:7a:13:f0:cf:f5:d1:00:14:90:
9a:79:08:99:4b:27:45:1c:32:74:b3:a2:e0:92:c6:
b1:bc:64:63:89:d9:4c:8b:b2:b8:d8:d7:c2:8b:29:
3a:93:d7:3e:0c:51:86:5f:e5:7d:75:ea:92:62:c3:
37:9e:2d:9d:4a:67:62:75:1a:df:d1:50:85:5e:eb:
e5:90:f0:99:f4:02:52:9b:5d:d8:56:da:2f:41:95:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B5:0B:96:A8:E3:12:7C:C1:FA:F3:58:D2:87:E3:2F:BB:E7:C4:5F
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e203130313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.232.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:e1:45:eb:e0:bc:01:d7:48:65:5e:be:83:ee:68:90:cb:8e:
3f:cb:a0:15:17:d8:0b:5f:ab:f8:c1:f4:18:61:56:dd:a8:a6:
30:e0:c7:27:65:2d:a3:86:37:ab:50:49:58:5e:32:6a:3a:ba:
47:ec:7d:e1:bc:9c:0d:f0:92:e8:12:13:db:f5:79:f7:88:77:
3d:e3:6b:ba:67:54:2f:19:cf:93:47:f7:cc:b8:a1:fc:d3:32:
5f:52:57:12:32:12:6f:ca:a8:2a:14:24:cd:bf:6b:d4:99:6b:
30:ce:73:7a:fb:54:52:88:36:d6:7c:5a:40:ee:2e:59:e0:13:
ff:78:63:c0:99:15:b4:07:c5:d8:34:55:4e:4a:0d:25:ca:b6:
02:76:b1:a7:cf:a5:d1:67:76:19:e1:19:95:26:8f:f5:2d:16:
75:e5:95:f2:03:c5:2d:c5:52:9e:e6:e0:2a:62:d5:37:6e:bd:
d6:b0:38:19:d3:3d:4f:8d:ff:11:bc:1b:87:23:ff:03:fc:6e:
7e:52:a2:76:84:a3:cd:82:3d:d6:e8:4e:af:a4:88:2e:f1:2c:
ce:a9:70:65:40:c6:24:ef:13:3c:00:00:e9:12:0e:dc:1b:de:
1b:74:94:13:4f:19:ce:85:06:4a:86:84:60:6c:66:e3:b3:d4:
c4:e4:42:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:41 2026 by rpki-client