This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e203138383131.roa File: 3138302e3232332e3233322e302f32312d3234203d3e203138383131.roa (raw, json) Hash identifier: n9GbDna3Kl7aeCNP16CogW4cd5VyZndAHInLATkSuzo= Subject key identifier: 89:93:22:46:9C:8D:04:F5:74:E8:FD:AF:1F:95:CD:A3:6B:5B:5C:05 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 632315D69DA0D956699AF475FA4E3E9C3664CE10 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e203138383131.roa Signing time: Tue 20 Jan 2026 02:24:56 +0000 ROA not before: Tue 20 Jan 2026 02:19:56 +0000 ROA not after: Tue 19 Jan 2027 02:24:56 +0000 asID: 18811 IP address blocks: 180.223.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:23:15:d6:9d:a0:d9:56:69:9a:f4:75:fa:4e:3e:9c:36:64:ce:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:56 2026 GMT Not After : Jan 19 02:24:56 2027 GMT Subject: CN=899322469C8D04F574E8FDAF1F95CDA36B5B5C05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bb:36:1e:51:10:3a:3a:99:66:c3:20:35:70: 71:49:f0:b9:a3:4f:2b:f0:37:e9:51:94:c4:71:40: 2b:c6:db:a9:19:83:0e:99:2d:ab:e0:bf:2c:cd:bd: 86:d9:83:f0:72:15:36:da:36:6d:a6:0c:2e:40:57: 63:18:11:6f:35:88:e1:79:d0:21:66:f1:3e:25:50: 5a:35:e5:70:d0:71:f7:82:cd:95:05:ec:81:0a:37: ac:57:9a:80:31:5e:91:bf:85:d3:76:58:3e:92:6d: 6e:3b:c6:34:3c:20:75:67:09:79:e7:f4:55:68:85: 2d:79:e4:76:22:9a:8f:be:bf:22:a2:14:29:2a:d8: d3:d6:ff:cc:7c:a6:08:20:85:44:9d:c4:0c:56:7d: 6e:2b:f6:06:82:7a:50:77:c9:9f:5f:3e:ea:30:73: a6:25:b0:76:b3:c9:24:b6:8c:c1:34:3d:dd:1c:f1: 00:d6:d3:57:f4:9e:24:63:09:e6:c2:75:83:ed:f6: 2b:30:b8:dc:35:27:9f:3c:64:7a:3c:1c:37:28:67: 67:64:e9:9f:68:da:d2:8c:d1:6e:65:fb:12:68:ea: 28:9b:a6:96:27:c4:d2:0f:e0:5e:84:7c:af:6f:b8: 35:e8:d1:83:13:da:60:59:ba:25:e6:97:89:62:17: 6b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:93:22:46:9C:8D:04:F5:74:E8:FD:AF:1F:95:CD:A3:6B:5B:5C:05 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e203138383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.232.0/21 Signature Algorithm: sha256WithRSAEncryption 3c:fd:38:de:3d:d5:80:04:d4:f0:3c:91:ed:6b:18:1e:3a:21: fb:ee:8d:fa:4b:96:7f:9e:30:e5:cb:a8:61:48:a5:35:61:14: 06:c2:c0:93:ed:7b:32:c3:de:48:1f:bd:cb:f0:5a:4b:71:da: 28:d7:71:18:db:de:5f:8b:dd:82:af:d8:b8:f4:d0:e8:1a:55: 36:c1:ff:68:d9:2b:72:74:18:47:70:02:70:e7:85:1d:58:e0: ef:40:a9:a6:e7:30:05:69:4c:0d:27:0c:e6:a6:16:d2:35:b7: d1:08:1e:73:ad:3a:80:72:3e:68:9e:2e:05:62:d1:64:bd:b1: 19:69:52:7c:73:47:ed:02:1e:2c:9d:06:73:aa:dc:15:82:86: c1:d0:c2:8a:9b:d6:ea:50:e2:f7:bd:0f:c2:72:41:d3:c8:f2: 6b:96:4d:99:4b:9f:68:83:ee:f6:09:9f:92:9d:ae:03:14:4e: 67:75:98:eb:29:04:20:e2:83:34:6c:b9:8a:9c:02:3b:13:ca: 20:7c:76:b0:8f:29:9f:bb:b3:1f:71:83:e2:61:a8:ed:41:65: 27:8d:93:81:85:78:a3:e3:bb:53:5c:db:2e:b9:fc:a5:55:23: e9:86:32:ca:a5:ca:03:c9:b8:3d:fa:07:6a:ff:0d:9d:77:ca: f4:7a:3d:77 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYyMV1p2g2VZpmvR1+k4+nDZkzhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTZaFw0yNzAxMTkwMjI0NTZaMDMxMTAvBgNV BAMTKDg5OTMyMjQ2OUM4RDA0RjU3NEU4RkRBRjFGOTVDREEzNkI1QjVDMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkuzYeURA6OplmwyA1cHFJ8Lmj TyvwN+lRlMRxQCvG26kZgw6ZLavgvyzNvYbZg/ByFTbaNm2mDC5AV2MYEW81iOF5 0CFm8T4lUFo15XDQcfeCzZUF7IEKN6xXmoAxXpG/hdN2WD6SbW47xjQ8IHVnCXnn 9FVohS155HYimo++vyKiFCkq2NPW/8x8pggghUSdxAxWfW4r9gaCelB3yZ9fPuow c6YlsHazySS2jME0Pd0c8QDW01f0niRjCebCdYPt9iswuNw1J588ZHo8HDcoZ2dk 6Z9o2tKM0W5l+xJo6iibppYnxNIP4F6EfK9vuDXo0YMT2mBZuiXml4liF2sdAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUiZMiRpyNBPV06P2vH5XNo2tbXAUwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1OTY5MjkvMC8zMTM4MzAyZTMy MzIzMzJlMzIzMzMyMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzODM4MzEzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA7Tf6DANBgkqhkiG9w0BAQsFAAOCAQEAPP043j3VgATU8DyR7WsY Hjoh++6N+kuWf54w5cuoYUilNWEUBsLAk+17MsPeSB+9y/BaS3HaKNdxGNveX4vd gq/YuPTQ6BpVNsH/aNkrcnQYR3ACcOeFHVjg70CppucwBWlMDScM5qYW0jW30Qge c606gHI+aJ4uBWLRZL2xGWlSfHNH7QIeLJ0Gc6rcFYKGwdDCipvW6lDi970PwnJB 08jya5ZNmUufaIPu9gmfkp2uAxROZ3WY6ykEIOKDNGy5ipwCOxPKIHx2sI8pn7uz H3GD4mGo7UFlJ42TgYV4o+O7U1zbLrn8pVUj6YYyyqXKA8m4PfoHav8NnXfK9Ho9 dw== -----END CERTIFICATE-----Generated at Wed Jan 21 11:25:56 2026 by rpki-client