This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e20333938373034.roa File: 3138302e3232332e3233322e302f32312d3234203d3e20333938373034.roa (raw, json) Hash identifier: aF53JScvurE0i6Q6Js9V+YxRzrpkLWMXIgQazSrfYko= Subject key identifier: 85:12:9B:3F:BF:C3:5B:05:D1:A9:5C:4E:B2:1E:15:A1:85:A3:27:F2 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 5DDFFA2832BA71B4B8FC71AB73AAF5CC83E738A7 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e20333938373034.roa Signing time: Tue 20 Jan 2026 02:24:56 +0000 ROA not before: Tue 20 Jan 2026 02:19:56 +0000 ROA not after: Tue 19 Jan 2027 02:24:56 +0000 asID: 398704 IP address blocks: 180.223.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:df:fa:28:32:ba:71:b4:b8:fc:71:ab:73:aa:f5:cc:83:e7:38:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:56 2026 GMT Not After : Jan 19 02:24:56 2027 GMT Subject: CN=85129B3FBFC35B05D1A95C4EB21E15A185A327F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9f:85:fb:0a:1f:a7:f8:06:04:80:3c:d0:8b: 0f:63:90:5c:9a:d9:7d:49:9e:75:1c:85:7e:c4:fe: a5:f3:df:19:4f:7d:45:31:d8:0d:7f:07:4f:50:e6: 06:a1:73:52:3c:98:99:f4:fd:21:95:c4:19:56:3f: 09:5f:54:4e:4d:d9:6a:95:44:f8:2d:fd:1a:ef:ba: 77:c8:34:77:17:6f:eb:a6:22:4e:49:5e:c9:67:f3: d2:8a:8b:6c:23:0f:93:88:1a:86:8d:98:0e:b9:e3: 10:be:32:5d:2e:a3:cf:b4:2b:7c:f3:3f:07:84:00: 81:73:62:da:ab:3e:7f:b6:67:ff:82:48:9a:ac:4d: 6d:c1:f5:bd:cf:50:fd:a5:2d:23:85:40:91:c3:a4: c9:fa:b0:eb:58:9a:2d:8a:40:66:75:4b:6d:cd:79: 91:89:4c:30:ec:92:d2:9b:7e:21:29:e1:7c:f3:31: 63:f7:e4:b6:42:69:c3:97:48:5d:3d:44:f9:42:97: 39:a0:ca:47:f0:b6:08:4e:1f:d7:8f:2d:e4:88:93: cf:63:ff:de:65:8e:fa:b4:48:e3:65:e6:2c:63:8d: 8a:ff:4d:67:10:6f:ae:6a:66:95:17:9a:8f:a2:91: ec:cb:12:00:38:06:50:e9:a7:33:77:b4:7f:55:76: 99:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:12:9B:3F:BF:C3:5B:05:D1:A9:5C:4E:B2:1E:15:A1:85:A3:27:F2 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e20333938373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.232.0/21 Signature Algorithm: sha256WithRSAEncryption 0e:78:df:72:f8:e1:bc:7e:76:2a:bc:4e:72:3a:9c:a9:af:54: b6:49:11:71:c6:d1:74:bc:29:16:2b:69:3a:b9:e4:89:34:9b: f8:4c:80:19:b3:63:4c:fb:38:05:e6:70:fc:d9:f0:08:70:3f: 00:70:1f:93:12:25:f5:32:0f:10:61:75:d2:e4:60:ad:a8:6b: c8:80:e6:39:c0:e8:ac:4c:10:ec:1a:ce:d2:5e:b8:bc:6c:75: 23:c3:aa:cd:f9:74:9b:71:20:2a:f7:5c:46:20:5c:10:9a:9f: ac:1d:db:f8:64:f5:fd:86:8e:18:ce:03:da:2d:99:25:15:18: 20:dc:3c:92:b7:15:fe:33:86:7b:86:1e:17:61:df:c2:3e:65: 13:6d:38:0b:e2:07:cc:10:43:e6:0e:6a:fe:b9:88:69:42:57: f0:40:29:dc:7b:1e:24:d1:27:6b:16:f0:85:7b:da:9e:38:8a: 8d:ca:27:73:85:c0:53:61:7e:93:7e:2f:a1:7a:f0:c9:ac:cb: 35:bc:e1:11:f4:3a:1a:fd:34:5f:fd:5c:ef:73:87:64:03:ed: 08:c1:5f:31:7e:71:6c:6e:a4:9c:31:a6:e0:55:87:39:36:86: a8:05:b8:6d:9f:ee:0c:d0:d9:cc:9e:30:38:80:78:36:a1:47: 06:6b:54:51 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUXd/6KDK6cbS4/HGrc6r1zIPnOKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTZaFw0yNzAxMTkwMjI0NTZaMDMxMTAvBgNV BAMTKDg1MTI5QjNGQkZDMzVCMDVEMUE5NUM0RUIyMUUxNUExODVBMzI3RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNn4X7Ch+n+AYEgDzQiw9jkFya 2X1JnnUchX7E/qXz3xlPfUUx2A1/B09Q5gahc1I8mJn0/SGVxBlWPwlfVE5N2WqV RPgt/RrvunfINHcXb+umIk5JXsln89KKi2wjD5OIGoaNmA654xC+Ml0uo8+0K3zz PweEAIFzYtqrPn+2Z/+CSJqsTW3B9b3PUP2lLSOFQJHDpMn6sOtYmi2KQGZ1S23N eZGJTDDsktKbfiEp4XzzMWP35LZCacOXSF09RPlClzmgykfwtghOH9ePLeSIk89j /95ljvq0SONl5ixjjYr/TWcQb65qZpUXmo+ikezLEgA4BlDppzN3tH9VdplTAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUhRKbP7/DWwXRqVxOsh4VoYWjJ/IwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUz MjMyMzMyZTMyMzMzMjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMzMzkzODM3MzAz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA7Tf6DANBgkqhkiG9w0BAQsFAAOCAQEADnjfcvjhvH52KrxO cjqcqa9UtkkRccbRdLwpFitpOrnkiTSb+EyAGbNjTPs4BeZw/NnwCHA/AHAfkxIl 9TIPEGF10uRgrahryIDmOcDorEwQ7BrO0l64vGx1I8Oqzfl0m3EgKvdcRiBcEJqf rB3b+GT1/YaOGM4D2i2ZJRUYINw8krcV/jOGe4YeF2Hfwj5lE204C+IHzBBD5g5q /rmIaUJX8EAp3HseJNEnaxbwhXvanjiKjconc4XAU2F+k34voXrwyazLNbzhEfQ6 Gv00X/1c73OHZAPtCMFfMX5xbG6knDGm4FWHOTaGqAW4bZ/uDNDZzJ4wOIB4NqFH BmtUUQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:14:50 2026 by rpki-client