This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e2034373636.roa File: 3138302e3232332e3233322e302f32312d3234203d3e2034373636.roa (raw, json) Hash identifier: Jdebf7y4x7OYwYGQNlaT6IxnL0rxp++WSUGMZf4jjwk= Subject key identifier: 96:37:97:F6:B8:6C:FB:A3:8F:CC:E1:01:25:62:89:18:D1:70:AA:FF Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 5AD1C76577A0C674F4420290F03B6074560D7776 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e2034373636.roa Signing time: Tue 20 Jan 2026 02:25:00 +0000 ROA not before: Tue 20 Jan 2026 02:20:00 +0000 ROA not after: Tue 19 Jan 2027 02:25:00 +0000 asID: 4766 IP address blocks: 180.223.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d1:c7:65:77:a0:c6:74:f4:42:02:90:f0:3b:60:74:56:0d:77:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:20:00 2026 GMT Not After : Jan 19 02:25:00 2027 GMT Subject: CN=963797F6B86CFBA38FCCE10125628918D170AAFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:56:5f:df:89:04:e3:58:5a:f2:91:a5:a9:b4: 77:4b:63:43:1f:c6:7e:ac:0b:a7:af:9a:bb:86:d2: cb:fe:d5:b5:f9:e3:8e:bc:c2:a8:57:f9:ff:54:61: 54:1f:7c:19:91:8e:0b:47:a3:68:23:68:5c:78:f3: a8:02:82:71:f3:78:b4:78:af:0a:4d:31:00:8a:94: de:ef:90:e2:09:8c:9a:00:1a:1d:72:c7:e3:a1:3d: 0e:c3:dc:8a:d8:f8:d4:3a:41:d0:16:3f:e2:8d:be: 50:30:91:aa:de:c1:cd:22:77:42:0f:ae:11:4c:a8: 72:a2:80:dd:48:fc:be:b5:33:38:25:e4:50:ce:35: b8:7b:b2:0d:41:27:f5:8b:ba:cc:6e:f3:cb:a0:c1: b1:58:27:db:7b:4c:61:68:94:a2:ee:f9:b9:3d:16: 1b:50:e5:f5:27:84:76:dd:0a:a1:51:89:b4:e1:08: 29:88:a5:5e:0f:58:64:a1:84:99:d7:2a:1e:4c:73: bf:23:93:c4:f7:59:88:3c:90:cc:3a:80:74:14:6e: 80:f5:a0:4f:bc:b3:02:0e:07:45:20:33:2b:fe:4f: f3:01:d3:73:13:91:3c:86:98:c2:d0:97:2e:05:0d: a0:39:3f:2b:6b:22:aa:26:63:06:42:40:69:4e:66: 6d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:37:97:F6:B8:6C:FB:A3:8F:CC:E1:01:25:62:89:18:D1:70:AA:FF X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e2034373636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.232.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:a4:c6:f4:d0:85:c4:43:ec:cb:ae:25:22:f0:5b:8f:93:87: 88:65:7b:55:97:07:bc:91:c1:15:4a:f5:73:e8:ea:68:53:a9: 50:e3:67:02:b8:60:84:ad:3b:96:37:cd:9d:3b:40:51:05:fe: 0f:15:e3:63:61:14:92:06:ea:8c:ce:c6:c2:d5:d0:de:14:93: a5:a4:41:5c:a5:b3:09:a9:29:9c:aa:f8:16:9b:9b:04:5b:ea: f1:de:30:d0:3a:2a:07:9b:9c:43:0f:52:69:cc:9d:37:ac:d7: bc:00:de:e1:f7:e6:2e:3b:97:3d:bc:6b:71:76:2c:16:9d:9a: a9:02:a1:bd:c6:51:19:cd:53:05:e9:98:8a:f3:9d:ce:82:e4: d6:0e:eb:3d:82:7b:7e:43:2a:bf:34:88:3e:25:a4:19:48:02: 92:3f:4c:38:d5:70:66:33:df:33:53:10:e6:7c:37:b1:28:e1: d6:05:4c:97:2c:ec:ec:ea:16:49:85:5b:25:e8:e6:fe:a0:82: 63:a3:13:d1:2c:fa:d4:1f:5a:ac:c5:ce:b8:cf:f2:8e:ad:a6: f8:c8:b7:c6:bd:f0:43:8e:06:af:eb:08:87:55:5e:c1:4f:de: b0:ed:d5:08:47:8f:ce:6e:a2:9c:cd:f8:4e:fa:37:1a:bc:9a: 1f:25:c5:a1 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUWtHHZXegxnT0QgKQ8DtgdFYNd3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjIwMDBaFw0yNzAxMTkwMjI1MDBaMDMxMTAvBgNV BAMTKDk2Mzc5N0Y2Qjg2Q0ZCQTM4RkNDRTEwMTI1NjI4OTE4RDE3MEFBRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwVl/fiQTjWFrykaWptHdLY0Mf xn6sC6evmruG0sv+1bX54468wqhX+f9UYVQffBmRjgtHo2gjaFx486gCgnHzeLR4 rwpNMQCKlN7vkOIJjJoAGh1yx+OhPQ7D3IrY+NQ6QdAWP+KNvlAwkarewc0id0IP rhFMqHKigN1I/L61Mzgl5FDONbh7sg1BJ/WLusxu88ugwbFYJ9t7TGFolKLu+bk9 FhtQ5fUnhHbdCqFRibThCCmIpV4PWGShhJnXKh5Mc78jk8T3WYg8kMw6gHQUboD1 oE+8swIOB0UgMyv+T/MB03MTkTyGmMLQly4FDaA5PytrIqomYwZCQGlOZm29AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUljeX9rhs+6OPzOEBJWKJGNFwqv8wHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTE5NTcyMTU5NjkyOS8wLzMxMzgzMDJlMzIz MjMzMmUzMjMzMzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNDM3MzYzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA7Tf6DANBgkqhkiG9w0BAQsFAAOCAQEAO6TG9NCFxEPsy64lIvBbj5OH iGV7VZcHvJHBFUr1c+jqaFOpUONnArhghK07ljfNnTtAUQX+DxXjY2EUkgbqjM7G wtXQ3hSTpaRBXKWzCakpnKr4FpubBFvq8d4w0DoqB5ucQw9SacydN6zXvADe4ffm LjuXPbxrcXYsFp2aqQKhvcZRGc1TBemYivOdzoLk1g7rPYJ7fkMqvzSIPiWkGUgC kj9MONVwZjPfM1MQ5nw3sSjh1gVMlyzs7OoWSYVbJejm/qCCY6MT0Sz61B9arMXO uM/yjq2m+Mi3xr3wQ44Gr+sIh1VewU/esO3VCEePzm6inM34Tvo3GryaHyXFoQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:13:28 2026 by rpki-client