This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e2037303138.roa File: 3138302e3232332e3233322e302f32312d3234203d3e2037303138.roa (raw, json) Hash identifier: 0cx7QWTEkDjE0CjKWcBeH4i2s0TzpMGWcr/L6ZFpVQk= Subject key identifier: CA:60:C6:75:1D:0B:D3:16:48:42:D7:18:B4:05:5E:BA:F9:6D:99:9B Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 408B60D6ADC0CF087645C275372B013A502C4782 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e2037303138.roa Signing time: Tue 20 Jan 2026 02:24:54 +0000 ROA not before: Tue 20 Jan 2026 02:19:54 +0000 ROA not after: Tue 19 Jan 2027 02:24:54 +0000 asID: 7018 IP address blocks: 180.223.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:8b:60:d6:ad:c0:cf:08:76:45:c2:75:37:2b:01:3a:50:2c:47:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:54 2026 GMT Not After : Jan 19 02:24:54 2027 GMT Subject: CN=CA60C6751D0BD3164842D718B4055EBAF96D999B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:aa:d4:4e:ff:80:2d:cc:20:40:46:5b:22:70: e7:d0:7b:80:26:dc:22:05:8b:3d:65:97:24:b0:29: e2:2a:cc:40:27:58:bf:74:1c:f8:bf:a6:75:73:20: b0:68:67:56:64:4b:80:d6:1f:48:6f:d1:be:9a:82: a8:ee:68:0b:7d:43:f7:74:0f:11:99:1d:ca:48:e3: 68:f5:99:b3:8c:9f:04:8b:6e:b1:37:da:3a:77:0f: 25:1a:b2:8a:1f:ef:1a:3c:b6:a5:82:b1:3a:fb:ef: e2:f7:bb:4e:b5:02:ad:dd:16:56:8c:d6:bb:c3:d4: c7:3f:eb:4e:3a:43:25:78:5e:13:b2:7c:a7:ac:cb: c5:84:87:99:15:86:74:8e:2c:7c:a5:da:a2:80:5d: 1e:21:e5:4b:1c:8b:83:25:88:66:f8:2b:73:f5:74: bf:b4:bf:69:e2:74:22:19:e2:bc:06:7f:b3:87:cb: 10:5b:f5:ee:64:7a:53:c1:ff:9b:e5:6f:f0:2d:17: 5a:f2:35:e5:ae:53:5d:56:f3:2d:29:22:8f:18:1c: 3c:19:33:76:de:2c:86:cd:9f:d1:99:0e:f8:28:5e: 23:24:b7:e8:09:75:69:40:f4:ca:bc:75:d0:8d:43: a8:b2:98:0f:08:9d:f7:fc:15:bb:2c:74:83:4e:1f: d8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:60:C6:75:1D:0B:D3:16:48:42:D7:18:B4:05:5E:BA:F9:6D:99:9B X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.232.0/21 Signature Algorithm: sha256WithRSAEncryption a5:1e:4a:ea:a9:8e:63:69:d5:c7:70:1b:42:81:a0:ff:0c:08: 14:30:fa:96:59:e0:e4:ab:fe:56:bf:d1:56:53:4b:9b:bc:cc: 11:d3:e2:a7:17:0b:a9:b0:68:57:ac:97:ac:04:ed:e6:c2:0b: 83:28:85:c0:74:f0:98:2f:db:d3:cb:2e:9d:d2:78:ad:3c:95: 59:f2:c1:3a:27:ab:e7:03:5c:ee:a5:ec:33:06:39:27:4d:28: a2:59:18:c6:90:ea:c3:2f:f9:14:a6:2e:fb:b8:9e:73:5c:cc: 33:5e:b3:31:79:43:ae:fc:68:5e:71:92:c5:cd:34:01:29:18: 3c:8c:a3:f4:74:fe:a9:08:66:36:ac:7b:c2:8a:a4:c7:36:d5: 6e:4b:ec:9b:0d:0c:16:c7:3a:e3:7e:61:08:95:a3:23:9b:9b: 85:9c:a1:5b:18:2f:a8:15:99:32:a7:db:06:2d:82:1a:c6:44: 71:f2:33:fc:4c:72:02:97:48:9a:66:05:81:86:1a:dd:fd:4b: f4:fd:bf:7d:9b:75:2f:a8:e2:ad:98:50:d7:06:39:44:09:c2: 50:fe:94:57:50:49:81:b1:9a:7f:bd:92:db:dd:e2:34:01:e8: 33:8b:a9:85:49:10:3f:93:6e:dd:8e:c4:1f:15:9a:29:d3:b6: d4:4b:f2:82 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUQItg1q3Azwh2RcJ1NysBOlAsR4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTRaFw0yNzAxMTkwMjI0NTRaMDMxMTAvBgNV BAMTKENBNjBDNjc1MUQwQkQzMTY0ODQyRDcxOEI0MDU1RUJBRjk2RDk5OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcqtRO/4AtzCBARlsicOfQe4Am 3CIFiz1llySwKeIqzEAnWL90HPi/pnVzILBoZ1ZkS4DWH0hv0b6agqjuaAt9Q/d0 DxGZHcpI42j1mbOMnwSLbrE32jp3DyUasoof7xo8tqWCsTr77+L3u061Aq3dFlaM 1rvD1Mc/6046QyV4XhOyfKesy8WEh5kVhnSOLHyl2qKAXR4h5Usci4MliGb4K3P1 dL+0v2nidCIZ4rwGf7OHyxBb9e5kelPB/5vlb/AtF1ryNeWuU11W8y0pIo8YHDwZ M3beLIbNn9GZDvgoXiMkt+gJdWlA9Mq8ddCNQ6iymA8Inff8FbssdINOH9gFAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUymDGdR0L0xZIQtcYtAVeuvltmZswHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTE5NTcyMTU5NjkyOS8wLzMxMzgzMDJlMzIz MjMzMmUzMjMzMzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNzMwMzEzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA7Tf6DANBgkqhkiG9w0BAQsFAAOCAQEApR5K6qmOY2nVx3AbQoGg/wwI FDD6llng5Kv+Vr/RVlNLm7zMEdPipxcLqbBoV6yXrATt5sILgyiFwHTwmC/b08su ndJ4rTyVWfLBOier5wNc7qXsMwY5J00oolkYxpDqwy/5FKYu+7iec1zMM16zMXlD rvxoXnGSxc00ASkYPIyj9HT+qQhmNqx7woqkxzbVbkvsmw0MFsc6435hCJWjI5ub hZyhWxgvqBWZMqfbBi2CGsZEcfIz/ExyApdImmYFgYYa3f1L9P2/fZt1L6jirZhQ 1wY5RAnCUP6UV1BJgbGaf72S293iNAHoM4uphUkQP5Nu3Y7EHxWaKdO21Evygg== -----END CERTIFICATE-----Generated at Wed Jan 21 14:13:49 2026 by rpki-client