This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234302e302f32312d3234203d3e2034373636.roa File: 3138302e3232332e3234302e302f32312d3234203d3e2034373636.roa (raw, json) Hash identifier: 1cKPKH0K5ni8KdKDxJRq0M+eDdzT4I3hRllniSdqOKA= Subject key identifier: 2E:80:49:81:2C:4D:67:2D:5F:D0:2E:47:9D:1C:BA:E4:91:F1:EF:7C Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 3398FD00169F93156B18F99A46464B611298A105 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234302e302f32312d3234203d3e2034373636.roa Signing time: Tue 20 Jan 2026 02:24:58 +0000 ROA not before: Tue 20 Jan 2026 02:19:58 +0000 ROA not after: Tue 19 Jan 2027 02:24:58 +0000 asID: 4766 IP address blocks: 180.223.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:98:fd:00:16:9f:93:15:6b:18:f9:9a:46:46:4b:61:12:98:a1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:58 2026 GMT Not After : Jan 19 02:24:58 2027 GMT Subject: CN=2E8049812C4D672D5FD02E479D1CBAE491F1EF7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:00:29:b1:c1:af:28:ed:6b:32:f4:02:16:a5: b8:9a:e0:fe:14:72:fe:03:54:79:fc:3d:78:2f:5d: a5:3d:6e:f1:b4:a5:53:e8:28:8b:0b:2a:68:78:7f: cd:e9:7b:a6:45:4e:ff:fc:07:04:96:41:56:e4:07: 30:15:12:a1:d9:76:35:4e:fb:04:2b:3a:6e:d3:35: d5:d3:7b:80:53:04:9a:06:76:50:87:6a:46:a8:9c: 7d:58:2c:91:16:30:93:ae:28:63:2e:b1:4c:04:15: 67:83:4e:46:a8:25:e5:a9:bc:ca:e0:8d:98:93:36: ad:b8:e5:e4:37:89:bf:39:a7:1b:d5:f1:46:ad:3e: 6a:a7:99:c9:ea:e7:5a:5a:95:fa:58:f6:b3:a9:04: 9b:18:49:2b:da:a9:05:65:98:52:3c:b9:ff:fb:a2: 6e:2f:fe:bf:7c:2e:7a:3f:a5:5b:06:10:ac:fa:42: fd:e8:a0:67:ed:42:69:93:98:bb:f5:bb:b5:aa:a4: 8c:63:a9:ff:28:f3:a7:c8:92:c5:94:3f:79:9d:90: 90:18:47:54:08:e2:1d:ed:f6:76:43:97:60:be:1d: 9d:de:61:e4:c5:fd:cb:d9:d1:da:ae:e8:d2:60:eb: fd:12:be:61:b0:29:29:1f:7c:a7:02:c7:b1:7f:b3: 58:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:80:49:81:2C:4D:67:2D:5F:D0:2E:47:9D:1C:BA:E4:91:F1:EF:7C X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234302e302f32312d3234203d3e2034373636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.240.0/21 Signature Algorithm: sha256WithRSAEncryption 7c:40:b6:e3:32:f1:82:8b:9e:a6:01:02:2a:fe:25:9f:97:e1: 3f:c6:4b:87:f1:8e:e8:f4:21:81:40:be:13:59:c8:f5:bc:0b: 26:e2:ad:71:4d:46:27:d4:77:0c:d0:db:d3:3d:21:09:e0:0d: c0:e8:6a:ff:62:c0:5a:3a:36:8e:35:ff:17:c2:71:33:93:6c: 94:e6:23:bb:66:91:77:3a:60:95:3f:10:87:00:ea:af:6b:c0: e3:87:17:7c:cd:12:3e:5d:aa:19:84:c0:38:21:9d:24:e4:72: de:56:29:90:94:22:4a:ac:c5:41:59:12:6e:0f:5d:eb:f2:e5: 41:d3:1c:e6:1a:2c:76:31:51:b7:3d:ac:a9:22:44:e8:1f:50: 93:d2:49:6e:c4:41:fc:d4:98:21:80:d4:d5:6f:4c:4b:63:17: 39:05:b3:7c:25:c5:1d:83:2a:61:fe:5a:fd:c6:cb:8e:77:85: d3:62:8a:46:5a:81:5f:a4:7b:ab:e5:2d:b5:10:31:5f:02:0c: a7:74:2d:b7:7c:51:f4:4d:7e:7f:7c:15:7c:8a:b2:6c:06:08: 3f:ee:b3:d6:1f:6f:57:ae:f8:3d:a6:a2:54:ff:d7:3b:50:63: 73:09:98:9a:7c:56:08:33:ff:40:d7:ec:7d:4b:ab:55:e8:ba: 08:dd:71:9f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUM5j9ABafkxVrGPmaRkZLYRKYoQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NThaFw0yNzAxMTkwMjI0NThaMDMxMTAvBgNV BAMTKDJFODA0OTgxMkM0RDY3MkQ1RkQwMkU0NzlEMUNCQUU0OTFGMUVGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxACmxwa8o7Wsy9AIWpbia4P4U cv4DVHn8PXgvXaU9bvG0pVPoKIsLKmh4f83pe6ZFTv/8BwSWQVbkBzAVEqHZdjVO +wQrOm7TNdXTe4BTBJoGdlCHakaonH1YLJEWMJOuKGMusUwEFWeDTkaoJeWpvMrg jZiTNq245eQ3ib85pxvV8UatPmqnmcnq51palfpY9rOpBJsYSSvaqQVlmFI8uf/7 om4v/r98Lno/pVsGEKz6Qv3ooGftQmmTmLv1u7WqpIxjqf8o86fIksWUP3mdkJAY R1QI4h3t9nZDl2C+HZ3eYeTF/cvZ0dqu6NJg6/0SvmGwKSkffKcCx7F/s1hJAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQULoBJgSxNZy1f0C5HnRy65JHx73wwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTE5NTcyMTU5NjkyOS8wLzMxMzgzMDJlMzIz MjMzMmUzMjM0MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNDM3MzYzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA7Tf8DANBgkqhkiG9w0BAQsFAAOCAQEAfEC24zLxgouepgECKv4ln5fh P8ZLh/GO6PQhgUC+E1nI9bwLJuKtcU1GJ9R3DNDb0z0hCeANwOhq/2LAWjo2jjX/ F8JxM5NslOYju2aRdzpglT8QhwDqr2vA44cXfM0SPl2qGYTAOCGdJORy3lYpkJQi SqzFQVkSbg9d6/LlQdMc5hosdjFRtz2sqSJE6B9Qk9JJbsRB/NSYIYDU1W9MS2MX OQWzfCXFHYMqYf5a/cbLjneF02KKRlqBX6R7q+UttRAxXwIMp3Qtt3xR9E1+f3wV fIqybAYIP+6z1h9vV674PaaiVP/XO1BjcwmYmnxWCDP/QNfsfUurVei6CN1xnw== -----END CERTIFICATE-----Generated at Wed Jan 21 14:13:44 2026 by rpki-client