This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e203138383131.roa File: 3138302e3232332e3234382e302f32312d3234203d3e203138383131.roa (raw, json) Hash identifier: bnXMWmZCOxnB2biV1nfBU9CqEVMd06NDcDIWT75ZlY0= Subject key identifier: F8:8F:59:AF:2C:35:F3:87:83:53:C6:5A:EC:4D:BC:C3:5F:B5:BC:DB Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 018CA9AC090177836A961B13C657DB7988577D0F Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e203138383131.roa Signing time: Tue 20 Jan 2026 02:25:00 +0000 ROA not before: Tue 20 Jan 2026 02:20:00 +0000 ROA not after: Tue 19 Jan 2027 02:25:00 +0000 asID: 18811 IP address blocks: 180.223.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:a9:ac:09:01:77:83:6a:96:1b:13:c6:57:db:79:88:57:7d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:20:00 2026 GMT Not After : Jan 19 02:25:00 2027 GMT Subject: CN=F88F59AF2C35F3878353C65AEC4DBCC35FB5BCDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:8c:75:d6:de:2c:c4:d3:a1:0e:46:60:f8: 49:aa:3c:65:80:f3:f8:0d:d2:47:56:9e:43:2f:fd: 0c:ea:a1:29:d8:1c:15:88:e1:98:4e:85:49:6a:ca: 09:52:10:c7:75:d7:b9:78:6b:b4:08:0d:2e:7e:7c: ac:e9:31:51:0a:41:54:a0:bb:72:43:dd:ef:42:f1: d9:94:65:68:f6:16:7a:85:aa:66:9d:2f:f4:f2:6a: 43:ec:a9:3c:a3:c8:7b:44:6d:59:24:7a:57:02:80: 55:15:b5:8a:f4:23:18:78:eb:3e:9d:61:18:5a:c1: 9f:ed:9e:e0:b6:9c:a7:c0:10:eb:e1:a5:ab:5f:93: 4c:af:df:2a:80:c7:d4:19:2e:6f:35:10:ae:47:01: c7:9b:6c:51:a0:28:53:40:4a:47:3f:2b:d9:1c:07: 11:c2:ec:8b:22:8a:95:d5:97:09:99:2f:ca:1f:0f: 0e:f0:47:62:51:cf:ff:ca:94:9a:ab:2f:0e:bf:12: 3b:a5:1b:82:94:91:3c:73:b0:12:7d:7e:da:0a:d2: 94:74:30:58:38:00:a7:5c:10:f9:df:01:4d:83:89: 0c:13:12:98:dc:da:08:0f:d9:31:49:38:1a:ef:ea: 31:e9:15:2b:84:ca:d3:15:70:53:9f:31:51:ae:0f: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8F:59:AF:2C:35:F3:87:83:53:C6:5A:EC:4D:BC:C3:5F:B5:BC:DB X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e203138383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.248.0/21 Signature Algorithm: sha256WithRSAEncryption be:fe:ae:e9:0d:58:c4:9b:11:c6:dc:d9:17:f0:64:ec:10:b8: 6c:20:e1:3c:07:22:2b:36:90:f8:9c:63:cd:8b:71:1e:49:35: 38:05:c5:41:e1:8a:cb:b3:34:75:1a:5d:b2:98:7e:53:e3:12: 92:c7:56:98:13:80:1e:96:b3:d3:98:48:d3:fa:7e:f4:f2:59: 6b:67:62:a1:35:fb:ed:d6:1e:d9:01:55:2c:93:73:37:43:ac: 62:18:ae:5f:63:cb:54:3c:59:1c:df:1b:ec:f7:e7:b1:93:d3: f8:03:32:e6:41:1b:ab:b3:34:d6:e5:8d:cc:78:80:a8:70:14: ab:f1:a8:91:35:05:b4:d4:63:de:9a:06:da:1a:7d:5b:0e:7d: 81:e3:9f:91:78:7d:e2:63:6d:a2:c7:6c:01:29:c4:a0:f7:7f: 32:3e:43:1f:3d:c4:5a:09:34:af:ec:15:e1:a4:c6:82:39:4a: dc:02:f4:5c:a2:f5:a5:74:7e:53:0c:64:b3:3c:fa:22:cc:ef: b0:ed:e6:4b:e0:0c:14:51:c4:b7:b6:62:f9:a7:8b:1c:dc:cf: 60:44:77:71:f6:04:16:cd:b7:3b:7f:26:14:5d:3c:24:1b:19: 6f:b8:04:7c:9d:8c:62:a1:7e:51:06:4b:63:aa:d0:db:d2:17: 84:6f:58:f6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUAYyprAkBd4NqlhsTxlfbeYhXfQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjIwMDBaFw0yNzAxMTkwMjI1MDBaMDMxMTAvBgNV BAMTKEY4OEY1OUFGMkMzNUYzODc4MzUzQzY1QUVDNERCQ0MzNUZCNUJDREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvh4x11t4sxNOhDkZg+EmqPGWA 8/gN0kdWnkMv/QzqoSnYHBWI4ZhOhUlqyglSEMd117l4a7QIDS5+fKzpMVEKQVSg u3JD3e9C8dmUZWj2FnqFqmadL/TyakPsqTyjyHtEbVkkelcCgFUVtYr0Ixh46z6d YRhawZ/tnuC2nKfAEOvhpatfk0yv3yqAx9QZLm81EK5HAcebbFGgKFNASkc/K9kc BxHC7IsiipXVlwmZL8ofDw7wR2JRz//KlJqrLw6/EjulG4KUkTxzsBJ9ftoK0pR0 MFg4AKdcEPnfAU2DiQwTEpjc2ggP2TFJOBrv6jHpFSuEytMVcFOfMVGuDzw/AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU+I9Zryw184eDU8Za7E28w1+1vNswHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1OTY5MjkvMC8zMTM4MzAyZTMy MzIzMzJlMzIzNDM4MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzODM4MzEzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA7Tf+DANBgkqhkiG9w0BAQsFAAOCAQEAvv6u6Q1YxJsRxtzZF/Bk 7BC4bCDhPAciKzaQ+JxjzYtxHkk1OAXFQeGKy7M0dRpdsph+U+MSksdWmBOAHpaz 05hI0/p+9PJZa2dioTX77dYe2QFVLJNzN0OsYhiuX2PLVDxZHN8b7PfnsZPT+AMy 5kEbq7M01uWNzHiAqHAUq/GokTUFtNRj3poG2hp9Ww59geOfkXh94mNtosdsASnE oPd/Mj5DHz3EWgk0r+wV4aTGgjlK3AL0XKL1pXR+Uwxkszz6IszvsO3mS+AMFFHE t7Zi+aeLHNzPYER3cfYEFs23O38mFF08JBsZb7gEfJ2MYqF+UQZLY6rQ29IXhG9Y 9g== -----END CERTIFICATE-----Generated at Wed Jan 21 11:25:59 2026 by rpki-client