This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e2032393134.roa
File: 3138302e3232332e3234382e302f32312d3234203d3e2032393134.roa (raw, json)
Hash identifier: CEzRCrpOGnIEgbHZ6yGSb6cgNJNO/I7tHBQXopMtxvw=
Subject key identifier: A8:B4:7D:77:DD:82:56:BA:6F:12:74:F7:58:F3:1F:AD:D8:8C:4E:A3
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 724EA147517BEDAC599D54EB76545267A77D6C14
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e2032393134.roa
Signing time: Tue 20 Jan 2026 02:24:56 +0000
ROA not before: Tue 20 Jan 2026 02:19:56 +0000
ROA not after: Tue 19 Jan 2027 02:24:56 +0000
asID: 2914
IP address blocks: 180.223.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:4e:a1:47:51:7b:ed:ac:59:9d:54:eb:76:54:52:67:a7:7d:6c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:56 2026 GMT
Not After : Jan 19 02:24:56 2027 GMT
Subject: CN=A8B47D77DD8256BA6F1274F758F31FADD88C4EA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:a9:07:e3:0d:0b:cb:77:40:3c:c3:08:85:
1e:0a:25:a4:86:17:d3:de:87:b4:82:7a:0f:16:a4:
32:11:c3:e4:7f:53:1a:f6:a5:bb:8e:49:a2:30:21:
0c:14:d6:17:f1:c8:2f:5a:c1:6c:f5:d0:3f:31:83:
4e:85:59:e8:a9:8e:ba:88:1b:56:61:5e:9f:a4:28:
ab:e9:eb:97:b6:84:c1:f2:e0:13:37:13:50:75:bf:
89:bd:d2:16:b6:f9:0e:6d:3e:6c:8e:f1:c2:32:88:
b4:81:95:9b:15:b8:dd:4c:dd:2c:f7:38:7d:20:6f:
4a:4d:59:b9:87:97:9b:7c:6a:5d:4d:6f:bc:fb:4c:
37:3b:a4:e9:c4:b3:8c:d2:bd:a6:ad:bc:62:e0:73:
33:28:0a:5d:83:a6:96:89:c5:d0:55:ac:ea:58:21:
d3:06:c5:bf:c1:fd:71:94:33:47:af:3b:a1:ef:b2:
63:f5:bc:b8:c3:a8:d3:ed:6d:dc:0e:4a:70:14:f2:
84:8e:de:d0:80:e3:c8:cd:12:5b:31:74:14:fa:04:
2d:10:9d:3b:be:10:63:4a:65:e6:73:c7:4d:4e:8b:
24:6d:9f:8c:e3:ad:70:70:cd:68:39:cc:69:28:78:
5a:b1:63:39:e0:e3:22:90:0d:18:07:5a:4d:06:18:
8a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B4:7D:77:DD:82:56:BA:6F:12:74:F7:58:F3:1F:AD:D8:8C:4E:A3
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:05:4f:32:56:b7:01:47:09:c3:c5:1f:cd:fa:04:51:38:e1:
86:3c:a6:90:4f:c1:67:aa:72:46:8a:a1:7b:1e:63:8d:37:e6:
06:c3:6a:57:2e:0c:18:91:07:0f:4c:54:f0:28:2c:6d:23:b6:
e2:46:c8:26:39:e5:fc:d5:af:11:19:a8:90:49:c0:c7:a9:b7:
ab:53:f8:13:ee:9c:e4:61:93:4f:8a:0f:45:c6:69:b6:7a:0c:
58:9c:7a:e0:48:be:3c:98:6a:39:3e:6d:1c:87:39:28:6c:85:
a9:6d:7e:34:f4:0d:88:c5:fc:ed:52:15:6f:3e:c2:d6:b1:a4:
6b:87:83:bc:69:3c:e9:48:51:62:2a:43:bc:96:67:46:b4:bc:
03:34:c9:d4:85:66:8f:72:e5:13:a8:9f:94:69:08:e3:dd:d1:
65:a5:cc:8c:45:7b:c5:4e:3d:25:9b:c0:f1:f8:24:20:ab:12:
44:e8:5f:a5:0b:02:89:db:62:ba:ef:0b:60:0d:23:94:6f:7e:
94:80:f3:66:d8:1d:40:7d:01:4d:2f:6a:97:76:68:6f:68:70:
4b:75:f4:20:3d:d6:59:5a:6e:a3:e2:2d:20:98:d4:0d:ee:42:
6d:0d:ec:bf:02:ab:18:35:ac:2c:f1:8f:fc:f6:6b:77:fc:fa:
97:ff:d9:ba
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:49 2026 by rpki-client