This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e20333938373034.roa File: 3138302e3232332e3234382e302f32312d3234203d3e20333938373034.roa (raw, json) Hash identifier: ml1E7Xj9ezx0LdmC2PQjWHz3Amzs8aD9G2tXodSC0/g= Subject key identifier: 24:00:67:E9:A0:FD:D9:CE:96:AA:E3:49:23:9D:FD:05:00:86:9A:36 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 43D0432871D1D08C5EF5576F56D8C3F9511385BE Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e20333938373034.roa Signing time: Tue 20 Jan 2026 02:24:54 +0000 ROA not before: Tue 20 Jan 2026 02:19:54 +0000 ROA not after: Tue 19 Jan 2027 02:24:54 +0000 asID: 398704 IP address blocks: 180.223.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d0:43:28:71:d1:d0:8c:5e:f5:57:6f:56:d8:c3:f9:51:13:85:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:54 2026 GMT Not After : Jan 19 02:24:54 2027 GMT Subject: CN=240067E9A0FDD9CE96AAE349239DFD0500869A36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:0f:07:9e:49:a5:7a:ed:a1:1b:45:d4:f0: 81:3c:b0:0b:91:64:23:76:9b:21:61:77:ed:e7:56: 62:60:82:2e:e0:9c:a0:f4:89:06:c4:2a:ec:62:65: 37:28:87:f4:0b:cd:9f:5e:f6:d8:5c:0a:ab:ef:0c: c6:a3:60:68:c7:ed:59:f1:a4:11:cb:f8:31:1e:9d: 93:8e:73:d7:a3:58:b7:51:48:ff:b2:a5:11:89:be: 6d:c9:36:14:2a:a3:8b:f9:7a:c1:99:07:fe:69:37: 00:49:1e:aa:13:a0:88:3a:f6:e8:a1:7c:2a:b5:07: 12:b6:67:66:f6:64:24:25:b3:fc:15:30:3a:1a:31: 9f:0e:38:b0:68:a8:ed:b2:20:45:4f:a3:a3:69:e0: 48:d8:ff:29:6b:d6:39:e8:47:4f:0e:2a:ad:a2:61: 5b:f3:c9:17:30:b9:76:4f:b4:f7:a4:38:2f:9e:4e: f4:c9:15:08:7a:8e:8d:29:15:e2:f9:74:a5:a1:9b: d7:fd:20:79:97:dd:27:fd:ca:8a:bd:e5:d4:92:74: f0:31:77:ed:11:d0:11:af:91:76:5d:b4:cb:23:84: 5c:04:bd:22:ff:8a:60:cb:fb:ac:2d:e0:9b:c9:eb: 9c:73:6a:ce:e6:fa:07:d6:43:71:52:92:17:28:e9: fa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:00:67:E9:A0:FD:D9:CE:96:AA:E3:49:23:9D:FD:05:00:86:9A:36 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e20333938373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.248.0/21 Signature Algorithm: sha256WithRSAEncryption 10:ad:97:4b:10:98:49:d5:be:49:4a:07:8c:a4:cd:51:ba:21: dc:8c:0b:17:45:f0:58:91:2f:24:93:2b:2a:a5:40:77:1b:10: f1:8d:17:85:15:39:fd:b4:3a:ae:09:11:22:c6:a5:90:0f:fc: 08:07:e7:7f:9c:93:88:83:f9:4c:45:fe:d0:27:38:61:bb:3e: 69:a1:89:40:e7:07:99:51:78:10:4a:51:fe:f3:00:7f:ff:d7: d6:86:95:a1:54:d4:74:9a:e7:49:77:7f:09:4b:5e:27:1e:04: a1:9f:01:54:b5:11:45:d4:b7:c6:e3:b7:0f:65:a5:d6:6a:c3: 76:e2:24:1d:5b:02:ac:2b:ca:31:c1:18:dc:cc:9c:b2:55:b8: 46:f1:05:16:fb:9a:47:8d:9a:20:4b:45:3b:fa:86:cb:c4:cc: 08:ce:75:76:a1:e8:c4:0d:a4:99:62:ad:76:a0:9b:8d:d3:79: 1f:d9:d7:36:93:1b:e2:af:c0:dd:bb:ea:9d:c9:2e:3f:25:8e: 40:6a:5a:ec:d9:07:13:d3:77:fc:48:f9:51:de:1a:53:3f:28: 88:a6:1b:52:25:a0:94:cf:5f:9e:e5:13:64:4e:9e:29:9d:7f: 56:50:6e:52:94:63:43:e4:0f:2f:b7:ad:7f:ed:58:96:81:03: c1:94:88:8f -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUQ9BDKHHR0Ixe9VdvVtjD+VEThb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTRaFw0yNzAxMTkwMjI0NTRaMDMxMTAvBgNV BAMTKDI0MDA2N0U5QTBGREQ5Q0U5NkFBRTM0OTIzOURGRDA1MDA4NjlBMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFg8Hnkmleu2hG0XU8IE8sAuR ZCN2myFhd+3nVmJggi7gnKD0iQbEKuxiZTcoh/QLzZ9e9thcCqvvDMajYGjH7Vnx pBHL+DEenZOOc9ejWLdRSP+ypRGJvm3JNhQqo4v5esGZB/5pNwBJHqoToIg69uih fCq1BxK2Z2b2ZCQls/wVMDoaMZ8OOLBoqO2yIEVPo6Np4EjY/ylr1jnoR08OKq2i YVvzyRcwuXZPtPekOC+eTvTJFQh6jo0pFeL5dKWhm9f9IHmX3Sf9yoq95dSSdPAx d+0R0BGvkXZdtMsjhFwEvSL/imDL+6wt4JvJ65xzas7m+gfWQ3FSkhco6fpPAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUJABn6aD92c6WquNJI539BQCGmjYwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUz MjMyMzMyZTMyMzQzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMzMzkzODM3MzAz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA7Tf+DANBgkqhkiG9w0BAQsFAAOCAQEAEK2XSxCYSdW+SUoH jKTNUboh3IwLF0XwWJEvJJMrKqVAdxsQ8Y0XhRU5/bQ6rgkRIsalkA/8CAfnf5yT iIP5TEX+0Cc4Ybs+aaGJQOcHmVF4EEpR/vMAf//X1oaVoVTUdJrnSXd/CUteJx4E oZ8BVLURRdS3xuO3D2Wl1mrDduIkHVsCrCvKMcEY3MycslW4RvEFFvuaR42aIEtF O/qGy8TMCM51dqHoxA2kmWKtdqCbjdN5H9nXNpMb4q/A3bvqnckuPyWOQGpa7NkH E9N3/Ej5Ud4aUz8oiKYbUiWglM9fnuUTZE6eKZ1/VlBuUpRjQ+QPL7etf+1YloED wZSIjw== -----END CERTIFICATE-----Generated at Wed Jan 21 14:14:48 2026 by rpki-client