This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e2034373636.roa File: 3138302e3232332e3234382e302f32312d3234203d3e2034373636.roa (raw, json) Hash identifier: 8fl2p7V3JK+Lctu4jwIX7gCD1C7vgDZQHNMN8THZV+k= Subject key identifier: BF:13:47:7F:5C:85:1D:AD:7F:10:9F:EC:41:BB:32:32:EF:6E:64:2C Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 4DB3D83B9ABF8F411952210D74571081910249F8 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e2034373636.roa Signing time: Tue 20 Jan 2026 02:24:57 +0000 ROA not before: Tue 20 Jan 2026 02:19:57 +0000 ROA not after: Tue 19 Jan 2027 02:24:57 +0000 asID: 4766 IP address blocks: 180.223.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b3:d8:3b:9a:bf:8f:41:19:52:21:0d:74:57:10:81:91:02:49:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:57 2026 GMT Not After : Jan 19 02:24:57 2027 GMT Subject: CN=BF13477F5C851DAD7F109FEC41BB3232EF6E642C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8c:39:ee:1a:b9:a6:f6:68:ba:f5:b4:aa:3e: 08:d7:e9:d0:75:1a:28:8f:7c:cd:19:8c:a8:06:81: 26:c8:3f:fd:69:43:5c:56:19:f8:c3:3a:3e:62:14: 68:4b:8d:9d:ea:ba:01:0a:42:91:cf:61:da:46:a3: cf:c8:cf:8b:9e:67:14:02:8f:80:1e:3a:ca:bf:23: 1d:b8:f8:73:8b:f4:77:f2:78:55:00:7f:28:e0:79: d1:c7:6f:e1:82:74:8e:8b:cc:39:a0:a3:9b:fd:f4: 2f:c3:3d:83:7a:f7:af:56:36:c5:a4:98:5e:99:06: 9f:17:a4:3e:12:a9:e8:1b:57:19:03:c8:51:a7:11: 86:00:3d:12:3d:12:a2:a8:aa:48:9b:0c:91:f9:88: da:03:a0:86:30:54:b7:09:97:16:f4:29:98:06:d0: e4:87:e1:58:a1:a0:a1:19:e0:d0:78:31:35:f7:81: 73:60:9e:5c:7d:71:47:64:0a:43:bd:00:89:fe:06: 99:92:9a:c5:5f:7b:e8:ff:6b:71:ec:3d:63:18:46: 7b:1d:73:c7:a8:24:6a:a3:d3:63:74:a6:38:66:6d: 4d:a1:16:6f:23:92:28:96:37:83:56:22:21:a2:53: eb:a5:4b:c4:c9:a1:96:ae:e6:17:da:82:0c:63:87: f2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:13:47:7F:5C:85:1D:AD:7F:10:9F:EC:41:BB:32:32:EF:6E:64:2C X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e2034373636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.248.0/21 Signature Algorithm: sha256WithRSAEncryption 0e:25:3a:f9:6d:18:93:3a:e3:27:83:8d:1e:8f:df:2d:3e:93: 8b:45:f6:51:62:b9:99:b4:c7:a6:a8:96:8f:82:6b:17:22:c5: 01:53:5d:c3:d7:52:36:54:a8:b6:93:9f:e8:42:46:11:62:c5: 19:9c:46:37:5e:a0:06:dc:e8:f9:ec:1c:14:cd:9a:3b:ed:04: 29:01:75:41:bf:e6:11:24:68:34:d8:e5:b4:54:d8:67:78:ed: 63:49:59:35:b7:f8:5e:91:26:2b:45:75:34:d4:7b:e5:8a:5f: 87:4f:27:08:9e:97:8a:55:70:f7:26:01:ad:7f:9a:08:0e:85: 10:19:5a:be:d3:81:71:14:64:37:66:b5:00:a5:74:28:3a:d5: 0a:2a:38:d6:ce:c4:75:88:a2:57:47:34:f1:b6:d6:c3:c9:8d: 49:b8:d4:7d:96:15:ce:be:65:99:5d:ba:bd:5e:51:68:3e:4d: 11:44:06:40:cb:70:0a:d4:2d:74:fa:ca:3e:87:75:ff:e9:b5: 5c:ff:d7:64:4f:4f:18:db:22:97:9b:55:25:e3:d7:a8:2a:af: 97:6d:f5:73:47:f6:2b:a0:10:1e:99:4e:73:03:d7:d3:18:d0: 40:0a:f8:b6:3d:d2:e0:03:98:7b:96:0e:65:17:c6:36:76:48: a6:02:f5:47 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUTbPYO5q/j0EZUiENdFcQgZECSfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTdaFw0yNzAxMTkwMjI0NTdaMDMxMTAvBgNV BAMTKEJGMTM0NzdGNUM4NTFEQUQ3RjEwOUZFQzQxQkIzMjMyRUY2RTY0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDjDnuGrmm9mi69bSqPgjX6dB1 GiiPfM0ZjKgGgSbIP/1pQ1xWGfjDOj5iFGhLjZ3qugEKQpHPYdpGo8/Iz4ueZxQC j4AeOsq/Ix24+HOL9HfyeFUAfyjgedHHb+GCdI6LzDmgo5v99C/DPYN6969WNsWk mF6ZBp8XpD4SqegbVxkDyFGnEYYAPRI9EqKoqkibDJH5iNoDoIYwVLcJlxb0KZgG 0OSH4VihoKEZ4NB4MTX3gXNgnlx9cUdkCkO9AIn+BpmSmsVfe+j/a3HsPWMYRnsd c8eoJGqj02N0pjhmbU2hFm8jkiiWN4NWIiGiU+ulS8TJoZau5hfaggxjh/KHAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUvxNHf1yFHa1/EJ/sQbsyMu9uZCwwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTE5NTcyMTU5NjkyOS8wLzMxMzgzMDJlMzIz MjMzMmUzMjM0MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNDM3MzYzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA7Tf+DANBgkqhkiG9w0BAQsFAAOCAQEADiU6+W0YkzrjJ4ONHo/fLT6T i0X2UWK5mbTHpqiWj4JrFyLFAVNdw9dSNlSotpOf6EJGEWLFGZxGN16gBtzo+ewc FM2aO+0EKQF1Qb/mESRoNNjltFTYZ3jtY0lZNbf4XpEmK0V1NNR75Ypfh08nCJ6X ilVw9yYBrX+aCA6FEBlavtOBcRRkN2a1AKV0KDrVCio41s7EdYiiV0c08bbWw8mN SbjUfZYVzr5lmV26vV5RaD5NEUQGQMtwCtQtdPrKPod1/+m1XP/XZE9PGNsil5tV JePXqCqvl231c0f2K6AQHplOcwPX0xjQQAr4tj3S4AOYe5YOZRfGNnZIpgL1Rw== -----END CERTIFICATE-----Generated at Wed Jan 21 14:13:42 2026 by rpki-client