This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e2037303138.roa File: 3138302e3232332e3234382e302f32312d3234203d3e2037303138.roa (raw, json) Hash identifier: qGXelPvcG87ogDT/djL+72fENympqyeqDjrjWUGLP0E= Subject key identifier: 5A:4C:E2:93:B3:0A:46:62:68:F3:91:85:64:7C:21:9C:97:7C:B6:5D Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 3236D6C360497809AAC2DEAA04C32F4ED0A48F8B Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e2037303138.roa Signing time: Tue 20 Jan 2026 02:24:53 +0000 ROA not before: Tue 20 Jan 2026 02:19:53 +0000 ROA not after: Tue 19 Jan 2027 02:24:53 +0000 asID: 7018 IP address blocks: 180.223.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:36:d6:c3:60:49:78:09:aa:c2:de:aa:04:c3:2f:4e:d0:a4:8f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:53 2026 GMT Not After : Jan 19 02:24:53 2027 GMT Subject: CN=5A4CE293B30A466268F39185647C219C977CB65D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:ab:1b:52:ca:ac:d8:93:e9:39:b5:fd:0d: be:62:8e:1d:35:8e:45:6a:cb:fe:eb:68:d8:7f:e3: 53:81:18:ea:bd:79:78:52:4c:99:53:7d:bb:1d:9a: 20:5a:78:b4:06:4e:84:f4:22:6d:a9:9a:2d:b7:58: 8e:16:2c:06:90:14:b6:5c:62:1a:da:d9:e7:6d:d2: 73:90:fa:0b:bf:c5:08:f7:90:d9:1c:85:d6:da:35: a7:9e:fd:8f:7a:a7:0a:14:68:11:8a:fd:82:d4:fb: 62:7f:85:d2:7b:e1:86:1c:52:8d:7a:a9:8d:a8:81: 9f:60:4e:d5:81:4c:b2:8e:ff:04:a2:c0:7f:18:54: f8:d2:46:67:c5:4c:93:2b:75:87:63:9d:65:3f:20: dd:b3:98:5e:70:8a:35:65:49:e1:c7:41:e5:a3:76: 81:9d:4a:7f:e4:26:bd:23:2f:ee:76:b7:19:ce:6b: 7d:68:69:e2:54:88:00:80:36:e2:24:88:1f:ef:08: d0:cf:38:22:b7:db:d5:f2:d2:9f:94:3f:97:a5:a5: e6:51:73:b8:d2:51:6d:c9:9e:81:15:0e:9c:b2:e8: be:b7:ce:75:72:5f:4a:9d:af:c0:70:20:14:90:e8: 36:c8:1a:4f:08:82:a8:60:3a:34:d6:81:52:98:bd: 3f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4C:E2:93:B3:0A:46:62:68:F3:91:85:64:7C:21:9C:97:7C:B6:5D X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.248.0/21 Signature Algorithm: sha256WithRSAEncryption 69:13:cb:f8:81:cd:85:b0:65:a5:3f:e3:6a:f4:a7:7b:00:21: 9f:88:6d:70:8c:95:fa:37:08:2b:a8:5a:ba:51:1d:e4:77:f6: 62:cc:5d:94:a8:a8:bb:17:4c:de:ee:97:39:c8:79:02:e3:14: dd:2d:66:70:b4:29:9d:25:76:af:fb:60:a6:06:8a:08:51:8d: cb:34:af:ee:a8:95:43:92:bb:5b:24:fa:4f:7d:0e:14:31:36: 41:90:c0:b5:fd:54:8b:99:86:14:2b:ec:35:4c:b8:34:e8:83: 0a:61:88:db:58:c6:6d:e5:14:21:ba:ab:dd:ee:d7:15:bf:0a: ef:e6:be:db:9c:48:09:75:2c:98:0c:05:a1:93:c2:36:3d:6d: 2f:d2:7f:5d:59:88:7a:af:b1:a1:be:74:19:d2:66:1c:17:4f: c8:0a:3f:8f:e4:d6:59:fe:bb:6e:ce:7a:d5:eb:1c:92:52:ed: d1:d5:62:24:92:ef:84:f7:37:4c:85:58:61:c5:b2:0e:e7:1a: 2d:d0:6b:51:11:b8:f0:12:5d:2e:88:ef:30:e1:17:c3:d7:45: ee:ea:12:ef:8a:dd:12:e1:dd:ea:3c:76:99:06:cf:65:bd:11: 3e:b9:bc:0e:29:d3:87:23:17:01:c4:64:0b:fd:78:b0:6d:fe: 5c:f7:cd:a9 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUMjbWw2BJeAmqwt6qBMMvTtCkj4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTNaFw0yNzAxMTkwMjI0NTNaMDMxMTAvBgNV BAMTKDVBNENFMjkzQjMwQTQ2NjI2OEYzOTE4NTY0N0MyMTlDOTc3Q0I2NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1RKsbUsqs2JPpObX9Db5ijh01 jkVqy/7raNh/41OBGOq9eXhSTJlTfbsdmiBaeLQGToT0Im2pmi23WI4WLAaQFLZc Yhra2edt0nOQ+gu/xQj3kNkchdbaNaee/Y96pwoUaBGK/YLU+2J/hdJ74YYcUo16 qY2ogZ9gTtWBTLKO/wSiwH8YVPjSRmfFTJMrdYdjnWU/IN2zmF5wijVlSeHHQeWj doGdSn/kJr0jL+52txnOa31oaeJUiACANuIkiB/vCNDPOCK329Xy0p+UP5elpeZR c7jSUW3JnoEVDpyy6L63znVyX0qdr8BwIBSQ6DbIGk8IgqhgOjTWgVKYvT/3AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUWkzik7MKRmJo85GFZHwhnJd8tl0wHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTE5NTcyMTU5NjkyOS8wLzMxMzgzMDJlMzIz MjMzMmUzMjM0MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNzMwMzEzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA7Tf+DANBgkqhkiG9w0BAQsFAAOCAQEAaRPL+IHNhbBlpT/javSnewAh n4htcIyV+jcIK6haulEd5Hf2YsxdlKiouxdM3u6XOch5AuMU3S1mcLQpnSV2r/tg pgaKCFGNyzSv7qiVQ5K7WyT6T30OFDE2QZDAtf1Ui5mGFCvsNUy4NOiDCmGI21jG beUUIbqr3e7XFb8K7+a+25xICXUsmAwFoZPCNj1tL9J/XVmIeq+xob50GdJmHBdP yAo/j+TWWf67bs561escklLt0dViJJLvhPc3TIVYYcWyDucaLdBrURG48BJdLojv MOEXw9dF7uoS74rdEuHd6jx2mQbPZb0RPrm8DinThyMXAcRkC/14sG3+XPfNqQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:13:48 2026 by rpki-client