This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e33322e302f32312d3234203d3e2032393134.roa
File: 3138302e3232332e33322e302f32312d3234203d3e2032393134.roa (raw, json)
Hash identifier: DWqLlB6oBO2t/pjZ3V5h8Fo18rtX864RyTzjmtiGN50=
Subject key identifier: 7E:8C:83:0C:F1:61:A0:A5:A0:8E:F2:EF:AD:FB:48:52:AB:DC:21:52
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 653A93D0CB2CF335A23E7F57B66FF0B0ECAC3522
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e33322e302f32312d3234203d3e2032393134.roa
Signing time: Tue 20 Jan 2026 02:24:55 +0000
ROA not before: Tue 20 Jan 2026 02:19:55 +0000
ROA not after: Tue 19 Jan 2027 02:24:55 +0000
asID: 2914
IP address blocks: 180.223.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3a:93:d0:cb:2c:f3:35:a2:3e:7f:57:b6:6f:f0:b0:ec:ac:35:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:55 2026 GMT
Not After : Jan 19 02:24:55 2027 GMT
Subject: CN=7E8C830CF161A0A5A08EF2EFADFB4852ABDC2152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:ef:c0:4e:36:51:20:b4:57:61:f3:b5:66:
c9:14:0a:ad:c8:aa:8d:aa:8e:f1:65:b1:b0:be:e7:
58:b2:96:89:6e:35:c9:de:81:f2:b6:7f:b6:bd:23:
d8:89:94:90:f7:e0:3a:9b:5d:a1:57:6c:e6:49:60:
9d:06:1b:00:fa:49:cd:f5:e3:26:b8:0d:2e:67:a3:
b3:92:fc:e3:9a:d6:2b:cd:95:1e:06:1e:cf:99:70:
5a:48:58:0b:8e:bb:ed:70:1c:bd:d3:96:8d:98:50:
70:39:28:d8:64:df:0a:c9:2a:be:01:5f:53:51:c0:
0a:91:31:a1:29:48:84:3e:87:e6:cc:93:0e:67:f4:
46:a5:03:f1:8e:77:13:cd:e5:15:e0:61:7a:a8:fd:
78:be:a6:58:a4:43:23:86:74:73:f1:73:6f:0f:e2:
2b:9d:88:5c:2a:ce:d4:8d:6d:28:1d:5e:88:26:d3:
74:92:e9:5f:11:4e:dd:f4:d6:6a:ef:27:0a:b4:7f:
3b:d8:7f:f0:1f:d9:bf:35:49:90:71:f1:66:13:1f:
94:c1:2a:7d:04:88:1e:ba:26:bc:d2:82:88:d2:aa:
15:a9:23:f9:54:52:f9:ab:68:af:16:05:57:c0:18:
da:37:0e:04:75:e3:d4:e4:05:71:f3:ae:40:0e:f8:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8C:83:0C:F1:61:A0:A5:A0:8E:F2:EF:AD:FB:48:52:AB:DC:21:52
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e33322e302f32312d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.32.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:a9:66:c2:f4:33:79:5a:ef:63:91:b7:fa:93:c1:78:27:79:
0b:97:e1:e3:cd:9d:ec:6b:13:54:d9:6a:92:e1:3d:ce:b0:d2:
36:81:f8:68:88:1f:bf:5f:97:82:2a:8b:df:ff:48:34:86:6a:
d6:da:24:e7:ff:ae:1f:61:3f:87:98:85:04:4f:ba:61:e2:a6:
06:66:93:75:33:88:ff:26:a8:88:b1:4e:69:90:c4:28:cb:55:
e3:86:b8:3a:48:89:a4:78:55:76:a7:91:0a:fe:cd:db:6c:a5:
f9:8f:3f:4a:17:e6:2a:9e:2d:fd:c0:8e:94:9f:85:ff:a1:94:
43:08:f1:76:0c:4c:08:e3:87:5a:60:76:f0:11:00:f9:e1:98:
bd:f1:53:c2:f4:63:9e:1e:06:18:25:ca:17:d2:ca:30:67:bf:
90:c4:f3:41:4f:8d:90:0c:1f:cd:12:2c:4a:a1:eb:9e:ef:cd:
82:88:ed:8f:09:ab:d3:cf:87:3a:df:9b:be:0d:f2:ae:c8:c3:
7c:0d:34:d0:94:1c:65:f4:dd:ac:42:72:98:ee:3c:0c:c3:c6:
f8:b1:f0:c4:e9:01:6b:dd:dd:2a:9b:7c:67:21:fb:70:d0:7a:
8e:29:87:c9:f4:8c:f8:91:1f:0c:4a:bc:b5:3a:06:77:a7:f2:
83:49:27:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:27 2026 by rpki-client