This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e33322e302f32312d3234203d3e2034353135.roa File: 3138302e3232332e33322e302f32312d3234203d3e2034353135.roa (raw, json) Hash identifier: HznROOZleIbkjWjecyFFQ04dhfiyw6f5D4M8MY51FI8= Subject key identifier: 75:B8:00:5E:B7:8B:F4:E8:C6:33:F9:39:7D:73:93:BC:83:9D:ED:C5 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 1718C40AD86073C400424F3B85287EE74D098773 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e33322e302f32312d3234203d3e2034353135.roa Signing time: Tue 20 Jan 2026 02:24:53 +0000 ROA not before: Tue 20 Jan 2026 02:19:53 +0000 ROA not after: Tue 19 Jan 2027 02:24:53 +0000 asID: 4515 IP address blocks: 180.223.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:18:c4:0a:d8:60:73:c4:00:42:4f:3b:85:28:7e:e7:4d:09:87:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:53 2026 GMT Not After : Jan 19 02:24:53 2027 GMT Subject: CN=75B8005EB78BF4E8C633F9397D7393BC839DEDC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3b:26:2d:b2:d8:09:08:cd:99:f8:1b:b5:2a: 5b:b1:bf:68:05:b9:e4:c6:c5:ab:6e:1a:54:5e:23: 1d:21:d2:cf:95:47:ca:92:77:25:e7:52:39:7c:de: 6b:09:95:d0:f8:9a:89:bf:2d:a0:7b:a5:a4:3b:e0: d7:7c:1b:9a:74:74:c2:61:ad:e2:87:0c:3f:f5:2d: ac:a3:f2:38:17:4d:f1:7a:2f:97:c6:26:69:2a:f4: 12:87:88:80:2c:26:f0:19:83:69:36:6e:87:d1:18: 14:39:54:f1:3e:06:1f:18:1a:2f:00:e5:dc:4b:c9: e9:14:7b:3d:d6:58:62:d8:1d:b1:dc:bb:40:29:50: f8:69:a9:7e:87:bd:c8:b2:60:6e:9f:fa:0b:76:c9: 3e:c5:82:45:29:07:4e:3e:35:12:34:06:59:08:cc: 7b:a2:2f:d2:d5:03:d3:df:fb:6d:b1:8d:c1:8d:5e: 37:4e:cb:de:1f:1f:ad:bd:32:9c:26:1e:60:fc:68: 56:a7:93:cf:57:1c:83:4c:8b:8d:87:bd:82:1c:c6: b3:38:00:c8:ab:4e:f3:23:e3:6a:e7:06:50:ff:f6: 1c:25:e2:f5:c2:1c:77:19:d4:bf:1b:1c:d6:7d:4c: 2f:d1:e4:43:ad:c9:4b:7b:73:4f:03:04:6c:8f:09: f0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B8:00:5E:B7:8B:F4:E8:C6:33:F9:39:7D:73:93:BC:83:9D:ED:C5 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e33322e302f32312d3234203d3e2034353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.32.0/21 Signature Algorithm: sha256WithRSAEncryption 23:a4:23:c3:63:de:37:50:ba:58:f4:45:ff:93:b0:53:97:91: 52:56:34:2a:79:3e:db:39:81:e4:27:d1:95:47:9b:c3:60:4b: 45:e2:2e:de:93:b7:b0:3e:3d:0d:4d:74:5a:6d:8a:43:ef:a0: 24:12:24:bc:ed:be:89:dc:ec:0d:1d:ef:cc:36:93:5f:da:ed: 6c:f2:1a:e8:2c:da:69:09:66:97:9d:73:a5:11:84:e1:4c:da: ea:ab:2d:a9:9a:d1:4c:35:78:3b:57:0b:fd:49:74:6e:04:72: 4c:78:7d:3e:11:89:e7:42:54:b2:3d:47:6f:e2:57:b6:7e:ce: 47:c1:31:bc:7d:9b:f8:4e:9f:3d:74:d3:ed:d1:96:3b:2e:a9: ed:7d:fe:35:be:f4:fc:25:34:5f:2e:df:11:41:f8:cd:cd:1e: 7f:9c:d5:b5:a4:3d:27:64:ac:f9:4a:20:7d:f4:69:53:7f:89: ae:98:ba:63:46:4f:48:2d:7a:61:77:16:de:af:fc:17:ab:19: b6:9e:46:75:74:a4:12:b4:6c:45:4a:bf:6b:39:d9:e4:5a:f6: 5b:ac:8a:28:3d:07:77:1c:30:5f:20:3e:9a:b9:38:a7:7f:7d: fa:bb:c3:c1:bf:64:7a:0d:af:47:a4:f8:b7:51:af:bd:cc:f9: 63:87:ff:4f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUFxjECthgc8QAQk87hSh+500Jh3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTNaFw0yNzAxMTkwMjI0NTNaMDMxMTAvBgNV BAMTKDc1QjgwMDVFQjc4QkY0RThDNjMzRjkzOTdENzM5M0JDODM5REVEQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxOyYtstgJCM2Z+Bu1Kluxv2gF ueTGxatuGlReIx0h0s+VR8qSdyXnUjl83msJldD4mom/LaB7paQ74Nd8G5p0dMJh reKHDD/1Layj8jgXTfF6L5fGJmkq9BKHiIAsJvAZg2k2bofRGBQ5VPE+Bh8YGi8A 5dxLyekUez3WWGLYHbHcu0ApUPhpqX6HvciyYG6f+gt2yT7FgkUpB04+NRI0BlkI zHuiL9LVA9Pf+22xjcGNXjdOy94fH629MpwmHmD8aFank89XHINMi42HvYIcxrM4 AMirTvMj42rnBlD/9hwl4vXCHHcZ1L8bHNZ9TC/R5EOtyUt7c08DBGyPCfARAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUdbgAXreL9OjGM/k5fXOTvIOd7cUwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy MzMyZTMzMzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNDM1MzEzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfIDANBgkqhkiG9w0BAQsFAAOCAQEAI6Qjw2PeN1C6WPRF/5OwU5eRUlY0 Knk+2zmB5CfRlUebw2BLReIu3pO3sD49DU10Wm2KQ++gJBIkvO2+idzsDR3vzDaT X9rtbPIa6CzaaQlml51zpRGE4Uza6qstqZrRTDV4O1cL/Ul0bgRyTHh9PhGJ50JU sj1Hb+JXtn7OR8ExvH2b+E6fPXTT7dGWOy6p7X3+Nb70/CU0Xy7fEUH4zc0ef5zV taQ9J2Ss+UogffRpU3+Jrpi6Y0ZPSC16YXcW3q/8F6sZtp5GdXSkErRsRUq/aznZ 5Fr2W6yKKD0HdxwwXyA+mrk4p399+rvDwb9keg2vR6T4t1Gvvcz5Y4f/Tw== -----END CERTIFICATE-----Generated at Wed Jan 21 14:13:43 2026 by rpki-client