This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e33322e302f32312d3234203d3e2036303739.roa File: 3138302e3232332e33322e302f32312d3234203d3e2036303739.roa (raw, json) Hash identifier: 79ii6ofHWHu62y+MTuI/hm29+8023VALeUViBIXws74= Subject key identifier: C4:F4:C9:4E:9D:C3:97:B0:04:7E:37:A8:6A:66:6B:75:8A:65:5B:2E Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 49F47E657C42E3B577E4566A3F4E78BB33CB5BAF Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e33322e302f32312d3234203d3e2036303739.roa Signing time: Tue 20 Jan 2026 02:24:55 +0000 ROA not before: Tue 20 Jan 2026 02:19:55 +0000 ROA not after: Tue 19 Jan 2027 02:24:55 +0000 asID: 6079 IP address blocks: 180.223.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f4:7e:65:7c:42:e3:b5:77:e4:56:6a:3f:4e:78:bb:33:cb:5b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:55 2026 GMT Not After : Jan 19 02:24:55 2027 GMT Subject: CN=C4F4C94E9DC397B0047E37A86A666B758A655B2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:6b:1f:fc:49:b7:10:7a:f5:b7:d8:1d:c3: a8:e6:76:14:d1:c4:f3:cf:1d:99:35:42:c9:ea:94: 04:e5:d3:ef:be:1b:a0:93:ad:2f:38:b2:cb:19:e1: c4:1d:6b:5f:d6:8d:a2:39:a4:26:c7:9c:fe:60:ed: a9:1f:d0:33:c3:7e:e2:ce:1f:39:b1:1b:89:64:1f: 37:c9:d8:ba:e1:05:3e:37:9a:79:7c:1c:52:16:19: fb:ae:0d:31:0c:bd:51:25:86:1d:45:b1:0c:52:5a: 0d:45:e2:32:77:ab:11:8b:ee:57:26:94:a9:8f:6c: b2:58:57:27:0f:ee:5e:61:ab:1f:e3:8b:4b:b0:8a: c0:cc:f3:32:e4:71:b5:9e:ad:9a:f0:d0:96:c5:14: d7:0e:7d:b9:3d:95:88:52:00:67:62:ff:34:92:15: aa:83:8e:93:39:71:15:f5:d1:cf:eb:2e:9d:00:a0: d2:22:e3:60:42:22:55:99:fe:ec:a2:d6:ef:71:cf: cb:eb:84:b2:93:28:6a:72:3a:f4:4a:12:fa:9a:16: 67:28:e3:a1:81:98:42:e0:62:3c:23:3e:76:45:e3: 30:dd:4a:7a:55:c2:ed:a0:74:7d:8d:31:be:5d:7d: 8e:11:ab:c6:b5:ba:fb:eb:26:9e:d0:29:ba:9a:d5: 14:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F4:C9:4E:9D:C3:97:B0:04:7E:37:A8:6A:66:6B:75:8A:65:5B:2E X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e33322e302f32312d3234203d3e2036303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.32.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:e6:1f:c7:23:2a:50:65:a0:f0:e3:04:2d:87:fc:36:98:dd: ce:2f:eb:a0:a7:e3:34:0d:c1:9c:7c:e8:79:af:d9:4b:1f:c8: ff:52:1a:b6:0b:c4:9f:b0:74:6c:13:e5:d4:c9:30:ac:bb:40: 9e:d2:05:e1:e4:16:34:0b:a1:61:41:b2:e7:37:d6:67:05:21: 8e:06:41:a9:39:29:81:c6:7e:ab:e4:93:41:9b:a0:e9:dd:2c: 07:93:c7:e6:f6:c6:70:0f:02:5c:c5:36:ce:15:0c:27:cf:1c: d5:fd:f0:31:0e:da:8b:c4:13:b8:f7:95:f2:15:29:bb:63:f3: 90:2c:26:fd:02:37:b5:61:12:fe:9b:0c:7d:5d:e1:e4:26:74: 23:eb:c8:6f:07:6f:1f:17:26:21:dc:1d:52:ad:87:0f:6f:c1: 69:d6:52:35:9e:1f:db:d3:ca:a6:87:25:a3:9c:44:3e:d9:73: 59:99:e2:79:e4:17:76:ce:c3:e8:7b:14:78:bb:cd:4c:ab:4e: d7:47:93:57:22:08:ff:ed:9b:77:13:3d:08:df:17:65:a0:be: 3a:aa:4c:1d:f4:d7:e3:7e:17:e0:68:cf:98:55:6e:83:34:52: 1e:a8:cf:11:e5:ba:81:5b:07:79:b2:08:4b:6f:91:71:6a:69: 4e:8e:49:da -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUSfR+ZXxC47V35FZqP054uzPLW68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTVaFw0yNzAxMTkwMjI0NTVaMDMxMTAvBgNV BAMTKEM0RjRDOTRFOURDMzk3QjAwNDdFMzdBODZBNjY2Qjc1OEE2NTVCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8sWsf/Em3EHr1t9gdw6jmdhTR xPPPHZk1QsnqlATl0+++G6CTrS84sssZ4cQda1/WjaI5pCbHnP5g7akf0DPDfuLO HzmxG4lkHzfJ2LrhBT43mnl8HFIWGfuuDTEMvVElhh1FsQxSWg1F4jJ3qxGL7lcm lKmPbLJYVycP7l5hqx/ji0uwisDM8zLkcbWerZrw0JbFFNcOfbk9lYhSAGdi/zSS FaqDjpM5cRX10c/rLp0AoNIi42BCIlWZ/uyi1u9xz8vrhLKTKGpyOvRKEvqaFmco 46GBmELgYjwjPnZF4zDdSnpVwu2gdH2NMb5dfY4Rq8a1uvvrJp7QKbqa1RTNAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUxPTJTp3Dl7AEfjeoamZrdYplWy4wHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy MzMyZTMzMzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNjMwMzczOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfIDANBgkqhkiG9w0BAQsFAAOCAQEAO+YfxyMqUGWg8OMELYf8Npjdzi/r oKfjNA3BnHzoea/ZSx/I/1IatgvEn7B0bBPl1MkwrLtAntIF4eQWNAuhYUGy5zfW ZwUhjgZBqTkpgcZ+q+STQZug6d0sB5PH5vbGcA8CXMU2zhUMJ88c1f3wMQ7ai8QT uPeV8hUpu2PzkCwm/QI3tWES/psMfV3h5CZ0I+vIbwdvHxcmIdwdUq2HD2/BadZS NZ4f29PKpoclo5xEPtlzWZnieeQXds7D6HsUeLvNTKtO10eTVyII/+2bdxM9CN8X ZaC+OqpMHfTX434X4GjPmFVugzRSHqjPEeW6gVsHebIIS2+RcWppTo5J2g== -----END CERTIFICATE-----Generated at Wed Jan 21 14:13:43 2026 by rpki-client