This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e2032393134.roa
File: 3138302e3232332e36342e302f31382d3234203d3e2032393134.roa (raw, json)
Hash identifier: ojeirpikaax28pp1ooeFlXb+tTRGHlflMzZMcEKM4N8=
Subject key identifier: 29:5A:37:C1:08:93:AD:D3:6F:E0:F8:26:D6:CD:14:D4:CA:41:A0:12
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 1198D3AB877E4345D2125B0B3E521D47BFB1A1DB
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e2032393134.roa
Signing time: Tue 20 Jan 2026 02:24:54 +0000
ROA not before: Tue 20 Jan 2026 02:19:54 +0000
ROA not after: Tue 19 Jan 2027 02:24:54 +0000
asID: 2914
IP address blocks: 180.223.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:98:d3:ab:87:7e:43:45:d2:12:5b:0b:3e:52:1d:47:bf:b1:a1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:54 2026 GMT
Not After : Jan 19 02:24:54 2027 GMT
Subject: CN=295A37C10893ADD36FE0F826D6CD14D4CA41A012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:12:24:6e:50:0d:f3:2c:f4:cd:aa:be:b8:
ba:03:20:93:d7:4a:8b:6b:cb:62:52:5e:87:37:41:
c3:ea:5f:8e:05:12:d6:8b:05:7d:cf:4a:45:c1:04:
52:e2:e5:7b:55:3a:94:74:8e:04:c1:44:bd:67:f4:
65:51:a5:0e:66:39:cd:1a:c9:e6:f3:c5:ff:bc:12:
4a:2b:84:c2:6c:fd:0a:fa:48:48:9a:20:4c:17:7e:
65:3d:f6:64:a7:c3:a6:71:64:63:79:a0:b9:da:be:
22:f5:f9:26:68:73:87:45:17:72:c7:96:8a:fc:e5:
95:3a:27:85:25:82:29:b0:61:ab:1d:67:f7:eb:86:
5b:cb:f9:11:3a:ab:98:fc:3e:ed:f9:f3:14:2a:46:
31:27:1c:25:48:41:5a:0f:3b:01:78:93:3a:78:07:
86:3b:f5:7f:da:99:97:39:a3:4d:2b:c4:4e:4d:11:
e6:72:34:a1:cc:2c:83:e7:68:ec:04:64:9b:29:c5:
fa:12:46:6b:62:6f:64:94:cc:ae:e1:7f:82:92:ee:
25:c7:90:8f:d2:fa:3c:cb:0f:03:26:43:32:86:ed:
be:22:91:73:7d:bd:e8:6b:0e:c5:62:57:ca:7c:06:
8b:7a:f3:1f:85:6a:32:03:5e:92:fe:40:3a:fe:60:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5A:37:C1:08:93:AD:D3:6F:E0:F8:26:D6:CD:14:D4:CA:41:A0:12
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9d:28:33:f1:c4:13:a9:f2:cb:e4:f0:75:54:77:6d:f4:1b:01:
49:a8:4a:dc:33:aa:0e:1a:4f:5a:52:36:bd:ce:3b:42:e5:e6:
44:d3:8b:fb:0f:ec:cd:fc:57:57:37:3b:79:ad:f2:36:63:18:
0e:1d:2c:0c:e9:90:09:6b:83:b7:8c:e8:12:8c:e6:6c:e3:c3:
c4:e1:e4:3e:b5:17:35:37:74:89:57:c6:d8:76:fa:80:71:cf:
3b:9d:2e:2c:e3:5a:9b:fc:fd:9b:f5:4a:ed:47:83:63:2b:b9:
db:42:d2:1d:e2:5e:78:ab:15:39:55:fc:ab:c8:74:cb:ed:77:
dd:4e:84:2a:81:fe:21:36:d6:e6:11:1c:48:cb:29:f9:de:c8:
a2:fa:d2:de:6e:44:c2:f8:b2:59:6b:ae:a2:b9:e8:e6:f7:2c:
76:20:55:51:9f:33:4e:bc:a2:ff:43:bc:a9:c8:05:8d:70:a5:
c0:80:23:22:0e:f0:be:9a:18:a2:60:62:b2:5e:7a:f9:8e:ab:
56:b5:0a:de:18:82:5f:c7:5c:91:f3:15:2c:f2:3a:1d:05:9b:
b2:31:83:73:7a:99:3b:8c:e1:32:03:e7:27:05:62:5e:ef:d5:
fa:51:84:35:70:ca:1a:80:b6:19:bc:bd:0c:24:e1:27:d3:b0:
a7:6e:ba:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:12:47 2026 by rpki-client