This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e2034353135.roa File: 3138302e3232332e36342e302f31382d3234203d3e2034353135.roa (raw, json) Hash identifier: 2cOPOTHt6Bc7H7LR8I+kCJVpswLNls4Zh05Sc1p/oqc= Subject key identifier: 73:DB:A7:5D:09:D0:45:28:A5:46:B3:2E:D4:0B:F6:11:1B:D5:7C:46 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 3929E61EC5843BCEE996AB8E3479386ED43C1831 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e2034353135.roa Signing time: Tue 20 Jan 2026 02:24:57 +0000 ROA not before: Tue 20 Jan 2026 02:19:57 +0000 ROA not after: Tue 19 Jan 2027 02:24:57 +0000 asID: 4515 IP address blocks: 180.223.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:29:e6:1e:c5:84:3b:ce:e9:96:ab:8e:34:79:38:6e:d4:3c:18:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:57 2026 GMT Not After : Jan 19 02:24:57 2027 GMT Subject: CN=73DBA75D09D04528A546B32ED40BF6111BD57C46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:56:ff:db:3e:56:60:02:19:d2:5f:e8:06: d4:2a:6d:55:27:ae:b7:a4:43:c1:45:89:f6:c7:2a: ad:ba:28:5a:84:a3:68:ed:7c:21:aa:24:32:1c:3e: 96:2d:83:86:b4:3c:32:2e:13:6f:32:f6:ea:a4:e0: 90:1e:62:c9:0c:a3:c7:24:d5:ca:7d:bc:6a:93:5f: 77:1c:6a:a5:d4:72:6e:aa:ef:bb:1f:ac:e0:b1:30: 13:28:f3:1a:dd:75:de:43:d9:fd:dc:6f:3d:6d:6b: 1e:f0:09:48:2a:1e:42:c5:fa:e7:ff:2b:f8:9a:9f: 63:d4:44:b3:a1:bd:9b:2d:9a:4b:a5:1d:15:6a:d6: 55:ee:24:48:ff:2c:a1:f3:19:0a:16:b3:95:0e:87: 0e:11:98:df:3d:5a:3c:ec:7f:1c:90:68:aa:49:e0: 54:2d:f8:a6:a4:fa:82:c0:6c:45:79:ea:cc:33:d1: 57:30:cc:d8:3e:db:7d:b3:82:ee:9b:7c:6f:66:23: 57:be:5d:0a:0a:f9:3a:05:d5:06:df:9f:5b:9a:e4: 76:15:7d:da:e9:64:57:5e:72:ad:de:5e:71:65:0d: 1e:30:ca:f3:c6:d9:5b:40:14:87:3e:bc:6c:d6:fe: 1a:67:af:bd:e6:d0:24:c0:4d:46:01:b5:df:02:4a: 48:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DB:A7:5D:09:D0:45:28:A5:46:B3:2E:D4:0B:F6:11:1B:D5:7C:46 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e2034353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.64.0/18 Signature Algorithm: sha256WithRSAEncryption 28:e6:12:9f:fc:82:9c:5b:5f:bf:51:df:62:64:de:8b:08:a6: dd:04:ca:c9:92:82:13:3d:0f:c8:fb:5c:6c:51:1f:3f:f3:e2: 9a:7f:ff:34:22:f3:f1:fb:06:7f:c6:61:66:4f:b2:88:21:39: db:97:16:4c:ec:bb:49:90:ea:a1:2b:c1:ab:d2:cc:59:c3:7a: 37:73:c2:a5:bd:f0:b4:7a:9a:98:c8:04:3b:bd:4f:13:75:6f: a9:67:ee:37:f8:d2:ef:d6:37:c2:0a:fd:bc:8f:d2:ba:14:70: 86:13:da:d5:8a:76:9b:69:bc:75:48:88:45:37:a1:60:f6:41: a8:21:79:98:e3:b0:98:bd:ba:30:9c:1f:a5:fa:93:02:39:ed: 8a:3a:c5:04:74:52:b0:14:48:d6:2c:ad:1a:0e:60:db:e9:9e: 3f:c2:2c:43:70:53:8e:a3:c8:62:e1:dc:ce:8a:33:d4:be:b6: 9f:da:7e:d5:a9:bc:28:68:0d:b5:85:2e:52:73:e3:73:b4:b2: fc:28:dc:26:f8:16:30:5c:f2:ce:94:73:fd:a3:b9:1e:d4:1c: 7e:85:64:97:05:3e:9b:24:69:56:69:dc:55:64:3e:3a:c1:c3: 74:e7:8b:f8:90:e3:d9:f2:4d:0d:93:5d:47:ac:ef:be:06:2b: f4:68:17:e1 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUOSnmHsWEO87plquONHk4btQ8GDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTdaFw0yNzAxMTkwMjI0NTdaMDMxMTAvBgNV BAMTKDczREJBNzVEMDlEMDQ1MjhBNTQ2QjMyRUQ0MEJGNjExMUJENTdDNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7Vb/2z5WYAIZ0l/oBtQqbVUn rrekQ8FFifbHKq26KFqEo2jtfCGqJDIcPpYtg4a0PDIuE28y9uqk4JAeYskMo8ck 1cp9vGqTX3ccaqXUcm6q77sfrOCxMBMo8xrddd5D2f3cbz1tax7wCUgqHkLF+uf/ K/ian2PURLOhvZstmkulHRVq1lXuJEj/LKHzGQoWs5UOhw4RmN89WjzsfxyQaKpJ 4FQt+Kak+oLAbEV56swz0VcwzNg+232zgu6bfG9mI1e+XQoK+ToF1Qbfn1ua5HYV fdrpZFdecq3eXnFlDR4wyvPG2VtAFIc+vGzW/hpnr73m0CTATUYBtd8CSkjzAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUc9unXQnQRSilRrMu1Av2ERvVfEYwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy MzMyZTM2MzQyZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzNDM1MzEzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBrTfQDANBgkqhkiG9w0BAQsFAAOCAQEAKOYSn/yCnFtfv1HfYmTeiwim3QTK yZKCEz0PyPtcbFEfP/Pimn//NCLz8fsGf8ZhZk+yiCE525cWTOy7SZDqoSvBq9LM WcN6N3PCpb3wtHqamMgEO71PE3VvqWfuN/jS79Y3wgr9vI/SuhRwhhPa1Yp2m2m8 dUiIRTehYPZBqCF5mOOwmL26MJwfpfqTAjntijrFBHRSsBRI1iytGg5g2+meP8Is Q3BTjqPIYuHczooz1L62n9p+1am8KGgNtYUuUnPjc7Sy/CjcJvgWMFzyzpRz/aO5 HtQcfoVklwU+myRpVmncVWQ+OsHDdOeL+JDj2fJNDZNdR6zvvgYr9GgX4Q== -----END CERTIFICATE-----Generated at Wed Jan 21 14:12:46 2026 by rpki-client