This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e2034373636.roa File: 3138302e3232332e36342e302f31382d3234203d3e2034373636.roa (raw, json) Hash identifier: B1ohpCOXx0XSWnU1OneB3V/loBXoKruHpBkUigZnte4= Subject key identifier: 9D:EB:AC:0F:BE:1A:94:6C:B1:66:82:EA:AD:A2:11:7A:64:93:87:5A Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 3774840C77EDBAE90921251565B34825BA6F050F Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e2034373636.roa Signing time: Tue 20 Jan 2026 02:24:56 +0000 ROA not before: Tue 20 Jan 2026 02:19:56 +0000 ROA not after: Tue 19 Jan 2027 02:24:56 +0000 asID: 4766 IP address blocks: 180.223.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:74:84:0c:77:ed:ba:e9:09:21:25:15:65:b3:48:25:ba:6f:05:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:56 2026 GMT Not After : Jan 19 02:24:56 2027 GMT Subject: CN=9DEBAC0FBE1A946CB16682EAADA2117A6493875A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:14:ef:1f:c1:6d:08:f5:ba:95:bc:39:d7:3c: 19:ab:01:99:5b:34:9e:19:1f:a8:bf:f7:df:0e:5a: 72:f0:fb:e4:2c:3d:76:a5:a9:8a:5c:67:8a:9f:e3: 0c:19:00:2a:c5:23:f7:7d:98:80:51:86:11:f3:44: c6:d4:54:0b:30:85:aa:16:02:ab:93:b3:96:44:67: f1:41:b7:ce:24:1d:c3:69:c2:c4:9a:fc:c4:d9:c5: 87:93:71:46:e4:38:7b:36:e0:32:7b:15:d1:f4:98: 39:b0:7a:5e:c6:bf:4b:20:b3:70:ef:31:91:f1:5e: 5a:d0:80:ad:0e:c8:a1:85:2c:a6:32:6b:58:82:ba: 91:8a:d9:f9:c2:4f:cb:56:7e:68:95:74:38:0b:5f: f1:a7:3c:3f:9f:d0:3f:e4:6f:dc:ff:56:d8:4c:77: 40:56:3d:3c:15:03:30:35:7e:cf:d1:65:ce:cd:30: a8:1e:87:72:1c:22:d5:b7:c6:00:53:46:0b:f8:98: 19:76:8c:13:ec:f3:03:dd:ad:04:d3:a9:e7:ef:eb: df:58:ab:82:7a:b3:8b:aa:5a:91:37:9d:67:cf:c7: 1b:a1:18:16:07:ee:05:f0:33:31:66:ae:28:f5:5c: 72:49:2c:8d:9e:2e:61:db:45:4b:d6:59:f4:d5:aa: 45:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EB:AC:0F:BE:1A:94:6C:B1:66:82:EA:AD:A2:11:7A:64:93:87:5A X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e2034373636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.64.0/18 Signature Algorithm: sha256WithRSAEncryption 45:6f:23:b0:a7:44:da:d9:02:6a:51:99:ea:b5:a5:42:7a:99: f8:ed:6e:85:53:e3:1a:43:4b:e6:ba:7b:45:f2:30:a8:7c:6f: 8d:57:a2:63:14:80:09:42:ec:01:85:29:cc:e7:10:69:bd:6e: ef:11:3a:3b:e6:c1:99:9a:d5:d3:e5:1f:be:65:c6:11:f8:72: 0d:66:08:0f:3c:d4:18:8d:d5:82:44:0e:9c:9f:c5:8d:4d:e5: f3:80:c7:07:85:c0:e2:4c:cb:74:24:c1:23:98:3d:ef:e2:b9: c4:9a:fa:99:eb:09:f3:89:cc:2d:d5:85:34:ad:ea:7a:55:d9: 91:d4:50:14:58:12:b6:ae:1b:bc:40:fd:e1:8d:dd:40:aa:a8: f8:bc:6e:46:89:1e:ac:d0:53:13:db:67:7b:25:ba:82:68:57: 36:14:cd:6b:30:ec:66:7a:ce:de:ac:1b:06:c0:7f:e5:a1:8d: ae:db:b6:47:2d:a5:47:90:45:aa:86:e8:bf:59:9a:77:26:4f: 16:9f:d9:9b:35:da:d2:b4:2a:c2:8a:fb:6f:97:1e:33:bc:4d: df:a3:ce:c3:78:d7:37:98:b7:7e:6f:71:31:1b:c4:51:79:8f: f8:40:76:ac:98:90:05:c9:e9:a5:85:8a:75:7d:ba:d5:9e:34: ca:8c:b8:4d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUN3SEDHftuukJISUVZbNIJbpvBQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTZaFw0yNzAxMTkwMjI0NTZaMDMxMTAvBgNV BAMTKDlERUJBQzBGQkUxQTk0NkNCMTY2ODJFQUFEQTIxMTdBNjQ5Mzg3NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFO8fwW0I9bqVvDnXPBmrAZlb NJ4ZH6i/998OWnLw++QsPXalqYpcZ4qf4wwZACrFI/d9mIBRhhHzRMbUVAswhaoW AquTs5ZEZ/FBt84kHcNpwsSa/MTZxYeTcUbkOHs24DJ7FdH0mDmwel7Gv0sgs3Dv MZHxXlrQgK0OyKGFLKYya1iCupGK2fnCT8tWfmiVdDgLX/GnPD+f0D/kb9z/VthM d0BWPTwVAzA1fs/RZc7NMKgeh3IcItW3xgBTRgv4mBl2jBPs8wPdrQTTqefv699Y q4J6s4uqWpE3nWfPxxuhGBYH7gXwMzFmrij1XHJJLI2eLmHbRUvWWfTVqkX5AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUneusD74alGyxZoLqraIRemSTh1owHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy MzMyZTM2MzQyZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzNDM3MzYzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBrTfQDANBgkqhkiG9w0BAQsFAAOCAQEARW8jsKdE2tkCalGZ6rWlQnqZ+O1u hVPjGkNL5rp7RfIwqHxvjVeiYxSACULsAYUpzOcQab1u7xE6O+bBmZrV0+UfvmXG EfhyDWYIDzzUGI3VgkQOnJ/FjU3l84DHB4XA4kzLdCTBI5g97+K5xJr6mesJ84nM LdWFNK3qelXZkdRQFFgStq4bvED94Y3dQKqo+LxuRokerNBTE9tneyW6gmhXNhTN azDsZnrO3qwbBsB/5aGNrtu2Ry2lR5BFqobov1madyZPFp/ZmzXa0rQqwor7b5ce M7xN36POw3jXN5i3fm9xMRvEUXmP+EB2rJiQBcnppYWKdX261Z40yoy4TQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:12:48 2026 by rpki-client