This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f32312d3234203d3e2037303138.roa File: 3138302e3232332e36342e302f32312d3234203d3e2037303138.roa (raw, json) Hash identifier: n/vnK7OH8uLWtb34AA7PaZRGjcsTwQP95XnNldaQrrc= Subject key identifier: 1F:2A:AC:60:69:98:EE:8C:9C:19:DF:15:53:F2:C6:26:75:B1:EC:4B Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 3810A20EA29EE30532CC5C367F2CA1F3495FAAAB Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f32312d3234203d3e2037303138.roa Signing time: Tue 20 Jan 2026 02:24:54 +0000 ROA not before: Tue 20 Jan 2026 02:19:54 +0000 ROA not after: Tue 19 Jan 2027 02:24:54 +0000 asID: 7018 IP address blocks: 180.223.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:10:a2:0e:a2:9e:e3:05:32:cc:5c:36:7f:2c:a1:f3:49:5f:aa:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:54 2026 GMT Not After : Jan 19 02:24:54 2027 GMT Subject: CN=1F2AAC606998EE8C9C19DF1553F2C62675B1EC4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ca:68:b0:8c:13:54:a8:d9:2d:f2:95:c6:2d: 50:a7:b7:c2:bd:d9:0e:42:f1:24:0d:be:87:5e:ca: 7d:3b:3f:a0:b7:20:fe:e7:86:9e:ed:fa:54:4e:20: cb:32:5a:bb:97:43:44:3b:25:62:6b:72:1e:e4:92: d1:66:1d:e9:cd:fa:f5:07:02:5c:d6:ff:07:6e:14: 87:d0:f5:ab:53:00:29:de:e1:84:4a:cd:24:08:ee: 0e:d4:3a:5a:79:2c:13:99:ed:81:c7:81:d6:39:96: fa:4d:f9:2b:39:0c:8c:c6:ca:72:2b:94:f6:90:93: cf:6a:c8:a5:02:59:04:12:1a:a2:b3:2e:5a:f3:24: e6:d4:d5:0a:9b:18:9a:6f:5f:97:2f:46:bf:db:7c: 67:9c:a7:ee:2b:bb:0c:0b:47:fc:2f:01:e6:64:f1: dd:14:42:25:cc:42:2c:f1:08:bb:cb:4c:0d:51:20: ea:99:9c:93:83:02:00:f2:64:1f:cd:eb:03:7d:7b: 5a:55:cc:3d:c6:f7:8c:73:8f:05:5e:a6:86:d8:90: 7b:47:6e:80:9d:9c:a3:c3:9a:af:ad:72:e5:46:20: 4c:d0:e3:b7:60:01:8b:52:13:db:03:4f:19:63:25: cd:33:2f:42:b5:6f:c0:a7:9e:7e:41:d7:1f:37:ca: d4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2A:AC:60:69:98:EE:8C:9C:19:DF:15:53:F2:C6:26:75:B1:EC:4B X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f32312d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.64.0/21 Signature Algorithm: sha256WithRSAEncryption 23:ba:f9:ad:14:58:23:2d:1e:5a:46:30:71:93:f8:aa:cd:4c: b4:e4:fe:22:bf:2e:ac:f8:85:44:36:04:9e:a5:8a:2f:18:f3: 03:6a:f0:91:27:e5:6e:c2:ec:8a:bd:f2:39:92:ce:e9:52:fe: 5a:a0:d6:c1:3e:5b:37:b6:fb:ac:4a:3b:7a:fb:30:82:50:42: 1f:1f:18:2b:d0:23:9d:9b:9b:e2:14:de:22:1a:69:2b:89:b7: 62:ca:0f:e0:a2:80:1a:02:75:d2:55:4e:94:cf:11:b2:c1:b0: e0:bf:30:85:1e:4b:a7:a4:81:3e:a7:12:b3:21:48:af:fe:b0: c2:68:7e:b0:76:4b:b8:5e:05:c7:c9:1a:c8:36:68:65:8a:f9: 22:8e:53:5e:b7:28:0e:47:58:cd:d5:cf:62:13:9d:d9:ee:06: 0d:5a:0a:da:31:f1:9e:ab:a6:01:fd:f7:31:0c:7e:e4:89:df: 6c:8f:0f:21:d5:81:56:f1:45:fb:f9:7f:ae:b4:7c:ef:d0:1d: 5c:3e:75:f4:c5:52:00:8a:83:e8:2c:7b:99:93:97:21:f1:61: bb:6a:8c:92:a1:6f:b7:39:2a:a0:77:a2:00:b5:86:62:9d:72: c2:cc:b2:de:c1:59:4d:ab:6e:08:f2:4c:27:d4:d2:42:c9:6f: 8f:73:36:1a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUOBCiDqKe4wUyzFw2fyyh80lfqqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTRaFw0yNzAxMTkwMjI0NTRaMDMxMTAvBgNV BAMTKDFGMkFBQzYwNjk5OEVFOEM5QzE5REYxNTUzRjJDNjI2NzVCMUVDNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcymiwjBNUqNkt8pXGLVCnt8K9 2Q5C8SQNvodeyn07P6C3IP7nhp7t+lROIMsyWruXQ0Q7JWJrch7kktFmHenN+vUH AlzW/wduFIfQ9atTACne4YRKzSQI7g7UOlp5LBOZ7YHHgdY5lvpN+Ss5DIzGynIr lPaQk89qyKUCWQQSGqKzLlrzJObU1QqbGJpvX5cvRr/bfGecp+4ruwwLR/wvAeZk 8d0UQiXMQizxCLvLTA1RIOqZnJODAgDyZB/N6wN9e1pVzD3G94xzjwVepobYkHtH boCdnKPDmq+tcuVGIEzQ47dgAYtSE9sDTxljJc0zL0K1b8Cnnn5B1x83ytTpAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUHyqsYGmY7oycGd8VU/LGJnWx7EswHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy MzMyZTM2MzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNzMwMzEzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfQDANBgkqhkiG9w0BAQsFAAOCAQEAI7r5rRRYIy0eWkYwcZP4qs1MtOT+ Ir8urPiFRDYEnqWKLxjzA2rwkSflbsLsir3yOZLO6VL+WqDWwT5bN7b7rEo7evsw glBCHx8YK9AjnZub4hTeIhppK4m3YsoP4KKAGgJ10lVOlM8RssGw4L8whR5Lp6SB PqcSsyFIr/6wwmh+sHZLuF4Fx8kayDZoZYr5Io5TXrcoDkdYzdXPYhOd2e4GDVoK 2jHxnqumAf33MQx+5InfbI8PIdWBVvFF+/l/rrR879AdXD519MVSAIqD6Cx7mZOX IfFhu2qMkqFvtzkqoHeiALWGYp1ywsyy3sFZTatuCPJMJ9TSQslvj3M2Gg== -----END CERTIFICATE-----Generated at Wed Jan 21 14:13:27 2026 by rpki-client