This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e37322e302f32312d3234203d3e2037303138.roa File: 3138302e3232332e37322e302f32312d3234203d3e2037303138.roa (raw, json) Hash identifier: vNxoDW9oWcsEna5U4Dw1Ltrx0H2GaCjul95ywTnq5zI= Subject key identifier: 12:CA:2B:97:A8:7E:DB:50:A1:B8:3B:DB:C6:9E:DF:03:31:9C:36:D5 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 1F63EE35FAF5352E413D926AEDA97BFCAD618774 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e37322e302f32312d3234203d3e2037303138.roa Signing time: Tue 20 Jan 2026 02:24:55 +0000 ROA not before: Tue 20 Jan 2026 02:19:55 +0000 ROA not after: Tue 19 Jan 2027 02:24:55 +0000 asID: 7018 IP address blocks: 180.223.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:63:ee:35:fa:f5:35:2e:41:3d:92:6a:ed:a9:7b:fc:ad:61:87:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:55 2026 GMT Not After : Jan 19 02:24:55 2027 GMT Subject: CN=12CA2B97A87EDB50A1B83BDBC69EDF03319C36D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c4:05:a1:c3:d9:4d:f8:a8:f8:b9:95:74:22: 9e:41:86:f8:cc:61:b7:60:fb:8c:1e:2a:6c:53:7f: 22:67:f8:68:c7:a3:84:ac:14:9e:f4:cb:06:64:2e: ad:d6:e6:e6:6b:02:15:f2:e6:23:94:20:b3:77:08: 7e:d5:53:66:ed:68:09:d6:b0:46:80:60:1a:48:30: 07:78:66:e0:51:dd:45:21:ba:68:f3:26:7f:52:6b: 47:df:22:83:76:61:bb:93:80:fd:6e:4b:ec:01:b4: 89:a4:ef:8b:f2:0c:e9:94:fe:bf:9d:8e:e6:4f:6b: 3d:55:2a:23:76:e3:dc:9a:e8:ef:24:9e:7c:fa:00: 1a:ec:ef:e1:c2:ba:0f:a9:e9:a8:83:09:0d:3b:e0: 8d:57:c0:70:f8:67:b3:e6:7e:e3:9c:69:d9:56:df: 66:62:9a:7b:1a:35:46:62:f2:5f:f3:89:45:23:0a: 57:bb:38:ea:83:3f:0a:0e:00:6d:3d:9e:e8:e9:ab: 48:e9:bd:e8:44:97:e0:85:83:02:68:56:0e:c4:1d: 9b:64:6e:3b:e6:e2:ed:97:14:02:71:ec:b9:31:1e: 8d:0f:1b:5a:16:93:4c:05:a9:ce:90:8c:d6:01:ce: 1e:61:48:ae:18:2f:91:84:61:7c:3c:6e:99:c8:29: d0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CA:2B:97:A8:7E:DB:50:A1:B8:3B:DB:C6:9E:DF:03:31:9C:36:D5 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e37322e302f32312d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.72.0/21 Signature Algorithm: sha256WithRSAEncryption 84:38:73:16:63:d9:d8:1a:95:66:73:15:01:f2:aa:28:90:00: 40:02:a2:a4:00:f4:7c:e5:24:86:0c:6e:df:60:cf:2e:74:96: dc:db:7e:5f:7c:25:24:f9:01:dc:e8:64:b2:97:29:76:68:15: db:71:c9:74:7d:0c:11:00:54:25:47:6d:d8:7d:42:0d:bb:8a: 89:90:58:cf:c9:5c:cb:bd:aa:02:7f:81:91:28:d5:8e:42:f0: d6:ae:be:f1:ef:12:a3:8e:9c:60:c2:9f:a7:5c:4c:57:68:77: a2:e5:9d:81:44:d3:4f:6a:f1:49:60:f5:a8:b7:65:75:94:18: 74:48:0c:81:95:6c:9f:84:df:8a:68:21:f3:1f:c8:a4:79:e0: 47:a5:2b:fd:e5:a0:f3:5e:39:d8:a1:ae:e7:76:99:6c:43:2f: 2a:d9:bb:42:f3:d1:b5:d4:ae:11:94:5a:1b:32:73:ff:fc:7a: 33:25:27:64:57:66:a1:f3:ed:41:47:ce:31:cf:6a:ee:74:c4: 1e:85:80:a6:91:fa:98:e2:dc:f0:c3:b8:c4:2a:6d:ab:92:a4: 26:57:5b:c8:60:fb:26:9c:7e:13:15:2d:ab:c5:dc:25:f0:d0: 31:d3:75:aa:b9:f7:02:84:6f:71:7f:99:67:47:bd:97:46:92: 76:57:d1:01 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUH2PuNfr1NS5BPZJq7al7/K1hh3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTVaFw0yNzAxMTkwMjI0NTVaMDMxMTAvBgNV BAMTKDEyQ0EyQjk3QTg3RURCNTBBMUI4M0JEQkM2OUVERjAzMzE5QzM2RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxAWhw9lN+Kj4uZV0Ip5BhvjM Ybdg+4weKmxTfyJn+GjHo4SsFJ70ywZkLq3W5uZrAhXy5iOUILN3CH7VU2btaAnW sEaAYBpIMAd4ZuBR3UUhumjzJn9Sa0ffIoN2YbuTgP1uS+wBtImk74vyDOmU/r+d juZPaz1VKiN249ya6O8knnz6ABrs7+HCug+p6aiDCQ074I1XwHD4Z7PmfuOcadlW 32ZimnsaNUZi8l/ziUUjCle7OOqDPwoOAG09nujpq0jpvehEl+CFgwJoVg7EHZtk bjvm4u2XFAJx7LkxHo0PG1oWk0wFqc6QjNYBzh5hSK4YL5GEYXw8bpnIKdBZAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUEsorl6h+21ChuDvbxp7fAzGcNtUwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy MzMyZTM3MzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNzMwMzEzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfSDANBgkqhkiG9w0BAQsFAAOCAQEAhDhzFmPZ2BqVZnMVAfKqKJAAQAKi pAD0fOUkhgxu32DPLnSW3Nt+X3wlJPkB3OhkspcpdmgV23HJdH0MEQBUJUdt2H1C DbuKiZBYz8lcy72qAn+BkSjVjkLw1q6+8e8So46cYMKfp1xMV2h3ouWdgUTTT2rx SWD1qLdldZQYdEgMgZVsn4Tfimgh8x/IpHngR6Ur/eWg81452KGu53aZbEMvKtm7 QvPRtdSuEZRaGzJz//x6MyUnZFdmofPtQUfOMc9q7nTEHoWAppH6mOLc8MO4xCpt q5KkJldbyGD7Jpx+ExUtq8XcJfDQMdN1qrn3AoRvcX+ZZ0e9l0aSdlfRAQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:13:49 2026 by rpki-client