This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e38302e302f32312d3234203d3e2037303138.roa
File: 3138302e3232332e38302e302f32312d3234203d3e2037303138.roa (raw, json)
Hash identifier: MuhlRh5xdkl3cZbguJMCw0PlN6YYI6uB9gh+hV+4S8o=
Subject key identifier: 17:90:D6:76:2E:20:67:B0:84:66:EA:E8:ED:7F:69:A5:C2:09:6C:68
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 16E5E8EEFF15BF25BEAD05C8567A9A16B0A5E1A4
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e38302e302f32312d3234203d3e2037303138.roa
Signing time: Tue 20 Jan 2026 02:24:55 +0000
ROA not before: Tue 20 Jan 2026 02:19:55 +0000
ROA not after: Tue 19 Jan 2027 02:24:55 +0000
asID: 7018
IP address blocks: 180.223.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 21:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:e5:e8:ee:ff:15:bf:25:be:ad:05:c8:56:7a:9a:16:b0:a5:e1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jan 20 02:19:55 2026 GMT
Not After : Jan 19 02:24:55 2027 GMT
Subject: CN=1790D6762E2067B08466EAE8ED7F69A5C2096C68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:dc:28:d0:de:46:a2:56:a6:3c:a9:dd:61:
78:b2:26:91:58:f0:2f:c0:5b:3a:42:22:1c:45:49:
64:ac:bb:9b:f6:a8:82:97:06:09:69:0d:59:36:0b:
27:e6:74:01:30:7c:8f:3f:fe:38:93:ab:4b:0e:37:
0b:3f:e8:e1:5f:77:36:64:fd:59:9a:20:e5:22:a5:
82:6f:b2:0f:bf:96:d4:34:1e:4d:41:97:72:c7:0d:
98:d3:2d:1d:f6:d2:55:e6:c2:b9:2f:db:a1:2f:d9:
c5:b1:ab:5d:10:55:ec:b1:e8:8b:94:50:26:df:5d:
dc:97:4f:61:d2:4e:52:49:51:44:fa:1f:e2:11:0d:
15:51:5d:c1:00:f1:d5:4a:a2:e2:d1:de:85:75:46:
71:a5:f4:4e:a2:8c:b1:1e:03:de:83:38:d3:51:1b:
e8:4b:82:40:49:d7:66:e1:5c:ac:1a:c0:3c:14:27:
26:89:98:51:54:42:8b:70:e5:f4:b2:9f:bc:89:35:
b9:0f:e6:c4:80:8b:2a:47:80:8d:18:4a:7d:ac:e5:
64:3f:d5:91:c3:85:6e:82:c7:04:08:23:6e:0c:1c:
c3:66:d0:d5:e9:6a:ff:ea:4b:e8:54:a6:0f:34:f7:
09:d2:78:53:bc:96:8c:ec:3d:0d:b3:c8:d3:e1:51:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:90:D6:76:2E:20:67:B0:84:66:EA:E8:ED:7F:69:A5:C2:09:6C:68
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e38302e302f32312d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.80.0/21
Signature Algorithm: sha256WithRSAEncryption
bb:95:11:85:d9:8f:08:c2:06:4e:4c:f3:86:3f:5f:93:f5:7b:
52:d3:62:f3:54:1e:36:4e:42:45:ba:2f:a7:85:f5:e5:33:98:
0e:f1:fb:82:32:32:d4:9e:14:e2:74:b8:b4:26:c8:b9:7c:ef:
c5:d8:ab:5e:4e:96:82:63:f2:53:ff:11:8a:73:a1:18:93:29:
d6:27:28:05:00:84:66:4d:f0:fd:74:34:ad:8d:6c:f3:16:ff:
6f:38:e8:84:1c:13:bd:71:47:c3:1f:35:a1:45:31:13:d5:70:
c5:88:b7:64:79:e2:c8:a7:53:fb:4e:17:a5:da:cb:e7:29:dd:
97:04:fc:0a:6b:d9:30:ab:17:b9:a3:c2:5a:21:ca:c1:c0:98:
19:11:12:2c:6a:fb:b7:ec:8a:bc:a3:23:86:7f:5d:06:cd:15:
5c:38:8e:0b:6c:eb:17:9e:09:a1:92:08:f5:8f:a0:1d:bf:74:
fa:97:43:7d:5c:46:8b:cb:62:67:7c:b5:54:57:a4:e3:53:7b:
20:b3:1c:08:71:e3:b3:15:98:1a:3f:20:e5:9e:c0:af:b8:5d:
4d:b5:75:fd:1d:87:a8:8f:7f:27:1c:9f:7e:dd:c3:bf:52:65:
f3:f8:23:08:76:26:aa:e0:ab:f6:17:b4:b1:06:f3:bc:be:98:
c3:6d:6e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:26 2026 by rpki-client