This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e38382e302f32312d3234203d3e2037303138.roa File: 3138302e3232332e38382e302f32312d3234203d3e2037303138.roa (raw, json) Hash identifier: MTfFy+HdB68h59qD90AsfupZ0theJIznxec860wkTEM= Subject key identifier: 31:41:F6:D6:CA:09:F1:63:1A:E0:6E:D5:11:56:CB:50:BF:BE:87:B7 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 627EAEC2A64F4FEC82C83E7AA9E39C222239D17F Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e38382e302f32312d3234203d3e2037303138.roa Signing time: Tue 20 Jan 2026 02:24:59 +0000 ROA not before: Tue 20 Jan 2026 02:19:59 +0000 ROA not after: Tue 19 Jan 2027 02:24:59 +0000 asID: 7018 IP address blocks: 180.223.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7e:ae:c2:a6:4f:4f:ec:82:c8:3e:7a:a9:e3:9c:22:22:39:d1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jan 20 02:19:59 2026 GMT Not After : Jan 19 02:24:59 2027 GMT Subject: CN=3141F6D6CA09F1631AE06ED51156CB50BFBE87B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a8:ac:a4:c0:93:1d:03:e5:0a:97:1f:12:4a: a0:c4:30:09:bc:94:7c:a0:de:db:14:b6:92:56:ea: b5:92:40:fe:6b:00:34:c2:37:59:d5:b8:73:ff:e9: 65:dc:6c:6f:4f:2a:05:db:f8:35:6a:35:8f:3d:1b: 2d:e5:4e:34:5a:a6:ad:35:ad:83:d6:e0:c3:d5:89: a1:02:f3:6e:79:c5:6a:66:da:f7:ee:98:9d:60:8c: 2e:35:f9:cf:28:6f:9e:46:99:7d:41:43:a0:b3:9d: 18:07:c7:fd:82:27:22:2a:f1:a2:dd:d2:29:1f:32: 12:b2:ef:d6:b1:a5:51:75:db:b1:19:f5:12:e0:b4: 10:26:83:8c:3c:71:80:c0:ca:a6:e5:b8:ba:5d:df: 10:97:e1:97:2d:1b:e3:4d:91:74:12:cd:8a:d3:14: 4d:53:ab:9c:b4:81:f6:78:bc:9a:cf:d6:94:b5:a9: 88:32:f8:2b:34:30:30:e9:08:91:81:62:44:f8:99: 8a:67:f3:a9:c1:3d:7d:c9:5f:6b:12:2b:ce:17:5c: 85:d3:62:36:d2:ae:80:d1:35:8d:da:f7:7a:72:30: 52:fb:d9:c4:56:7a:fe:a2:be:24:6a:0b:cc:1e:e5: 48:76:50:88:2b:19:45:94:fc:a1:f3:1c:43:e2:64: 8a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:41:F6:D6:CA:09:F1:63:1A:E0:6E:D5:11:56:CB:50:BF:BE:87:B7 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e38382e302f32312d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.88.0/21 Signature Algorithm: sha256WithRSAEncryption 6e:ce:ee:80:31:9f:48:a8:85:2a:fc:7c:d9:44:aa:99:b8:44: ab:b2:2d:a7:36:de:6d:7d:e9:f8:6e:30:b1:68:7e:7d:54:be: f1:9e:53:e6:c2:72:69:11:39:e0:62:6d:dd:f1:1e:d7:22:2f: 0c:d5:3d:ae:d2:86:7e:5a:ef:97:33:18:31:e5:7e:55:4a:d0: 8c:5e:ed:9b:63:19:37:e6:a9:b8:65:98:09:97:b0:55:f7:3a: 63:ab:c0:d0:83:c0:05:a5:ac:b0:d3:4c:a5:8e:44:82:d4:fd: b3:43:86:bb:45:7d:42:b2:1a:3e:a2:88:36:61:3e:56:55:ec: 62:c0:4e:41:59:a8:b8:34:89:0f:3a:cf:54:fe:53:5e:04:f3: 90:89:e4:4c:3b:fb:fe:fe:23:c2:ae:a2:a3:3a:bf:88:78:b7: 86:bd:26:f3:b0:48:ad:10:95:76:6b:36:7b:49:cf:f1:c0:28: 2a:6b:e1:ae:2c:44:7e:47:ea:37:55:fe:e0:d9:a1:fa:26:12: 70:e3:90:c1:fc:0b:15:a3:46:c6:f0:41:12:c9:e4:1c:24:6e: ba:51:6a:0d:7f:98:19:b6:50:f0:a6:36:30:cf:b8:da:15:48: a4:44:c1:7e:94:45:ec:6c:aa:44:45:af:34:a5:b3:99:10:04: 11:5c:ea:d2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUYn6uwqZPT+yCyD56qeOcIiI50X8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjAxMjAwMjE5NTlaFw0yNzAxMTkwMjI0NTlaMDMxMTAvBgNV BAMTKDMxNDFGNkQ2Q0EwOUYxNjMxQUUwNkVENTExNTZDQjUwQkZCRTg3QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWqKykwJMdA+UKlx8SSqDEMAm8 lHyg3tsUtpJW6rWSQP5rADTCN1nVuHP/6WXcbG9PKgXb+DVqNY89Gy3lTjRapq01 rYPW4MPViaEC8255xWpm2vfumJ1gjC41+c8ob55GmX1BQ6CznRgHx/2CJyIq8aLd 0ikfMhKy79axpVF127EZ9RLgtBAmg4w8cYDAyqbluLpd3xCX4ZctG+NNkXQSzYrT FE1Tq5y0gfZ4vJrP1pS1qYgy+Cs0MDDpCJGBYkT4mYpn86nBPX3JX2sSK84XXIXT YjbSroDRNY3a93pyMFL72cRWev6iviRqC8we5Uh2UIgrGUWU/KHzHEPiZIpFAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUMUH21soJ8WMa4G7VEVbLUL++h7cwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy MzMyZTM4MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNzMwMzEzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfWDANBgkqhkiG9w0BAQsFAAOCAQEAbs7ugDGfSKiFKvx82USqmbhEq7It pzbebX3p+G4wsWh+fVS+8Z5T5sJyaRE54GJt3fEe1yIvDNU9rtKGflrvlzMYMeV+ VUrQjF7tm2MZN+apuGWYCZewVfc6Y6vA0IPABaWssNNMpY5EgtT9s0OGu0V9QrIa PqKINmE+VlXsYsBOQVmouDSJDzrPVP5TXgTzkInkTDv7/v4jwq6iozq/iHi3hr0m 87BIrRCVdms2e0nP8cAoKmvhrixEfkfqN1X+4Nmh+iYScOOQwfwLFaNGxvBBEsnk HCRuulFqDX+YGbZQ8KY2MM+42hVIpETBfpRF7GyqREWvNKWzmRAEEVzq0g== -----END CERTIFICATE-----Generated at Wed Jan 21 14:13:42 2026 by rpki-client