This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3135322e302f32322d3234203d3e20313337373138.roa
File: 3138302e3138342e3135322e302f32322d3234203d3e20313337373138.roa (raw, json)
Hash identifier: 2mr+/heUPh9Bb7V9ge+sDEJiYzWaZJgzP+HVFeGEYDI=
Subject key identifier: 25:12:B1:05:45:CE:86:79:48:FA:54:F0:9A:BE:A9:FC:A1:A8:29:E7
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 0AC574B717A32F43F29A3455B038CF6FF7D8D29B
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3135322e302f32322d3234203d3e20313337373138.roa
Signing time: Tue 20 Jan 2026 02:09:42 +0000
ROA not before: Tue 20 Jan 2026 02:04:42 +0000
ROA not after: Tue 19 Jan 2027 02:09:42 +0000
asID: 137718
IP address blocks: 180.184.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:c5:74:b7:17:a3:2f:43:f2:9a:34:55:b0:38:cf:6f:f7:d8:d2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Jan 20 02:04:42 2026 GMT
Not After : Jan 19 02:09:42 2027 GMT
Subject: CN=2512B10545CE867948FA54F09ABEA9FCA1A829E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:62:37:31:13:64:74:95:a2:1b:ad:57:47:
dd:71:50:35:e3:7c:00:8d:d4:3d:5e:16:38:2f:3c:
d5:7a:0f:23:d6:84:40:5d:9c:5e:67:90:6e:50:f6:
c9:cf:19:30:9c:93:d1:a1:08:0c:3c:25:2f:4c:78:
30:1a:9c:2f:03:af:7e:c1:c9:f6:e5:18:60:97:3e:
05:1f:a0:2c:b4:1d:08:a1:67:d1:ac:d1:dd:94:e3:
e6:04:2b:9f:2e:93:15:24:92:fb:0c:be:df:9f:20:
1b:5b:bd:16:8d:48:15:ed:87:59:6d:3a:e1:0d:f7:
60:20:61:b9:69:4f:61:b2:cd:2a:0e:69:95:db:0a:
40:e9:86:e3:1d:15:e8:f2:0d:59:ac:62:82:d9:90:
8b:c4:eb:eb:42:8a:ad:21:cf:77:a7:75:0e:2d:67:
2c:6e:66:64:04:75:63:28:cf:a5:37:ef:f6:9b:34:
34:03:fa:b6:cf:2b:c1:b4:3b:3a:78:34:d3:33:c5:
9b:54:a7:ab:cf:7a:df:fd:b8:e7:89:21:7c:be:e2:
14:cf:78:85:ff:11:c5:d0:3b:89:f4:61:89:fb:46:
34:e5:5f:da:68:18:d1:65:39:b4:1d:14:dc:92:10:
f2:4b:04:28:ff:4b:ac:75:85:15:a5:fa:df:03:85:
7a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:12:B1:05:45:CE:86:79:48:FA:54:F0:9A:BE:A9:FC:A1:A8:29:E7
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3135322e302f32322d3234203d3e20313337373138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.184.152.0/22
Signature Algorithm: sha256WithRSAEncryption
77:45:7a:2a:cc:65:45:8e:ba:99:72:56:39:91:5e:c1:98:ec:
20:76:ca:47:76:6b:4f:01:d6:25:db:d0:28:c5:99:ec:44:89:
54:c4:b2:29:e2:e4:b0:28:fd:c5:f6:ce:17:f9:e6:9a:83:1e:
0e:74:c7:d1:98:75:4c:5c:03:dc:0c:59:5d:81:92:aa:d5:9f:
0b:e0:f7:b0:ee:ee:5d:6c:0e:ae:94:b6:a4:35:25:d1:67:a7:
92:a0:22:4c:ec:90:9b:5a:01:99:cd:18:8f:f8:7f:5b:51:9a:
30:d1:2a:70:59:3e:14:3a:d4:e5:dd:60:bb:6d:59:63:c6:38:
04:6e:1b:a7:ad:a1:97:87:5f:49:1d:1c:0f:9f:4f:a3:e7:ff:
cd:de:9c:6a:4f:4c:6f:b7:be:5f:5d:e5:77:b1:fe:9c:72:cb:
38:dc:9b:e4:25:7d:81:6c:d7:e0:99:88:8b:1d:55:bc:c2:1e:
fb:e1:48:24:62:69:d5:9b:0c:b8:1d:ab:21:9b:2f:c9:13:27:
96:59:90:05:40:d7:96:2a:83:6c:5b:36:0a:a1:db:9a:60:b9:
42:fa:2a:f8:2e:76:cc:37:1b:d1:cb:d9:15:6b:bc:79:81:dc:
93:7a:ea:a4:4b:84:d4:09:14:c8:d5:92:51:84:18:1c:11:9d:
9a:2a:9f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:11:05 2026 by rpki-client