This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3135322e302f32322d3234203d3e20313338343231.roa
File: 3138302e3138342e3135322e302f32322d3234203d3e20313338343231.roa (raw, json)
Hash identifier: Yd9z+BiC59oIsFsUHx/R/rO371+CNGypCYgfJB74p80=
Subject key identifier: 05:D4:BA:AA:6C:9D:50:49:50:98:32:FE:DD:5A:27:96:CA:E4:1D:EC
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 1A0CF643DA64376E4439330DC5CBFB9F8ED9CE35
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3135322e302f32322d3234203d3e20313338343231.roa
Signing time: Tue 20 Jan 2026 02:09:42 +0000
ROA not before: Tue 20 Jan 2026 02:04:42 +0000
ROA not after: Tue 19 Jan 2027 02:09:42 +0000
asID: 138421
IP address blocks: 180.184.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:0c:f6:43:da:64:37:6e:44:39:33:0d:c5:cb:fb:9f:8e:d9:ce:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Jan 20 02:04:42 2026 GMT
Not After : Jan 19 02:09:42 2027 GMT
Subject: CN=05D4BAAA6C9D5049509832FEDD5A2796CAE41DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:43:b0:77:ab:f1:9d:28:03:a5:6c:23:bb:21:
b1:f3:d0:76:c6:c4:ca:aa:e4:ff:4e:73:c1:32:bf:
c6:d7:a2:0f:4e:8d:58:1c:83:ef:b1:e8:45:ce:24:
10:f8:db:36:de:95:10:68:22:60:65:ce:09:da:80:
4c:79:f2:d7:80:7d:0d:e9:1e:69:b6:4c:aa:ec:2a:
b8:29:8d:19:dd:22:14:70:01:e9:97:08:d0:b4:0b:
18:59:48:36:03:c0:5f:65:5c:52:f3:ce:ab:a1:f7:
76:c7:ce:2b:03:fa:0f:6d:bf:59:da:d7:16:66:7a:
f3:30:fe:4a:36:85:57:12:f4:24:64:ad:80:88:e3:
83:89:eb:c0:4c:a6:e7:4a:35:6f:1f:d4:51:00:9d:
39:a0:48:63:2d:d1:35:6e:ee:48:d7:9f:75:9b:5c:
ad:79:b9:b8:1e:a5:af:fd:b8:77:12:8f:c2:5d:db:
be:d9:a7:87:e8:9e:30:0a:87:25:9c:7f:d4:2d:74:
f4:99:f6:fb:85:53:fd:49:24:d9:df:6a:4e:50:21:
26:59:d4:d2:30:d6:00:37:9e:d4:9a:2c:6e:00:a6:
83:e9:e4:69:69:88:0c:6a:1d:9c:1d:4e:d6:7b:1d:
46:5d:6d:aa:2f:91:ab:96:2c:11:bf:38:e8:fa:48:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D4:BA:AA:6C:9D:50:49:50:98:32:FE:DD:5A:27:96:CA:E4:1D:EC
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3135322e302f32322d3234203d3e20313338343231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.184.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:1c:87:49:d3:c4:84:68:ec:dd:de:25:1a:c6:84:dc:92:cc:
7b:e3:6b:bb:7e:97:a7:14:65:ff:fd:12:cd:31:5c:6b:17:02:
ea:d6:81:3c:49:a2:16:26:50:71:20:87:6b:d4:cb:7e:6e:eb:
75:48:3f:c8:ca:06:7b:ad:2b:b4:7c:d3:72:4b:a0:d5:ec:bb:
8d:7a:27:ab:d1:a2:0b:3a:dd:37:c3:08:61:c2:40:4f:87:2e:
b5:84:a7:d8:9f:a1:f4:86:2d:6f:04:4d:eb:d7:27:62:26:30:
5b:ae:d3:56:1a:cb:e1:c4:00:51:f1:d4:1e:62:25:45:39:e1:
b4:5f:2b:c0:99:9f:e0:e8:1b:1f:6a:8d:d1:2f:ad:63:6f:98:
68:60:ff:bf:21:1e:b5:72:bc:ad:7a:27:a2:0b:29:c2:ed:e3:
8f:55:17:c0:6d:df:31:77:ff:16:2d:19:0e:2e:9a:8f:51:c0:
42:e8:eb:c1:11:dd:e7:b7:5c:c4:95:f2:38:54:ca:0b:87:7d:
3e:66:a4:d3:9b:20:bf:a8:0d:89:f3:d5:3e:76:3a:04:d3:66:
96:d9:75:41:25:ce:5b:d8:f3:b9:4e:3c:75:f0:21:03:9c:63:
fc:ed:45:a8:1f:e1:72:ac:d4:c1:33:a8:36:2f:b8:97:6c:61:
46:92:17:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:02:41 2026 by rpki-client