This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3135322e302f32322d3234203d3e2034383131.roa File: 3138302e3138342e3135322e302f32322d3234203d3e2034383131.roa (raw, json) Hash identifier: 4LXyoewjKLQ8puZt/cQpAIEimYuUzGoBPNhHjGM0ugQ= Subject key identifier: 9A:4D:81:BE:99:21:A4:02:97:73:0A:1A:A2:A1:48:1E:05:97:C5:6F Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 42C1D34228F6EF8C23BE315064DE46D4AB05A630 Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3135322e302f32322d3234203d3e2034383131.roa Signing time: Tue 20 Jan 2026 02:09:43 +0000 ROA not before: Tue 20 Jan 2026 02:04:43 +0000 ROA not after: Tue 19 Jan 2027 02:09:43 +0000 asID: 4811 IP address blocks: 180.184.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c1:d3:42:28:f6:ef:8c:23:be:31:50:64:de:46:d4:ab:05:a6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jan 20 02:04:43 2026 GMT Not After : Jan 19 02:09:43 2027 GMT Subject: CN=9A4D81BE9921A40297730A1AA2A1481E0597C56F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:68:c1:2d:82:4d:30:6c:9c:78:f4:c5:b5:9e: 79:5f:45:ab:44:63:45:46:e2:14:3a:8f:7d:85:12: 69:9a:95:94:60:31:3f:dc:8e:9c:0c:1b:ac:46:51: 06:17:55:68:bc:9d:0e:97:3a:16:c5:f0:0f:3c:6d: 3f:78:66:07:c3:ad:ca:08:19:e0:d8:17:2c:e2:a4: 7d:11:3f:92:79:b3:f1:1a:2a:16:32:9e:fa:ae:e5: 12:1c:da:8c:2b:c3:39:8e:85:57:fb:d9:a4:07:5a: c5:6c:ec:d2:7c:4a:88:30:15:c1:02:1f:c9:74:e1: 49:3a:02:d5:25:1c:dd:30:4a:80:27:0a:26:e5:d3: 45:83:49:22:7d:11:54:a1:ad:70:b9:5d:f6:09:74: 36:ea:fa:a2:b4:25:ac:48:5f:78:99:fc:d8:5d:87: 8f:68:10:f2:ab:fe:b0:29:b5:e1:7a:b8:1a:76:93: 47:c6:c7:5b:e1:d8:19:7f:ac:67:1f:77:49:28:8c: 21:b9:aa:93:60:60:5f:d2:2d:d1:a0:d5:1a:6b:b4: 34:24:27:95:c2:22:52:a1:43:f3:c1:ba:bd:32:09: 10:13:cc:aa:a7:7b:23:c6:20:23:4c:78:e5:9c:53: 16:59:ae:eb:67:e2:e0:61:6b:ce:45:30:0b:f9:8f: 03:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4D:81:BE:99:21:A4:02:97:73:0A:1A:A2:A1:48:1E:05:97:C5:6F X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3135322e302f32322d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.184.152.0/22 Signature Algorithm: sha256WithRSAEncryption 88:a3:8b:ed:76:64:a7:df:44:a9:31:08:dd:78:26:cb:17:c3: 81:aa:9d:de:6c:c3:f6:47:53:e7:0b:55:aa:78:c2:f1:20:67: 69:ff:93:80:d0:73:7d:2f:f5:a7:c9:cb:03:30:dc:99:43:e5: bc:c2:ce:5a:24:98:2c:ac:fe:fa:68:d9:16:35:d2:8a:f8:b9: 20:0f:f6:03:b6:42:95:2d:c6:89:67:7e:66:34:d2:0e:a6:cc: 62:f5:de:f2:f4:67:2d:36:59:3d:f8:d4:0b:4d:66:c3:98:83: d7:32:2c:e5:9d:c6:d7:0b:43:da:aa:97:75:83:b5:97:09:41: 70:0d:56:05:67:67:93:f2:d4:b7:cf:52:46:92:27:83:50:05: 25:f8:75:89:21:65:33:a9:bc:1b:51:39:91:16:56:48:11:6d: e2:c1:d4:63:68:59:01:bc:d7:d0:27:86:2c:ea:a2:1e:5a:c9: ca:33:f1:02:dc:af:63:19:6e:f8:e1:a1:a3:4a:78:cc:1a:97: 99:b9:fd:c4:6c:be:f4:a4:27:0d:3d:ea:24:53:58:2d:9e:58: 4d:75:84:d2:a2:7c:c3:b9:ec:0a:1f:fa:27:81:6a:9a:54:1c: 4a:d1:3f:09:f0:51:99:8d:73:01:fb:4a:79:04:9f:d6:a7:76: e1:fe:35:fd -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUQsHTQij274wjvjFQZN5G1KsFpjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjAxMjAwMjA0NDNaFw0yNzAxMTkwMjA5NDNaMDMxMTAvBgNV BAMTKDlBNEQ4MUJFOTkyMUE0MDI5NzczMEExQUEyQTE0ODFFMDU5N0M1NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtaMEtgk0wbJx49MW1nnlfRatE Y0VG4hQ6j32FEmmalZRgMT/cjpwMG6xGUQYXVWi8nQ6XOhbF8A88bT94ZgfDrcoI GeDYFyzipH0RP5J5s/EaKhYynvqu5RIc2owrwzmOhVf72aQHWsVs7NJ8SogwFcEC H8l04Uk6AtUlHN0wSoAnCibl00WDSSJ9EVShrXC5XfYJdDbq+qK0JaxIX3iZ/Nhd h49oEPKr/rApteF6uBp2k0fGx1vh2Bl/rGcfd0kojCG5qpNgYF/SLdGg1RprtDQk J5XCIlKhQ/PBur0yCRATzKqneyPGICNMeOWcUxZZrutn4uBha85FMAv5jwNvAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUmk2BvpkhpAKXcwoaoqFIHgWXxW8wHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NTY5MTY1MC8wLzMxMzgzMDJlMzEz ODM0MmUzMTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEArS4mDANBgkqhkiG9w0BAQsFAAOCAQEAiKOL7XZkp99EqTEI3XgmyxfD gaqd3mzD9kdT5wtVqnjC8SBnaf+TgNBzfS/1p8nLAzDcmUPlvMLOWiSYLKz++mjZ FjXSivi5IA/2A7ZClS3GiWd+ZjTSDqbMYvXe8vRnLTZZPfjUC01mw5iD1zIs5Z3G 1wtD2qqXdYO1lwlBcA1WBWdnk/LUt89SRpIng1AFJfh1iSFlM6m8G1E5kRZWSBFt 4sHUY2hZAbzX0CeGLOqiHlrJyjPxAtyvYxlu+OGho0p4zBqXmbn9xGy+9KQnDT3q JFNYLZ5YTXWE0qJ8w7nsCh/6J4FqmlQcStE/CfBRmY1zAftKeQSf1qd24f41/Q== -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:28 2026 by rpki-client