This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e35362e302f32312d3234203d3e203233373234.roa
File: 3138302e3138342e35362e302f32312d3234203d3e203233373234.roa (raw, json)
Hash identifier: Un4Evuu1Ns8MFh8NroZphDZfwx5tUJ3qPLhYN6/0XCs=
Subject key identifier: 01:FF:C2:0A:9B:D5:AA:6B:13:96:9D:CB:0B:67:06:9E:6F:46:6A:B6
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 603F9763C48E1CDE81AFC4E0BC9E55D6515D7EEC
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e35362e302f32312d3234203d3e203233373234.roa
Signing time: Tue 20 Jan 2026 02:09:44 +0000
ROA not before: Tue 20 Jan 2026 02:04:44 +0000
ROA not after: Tue 19 Jan 2027 02:09:44 +0000
asID: 23724
IP address blocks: 180.184.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:3f:97:63:c4:8e:1c:de:81:af:c4:e0:bc:9e:55:d6:51:5d:7e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Jan 20 02:04:44 2026 GMT
Not After : Jan 19 02:09:44 2027 GMT
Subject: CN=01FFC20A9BD5AA6B13969DCB0B67069E6F466AB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:8c:9f:99:c2:96:a9:3a:20:df:97:b3:66:
9e:01:69:69:dd:c6:7d:82:ee:5d:70:c9:64:a1:46:
9f:a2:78:0c:bb:89:fb:18:32:29:4f:51:86:fb:4d:
29:b6:95:0e:cc:a6:dd:14:bf:b5:4a:ec:ab:6c:da:
ad:69:6c:b4:a6:4d:75:cf:1a:54:63:8c:4e:19:74:
d7:d5:00:fa:90:8a:e5:dc:9a:6e:e6:2e:e0:cb:d5:
1b:16:46:99:ba:8e:bc:44:be:c2:5e:ca:bd:12:7e:
1c:ea:13:55:34:50:cf:56:f3:93:c5:e4:d6:72:cc:
e7:29:2a:77:3c:48:8f:de:62:4f:3f:53:df:01:e4:
97:a2:8d:72:67:d1:1b:24:b6:34:f2:ab:c2:d1:5d:
15:04:7e:d6:ba:8e:05:b2:ad:e4:31:eb:a9:cd:3f:
fc:88:2a:22:2d:b5:28:3e:4e:eb:e2:7a:cd:0f:b5:
09:d3:87:0d:f9:da:6a:00:16:16:a6:da:07:13:3f:
87:8f:5a:36:3a:10:31:b7:4c:9d:c9:bd:d9:5c:64:
8c:83:2e:5e:25:84:b1:80:05:f7:63:14:7a:40:13:
7d:1c:c7:c2:72:90:37:74:55:db:00:32:5c:23:9d:
2c:4a:30:14:06:6f:54:7d:5d:aa:a7:88:c0:c5:65:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FF:C2:0A:9B:D5:AA:6B:13:96:9D:CB:0B:67:06:9E:6F:46:6A:B6
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e35362e302f32312d3234203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.184.56.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:5f:4b:cd:dd:be:41:2e:11:6d:9d:73:83:c0:d2:dc:e2:57:
1f:98:2c:e1:3f:19:33:f2:63:bc:f1:ee:78:9a:6d:53:2a:73:
5e:e5:d6:04:e6:08:91:37:b5:1a:7e:4f:fc:72:32:b2:30:a7:
db:8c:0a:33:44:9c:f6:8f:24:58:85:43:6b:37:07:ef:78:fc:
f6:02:9b:d0:11:ee:f6:b3:31:1c:bf:97:4d:f1:f3:f4:9a:74:
1d:e5:8a:f1:d6:c0:d8:99:a3:5f:26:80:15:78:dc:99:73:f4:
0a:53:1b:74:62:e1:d5:35:3a:30:12:59:f8:a6:73:33:06:f9:
56:53:ee:56:f8:d7:92:a5:df:39:22:55:58:6e:40:f5:e2:73:
15:c7:3c:ce:fe:f1:c1:6d:7f:62:cf:03:10:67:89:6e:32:8c:
7b:ff:79:0d:df:b0:cc:90:18:60:7e:a0:5f:b7:f8:d2:3f:bb:
5b:84:bf:3e:1a:ea:75:63:ad:a2:c4:41:bc:d3:88:50:c2:7f:
7e:85:48:b8:ea:94:87:a4:8d:32:1a:3d:4b:ff:51:42:65:96:
33:26:e9:4b:88:a3:9b:b2:b4:65:a7:62:f1:6d:98:5e:e9:ef:
5a:6a:a5:79:ee:57:9a:16:e9:c7:f2:c8:d6:7f:fe:90:8f:ec:
01:5a:0f:e9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:08:36 2026 by rpki-client