This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3132312e37362e302e302f31352d3135203d3e2039383132.roa
File: 3132312e37362e302e302f31352d3135203d3e2039383132.roa (raw, json)
Hash identifier: Z8arA0aUTb2Pr2sPMYiEaqH2Y6NkTrvREOSnyUUITDk=
Subject key identifier: 67:EE:46:B4:94:22:62:8D:68:2F:FA:4B:0C:F8:C8:23:C8:C9:03:C5
Certificate issuer: /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Certificate serial: 60AE7DE2D8253E924FDD7B24D373BF7413F71F91
Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3132312e37362e302e302f31352d3135203d3e2039383132.roa
Signing time: Tue 20 Jan 2026 02:22:40 +0000
ROA not before: Tue 20 Jan 2026 02:17:40 +0000
ROA not after: Tue 19 Jan 2027 02:22:40 +0000
asID: 9812
IP address blocks: 121.76.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ae:7d:e2:d8:25:3e:92:4f:dd:7b:24:d3:73:bf:74:13:f7:1f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Validity
Not Before: Jan 20 02:17:40 2026 GMT
Not After : Jan 19 02:22:40 2027 GMT
Subject: CN=67EE46B49422628D682FFA4B0CF8C823C8C903C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:68:e4:b1:fb:41:99:73:ca:1f:1a:b2:ea:
82:56:99:16:07:f6:96:da:ca:8c:20:75:e5:6a:6b:
fa:73:66:0d:23:9e:08:8a:8d:43:35:cf:f9:46:5d:
90:b1:ff:13:4a:c9:b3:73:78:86:3d:d2:f8:3f:ab:
63:47:b5:09:db:25:f3:ab:1e:70:cd:36:07:56:5e:
1b:75:95:e1:1a:c8:63:c3:3c:fe:ca:ed:fe:d3:29:
45:b0:0b:5b:76:a7:8c:a1:e2:43:bc:f2:7c:9e:fa:
95:c6:3c:a7:06:26:d7:50:ee:5b:9c:59:4b:e2:68:
3e:3f:b8:1d:8a:5e:8a:27:58:35:b6:3d:f7:4a:45:
c4:58:2f:ea:09:63:55:27:b2:68:46:b3:98:ef:a6:
e6:4e:da:fb:04:fc:70:48:1b:64:93:1a:85:23:be:
03:e0:50:b7:fb:af:fd:17:9e:9b:ce:a6:cd:c6:dc:
f4:4c:e2:e5:fc:b3:4d:f9:79:c5:5f:4e:41:3d:79:
fb:52:22:ce:49:90:3c:51:33:4c:23:fa:17:ad:1c:
37:81:a1:8f:69:a6:05:ff:ea:17:6a:57:f7:f6:f1:
34:fa:7d:36:81:bd:0d:9b:48:1d:84:34:5c:c8:b1:
88:2f:9c:18:ad:44:44:34:71:95:3d:c8:90:11:11:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EE:46:B4:94:22:62:8D:68:2F:FA:4B:0C:F8:C8:23:C8:C9:03:C5
X509v3 Authority Key Identifier:
keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3132312e37362e302e302f31352d3135203d3e2039383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.76.0.0/15
Signature Algorithm: sha256WithRSAEncryption
6e:a2:5b:8a:9d:31:da:f8:49:a9:6e:49:c0:49:93:53:a6:b9:
bf:cf:f1:49:6a:d0:32:6f:c6:c6:2a:11:10:60:9f:86:92:38:
b7:b1:da:86:c9:09:26:02:e0:92:b9:91:38:7d:44:6b:70:e7:
9f:21:3b:61:d7:a5:47:74:0c:0c:cc:5d:b0:8d:66:e6:3b:d4:
72:a2:5f:85:f1:d2:e3:16:73:6a:f7:fe:50:b1:c1:98:c3:01:
a0:83:96:9e:ca:0c:37:f7:69:0f:ba:80:91:d4:c6:d9:5b:f1:
ee:0f:1f:bd:fb:85:3d:f5:4a:64:67:bf:26:99:fc:e5:0f:aa:
f9:58:1e:1e:69:6a:49:8d:2e:a1:88:d7:2b:7f:8b:a2:86:4f:
58:0c:dd:d7:c4:ee:99:ae:90:e2:b8:2c:1f:00:41:99:ca:aa:
db:4b:94:0c:44:25:91:08:f6:f2:cb:64:f8:ce:b9:71:8b:a9:
0b:0b:e4:44:37:5e:47:b2:37:58:d9:1b:2a:3d:74:3e:ab:03:
81:30:ad:82:35:f9:e6:59:e9:75:1c:45:4e:b0:3f:f3:e8:56:
ca:38:b5:3c:a7:24:b6:36:a5:b1:fe:9a:12:05:dd:59:4d:84:
13:da:eb:95:96:d6:87:4b:2e:bd:23:6c:82:1a:72:bd:49:42:
5e:46:5e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:31 2026 by rpki-client