This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3132342e3135312e302e302f31372d3137203d3e2039383132.roa
File: 3132342e3135312e302e302f31372d3137203d3e2039383132.roa (raw, json)
Hash identifier: k01bCJ6kshWSen/rUapiCFrvV/YQAUm9FZyg8mv0IxI=
Subject key identifier: 9D:84:46:41:E3:FD:3C:24:61:57:42:BF:F3:54:42:69:E0:28:0B:99
Certificate issuer: /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Certificate serial: 359A11F9E01579410328261F8A4650478528D7B4
Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3132342e3135312e302e302f31372d3137203d3e2039383132.roa
Signing time: Tue 20 Jan 2026 02:22:41 +0000
ROA not before: Tue 20 Jan 2026 02:17:41 +0000
ROA not after: Tue 19 Jan 2027 02:22:41 +0000
asID: 9812
IP address blocks: 124.151.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 13:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:9a:11:f9:e0:15:79:41:03:28:26:1f:8a:46:50:47:85:28:d7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Validity
Not Before: Jan 20 02:17:41 2026 GMT
Not After : Jan 19 02:22:41 2027 GMT
Subject: CN=9D844641E3FD3C24615742BFF3544269E0280B99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:95:f4:6a:3d:94:38:64:c4:c9:aa:e5:8c:
ae:ba:9d:60:ed:29:f6:34:4b:c0:6c:15:1f:a0:da:
04:4f:b6:c7:ec:06:96:0e:10:29:2b:07:3a:de:81:
bb:a8:c0:cf:89:0c:81:49:fc:8d:6f:fc:e0:ea:82:
5d:0b:70:cb:da:11:4e:b1:8f:14:9c:84:bc:6b:f0:
89:6f:61:0d:5b:1e:34:86:16:cf:85:7f:d7:05:bd:
ab:1f:8c:0a:5b:9b:82:3d:cd:c8:02:72:31:74:dc:
e3:d0:92:93:94:26:a6:1a:09:c6:24:2f:57:c1:0c:
d6:1b:12:5c:09:13:6e:c8:aa:22:db:93:1a:75:78:
d3:c1:5c:ab:f0:44:6e:73:87:e1:09:25:19:62:ab:
99:bd:44:89:db:30:36:c5:e3:84:11:95:d9:3c:fa:
5e:15:7c:09:68:8f:b4:cf:d9:b0:30:b6:05:64:19:
84:9b:be:8b:67:6d:d9:ff:65:95:b9:af:ec:b2:bf:
f7:5e:3a:29:c1:66:d6:77:c8:a5:83:e3:5a:79:26:
83:de:a8:39:b5:2a:7a:57:53:30:4b:9e:a2:f3:1e:
b4:28:1e:40:7e:28:b8:aa:66:42:d5:74:c4:27:a4:
3b:a5:de:5a:00:3f:5b:ed:01:ee:e1:34:9f:7b:c6:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:84:46:41:E3:FD:3C:24:61:57:42:BF:F3:54:42:69:E0:28:0B:99
X509v3 Authority Key Identifier:
keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3132342e3135312e302e302f31372d3137203d3e2039383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.151.0.0/17
Signature Algorithm: sha256WithRSAEncryption
25:62:86:5e:de:b0:e3:34:70:c5:14:12:d7:b7:01:14:dc:fe:
09:f2:3d:1c:a3:52:e5:8e:32:07:f4:d5:17:23:07:a2:88:b4:
58:e3:59:c5:7f:ae:6a:4c:9f:3e:8d:4b:c4:9b:40:3f:aa:97:
ce:53:20:e7:09:01:24:1a:5f:25:70:80:14:46:0a:d9:15:98:
9c:99:97:54:43:dd:dc:81:2a:9d:9e:b9:44:0a:08:36:dc:83:
1f:01:e3:e1:a4:e1:64:4e:13:a3:5e:bc:12:41:a4:27:13:71:
3d:66:af:96:68:f7:fe:f8:b0:ec:78:bc:30:63:74:f3:ed:13:
a9:d3:b0:3b:a1:2b:85:26:f7:e4:da:87:8e:b1:59:7f:24:53:
0d:6a:49:34:3d:8c:48:7d:38:3e:f9:fe:3f:86:3d:47:37:d4:
5b:99:2b:74:21:e6:92:f2:eb:a4:23:36:97:93:26:6d:d5:83:
07:cb:98:6f:c6:ac:06:f5:df:ea:20:cc:e9:5d:28:e6:69:f8:
e1:29:3f:21:52:58:c6:d4:ff:45:a4:d7:ca:20:38:12:b5:cd:
c1:50:cd:4d:e5:fe:68:1f:f6:07:39:e9:18:43:29:25:db:21:
23:c5:17:ba:52:3b:ad:a6:75:63:70:3b:4d:a2:55:dc:d8:05:
e1:73:e1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:55:19 2026 by rpki-client