This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3132342e32382e3139322e302f31382d3138203d3e2039383132.roa
File: 3132342e32382e3139322e302f31382d3138203d3e2039383132.roa (raw, json)
Hash identifier: DW1JgAzNOpt1nHAAB8U84B29VadH7OwvhGjYO880qiM=
Subject key identifier: 5C:CC:25:EA:25:B1:FC:CA:05:4A:5E:B1:A5:C0:C3:DA:F4:5C:45:6F
Certificate issuer: /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Certificate serial: 75C6BB42C331F2556C25B1C01006535CF21593F1
Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3132342e32382e3139322e302f31382d3138203d3e2039383132.roa
Signing time: Tue 20 Jan 2026 02:22:41 +0000
ROA not before: Tue 20 Jan 2026 02:17:41 +0000
ROA not after: Tue 19 Jan 2027 02:22:41 +0000
asID: 9812
IP address blocks: 124.28.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:c6:bb:42:c3:31:f2:55:6c:25:b1:c0:10:06:53:5c:f2:15:93:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Validity
Not Before: Jan 20 02:17:41 2026 GMT
Not After : Jan 19 02:22:41 2027 GMT
Subject: CN=5CCC25EA25B1FCCA054A5EB1A5C0C3DAF45C456F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:58:31:07:c1:d8:33:cc:77:76:e4:dc:55:
0a:de:4f:4f:e9:80:6c:76:71:01:0a:ce:ca:78:1a:
62:15:cf:8e:2f:47:af:a5:0c:a3:e8:1a:ba:63:60:
c0:ed:89:d5:88:84:f4:69:8d:d1:f1:f6:50:5d:23:
40:6a:44:03:17:72:55:3f:8b:7e:82:11:d4:0e:2e:
54:13:05:cc:e3:fc:ab:3a:f1:d6:f7:92:a7:91:c2:
0c:ab:21:37:6b:68:24:69:cb:8c:68:ad:a5:27:84:
02:16:6d:b2:02:de:56:13:8e:2f:08:cb:44:2c:59:
80:d4:a0:2b:24:ab:35:36:2e:0f:da:48:4c:9b:29:
21:59:0e:8a:b4:f0:0a:e5:07:65:1f:0a:d1:a1:1b:
78:16:2c:e2:4b:59:2f:6b:9f:89:e2:c5:0c:a1:ea:
bf:61:67:b5:ea:19:1a:06:76:6c:48:b0:19:f5:63:
57:e1:12:a3:04:69:a9:04:af:bb:5e:5a:85:31:5b:
57:a0:15:41:91:99:f6:37:8b:49:c1:9b:85:93:1a:
09:fa:e1:b2:2a:04:b6:14:fd:1a:6a:3a:c0:9d:d7:
ff:0b:60:fc:4e:ab:fa:bb:9b:24:01:17:11:ab:ce:
63:1c:d1:b9:e4:fb:73:5b:a0:39:d0:d1:b9:a5:7c:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CC:25:EA:25:B1:FC:CA:05:4A:5E:B1:A5:C0:C3:DA:F4:5C:45:6F
X509v3 Authority Key Identifier:
keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3132342e32382e3139322e302f31382d3138203d3e2039383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.28.192.0/18
Signature Algorithm: sha256WithRSAEncryption
39:4e:93:f3:d6:da:0d:34:d5:fe:d1:44:55:fc:ea:56:35:35:
c4:9b:8c:f8:f2:e0:db:af:0c:4e:18:15:ef:35:25:e1:7d:8f:
0d:e2:7b:63:3e:f4:e6:29:fd:81:2c:57:d9:67:77:b3:04:e1:
d6:f7:3b:85:7e:bc:7b:36:f0:ba:49:b1:96:b5:6b:25:c0:2e:
c6:72:bf:00:cb:a8:21:2d:ec:50:b0:ce:a4:5b:ed:fa:96:db:
42:5b:bb:32:c8:4b:5f:2a:c9:cb:49:d7:46:a1:f3:84:bd:e2:
91:81:c7:94:50:a9:44:8f:23:cd:8d:9b:19:8e:21:65:20:7b:
24:1a:ab:1e:76:43:57:da:2c:c9:d1:36:7a:a2:1d:b2:6c:64:
f8:40:3b:b5:94:44:40:d0:c8:a0:10:ca:6d:ea:a7:e4:6a:39:
5b:dd:aa:a9:ef:3d:51:ea:a3:ac:26:c0:1d:25:fd:62:10:e0:
85:54:b2:1e:c2:d4:5c:4d:33:8a:94:29:f1:50:b3:3f:64:18:
c9:1b:06:3c:6a:55:0c:c6:2b:01:95:3f:82:7f:a9:80:2e:90:
89:f9:07:02:45:15:c2:08:d9:13:0e:b7:e7:c3:5c:7c:62:9a:
96:50:a6:19:bf:68:5a:9e:fb:a5:0f:f5:fa:02:c8:cb:08:90:
55:c6:8a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:45 2026 by rpki-client