This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3232312e3133372e302e302f31362d3136203d3e2039383132.roa
File: 3232312e3133372e302e302f31362d3136203d3e2039383132.roa (raw, json)
Hash identifier: mmXo5vwQUl9DjHaw7w9J6BLySGqFa+09Q3TZHZ3hE0s=
Subject key identifier: B1:D9:D4:57:7C:4C:F6:95:D5:0A:AE:35:88:A6:4A:C8:1D:81:6B:80
Certificate issuer: /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Certificate serial: 32729AB161958F90C173B20378A306AE7FD3E84B
Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3232312e3133372e302e302f31362d3136203d3e2039383132.roa
Signing time: Tue 20 Jan 2026 02:22:42 +0000
ROA not before: Tue 20 Jan 2026 02:17:42 +0000
ROA not after: Tue 19 Jan 2027 02:22:42 +0000
asID: 9812
IP address blocks: 221.137.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:72:9a:b1:61:95:8f:90:c1:73:b2:03:78:a3:06:ae:7f:d3:e8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Validity
Not Before: Jan 20 02:17:42 2026 GMT
Not After : Jan 19 02:22:42 2027 GMT
Subject: CN=B1D9D4577C4CF695D50AAE3588A64AC81D816B80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:0e:26:2a:12:52:52:90:0e:77:a6:ac:84:
e4:c8:9b:e4:41:f3:f3:34:00:6e:4c:70:d4:6e:da:
f9:2a:21:be:d1:71:a7:ba:07:a9:14:3a:b4:2f:a7:
f2:eb:f6:0a:90:db:68:83:6b:ce:3a:bd:55:c0:6f:
6f:44:4d:5f:24:92:23:18:5d:8f:86:db:6c:e0:ef:
2e:69:65:b1:3c:a3:db:34:d3:38:0e:ae:50:e2:ea:
85:3a:14:90:c9:ea:4d:17:53:91:28:f7:4e:af:e3:
4f:40:50:99:f6:ed:fc:bf:8b:b7:df:5c:2b:eb:9b:
50:e2:29:fa:f3:89:1a:c0:4f:b3:af:61:a6:30:f0:
50:6b:9c:6f:3d:2e:1a:95:16:b1:f5:59:e9:77:af:
f6:2e:47:ed:ba:85:a4:24:c6:ac:86:28:3d:6f:2a:
17:bb:b8:11:80:cf:c6:b4:80:91:e0:62:d2:c3:71:
a3:13:c7:7a:c7:3e:40:f3:4c:6a:44:88:64:7d:9a:
93:24:61:fb:25:b6:6d:f6:28:2e:84:50:b7:8f:04:
2e:ee:03:c5:0a:c7:a3:5c:08:85:20:d1:87:ba:e7:
3b:e4:f5:42:2d:26:66:25:a9:39:c9:9c:e1:cd:2b:
9a:d2:a6:c9:0b:a5:a8:5a:c7:1c:24:d5:03:5b:e6:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D9:D4:57:7C:4C:F6:95:D5:0A:AE:35:88:A6:4A:C8:1D:81:6B:80
X509v3 Authority Key Identifier:
keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3232312e3133372e302e302f31362d3136203d3e2039383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
221.137.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:c9:20:77:7a:61:89:b8:84:40:35:c8:5f:ca:f3:24:c2:2c:
d1:82:90:30:46:a4:32:d1:39:fb:83:8e:3f:b8:5d:40:d5:36:
32:8a:f7:42:91:81:34:bd:5b:9a:bc:e2:46:d7:38:c6:c0:8a:
cc:0d:4e:87:4e:f2:4c:50:6a:35:98:e5:ce:13:8f:b8:cb:f3:
ad:ac:c4:f9:06:36:6f:ed:bc:97:f9:9b:b5:07:f7:ff:50:a5:
fe:0a:fc:1f:9b:9c:b7:db:3c:79:c4:fd:b9:ac:44:dc:ec:8a:
d5:2c:e2:62:6c:df:1e:4f:80:50:b8:e8:26:de:52:5d:7c:c9:
1c:8f:5a:8e:11:c1:99:7b:9e:d0:8b:3f:9f:da:10:5f:69:25:
1c:a3:4f:82:ba:f6:61:43:97:53:49:d8:6a:c1:5a:dd:df:3c:
95:16:19:b1:4e:d8:90:28:6b:fc:58:13:5b:92:8d:ea:17:f1:
2a:6d:91:2b:26:99:11:58:40:c1:bf:d7:43:27:f1:68:bd:2f:
7e:bb:59:75:27:b2:6a:8b:14:a9:4c:94:6f:a4:6a:75:a3:af:
d7:cd:d8:bd:18:a6:df:75:38:d8:4c:af:c0:60:56:d5:e0:ee:
ed:c2:f3:cc:df:8e:63:8e:e6:f2:73:db:69:ca:14:a5:46:e1:
9b:56:10:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:15 2026 by rpki-client