This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3232332e3234382e302e302f31342d3134203d3e2039383132.roa
File: 3232332e3234382e302e302f31342d3134203d3e2039383132.roa (raw, json)
Hash identifier: z8ZnqnZ1o48EabgtGaDwsdJV1mTovJ+LdNyCanfGDqo=
Subject key identifier: 66:D3:A0:12:86:6D:D9:C4:FE:A3:FB:A4:A9:8B:C8:2E:27:10:AD:DC
Certificate issuer: /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Certificate serial: 47DFC3B9100AC685F497256B0E6ABC44EBC17EBF
Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3232332e3234382e302e302f31342d3134203d3e2039383132.roa
Signing time: Tue 20 Jan 2026 02:22:40 +0000
ROA not before: Tue 20 Jan 2026 02:17:40 +0000
ROA not after: Tue 19 Jan 2027 02:22:40 +0000
asID: 9812
IP address blocks: 223.248.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 18:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:df:c3:b9:10:0a:c6:85:f4:97:25:6b:0e:6a:bc:44:eb:c1:7e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Validity
Not Before: Jan 20 02:17:40 2026 GMT
Not After : Jan 19 02:22:40 2027 GMT
Subject: CN=66D3A012866DD9C4FEA3FBA4A98BC82E2710ADDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9f:14:55:8d:91:25:f8:38:d2:8d:dd:4f:35:
de:cf:02:88:63:eb:cd:49:af:f9:ea:13:1b:dc:2d:
d4:55:54:bc:27:04:e9:26:09:d8:5d:9a:4c:e2:b2:
6f:13:5e:bc:f2:23:90:aa:ef:96:83:1f:58:65:ef:
d3:7e:0d:f1:b7:16:15:4a:81:4b:f0:0e:b0:7a:c2:
64:67:3f:10:22:c7:84:99:89:40:70:b5:f0:95:a4:
49:72:e8:da:23:a5:d5:ee:97:e0:22:cd:f6:5b:a5:
b0:07:56:4d:1f:3c:85:0c:d9:0d:9b:7f:38:cb:9e:
f9:dd:7c:3b:d1:de:d8:15:d5:de:79:0a:9a:34:c5:
73:f8:2d:45:93:1d:46:11:e4:a0:91:9b:34:97:66:
f1:9a:b7:82:ec:3d:66:d7:42:7c:00:d1:5f:38:c3:
f1:fd:33:ff:f5:dc:8b:29:26:58:f7:7a:0a:d3:d4:
d7:2e:93:a6:65:d5:a4:c6:03:68:1e:cf:87:3e:64:
84:0d:4e:0e:91:3c:14:69:78:be:f0:3a:d7:cb:99:
32:ed:82:7c:e5:c7:d9:48:a6:02:97:64:40:e4:af:
71:3a:40:18:54:03:a0:07:03:fa:6f:9e:67:5a:e5:
d9:35:43:20:da:d4:ca:23:28:69:28:bc:ef:21:f0:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D3:A0:12:86:6D:D9:C4:FE:A3:FB:A4:A9:8B:C8:2E:27:10:AD:DC
X509v3 Authority Key Identifier:
keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3232332e3234382e302e302f31342d3134203d3e2039383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.248.0.0/14
Signature Algorithm: sha256WithRSAEncryption
3b:65:35:68:27:7a:5c:21:9f:1c:1a:84:5f:5d:b9:89:33:bf:
3c:8c:84:c2:39:f4:a6:69:5b:0a:57:3f:0a:9c:35:72:7e:98:
7a:c7:05:19:bb:dd:92:ba:10:53:89:1f:87:5b:b7:88:8f:9b:
a6:71:73:2a:a0:ae:a1:67:92:3e:36:49:db:b8:35:be:73:ad:
94:47:50:d2:87:ad:20:66:03:c3:70:08:08:1a:10:74:8b:48:
eb:93:29:bf:38:b6:ec:5d:f6:91:87:a0:aa:77:38:0b:ad:ac:
c1:25:c4:cb:38:37:f3:8d:fb:4e:3c:db:fe:94:e6:b8:e8:a3:
c2:4b:db:2c:19:f4:d9:50:5e:0e:c7:bc:c5:e6:33:6b:77:6d:
06:30:3e:78:55:53:72:78:d9:5f:50:f9:51:21:9b:fd:d5:17:
f8:5f:5a:a2:f6:4c:50:f7:a4:c1:cc:0b:69:cb:72:4b:f0:d7:
5f:33:f0:39:b1:ec:68:12:b8:81:f2:39:21:59:6c:8b:aa:06:
b4:fd:8e:e1:58:46:a5:b3:4f:97:ef:b3:1d:0a:15:31:d6:98:
d0:28:4c:99:f2:65:bf:17:45:62:e6:88:65:b7:16:b6:a6:29:
cb:54:ce:c3:44:07:0f:4e:b8:20:30:8d:4f:47:e4:15:ae:a1:
61:b6:0c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:34:32 2026 by rpki-client