This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/35382e32342e302e302f31352d3135203d3e2039383132.roa
File: 35382e32342e302e302f31352d3135203d3e2039383132.roa (raw, json)
Hash identifier: dP3XlbPzVOC5ywjU5fVA9LH4s0PLKp6zS2/E+y456oc=
Subject key identifier: 58:5C:B8:BA:C9:00:75:F2:3B:BF:EA:E0:C7:F2:6B:C1:0F:CE:D4:CE
Certificate issuer: /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Certificate serial: 69D596D8A40E79EA1BCE40766C42C57166FD3268
Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/35382e32342e302e302f31352d3135203d3e2039383132.roa
Signing time: Tue 20 Jan 2026 02:22:41 +0000
ROA not before: Tue 20 Jan 2026 02:17:41 +0000
ROA not after: Tue 19 Jan 2027 02:22:41 +0000
asID: 9812
IP address blocks: 58.24.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 13:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d5:96:d8:a4:0e:79:ea:1b:ce:40:76:6c:42:c5:71:66:fd:32:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Validity
Not Before: Jan 20 02:17:41 2026 GMT
Not After : Jan 19 02:22:41 2027 GMT
Subject: CN=585CB8BAC90075F23BBFEAE0C7F26BC10FCED4CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:86:86:6e:97:cd:93:39:b3:61:d4:51:c7:
79:72:4f:f8:21:8c:1a:23:6e:ff:d3:8d:4a:ab:55:
8f:32:b3:ba:b3:35:6c:5c:23:17:a8:04:ab:86:3a:
6f:49:80:14:85:4b:f2:30:41:82:56:bb:34:1f:f2:
5e:be:30:93:22:76:ca:f1:5a:3f:1b:e0:65:22:61:
7e:7d:90:8a:64:55:db:3d:67:fc:ff:11:22:1a:f4:
d0:13:6c:e0:25:4f:e5:c1:11:f3:a5:ca:c1:57:09:
fe:f9:9b:8c:27:76:30:93:6e:d5:61:7b:52:69:e2:
39:84:9f:29:60:3f:5a:93:e4:37:9b:69:73:0e:ba:
e7:e3:1d:7f:20:f2:9a:df:02:6d:c9:42:6a:5d:22:
cc:db:e5:98:e4:c0:06:4a:f7:85:26:5e:f2:77:ba:
4e:85:d4:70:09:09:bf:41:98:34:0c:b9:60:2f:d1:
64:a6:e2:1b:bb:6e:73:e9:c1:5a:e4:94:9c:6c:bb:
d2:06:5d:c8:e6:0f:a1:66:50:3f:ea:74:60:79:1c:
fa:80:cd:fe:d6:25:68:28:6d:d5:d7:9e:62:3f:ad:
8b:18:e2:7b:2c:c5:2a:ee:92:3d:e2:f1:c9:23:78:
6b:de:75:fe:a7:33:19:0b:93:de:8a:11:37:07:5b:
2d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5C:B8:BA:C9:00:75:F2:3B:BF:EA:E0:C7:F2:6B:C1:0F:CE:D4:CE
X509v3 Authority Key Identifier:
keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/35382e32342e302e302f31352d3135203d3e2039383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.24.0.0/15
Signature Algorithm: sha256WithRSAEncryption
87:70:53:f6:bd:d8:bb:97:18:2e:29:ed:19:66:3c:17:f8:00:
6f:f0:68:98:ba:92:a2:15:75:3a:46:66:2c:dd:41:ae:fe:af:
8e:8c:c9:8a:54:75:7c:87:a3:f3:93:73:03:af:23:38:be:5f:
24:70:1c:17:63:da:7b:1c:bc:a3:5c:0b:20:1b:56:e4:5a:af:
3c:3e:7f:95:d3:bf:ef:71:39:77:07:b3:1d:78:54:ee:38:07:
aa:73:d9:6d:09:d4:42:ff:c1:85:e4:cb:df:42:34:40:6c:11:
18:3a:92:17:31:67:b1:f3:31:98:b7:ed:0f:02:eb:b1:6c:db:
d9:14:f3:91:a7:3a:8e:81:2a:0d:a4:cc:bb:54:a1:b5:40:69:
70:00:88:06:1c:90:1c:81:a3:4b:25:ae:26:9e:f3:c0:e4:75:
13:93:69:b5:9a:c7:80:fa:83:f5:f9:2f:01:44:78:be:21:db:
1d:f3:31:f4:28:17:b3:d6:66:72:f5:af:57:01:da:fb:94:bd:
c6:99:28:3c:38:fd:b0:f9:ea:43:bd:64:ce:87:9d:e6:7f:60:
21:05:2c:be:12:1c:9a:b6:cf:09:1b:04:78:c8:1e:6d:9b:1c:
b6:33:eb:db:f5:ef:ce:a1:58:dd:53:5b:27:ac:4d:88:6b:09:
81:4f:19:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:54:15 2026 by rpki-client