This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3139322e302f31382d3138203d3e203538383334.roa
File: 3131392e322e3139322e302f31382d3138203d3e203538383334.roa (raw, json)
Hash identifier: T0J1QRFX4YaTegVHK+21kDXI3TfQu2p4E7iwujTcrOU=
Subject key identifier: 79:45:66:E1:2B:DE:A2:FD:BA:C9:55:00:C0:38:47:10:EE:3A:67:9A
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 34415FAED5EC76638E415FCD1E3A44FCB9E3FA0A
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3139322e302f31382d3138203d3e203538383334.roa
Signing time: Tue 20 Jan 2026 02:13:07 +0000
ROA not before: Tue 20 Jan 2026 02:08:07 +0000
ROA not after: Tue 19 Jan 2027 02:13:07 +0000
asID: 58834
IP address blocks: 119.2.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 12:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:41:5f:ae:d5:ec:76:63:8e:41:5f:cd:1e:3a:44:fc:b9:e3:fa:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Jan 20 02:08:07 2026 GMT
Not After : Jan 19 02:13:07 2027 GMT
Subject: CN=794566E12BDEA2FDBAC95500C0384710EE3A679A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:1e:ab:d0:1f:b9:19:c1:e7:39:8e:a4:b7:
f8:34:1f:1c:41:85:a5:fb:df:f3:e8:69:4b:75:9b:
d9:8a:20:17:d8:4f:11:30:ba:52:0d:6d:ba:26:24:
e6:d7:6c:9b:11:d7:30:11:7a:00:9e:a6:ce:c1:e8:
f1:a6:a0:75:07:81:5c:86:26:7f:1f:ea:26:9c:d1:
e3:ad:97:d6:05:f2:d2:28:c1:4b:33:d7:3c:8e:71:
9d:a7:be:e8:ba:fe:ab:c2:64:e1:5e:e2:1d:52:7f:
ff:33:83:83:15:fa:fc:6f:03:ad:91:07:e8:1f:b8:
45:36:0d:ce:78:9c:f1:e9:af:4a:56:d9:ae:f6:69:
4a:96:9a:51:ef:27:51:84:ee:4e:c7:67:df:4b:03:
12:f8:fa:2d:ad:a1:fb:ab:83:9e:d6:5d:82:22:06:
08:ca:d8:e3:f2:08:b0:2d:2d:37:44:50:c8:5b:47:
01:7b:3a:8c:66:39:77:33:a3:cf:b8:c2:4f:af:0f:
da:2e:31:29:d6:90:b0:62:17:f3:c7:4b:50:24:ea:
e8:25:11:e0:db:f2:27:72:65:7a:1b:ac:45:51:4f:
05:a2:92:1f:c0:ad:e2:e9:d4:65:a5:8f:1c:33:7a:
a9:93:91:be:b5:3f:51:7d:2a:35:77:60:10:db:79:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:45:66:E1:2B:DE:A2:FD:BA:C9:55:00:C0:38:47:10:EE:3A:67:9A
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3139322e302f31382d3138203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.2.192.0/18
Signature Algorithm: sha256WithRSAEncryption
19:d9:07:aa:8c:a4:a3:b1:87:a7:39:74:94:33:9f:83:43:aa:
0e:28:f5:21:57:88:4c:0d:be:e0:a5:da:db:ac:2e:ed:05:b8:
35:b2:df:59:ca:6d:0b:7a:0b:6d:a2:6d:a7:c4:c6:3d:8a:66:
90:d6:e7:7b:c9:50:9d:29:4e:c7:ed:b4:db:41:5e:35:1e:7c:
a0:55:95:f9:c1:15:01:2b:75:02:98:f1:f4:d8:11:71:77:f9:
7f:36:e9:49:d5:74:4d:f0:a0:6a:4b:5a:46:d4:0b:b2:fc:2c:
c1:0a:f2:07:2b:74:7d:38:57:8b:33:14:33:ff:fc:d5:aa:70:
cf:a1:5e:5e:3f:07:fd:aa:30:af:12:28:38:3c:aa:81:5b:63:
ae:9b:48:a6:de:6e:3b:3f:c3:9b:19:a0:77:4b:e8:49:ae:53:
bb:98:18:2b:3b:b0:7d:5a:ba:9a:92:1e:85:79:74:7e:58:86:
6d:e5:7c:02:19:8b:49:bc:c0:18:a9:d7:d5:b8:b6:30:07:0e:
18:9d:5e:3d:8f:21:ea:ce:9d:35:48:04:53:74:3a:b2:44:85:
77:5e:d0:93:9e:8a:b7:4b:28:07:0c:94:a1:b7:18:9b:73:c2:
d4:77:9f:68:00:1b:80:c6:d4:69:e9:bd:f6:cd:74:b6:53:ec:
dd:ea:d4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:50:14 2026 by rpki-client