This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3139322e302f32302d3230203d3e203538383334.roa
File: 3131392e322e3139322e302f32302d3230203d3e203538383334.roa (raw, json)
Hash identifier: E/nYbGjsM/ERpG2eOWYYm+FcrdcnyqGy0H7qbNyYDMY=
Subject key identifier: 43:3B:80:FD:13:36:66:09:01:47:44:FF:60:87:E2:03:A8:92:9C:24
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 311711227FF81CF351866A5E2C417B90CEB5B94A
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3139322e302f32302d3230203d3e203538383334.roa
Signing time: Tue 20 Jan 2026 02:13:07 +0000
ROA not before: Tue 20 Jan 2026 02:08:07 +0000
ROA not after: Tue 19 Jan 2027 02:13:07 +0000
asID: 58834
IP address blocks: 119.2.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 12:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:17:11:22:7f:f8:1c:f3:51:86:6a:5e:2c:41:7b:90:ce:b5:b9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Jan 20 02:08:07 2026 GMT
Not After : Jan 19 02:13:07 2027 GMT
Subject: CN=433B80FD13366609014744FF6087E203A8929C24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:02:be:94:a1:4a:10:d6:ff:31:df:7e:e3:
56:4a:8e:da:f6:39:2a:d1:0a:f5:ea:58:65:21:32:
62:86:dc:a3:70:c3:10:65:70:4d:4b:50:ab:d0:10:
e3:60:d2:a4:e8:c6:eb:bd:88:6a:47:9d:fc:47:20:
ec:76:82:f2:ff:fd:a2:ab:ce:13:b9:2d:38:0a:83:
51:54:cc:3f:ce:d8:e8:3d:54:8c:d6:fe:bd:9d:64:
66:e3:61:cc:ca:ce:a7:d2:f4:99:0f:38:65:83:e7:
51:04:d3:dc:18:36:68:7e:ac:eb:ac:66:56:52:78:
e3:7c:41:74:6d:70:31:65:e0:ff:d4:f3:8a:9f:1b:
24:92:02:f7:66:27:94:34:e5:24:6b:76:11:da:56:
2e:03:f2:f3:ad:47:a8:1a:6c:e2:8a:fe:c1:28:fa:
dd:0a:74:ad:fc:64:74:ec:97:6a:89:d5:f2:48:d9:
56:6d:36:55:fe:bd:ab:30:73:1f:53:b5:4f:5f:ff:
ef:aa:f9:2c:66:e6:79:42:6a:3f:94:8f:14:09:d8:
f3:0b:d2:b8:28:4c:02:a6:b5:2a:f3:bc:50:c2:a4:
c1:3f:c2:00:5e:66:aa:4a:ff:a3:21:1d:ae:cf:8b:
6d:1b:71:e6:5d:de:c8:a4:5b:00:58:2c:28:1c:bc:
ae:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3B:80:FD:13:36:66:09:01:47:44:FF:60:87:E2:03:A8:92:9C:24
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3139322e302f32302d3230203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.2.192.0/20
Signature Algorithm: sha256WithRSAEncryption
67:ed:8f:02:33:e1:d2:f1:a2:29:fe:68:a9:71:54:4f:45:d1:
0b:d9:a2:f0:86:8e:80:7f:14:a1:f3:e2:89:5e:6e:b7:25:1a:
35:aa:81:b9:56:b0:9c:3a:22:bb:94:47:79:b2:70:c5:55:c3:
43:94:49:44:e7:c9:7e:cd:41:7c:d1:7c:53:4d:3c:f1:be:1b:
93:08:f7:d0:29:61:f0:95:38:7d:8c:c5:fb:93:e9:e7:4b:d3:
cb:21:91:e8:70:c7:45:09:44:f3:93:f5:c1:6f:06:1a:56:fd:
68:5c:8e:96:3d:73:bd:a6:bb:9d:e0:40:46:d1:2a:11:3f:d8:
4a:3a:c7:2e:00:db:7d:6d:2b:4b:93:3a:18:9c:1c:22:53:61:
cb:b8:bd:6d:07:be:65:09:f2:5f:21:41:ef:eb:e5:7e:d2:16:
9e:d2:90:13:0a:6b:8d:55:69:30:c9:fb:8b:96:a3:d5:0a:02:
9a:bb:7c:32:a6:49:ff:7b:6c:75:46:08:23:49:50:6a:b0:ca:
f3:e1:fd:51:65:59:c5:6e:92:4d:a8:3f:aa:7a:d4:25:13:83:
cd:7f:a0:b5:76:06:0a:39:0f:cc:b0:ff:ea:f3:02:87:f3:87:
87:63:f9:f6:a4:23:d4:47:51:78:f5:48:10:92:df:6c:ce:d4:
90:e3:9f:1b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUMRcRIn/4HPNRhmpeLEF7kM61uUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3
OTBBOUUwRTAeFw0yNjAxMjAwMjA4MDdaFw0yNzAxMTkwMjEzMDdaMDMxMTAvBgNV
BAMTKDQzM0I4MEZEMTMzNjY2MDkwMTQ3NDRGRjYwODdFMjAzQTg5MjlDMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qAK+lKFKENb/Md9+41ZKjtr2
OSrRCvXqWGUhMmKG3KNwwxBlcE1LUKvQEONg0qToxuu9iGpHnfxHIOx2gvL//aKr
zhO5LTgKg1FUzD/O2Og9VIzW/r2dZGbjYczKzqfS9JkPOGWD51EE09wYNmh+rOus
ZlZSeON8QXRtcDFl4P/U84qfGySSAvdmJ5Q05SRrdhHaVi4D8vOtR6gabOKK/sEo
+t0KdK38ZHTsl2qJ1fJI2VZtNlX+vaswcx9TtU9f/++q+Sxm5nlCaj+UjxQJ2PML
0rgoTAKmtSrzvFDCpME/wgBeZqpK/6MhHa7Pi20bceZd3sikWwBYLCgcvK4rAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUQzuA/RM2ZgkBR0T/YIfiA6iSnCQwHwYDVR0j
BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw
QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NTUzMzQ1LzAvMzEzMTM5MmUzMjJl
MzEzOTMyMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzODM4MzMzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHcCwDANBgkqhkiG9w0BAQsFAAOCAQEAZ+2PAjPh0vGiKf5oqXFUT0XRC9mi
8IaOgH8UofPiiV5utyUaNaqBuVawnDoiu5RHebJwxVXDQ5RJROfJfs1BfNF8U008
8b4bkwj30Clh8JU4fYzF+5Pp50vTyyGR6HDHRQlE85P1wW8GGlb9aFyOlj1zvaa7
neBARtEqET/YSjrHLgDbfW0rS5M6GJwcIlNhy7i9bQe+ZQnyXyFB7+vlftIWntKQ
EwprjVVpMMn7i5aj1QoCmrt8MqZJ/3tsdUYII0lQarDK8+H9UWVZxW6STag/qnrU
JRODzX+gtXYGCjkPzLD/6vMCh/OHh2P59qQj1EdRePVIEJLfbM7UkOOfGw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:08 2026 by rpki-client