This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3235352e302f32342d3234203d3e203538383334.roa
File: 3131392e322e3235352e302f32342d3234203d3e203538383334.roa (raw, json)
Hash identifier: YLLy99HKP/jZyR6Z6KYyOBb7qKjNmgg7mq8uFLeTCbw=
Subject key identifier: E7:CF:C2:29:62:14:FE:A1:2B:04:BE:E2:B1:CC:8F:29:AA:8A:AF:22
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 2B1A3E2B403E75241599755023EF016B04E14C73
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3235352e302f32342d3234203d3e203538383334.roa
Signing time: Tue 20 Jan 2026 02:13:06 +0000
ROA not before: Tue 20 Jan 2026 02:08:06 +0000
ROA not after: Tue 19 Jan 2027 02:13:06 +0000
asID: 58834
IP address blocks: 119.2.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 12:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:1a:3e:2b:40:3e:75:24:15:99:75:50:23:ef:01:6b:04:e1:4c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Jan 20 02:08:06 2026 GMT
Not After : Jan 19 02:13:06 2027 GMT
Subject: CN=E7CFC2296214FEA12B04BEE2B1CC8F29AA8AAF22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:c5:86:e0:6c:16:15:f1:cf:65:e9:40:ba:
29:a4:44:56:ba:85:72:2e:5e:87:88:ca:9f:75:95:
d3:c5:3c:99:39:90:19:40:d5:61:93:7a:2b:f4:36:
bb:54:37:9f:46:5c:70:2b:3f:df:b1:9b:d1:b9:7b:
4f:b6:d1:e2:db:5e:a1:63:3a:f1:6c:b8:8a:5d:06:
3d:9c:81:b3:47:8a:3e:ba:3d:8b:9c:e7:04:4b:46:
1d:56:b0:dc:e4:65:f6:fd:d7:0d:67:a4:08:c2:72:
d6:ce:b0:de:c2:1e:31:eb:e8:91:3b:34:f8:b6:ef:
83:ed:37:b3:09:40:9b:d7:79:ff:fd:e0:a7:0d:97:
7f:1b:1c:9b:fa:53:90:f5:c7:75:a5:8e:72:87:59:
90:2f:85:ae:ab:f6:1d:06:30:9f:72:6c:32:1d:f5:
20:aa:23:c5:a8:6d:7b:d6:9e:ea:30:cc:65:19:57:
00:8a:b9:d5:d4:78:b6:62:25:b4:e2:ed:ab:c4:60:
22:85:47:7c:cc:ad:5f:21:e0:d2:d2:cd:95:5e:19:
16:a3:d9:1a:80:01:9e:95:74:84:de:ff:25:20:2d:
43:02:2d:7f:fa:02:88:81:fe:ce:73:79:d5:be:c0:
99:dc:09:72:9d:50:66:9a:70:96:29:58:b1:12:0b:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CF:C2:29:62:14:FE:A1:2B:04:BE:E2:B1:CC:8F:29:AA:8A:AF:22
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3235352e302f32342d3234203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.2.255.0/24
Signature Algorithm: sha256WithRSAEncryption
07:50:45:b5:e9:82:c5:cf:fe:22:f5:d1:76:a4:de:13:b7:ac:
0d:00:8a:73:55:53:d8:07:64:98:73:54:37:7b:84:a6:49:ae:
ef:2e:a0:85:09:56:71:22:28:d9:4e:75:d3:c1:44:b9:c9:0f:
15:27:9e:1c:a0:f7:ca:25:ca:06:ab:06:b4:be:d3:71:d5:c7:
43:b1:33:18:80:8e:59:37:67:e6:79:e3:d2:f2:eb:a3:14:a0:
0e:84:80:aa:2c:42:a6:82:32:5b:ab:41:47:4e:06:1a:83:ec:
90:a5:c1:c3:23:7a:bc:64:c1:08:08:9c:97:ad:07:9e:9d:1e:
27:ec:81:5d:c7:f3:2d:c9:cb:c5:12:1e:95:8d:9c:31:a9:6c:
7d:54:b1:c5:4d:50:b8:69:82:23:d8:92:76:b9:60:61:09:1a:
15:12:c9:ca:00:2c:9e:8a:cc:dc:ca:bf:6d:fd:e5:28:0a:2c:
8a:0e:14:07:aa:c5:5e:35:94:75:09:c9:de:06:3e:40:d7:a1:
c3:45:c9:f5:ef:03:09:3c:1d:c5:7f:fe:ad:45:46:e7:85:e9:
2e:7c:3d:c4:fd:09:3f:72:63:a2:b8:a6:be:e0:7c:00:d1:64:
ad:f2:ff:c8:50:3d:fd:07:17:e0:fe:3a:57:6e:0d:22:f7:40:
e9:2b:4f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:57 2026 by rpki-client