This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f31372d3137203d3e203538383334.roa File: 3132342e3234302e302e302f31372d3137203d3e203538383334.roa (raw, json) Hash identifier: WxcnEk/RboesIhpSXmmX2tMf8XBMvrIYxcUx+chrucU= Subject key identifier: C2:A1:64:BC:12:19:02:71:EB:CD:39:51:FD:75:16:20:0B:35:C1:8D Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E Certificate serial: 247BB06FEDBEF04701D83E4744BE02C363A15683 Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f31372d3137203d3e203538383334.roa Signing time: Tue 20 Jan 2026 02:13:07 +0000 ROA not before: Tue 20 Jan 2026 02:08:07 +0000 ROA not after: Tue 19 Jan 2027 02:13:07 +0000 asID: 58834 IP address blocks: 124.240.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:7b:b0:6f:ed:be:f0:47:01:d8:3e:47:44:be:02:c3:63:a1:56:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E Validity Not Before: Jan 20 02:08:07 2026 GMT Not After : Jan 19 02:13:07 2027 GMT Subject: CN=C2A164BC12190271EBCD3951FD7516200B35C18D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3c:0c:60:50:69:0e:db:12:31:4b:83:49:ad: b5:b3:51:00:18:87:fa:4f:94:86:f2:d3:6a:68:59: 34:8b:c7:b0:ad:af:fe:95:50:db:87:51:a0:1d:5f: d1:da:99:9c:2d:65:9b:31:03:32:08:14:7e:25:b8: d3:d0:88:db:63:90:d9:5e:86:ac:95:0b:01:08:2f: 17:c3:cf:26:a7:9e:99:d0:bb:8b:58:c4:e4:4c:ee: 6f:f9:6c:32:9b:c9:02:85:19:d8:7e:ea:f6:16:7a: 09:b3:20:ef:28:cb:75:ff:d2:a6:b1:3a:1e:2f:6c: bd:c8:c6:9a:cc:d8:59:7c:1c:42:a1:cd:ae:ba:6e: 38:76:6f:1f:a5:5c:86:d4:a7:98:6a:ab:b9:18:e4: ed:f6:6a:c1:03:5d:b9:29:c0:7a:b6:c9:04:f5:03: 82:58:7e:e9:b4:97:0f:96:ae:05:89:52:e1:6a:5d: 74:b7:79:eb:93:bd:74:40:5b:09:fd:58:04:63:0e: 76:d7:71:c8:cd:1b:9a:86:ad:fc:18:cd:a6:c3:6e: cb:e9:3b:2b:5d:01:e6:3b:53:63:b1:74:19:a3:cc: 87:ef:b2:02:ab:d9:30:9a:7d:1a:16:e6:91:42:d8: 16:91:8f:57:67:b8:06:e2:90:27:0c:e8:4c:21:9f: e1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A1:64:BC:12:19:02:71:EB:CD:39:51:FD:75:16:20:0B:35:C1:8D X509v3 Authority Key Identifier: keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f31372d3137203d3e203538383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.240.0.0/17 Signature Algorithm: sha256WithRSAEncryption 14:61:cc:f4:30:4b:01:6a:33:e5:c2:6c:85:10:92:03:a8:7f: 6d:10:0d:b2:26:5c:4a:17:b0:f1:3e:6c:7d:00:2b:b2:a6:a3: cc:82:ce:94:fb:be:9c:16:f9:76:37:5f:7b:69:51:9f:27:be: 28:f4:f4:84:68:f1:b0:ad:b0:a8:55:f3:9f:16:15:87:59:e6: dc:10:81:59:dd:74:2b:95:4e:0d:d9:33:d4:45:73:e6:df:fa: ce:52:e8:45:ec:38:00:09:30:27:ba:bc:67:1e:a6:4e:13:74: c8:26:7f:da:b1:2a:e1:75:07:6e:6d:cb:64:5b:e0:22:5a:34: 74:b3:eb:50:24:39:86:d6:2c:ae:55:e6:85:68:4f:0c:9d:67: a7:78:e6:7e:06:ab:b8:5e:4c:c1:76:3c:dc:d8:ef:3d:fa:f3: 9d:2b:d3:09:24:39:f6:00:76:93:44:5f:38:ca:ee:e2:d4:aa: a5:2e:aa:46:0f:dd:ca:e4:72:17:26:6d:a6:ca:c4:c2:54:fe: 49:c5:2f:e5:35:9f:6e:7c:3f:51:1e:69:e4:2d:d8:a4:4a:8c: b2:cf:98:1a:d1:e5:94:20:bd:e5:89:19:9b:3b:d6:7c:f4:45: 98:0f:61:c8:a1:1d:af:4e:90:89:a1:bf:15:3b:d5:b7:e1:77: 56:67:b0:3f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUJHuwb+2+8EcB2D5HRL4Cw2OhVoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3 OTBBOUUwRTAeFw0yNjAxMjAwMjA4MDdaFw0yNzAxMTkwMjEzMDdaMDMxMTAvBgNV BAMTKEMyQTE2NEJDMTIxOTAyNzFFQkNEMzk1MUZENzUxNjIwMEIzNUMxOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPAxgUGkO2xIxS4NJrbWzUQAY h/pPlIby02poWTSLx7Ctr/6VUNuHUaAdX9HamZwtZZsxAzIIFH4luNPQiNtjkNle hqyVCwEILxfDzyannpnQu4tYxORM7m/5bDKbyQKFGdh+6vYWegmzIO8oy3X/0qax Oh4vbL3IxprM2Fl8HEKhza66bjh2bx+lXIbUp5hqq7kY5O32asEDXbkpwHq2yQT1 A4JYfum0lw+WrgWJUuFqXXS3eeuTvXRAWwn9WARjDnbXccjNG5qGrfwYzabDbsvp OytdAeY7U2OxdBmjzIfvsgKr2TCafRoW5pFC2BaRj1dnuAbikCcM6Ewhn+HNAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUwqFkvBIZAnHrzTlR/XUWIAs1wY0wHwYDVR0j BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NTUzMzQ1LzAvMzEzMjM0MmUzMjM0 MzAyZTMwMmUzMDJmMzEzNzJkMzEzNzIwM2QzZTIwMzUzODM4MzMzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB3zwADANBgkqhkiG9w0BAQsFAAOCAQEAFGHM9DBLAWoz5cJshRCSA6h/bRAN siZcShew8T5sfQArsqajzILOlPu+nBb5djdfe2lRnye+KPT0hGjxsK2wqFXznxYV h1nm3BCBWd10K5VODdkz1EVz5t/6zlLoRew4AAkwJ7q8Zx6mThN0yCZ/2rEq4XUH bm3LZFvgIlo0dLPrUCQ5htYsrlXmhWhPDJ1np3jmfgaruF5MwXY83NjvPfrznSvT CSQ59gB2k0RfOMru4tSqpS6qRg/dyuRyFyZtpsrEwlT+ScUv5TWfbnw/UR5p5C3Y pEqMss+YGtHllCC95YkZmzvWfPRFmA9hyKEdr06QiaG/FTvVt+F3VmewPw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:27 2026 by rpki-client