This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f31382d3138203d3e203538383334.roa
File: 3132342e3234302e302e302f31382d3138203d3e203538383334.roa (raw, json)
Hash identifier: GMp+uG9HedtWkbLMhIbBC02b+0QekGCXEfkOgrdqAkk=
Subject key identifier: 13:0E:FC:3E:9C:63:AE:3C:67:C5:9B:FF:E9:A8:12:9A:41:DB:DA:0C
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 5F540FB07564720BBC5E3BA082FE9A4F2F78FE5C
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f31382d3138203d3e203538383334.roa
Signing time: Tue 20 Jan 2026 02:13:06 +0000
ROA not before: Tue 20 Jan 2026 02:08:06 +0000
ROA not after: Tue 19 Jan 2027 02:13:06 +0000
asID: 58834
IP address blocks: 124.240.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 12:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:54:0f:b0:75:64:72:0b:bc:5e:3b:a0:82:fe:9a:4f:2f:78:fe:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Jan 20 02:08:06 2026 GMT
Not After : Jan 19 02:13:06 2027 GMT
Subject: CN=130EFC3E9C63AE3C67C59BFFE9A8129A41DBDA0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:b1:b1:f8:61:17:66:c8:c8:f6:79:ab:5f:
32:15:1f:46:6c:a5:c0:38:95:40:51:d0:f2:75:7a:
5c:6c:18:f7:5e:3b:f4:c5:49:52:67:ff:6e:db:eb:
dc:0e:93:39:50:6d:e5:7c:ad:8d:09:dd:4d:1f:4d:
07:2a:0b:58:9e:13:d6:ad:3d:fb:e0:67:36:4b:34:
8d:bc:31:ef:7f:64:4c:64:22:70:fc:4e:b2:ab:d5:
77:a2:a0:f7:c9:62:da:ed:75:86:74:e3:59:f1:88:
b8:a1:95:aa:1b:c3:7f:37:15:f5:d4:14:47:4f:d0:
e7:fc:a1:5b:c4:a8:8f:4e:67:48:f9:eb:b7:92:39:
b5:3b:2a:0f:10:22:8d:e1:7e:2b:b8:0c:f1:9f:f7:
69:c4:f1:50:23:aa:27:3b:4f:6f:86:bc:42:a2:69:
db:35:96:da:69:c4:fe:17:79:60:c7:55:28:e0:22:
17:4e:30:5a:ac:a3:62:82:a8:6f:f2:5a:19:34:4d:
b2:80:cb:8d:97:32:ae:09:59:c4:af:43:57:5f:02:
72:a7:5a:37:6c:b4:7e:03:9e:4a:2f:42:4a:02:36:
aa:eb:09:09:42:ec:85:bd:34:7f:bc:50:22:45:82:
36:de:b7:1f:ee:51:d0:08:05:ff:92:fa:ef:af:b3:
9b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0E:FC:3E:9C:63:AE:3C:67:C5:9B:FF:E9:A8:12:9A:41:DB:DA:0C
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f31382d3138203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.240.0.0/18
Signature Algorithm: sha256WithRSAEncryption
02:11:c6:98:5a:4f:ec:1c:19:7c:ee:f5:ac:c6:59:12:f9:9d:
f0:39:38:1b:24:1f:74:01:76:9c:61:01:ee:39:44:14:e9:b1:
09:8e:1d:37:3f:31:0a:dd:c2:a3:69:ec:ba:30:aa:6c:c7:99:
95:fa:4c:94:af:70:44:53:7f:4e:2f:31:5e:a4:d7:89:18:b7:
9d:b9:e6:23:ee:8c:68:57:e0:01:0c:d7:5d:7f:45:ae:dc:e0:
73:82:20:91:a2:d8:3a:5d:25:10:9b:40:e5:a5:40:00:5e:dc:
b5:a6:c6:a7:6b:c7:0a:f5:e9:5d:b0:68:97:37:6a:4b:1a:13:
87:df:30:b3:f9:0e:32:73:e2:52:03:b9:b4:66:f4:9f:38:5d:
c0:43:9e:c2:7e:c2:db:58:d7:93:fd:54:9d:d1:61:b3:6f:b8:
ea:2f:d5:55:96:85:a7:9b:6d:c3:69:b6:8a:9b:c8:96:d3:d0:
8e:dd:5a:4c:db:1a:08:c6:71:21:ea:d1:6d:1e:3e:b0:b8:61:
40:94:5a:0f:10:9a:b6:ce:84:3c:f1:82:ed:41:28:93:1d:a3:
bb:46:d3:ed:d9:6f:3e:c1:0c:28:cb:e5:70:e9:08:62:27:5c:
dd:04:6c:97:7a:9a:cf:47:c2:9f:23:27:a0:ad:1c:80:b9:48:
9e:42:16:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:30 2026 by rpki-client