This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f32302d3230203d3e203538383334.roa File: 3132342e3234302e302e302f32302d3230203d3e203538383334.roa (raw, json) Hash identifier: dhp8ETIAF1eIdU4YtIvLIhF+hAr03z3Wnrmm2TCXOik= Subject key identifier: B1:14:9E:76:A0:4A:80:21:09:A4:B8:FB:46:FB:BF:9F:1F:E4:A7:A3 Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E Certificate serial: 1E0024AAFE7A1E0A9E0007ED3A0D73C46EA95A03 Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f32302d3230203d3e203538383334.roa Signing time: Tue 20 Jan 2026 02:13:06 +0000 ROA not before: Tue 20 Jan 2026 02:08:06 +0000 ROA not after: Tue 19 Jan 2027 02:13:06 +0000 asID: 58834 IP address blocks: 124.240.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:00:24:aa:fe:7a:1e:0a:9e:00:07:ed:3a:0d:73:c4:6e:a9:5a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E Validity Not Before: Jan 20 02:08:06 2026 GMT Not After : Jan 19 02:13:06 2027 GMT Subject: CN=B1149E76A04A802109A4B8FB46FBBF9F1FE4A7A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:4e:b0:c7:90:49:88:8b:c9:6c:55:51:6c: ee:67:b6:90:6d:33:97:63:8e:9e:46:4e:d1:b0:08: de:68:df:f9:e8:9b:2d:e3:46:2d:4a:4a:c6:4a:ff: ee:e2:43:5e:ce:c0:42:f2:7d:aa:40:73:ca:ed:27: 48:8c:8e:71:53:c1:cf:1e:c6:2f:74:2b:0b:41:b0: 52:be:9d:51:f7:ec:cd:9d:63:eb:cc:e2:59:34:61: bb:18:5e:ab:57:ea:d1:e5:89:fc:f8:fa:3a:91:59: fc:85:69:62:f7:81:cd:e2:d0:35:18:34:4a:8b:73: b2:73:37:53:89:e3:bf:d7:7d:fb:9f:2f:e8:11:fb: a5:12:8d:7d:df:ef:d5:81:3e:05:eb:06:a9:fd:bb: e3:4e:36:95:99:08:2b:b2:60:e9:2d:63:f6:ca:76: 82:1e:69:0d:16:dc:4c:1b:4f:01:54:5a:16:6c:9f: 9c:47:e9:7b:04:10:ae:fd:b7:b2:9d:90:ab:4b:e3: 07:f4:e1:3d:b9:56:0f:d6:9f:83:1b:cd:f1:5a:ed: 99:10:28:f6:05:f6:0d:19:84:85:30:67:7c:6f:39: 29:b8:ac:7c:ef:78:1a:53:99:79:91:67:cb:b0:5c: fb:2b:83:20:2c:48:cf:7b:bf:3c:ec:66:6e:11:5b: 3c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:14:9E:76:A0:4A:80:21:09:A4:B8:FB:46:FB:BF:9F:1F:E4:A7:A3 X509v3 Authority Key Identifier: keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f32302d3230203d3e203538383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.240.0.0/20 Signature Algorithm: sha256WithRSAEncryption a7:d0:8b:50:9f:97:15:3f:c8:19:f8:4e:75:96:4b:4a:c3:fa: 74:61:4e:d8:b6:17:2c:27:e1:20:ac:97:77:fa:ee:9c:fe:65: cb:11:a1:8a:cb:56:7a:17:9f:8f:4a:0d:e8:9c:c5:99:e4:4e: 64:8c:c2:b9:82:05:94:bc:23:00:b1:e4:75:75:e6:75:d6:da: 45:68:ef:5d:92:c9:1c:e2:c2:b6:4d:1f:c3:2d:03:1a:d3:66: a8:a2:66:18:a1:a9:22:4f:1c:a6:11:38:23:d3:45:59:1e:52: 56:5b:2f:40:90:ad:93:ef:87:65:79:37:13:e8:8f:f5:52:10: 5b:57:2f:62:fa:cf:f4:83:14:c0:cd:cb:fe:45:6a:b9:90:2c: f6:b9:25:41:32:dd:4d:23:5e:9a:f6:7b:ad:22:84:d2:41:f7: 80:3e:05:96:bb:38:96:98:9f:38:27:56:6f:e0:53:bb:de:b5: 84:7e:63:cf:be:9c:34:c1:78:b4:9d:1e:8a:03:ce:f8:7d:5b: c0:5b:9b:0e:81:fd:21:2f:3d:7c:88:d1:bb:9e:ac:a2:ab:00: a2:36:f8:bd:54:bd:9c:bf:d4:d4:a6:71:8b:a3:25:b1:c2:af: a0:2a:a5:e2:81:ba:ce:0e:f6:df:a8:d8:54:b8:50:79:35:5d: 6b:13:22:1e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUHgAkqv56HgqeAAftOg1zxG6pWgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3 OTBBOUUwRTAeFw0yNjAxMjAwMjA4MDZaFw0yNzAxMTkwMjEzMDZaMDMxMTAvBgNV BAMTKEIxMTQ5RTc2QTA0QTgwMjEwOUE0QjhGQjQ2RkJCRjlGMUZFNEE3QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Ek6wx5BJiIvJbFVRbO5ntpBt M5djjp5GTtGwCN5o3/nomy3jRi1KSsZK/+7iQ17OwELyfapAc8rtJ0iMjnFTwc8e xi90KwtBsFK+nVH37M2dY+vM4lk0YbsYXqtX6tHlifz4+jqRWfyFaWL3gc3i0DUY NEqLc7JzN1OJ47/XffufL+gR+6USjX3f79WBPgXrBqn9u+NONpWZCCuyYOktY/bK doIeaQ0W3EwbTwFUWhZsn5xH6XsEEK79t7KdkKtL4wf04T25Vg/Wn4MbzfFa7ZkQ KPYF9g0ZhIUwZ3xvOSm4rHzveBpTmXmRZ8uwXPsrgyAsSM97vzzsZm4RWzxxAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUsRSedqBKgCEJpLj7Rvu/nx/kp6MwHwYDVR0j BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NTUzMzQ1LzAvMzEzMjM0MmUzMjM0 MzAyZTMwMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzODM4MzMzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHzwADANBgkqhkiG9w0BAQsFAAOCAQEAp9CLUJ+XFT/IGfhOdZZLSsP6dGFO 2LYXLCfhIKyXd/runP5lyxGhistWehefj0oN6JzFmeROZIzCuYIFlLwjALHkdXXm ddbaRWjvXZLJHOLCtk0fwy0DGtNmqKJmGKGpIk8cphE4I9NFWR5SVlsvQJCtk++H ZXk3E+iP9VIQW1cvYvrP9IMUwM3L/kVquZAs9rklQTLdTSNemvZ7rSKE0kH3gD4F lrs4lpifOCdWb+BTu961hH5jz76cNMF4tJ0eigPO+H1bwFubDoH9IS89fIjRu56s oqsAojb4vVS9nL/U1KZxi6MlscKvoCql4oG6zg7236jYVLhQeTVdaxMiHg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:43 2026 by rpki-client