This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e33322e302f31392d3139203d3e203538383334.roa
File: 3132342e3234302e33322e302f31392d3139203d3e203538383334.roa (raw, json)
Hash identifier: k7xjgy9UxJhHjNgd5Vd2zvsNwZFk6IDmrXtKpFddiRQ=
Subject key identifier: A7:11:F8:C8:A3:ED:F3:E7:29:E8:2D:52:B4:D9:25:CC:8F:CD:8F:18
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 0B07BB27E7C7F5B753084143CF4F7D67F3D87D1B
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e33322e302f31392d3139203d3e203538383334.roa
Signing time: Tue 20 Jan 2026 02:13:07 +0000
ROA not before: Tue 20 Jan 2026 02:08:07 +0000
ROA not after: Tue 19 Jan 2027 02:13:07 +0000
asID: 58834
IP address blocks: 124.240.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 12:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:07:bb:27:e7:c7:f5:b7:53:08:41:43:cf:4f:7d:67:f3:d8:7d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Jan 20 02:08:07 2026 GMT
Not After : Jan 19 02:13:07 2027 GMT
Subject: CN=A711F8C8A3EDF3E729E82D52B4D925CC8FCD8F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:9e:db:20:32:29:e4:0e:b7:cc:27:3c:6a:
df:76:46:a2:8d:58:b3:94:6c:86:67:9e:18:93:e4:
06:8f:b8:0c:c5:22:39:29:a2:14:c3:6f:c1:94:1c:
9f:20:e4:c4:71:9a:ec:dd:bb:ce:fd:d7:f8:8f:a0:
be:c9:31:b3:95:75:c2:1c:ab:26:fe:13:34:44:cd:
ee:05:f2:b3:11:f6:a1:16:c5:dd:a2:58:7a:58:3d:
21:f1:87:c7:60:9a:e2:05:ea:8e:7c:89:c8:95:f4:
de:00:9b:fc:d6:a6:05:fb:49:52:09:7e:33:dc:2d:
25:5e:68:75:41:db:7d:a0:43:63:e0:4c:eb:76:d9:
d9:a6:aa:62:e7:5f:f4:06:96:72:c7:be:51:43:64:
07:c4:b9:fe:e2:23:50:1e:59:1c:0e:d4:ea:12:94:
87:03:fd:7e:a3:e2:97:66:6f:c1:7c:d3:8e:08:89:
f0:51:15:09:04:87:99:68:ca:4e:5b:e9:23:de:f0:
48:e5:48:ec:c8:33:75:6a:01:a5:c7:a0:31:0f:a7:
84:c5:56:69:d2:00:75:0d:c8:44:ac:a2:93:31:d0:
f6:5e:2a:1b:da:f0:c6:0e:e1:87:d0:d8:27:1b:5f:
ad:f8:6c:88:17:92:05:ce:fc:4b:48:97:00:ea:e3:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:11:F8:C8:A3:ED:F3:E7:29:E8:2D:52:B4:D9:25:CC:8F:CD:8F:18
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e33322e302f31392d3139203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.240.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:e0:ef:60:ad:05:5a:53:19:99:1d:f7:69:a8:47:5a:09:32:
68:5b:c9:1d:19:87:5f:6f:f6:b7:bd:49:34:4e:a3:d7:5d:21:
7c:3a:ee:7d:65:dc:46:4c:4b:85:10:48:8a:1e:11:c9:c1:c6:
85:df:b0:95:85:7d:73:a4:44:d8:b8:23:af:5b:22:30:3e:83:
c8:6e:15:c7:43:f6:1e:ce:12:8e:50:26:45:5a:f3:d5:31:48:
3e:10:67:9a:1f:bc:48:6f:a1:2d:bd:48:f4:84:38:89:ee:b3:
d4:4e:e3:af:87:61:92:3f:18:96:8b:ef:5f:4c:0e:6e:3b:1c:
24:6b:4d:b6:cf:7f:e3:30:50:74:4d:0e:19:4f:65:aa:dc:c1:
29:dd:81:6f:23:4b:b9:6e:76:45:04:35:f1:9c:15:25:ac:0a:
e8:68:20:a0:c0:83:6c:86:dd:e8:8c:22:5b:99:71:eb:fc:5a:
d9:29:01:21:77:ba:f8:53:f4:7b:ec:f2:1f:23:b2:ae:29:65:
c1:4b:6c:5a:b3:e8:44:94:a5:c7:ce:2a:b7:84:a9:cd:53:4a:
6a:54:87:ae:4d:9a:aa:a5:5b:1d:a2:34:a9:93:d6:2b:71:18:
7b:ac:ef:2d:62:aa:15:d1:f4:1b:cc:30:97:94:f2:7d:7d:ef:
48:7c:6d:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:11 2026 by rpki-client