This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e36342e302f32302d3230203d3e203538383334.roa
File: 3132342e3234302e36342e302f32302d3230203d3e203538383334.roa (raw, json)
Hash identifier: aj0lavjXozsfqVQmX5zEWt/8xqzotLBeMnJRBj9VcsY=
Subject key identifier: B6:6A:55:39:2F:D2:78:D1:51:3D:64:71:E4:18:BA:10:4A:96:82:DC
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 6CA029473BFD057420E34A8E4BE253E67EE07189
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e36342e302f32302d3230203d3e203538383334.roa
Signing time: Tue 20 Jan 2026 02:13:06 +0000
ROA not before: Tue 20 Jan 2026 02:08:06 +0000
ROA not after: Tue 19 Jan 2027 02:13:06 +0000
asID: 58834
IP address blocks: 124.240.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 12:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a0:29:47:3b:fd:05:74:20:e3:4a:8e:4b:e2:53:e6:7e:e0:71:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Jan 20 02:08:06 2026 GMT
Not After : Jan 19 02:13:06 2027 GMT
Subject: CN=B66A55392FD278D1513D6471E418BA104A9682DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:49:f3:0f:38:87:0c:1c:51:56:76:b7:da:
87:69:dc:8e:f4:f0:cc:43:df:bf:1f:85:2c:5d:98:
94:d8:a6:3f:48:44:b5:23:32:cd:e9:98:7f:cb:89:
9a:44:dc:7d:d5:97:19:67:47:0a:a5:90:8d:cd:fd:
4e:23:51:bc:b9:b1:53:74:e9:2f:8f:d2:84:0b:ee:
2e:aa:8b:45:11:b1:0e:bc:e1:57:70:4d:d8:ab:8c:
2f:ca:8b:7a:2e:7e:a0:43:8f:11:41:d8:55:f9:d8:
eb:1a:2f:ca:04:08:92:dd:df:f1:69:cc:55:a6:b8:
c9:64:23:7d:6c:7c:da:2c:da:23:dd:c8:1f:d9:ce:
c1:e5:fd:18:cb:fe:85:11:65:aa:a1:17:02:2d:32:
13:72:9f:c0:74:19:6d:ea:04:cc:c2:2f:b8:b9:3a:
62:68:94:2f:64:b1:71:32:2a:cb:e4:6b:ac:22:b9:
64:ff:ac:01:3e:6d:54:64:67:2d:7b:41:da:ad:d1:
a9:84:ed:cb:03:96:48:81:e2:df:6c:f4:c2:9e:21:
11:53:3b:c6:8c:55:c8:dc:ce:69:84:b6:33:49:d2:
45:8a:4a:dd:e2:5f:86:26:c2:dd:c5:b7:a3:a2:2f:
a9:b1:2f:22:7a:35:69:b3:a1:1f:48:8f:4f:a0:69:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6A:55:39:2F:D2:78:D1:51:3D:64:71:E4:18:BA:10:4A:96:82:DC
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e36342e302f32302d3230203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.240.64.0/20
Signature Algorithm: sha256WithRSAEncryption
86:f7:57:58:c0:6a:bc:c8:e4:fa:88:26:4d:c5:cf:e1:55:32:
fe:43:20:96:8d:5b:22:8a:99:8c:aa:c5:14:6c:fc:9e:64:dc:
24:c4:09:5b:72:b3:05:65:40:a1:cf:50:ad:08:d2:5d:ce:31:
59:e5:f0:47:cb:45:3c:29:e7:21:f5:57:b2:60:99:05:5f:67:
c0:a6:05:f6:ca:df:92:7b:6d:59:14:87:69:61:8c:90:14:66:
11:c0:e5:05:5e:fd:26:af:69:3f:bd:8e:24:ad:8f:ca:73:95:
eb:b3:58:6a:d7:66:30:86:27:65:e6:24:c9:2b:a7:04:52:ab:
b3:52:cf:4b:af:6f:eb:8f:5b:ab:a3:b0:59:00:c2:91:f6:28:
6f:fb:f4:3a:5f:4d:36:6f:0e:70:46:30:35:c4:0a:a7:eb:65:
92:a2:7e:60:39:af:0b:f7:5f:ee:57:d5:14:ca:e5:b1:20:5f:
e9:a9:4d:be:8f:e9:cf:2e:20:b6:9d:64:6f:e2:6a:d4:fa:fb:
d8:4e:2b:06:e9:94:be:7a:d1:7e:cd:b5:6a:08:77:47:91:16:
67:13:a1:0d:ab:10:4b:d7:d5:8e:02:05:ea:e1:a9:13:4e:5f:
64:57:98:a7:21:3f:94:19:e7:c2:d4:94:51:95:f9:bc:8e:7c:
9f:ad:54:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:37 2026 by rpki-client