This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/34332e3234332e3234362e302f32332d3233203d3e203538383334.roa
File: 34332e3234332e3234362e302f32332d3233203d3e203538383334.roa (raw, json)
Hash identifier: b5aMaDGAmcWwOF9mxCmidK0IyNSuqzRVnc6N2wq5AQA=
Subject key identifier: 5C:1C:1A:19:BC:FD:2E:14:7C:26:DC:1E:65:B8:C7:FC:FA:DA:7F:F2
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 55C79364F2E6815207B739F8913A3338471919C1
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/34332e3234332e3234362e302f32332d3233203d3e203538383334.roa
Signing time: Tue 20 Jan 2026 02:13:08 +0000
ROA not before: Tue 20 Jan 2026 02:08:08 +0000
ROA not after: Tue 19 Jan 2027 02:13:08 +0000
asID: 58834
IP address blocks: 43.243.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 12:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c7:93:64:f2:e6:81:52:07:b7:39:f8:91:3a:33:38:47:19:19:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Jan 20 02:08:08 2026 GMT
Not After : Jan 19 02:13:08 2027 GMT
Subject: CN=5C1C1A19BCFD2E147C26DC1E65B8C7FCFADA7FF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:8f:4d:55:34:a3:a9:6a:a4:03:67:dc:fa:
e9:d5:f6:ea:00:9b:42:c9:57:a4:1c:44:4e:d6:48:
fa:fc:c3:10:a5:b2:fd:2b:ff:67:b6:29:4c:64:62:
b3:4d:03:c3:00:44:75:89:8f:d0:2a:eb:4f:6a:f3:
78:cb:e5:9a:37:07:11:46:71:95:ad:15:4d:23:87:
a9:fb:33:bb:24:80:83:dd:e8:55:bc:83:7e:29:62:
b9:81:f6:1d:27:bd:80:6d:2f:42:4e:8a:b3:f5:31:
0b:a3:ea:d1:ce:66:ac:77:a8:9f:0a:6c:4c:9e:9a:
3f:0f:92:66:3a:0d:2c:69:10:51:f5:ce:a5:18:8a:
48:5f:4f:bc:d3:7e:ad:3b:7a:d1:7c:64:ef:48:86:
a5:55:d7:d3:f1:13:08:5b:3e:64:dc:43:b5:6c:83:
d5:fe:2f:81:9a:79:eb:34:fb:60:a8:45:f7:84:21:
54:d8:64:d4:e1:c3:36:b5:5f:41:ca:66:3e:8a:fc:
95:67:cf:e0:fc:e6:b5:22:df:fd:c9:37:28:a0:2a:
59:cc:8b:da:2f:69:b7:9e:2f:8c:5e:e9:9d:8c:f8:
7e:1e:01:a2:50:bd:56:15:f6:10:94:40:ce:4e:73:
2f:fd:91:c9:ad:7e:97:d6:ee:3b:d1:ce:df:25:11:
de:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1C:1A:19:BC:FD:2E:14:7C:26:DC:1E:65:B8:C7:FC:FA:DA:7F:F2
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/34332e3234332e3234362e302f32332d3233203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.243.246.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:ba:a1:77:27:77:ea:d0:17:a8:20:40:58:19:26:cb:56:a5:
a0:48:5c:2b:e8:2b:85:ae:a9:d4:63:ba:3f:b6:c8:f8:3b:5b:
62:8f:2f:58:5f:b4:76:3d:b8:34:7a:c3:7f:84:c9:fe:7b:60:
ac:aa:b5:7d:d6:87:9b:bd:61:93:70:05:96:d9:9e:71:d6:4d:
0d:83:35:e8:13:4e:b2:72:9a:cc:b6:2f:74:49:55:55:83:28:
87:1a:c7:83:45:83:e4:4e:61:20:45:c5:44:f6:26:3f:38:73:
9a:0a:24:38:c6:ef:02:8f:c6:b2:c3:ca:e9:c8:da:a5:c4:79:
f3:61:8a:e0:17:c1:3e:12:bd:bb:14:a9:9f:7a:fa:33:c4:5f:
62:2e:9e:be:bb:88:0a:24:53:ed:73:8d:52:9b:ec:67:4c:b7:
f7:ab:93:dd:68:26:74:7f:ad:82:66:98:b0:49:d6:3a:58:71:
5d:04:2a:57:fc:da:16:d2:4d:7c:22:81:83:34:71:25:99:4d:
77:f3:1d:97:10:98:23:a0:83:c7:7a:f6:5a:9f:37:ad:42:fa:
dd:2e:47:98:36:80:cd:51:35:95:06:00:56:ae:62:d3:34:8f:
f7:ea:15:2f:cc:ba:5c:1b:ef:70:27:a3:c5:29:4e:00:c4:27:
0d:be:69:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:50:13 2026 by rpki-client