This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139352e302f32342d3234203d3e203633363431.roa
File: 3132332e34392e3139352e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier: rO+l5Qlk15uuhyb0exm7lOm58oejeBgyGycLSvlGIsA=
Subject key identifier: 9A:93:19:4A:33:A0:27:41:A1:13:E5:3B:CB:48:44:B9:85:98:40:F6
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 7FC8E2D39B61BB2E7C508FD7AC310AC9FE43AF17
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139352e302f32342d3234203d3e203633363431.roa
Signing time: Tue 20 Jan 2026 02:20:14 +0000
ROA not before: Tue 20 Jan 2026 02:15:14 +0000
ROA not after: Tue 19 Jan 2027 02:20:14 +0000
asID: 63641
IP address blocks: 123.49.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 07:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c8:e2:d3:9b:61:bb:2e:7c:50:8f:d7:ac:31:0a:c9:fe:43:af:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Jan 20 02:15:14 2026 GMT
Not After : Jan 19 02:20:14 2027 GMT
Subject: CN=9A93194A33A02741A113E53BCB4844B9859840F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:aa:e0:58:33:5a:da:58:0a:a6:6a:82:06:
77:b2:6d:14:ad:79:b9:71:ac:1e:a8:48:47:62:c3:
4c:eb:a7:9a:9e:e1:2c:68:37:16:58:22:e1:d2:3e:
eb:e1:3a:9d:f5:e9:b3:6d:d8:16:4f:2a:a7:e2:eb:
dd:d7:05:72:8c:63:15:9b:c3:89:3d:b5:e4:fe:68:
7a:b2:f4:1b:4b:4a:30:2d:42:46:73:6f:cd:57:3a:
48:e3:b7:a8:2d:a8:26:d0:7a:c8:01:65:4e:df:ae:
e1:1e:82:19:5a:6b:9a:55:03:8f:5f:e6:bd:c8:f5:
31:25:95:ba:63:62:1d:50:f4:ac:87:3d:51:8e:63:
09:6b:1e:96:7f:a8:07:25:ee:a9:4a:1f:0b:75:25:
bb:78:95:ad:ad:4f:77:c0:a7:eb:ac:48:71:f4:cd:
dd:af:cc:34:41:b4:c1:2e:16:e1:4c:ef:fb:9f:6c:
d8:24:17:21:e9:56:95:27:b7:44:22:16:a8:bb:e8:
1a:1f:ef:8d:6b:52:45:b6:f1:79:90:0e:f3:9d:77:
82:4f:1b:88:35:63:0b:8a:5c:1b:0b:c5:d6:b5:48:
a2:8a:fd:1e:e4:c2:e0:02:43:d1:8e:a5:b8:5d:de:
ab:69:bc:ba:90:7f:c0:85:c9:38:cb:4e:77:b6:e5:
6e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:93:19:4A:33:A0:27:41:A1:13:E5:3B:CB:48:44:B9:85:98:40:F6
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139352e302f32342d3234203d3e203633363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.49.195.0/24
Signature Algorithm: sha256WithRSAEncryption
56:bd:27:dc:8f:77:32:a3:ed:86:14:fe:e9:92:e8:f6:66:9e:
67:e0:7b:8b:4d:3e:a0:84:cb:8a:62:19:0a:bc:d6:c9:47:95:
10:e6:d5:91:50:cc:6e:e4:5e:96:19:f3:45:e9:c3:d2:ba:d4:
ee:cf:59:84:f1:42:f5:58:c6:12:28:1b:8f:a7:7c:80:af:c6:
30:7f:5c:0a:0f:12:99:12:0e:93:1d:91:f0:cb:00:36:fb:d3:
65:32:6a:28:37:69:4b:9f:e6:9c:de:a7:60:1f:a0:49:46:56:
77:92:84:84:53:12:89:79:d3:3d:4f:f5:b2:1f:f1:b1:77:4f:
7f:a8:6d:5d:11:de:af:a6:00:34:dd:28:fe:1d:4c:44:84:85:
8f:a5:c0:ab:ee:b5:03:b4:80:a8:98:45:7c:7f:d9:b6:84:4e:
64:18:db:a2:b6:d6:13:ad:e1:9d:77:33:0a:71:72:f9:dc:1d:
1e:51:00:71:13:f5:fb:dc:94:7a:15:ee:2e:8f:f5:26:6b:e5:
77:0a:b4:67:2c:f8:7d:2a:e9:d3:e4:89:f5:7a:e6:96:12:f5:
24:ea:1b:a6:24:69:60:60:d9:8e:5d:5f:75:2e:62:33:4f:4f:
48:d7:66:7e:a5:75:ea:0a:56:36:03:99:c5:7d:dc:76:55:d9:
98:f8:fd:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:50 2026 by rpki-client