This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139362e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3139362e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: 0iTDK2jBtrXhBc+FRVAS0NVqOcMAurUMKS5nPe1dw2E= Subject key identifier: 70:5A:A7:CC:09:97:7F:23:9A:63:52:C6:1E:CD:3B:46:E6:BB:73:4B Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 5074260EC759107030591111D07A64A18133DBBA Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139362e302f32342d3234203d3e203633363431.roa Signing time: Tue 20 Jan 2026 02:20:15 +0000 ROA not before: Tue 20 Jan 2026 02:15:15 +0000 ROA not after: Tue 19 Jan 2027 02:20:15 +0000 asID: 63641 IP address blocks: 123.49.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 07:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:74:26:0e:c7:59:10:70:30:59:11:11:d0:7a:64:a1:81:33:db:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Jan 20 02:15:15 2026 GMT Not After : Jan 19 02:20:15 2027 GMT Subject: CN=705AA7CC09977F239A6352C61ECD3B46E6BB734B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:35:d3:aa:67:30:ef:49:43:11:9e:7a:31: 3e:6b:24:db:59:a4:61:79:ae:01:51:27:d4:f3:52: d6:d4:dd:b3:e5:73:c4:96:0d:a9:46:a6:f0:92:11: e1:ea:f7:c7:ff:55:c9:3e:b2:8f:e2:46:1a:d8:63: 04:4d:1c:05:99:0b:0f:50:60:66:36:1c:5f:02:a3: 26:40:84:84:dc:8b:68:8b:e2:e3:33:bf:a7:dd:07: 6f:3f:20:62:7d:22:77:00:25:03:52:a1:c8:5c:29: 86:25:f3:a1:58:74:4b:ad:c7:a3:1c:ce:31:71:b0: 01:d3:ea:03:09:a8:5f:7f:0e:94:bd:26:55:42:f2: d4:01:66:72:c7:b2:74:74:47:a6:42:c2:b7:6d:06: 8b:1d:50:05:6c:1d:d2:0d:da:09:93:c9:bf:90:92: 56:b9:48:56:0d:a2:60:17:8c:54:fb:5a:7a:28:cf: b2:3a:99:15:d8:f9:2b:a3:f4:08:35:bc:99:ea:62: 2f:e8:db:c4:73:93:2d:ad:54:75:c7:a5:fa:33:89: 64:64:85:72:c0:df:e8:ff:b2:87:b4:5f:61:37:c1: da:0c:95:bb:a3:ca:35:29:da:fc:fe:47:6e:71:a2: 9b:c2:be:df:33:6a:07:01:0f:2c:3b:f1:12:e2:f5: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5A:A7:CC:09:97:7F:23:9A:63:52:C6:1E:CD:3B:46:E6:BB:73:4B X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139362e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.196.0/24 Signature Algorithm: sha256WithRSAEncryption 59:81:bc:4d:8a:3e:aa:0a:f0:ea:df:57:4d:dc:3a:b8:b4:20: e8:29:e9:29:e6:58:76:20:af:95:16:42:49:a0:b2:be:8d:92: 18:73:e8:e4:0c:90:40:f4:6a:01:8d:50:5b:b6:5d:b2:c8:0b: 8e:2a:94:98:60:5a:67:f6:56:dc:13:f0:57:97:c3:5b:ca:b2: 5b:51:59:02:9d:27:e0:4f:3d:9a:29:6a:d7:e5:57:16:7e:3a: 74:14:fb:6c:00:51:fc:22:d9:25:50:54:ce:c0:30:b7:7b:5c: 61:6d:c6:c1:9e:f2:d1:ed:0a:ed:01:62:fa:29:31:cd:cd:23: fa:49:eb:16:ae:0c:57:12:45:a5:71:d2:fa:0a:9a:95:55:f1: 45:48:73:f3:7f:5f:f3:08:19:77:34:47:35:71:90:29:88:18: 76:2e:cf:cd:c7:ac:ee:21:49:30:e8:ed:50:0b:b4:fd:71:78: a0:7f:b0:b9:30:62:01:15:4e:13:fd:cc:7b:ed:a0:d8:b6:f7: 60:f9:9d:15:2a:17:1b:5f:c6:0e:64:4d:a0:d4:2a:6d:8c:b9: 46:3a:4b:82:3a:d8:04:29:e0:2a:1a:6b:e4:7c:d6:0a:73:ec: 58:02:09:51:d5:7a:8d:c9:ba:07:36:89:08:12:37:2b:5e:d0: c7:62:31:c9 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUUHQmDsdZEHAwWRER0HpkoYEz27owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjAxMjAwMjE1MTVaFw0yNzAxMTkwMjIwMTVaMDMxMTAvBgNV BAMTKDcwNUFBN0NDMDk5NzdGMjM5QTYzNTJDNjFFQ0QzQjQ2RTZCQjczNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF5jXTqmcw70lDEZ56MT5rJNtZ pGF5rgFRJ9TzUtbU3bPlc8SWDalGpvCSEeHq98f/Vck+so/iRhrYYwRNHAWZCw9Q YGY2HF8CoyZAhITci2iL4uMzv6fdB28/IGJ9IncAJQNSochcKYYl86FYdEutx6Mc zjFxsAHT6gMJqF9/DpS9JlVC8tQBZnLHsnR0R6ZCwrdtBosdUAVsHdIN2gmTyb+Q kla5SFYNomAXjFT7Wnooz7I6mRXY+Suj9Ag1vJnqYi/o28Rzky2tVHXHpfoziWRk hXLA3+j/soe0X2E3wdoMlbujyjUp2vz+R25xopvCvt8zagcBDyw78RLi9RYvAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUcFqnzAmXfyOaY1LGHs07Rua7c0swHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzEzOTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsxxDANBgkqhkiG9w0BAQsFAAOCAQEAWYG8TYo+qgrw6t9XTdw6uLQg 6CnpKeZYdiCvlRZCSaCyvo2SGHPo5AyQQPRqAY1QW7ZdssgLjiqUmGBaZ/ZW3BPw V5fDW8qyW1FZAp0n4E89milq1+VXFn46dBT7bABR/CLZJVBUzsAwt3tcYW3GwZ7y 0e0K7QFi+ikxzc0j+knrFq4MVxJFpXHS+gqalVXxRUhz839f8wgZdzRHNXGQKYgY di7Pzces7iFJMOjtUAu0/XF4oH+wuTBiARVOE/3Me+2g2Lb3YPmdFSoXG1/GDmRN oNQqbYy5RjpLgjrYBCngKhpr5HzWCnPsWAIJUdV6jcm6BzaJCBI3K17Qx2IxyQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:51:47 2026 by rpki-client