This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234322e302f32342d3234203d3e203633363431.roa
File: 3132332e34392e3234322e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier: 4yFeBtOnx6PJDSGqWWlfXw9GOt3LnYBEIdTySWvAfJw=
Subject key identifier: 7F:E3:83:ED:EC:29:B0:75:E0:60:7A:8E:7D:E0:F3:EA:7D:59:5F:12
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 5FBF508F62B2F3495A9D625ADB0197D03B46FE65
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234322e302f32342d3234203d3e203633363431.roa
Signing time: Tue 20 Jan 2026 02:20:15 +0000
ROA not before: Tue 20 Jan 2026 02:15:15 +0000
ROA not after: Tue 19 Jan 2027 02:20:15 +0000
asID: 63641
IP address blocks: 123.49.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 07:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:bf:50:8f:62:b2:f3:49:5a:9d:62:5a:db:01:97:d0:3b:46:fe:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Jan 20 02:15:15 2026 GMT
Not After : Jan 19 02:20:15 2027 GMT
Subject: CN=7FE383EDEC29B075E0607A8E7DE0F3EA7D595F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:bf:79:23:f6:89:0c:3c:93:6a:d9:33:74:
79:81:c0:93:ca:64:85:06:de:05:4f:5a:45:c5:80:
fd:ee:7f:19:18:9c:0c:a7:6b:cc:93:27:94:c7:6b:
c0:6f:3d:ea:cd:c9:9a:4e:72:36:4a:f9:27:9b:e1:
26:b3:c3:90:06:66:89:c5:d8:df:88:fa:e0:b2:77:
45:a9:da:b7:23:b3:c1:15:1b:2f:8c:bb:58:a0:fc:
6d:60:07:38:2c:2c:9a:5b:99:a4:6a:f8:fe:1a:b8:
35:46:dc:97:3a:35:15:8a:64:83:c3:ca:d9:59:97:
15:52:87:4c:63:fd:28:ab:7f:03:15:e5:b4:1d:f5:
40:c6:a8:1e:e9:63:7d:f3:5e:2d:e6:59:aa:e3:98:
cb:09:3f:1d:6e:5f:3e:6c:07:1b:73:65:55:e9:10:
51:03:34:ae:37:6a:cf:96:3e:5a:1f:07:59:1b:3b:
24:b6:0c:c7:53:52:29:d0:2d:36:64:94:6d:c4:44:
d6:0e:17:59:1a:78:82:58:aa:d2:2c:50:1e:ca:03:
60:59:98:d2:78:4a:18:13:10:a5:90:b1:ea:8e:fd:
63:f7:41:38:60:b3:a9:cd:ca:59:e8:fe:13:62:23:
41:8a:42:8c:9a:28:cc:62:be:cb:98:f8:77:05:bc:
4a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E3:83:ED:EC:29:B0:75:E0:60:7A:8E:7D:E0:F3:EA:7D:59:5F:12
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234322e302f32342d3234203d3e203633363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.49.242.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:25:2b:92:da:8a:a2:ad:3a:00:24:89:f9:ba:f4:37:1c:cd:
3a:d6:b9:a7:b5:b3:66:54:a3:d8:e4:58:bd:af:8f:8b:5c:86:
9b:bc:e3:61:ee:6a:17:f6:39:7d:58:22:df:c5:41:19:16:7f:
50:f7:cb:bb:cc:db:e2:f6:19:09:64:e1:f3:ed:3d:4f:7d:63:
f2:47:37:81:da:89:64:d4:16:cf:bc:17:fb:94:59:7e:0e:c7:
f6:40:91:dc:14:d7:98:25:7b:3d:75:6e:82:fe:ad:f5:bd:2e:
ad:d2:ef:b1:fa:29:19:2d:6b:88:a7:c0:82:66:a7:3f:2c:0c:
c1:c1:6f:f2:e5:08:b8:97:dc:dd:9f:1d:d2:81:ba:8f:a2:69:
b7:08:89:99:d1:2b:a6:cd:d2:89:9b:e6:fc:22:76:e0:fe:97:
c4:29:e2:a9:d1:34:56:a6:e5:2a:ab:a5:69:2f:06:d0:42:61:
a2:69:24:68:74:50:ce:d5:90:89:43:0f:d7:fe:07:e3:47:43:
00:b2:73:d6:1d:c3:13:8e:ad:7b:34:b7:83:08:11:1c:1f:4d:
82:1e:0a:32:a8:02:00:2a:f3:b9:d6:d3:66:0d:0d:a0:66:66:
f1:5c:83:e0:1b:57:fb:e2:a0:93:1c:4f:f2:22:6a:e5:82:79:
8b:9e:10:42
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUX79Qj2Ky80lanWJa2wGX0DtG/mUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF
OEUxMjgwQTAeFw0yNjAxMjAwMjE1MTVaFw0yNzAxMTkwMjIwMTVaMDMxMTAvBgNV
BAMTKDdGRTM4M0VERUMyOUIwNzVFMDYwN0E4RTdERTBGM0VBN0Q1OTVGMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpkL95I/aJDDyTatkzdHmBwJPK
ZIUG3gVPWkXFgP3ufxkYnAyna8yTJ5THa8BvPerNyZpOcjZK+Seb4Sazw5AGZonF
2N+I+uCyd0Wp2rcjs8EVGy+Mu1ig/G1gBzgsLJpbmaRq+P4auDVG3Jc6NRWKZIPD
ytlZlxVSh0xj/SirfwMV5bQd9UDGqB7pY33zXi3mWarjmMsJPx1uXz5sBxtzZVXp
EFEDNK43as+WPlofB1kbOyS2DMdTUinQLTZklG3ERNYOF1kaeIJYqtIsUB7KA2BZ
mNJ4ShgTEKWQseqO/WP3QThgs6nNylno/hNiI0GKQoyaKMxivsuY+HcFvErtAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUf+OD7ewpsHXgYHqOfeDz6n1ZXxIwHwYDVR0j
BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE
MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz
OTJlMzIzNDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHsx8jANBgkqhkiG9w0BAQsFAAOCAQEA1SUrktqKoq06ACSJ+br0NxzN
Ota5p7WzZlSj2ORYva+Pi1yGm7zjYe5qF/Y5fVgi38VBGRZ/UPfLu8zb4vYZCWTh
8+09T31j8kc3gdqJZNQWz7wX+5RZfg7H9kCR3BTXmCV7PXVugv6t9b0urdLvsfop
GS1riKfAgmanPywMwcFv8uUIuJfc3Z8d0oG6j6JptwiJmdErps3SiZvm/CJ24P6X
xCniqdE0VqblKqulaS8G0EJhomkkaHRQztWQiUMP1/4H40dDALJz1h3DE46tezS3
gwgRHB9Ngh4KMqgCACrzudbTZg0NoGZm8VyD4BtX++KgkxxP8iJq5YJ5i54QQg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:59 2026 by rpki-client