This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234352e302f32342d3234203d3e203338383134.roa
File: 3132332e34392e3234352e302f32342d3234203d3e203338383134.roa (raw, json)
Hash identifier: AV+aDx+v2jUPKJf06Aq7/Zc2xAoUeTp3ckA3OJ2cWeQ=
Subject key identifier: 61:6B:09:52:EA:0F:9D:76:C6:3B:DF:B1:0A:13:E4:E7:EF:80:1C:54
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 11A5EADBAF367C455C58118204761EF7D651D1A1
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234352e302f32342d3234203d3e203338383134.roa
Signing time: Tue 20 Jan 2026 02:20:15 +0000
ROA not before: Tue 20 Jan 2026 02:15:15 +0000
ROA not after: Tue 19 Jan 2027 02:20:15 +0000
asID: 38814
IP address blocks: 123.49.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 07:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:a5:ea:db:af:36:7c:45:5c:58:11:82:04:76:1e:f7:d6:51:d1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Jan 20 02:15:15 2026 GMT
Not After : Jan 19 02:20:15 2027 GMT
Subject: CN=616B0952EA0F9D76C63BDFB10A13E4E7EF801C54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:0d:c7:b3:b2:55:c6:ba:4f:d7:ba:6d:1f:
60:b3:95:65:a8:03:db:dd:93:30:5b:22:18:cb:d0:
0e:70:41:ab:76:74:28:8c:74:f9:79:ba:35:ce:75:
10:ac:fd:21:d1:11:d0:90:f0:a7:32:5c:70:36:47:
8c:b8:25:76:3e:3b:49:a5:1d:00:d8:05:88:10:6c:
93:31:f5:a6:5f:da:19:cb:d0:c0:b4:df:90:f8:97:
09:10:91:55:6b:b0:e2:09:41:23:31:8c:4b:af:3f:
bb:6e:3a:5b:83:54:a5:e7:7c:49:bf:71:18:1d:40:
e0:19:42:9f:06:9b:b0:ef:5f:01:e9:d2:53:08:2e:
39:95:25:3d:3c:cc:1f:e8:75:12:c8:06:9a:97:60:
48:51:2f:cd:01:8f:a0:86:10:65:5d:10:ca:46:ac:
48:f2:4d:1d:09:ec:77:22:8f:0f:87:c5:df:fe:d7:
e9:59:87:47:96:90:14:72:4f:51:a3:a1:c6:cf:e9:
d3:7c:e6:46:76:28:37:3b:a8:e0:b7:ec:07:ed:32:
12:be:cb:a4:08:52:c9:48:57:58:7a:e2:38:ed:35:
68:9c:69:28:b3:82:74:3e:bb:eb:bd:55:75:78:b2:
5b:90:b6:d8:7c:7b:e0:b3:39:29:04:f3:a0:6a:bd:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6B:09:52:EA:0F:9D:76:C6:3B:DF:B1:0A:13:E4:E7:EF:80:1C:54
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234352e302f32342d3234203d3e203338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.49.245.0/24
Signature Algorithm: sha256WithRSAEncryption
14:5d:a0:44:a4:8e:07:ff:da:7d:36:bf:7f:56:47:01:99:de:
9b:00:e5:c8:49:4f:3a:90:4d:8e:16:20:a7:4b:2a:2e:67:f2:
a8:4d:1a:60:27:0b:15:8e:68:ec:ba:4d:ed:2e:49:e8:7c:cb:
aa:f1:29:53:42:b8:af:e7:f8:87:bd:81:d4:94:0f:ac:4b:3f:
b6:2c:c2:41:97:12:db:97:19:94:89:a6:94:c5:0f:5e:13:20:
dc:08:2c:5c:2e:7b:23:15:8c:22:82:c6:77:89:e0:60:4d:5d:
c6:22:6d:7c:f6:c2:c5:99:3f:b6:8c:a2:fb:a2:c0:95:1d:c9:
b6:cc:5c:df:2f:fa:c0:8a:89:56:63:40:d0:78:ea:d7:29:c8:
d3:29:5f:ec:c1:0f:4f:8b:6a:4b:74:6a:fe:ab:e3:14:1c:02:
a3:d9:5c:2f:3c:a6:bc:83:9b:bc:66:c1:dd:f5:dc:27:12:27:
f3:24:30:b7:39:30:5f:c6:aa:6e:bf:44:eb:4e:d7:98:2c:fb:
f6:d0:32:c7:b4:f1:54:81:ce:36:05:de:c0:17:7f:10:a7:33:
80:88:e1:0a:0e:08:dd:04:5e:81:2a:4f:a8:00:46:a3:08:f6:
68:4f:03:e4:60:fa:9c:66:37:34:d4:ba:6d:61:73:6b:0c:f6:
e5:a0:ef:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:46 2026 by rpki-client