This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234352e302f32342d3234203d3e2034383132.roa File: 3132332e34392e3234352e302f32342d3234203d3e2034383132.roa (raw, json) Hash identifier: eHtoU26S9uQP9D4qKQ0M3F2642XYQQ/3cUcRnCSD8Kw= Subject key identifier: ED:0D:79:C2:75:14:6E:57:38:7E:0D:FA:2B:BD:1E:13:89:F1:43:3B Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 352EE1C06A7294F45494A6B5E2A2163B4C8596BE Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234352e302f32342d3234203d3e2034383132.roa Signing time: Tue 20 Jan 2026 02:20:14 +0000 ROA not before: Tue 20 Jan 2026 02:15:14 +0000 ROA not after: Tue 19 Jan 2027 02:20:14 +0000 asID: 4812 IP address blocks: 123.49.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 07:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2e:e1:c0:6a:72:94:f4:54:94:a6:b5:e2:a2:16:3b:4c:85:96:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Jan 20 02:15:14 2026 GMT Not After : Jan 19 02:20:14 2027 GMT Subject: CN=ED0D79C275146E57387E0DFA2BBD1E1389F1433B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:86:1d:5c:dc:b5:bf:3b:86:9a:9d:3d:0e:86: 83:b9:3f:c9:23:bc:ff:68:19:c3:47:f3:81:e6:ed: 0f:16:23:9c:68:ae:fe:4b:de:22:13:67:9b:7a:8e: 8d:52:0c:ac:d7:55:05:41:48:d5:26:ee:1b:bc:7c: 90:b6:90:b6:d4:d0:e3:81:99:f4:07:8c:4b:3c:5e: 86:a2:22:e2:b8:6e:64:d2:c8:4c:2d:d3:3d:09:59: 69:11:a9:8a:8d:e1:2c:8f:b6:c0:8c:42:42:98:33: 68:ab:53:38:dd:53:0e:a5:00:06:a7:b5:ed:c3:86: 24:2c:31:61:18:71:04:70:06:dd:ec:7c:38:3b:66: 85:9f:52:2e:73:c2:28:23:62:d8:4d:6a:9b:f0:fa: cb:e5:d8:0d:3a:48:4e:24:f5:f5:9f:74:a4:71:cd: 3d:3d:4d:63:68:c5:e9:f9:3a:95:6f:0c:53:fe:0c: 6c:a7:9a:f0:e0:b7:42:f9:8b:72:1c:ff:20:30:12: f5:34:80:f7:94:a5:f3:18:8e:60:aa:0c:74:0b:3f: db:ed:12:58:0e:13:b1:f2:f5:68:ff:28:68:38:7f: 0b:0e:42:19:67:e8:3b:66:c4:48:ac:cc:98:70:4c: 2f:af:40:01:97:26:fa:e6:a8:1f:f4:13:87:d7:37: a7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0D:79:C2:75:14:6E:57:38:7E:0D:FA:2B:BD:1E:13:89:F1:43:3B X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234352e302f32342d3234203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.245.0/24 Signature Algorithm: sha256WithRSAEncryption a7:82:00:f0:2b:18:80:f9:3d:59:e5:ce:55:bd:29:e7:d3:9d: f4:90:a0:8c:80:be:a6:ea:3e:7f:45:16:4f:02:1b:2e:f0:4e: ea:43:36:f4:c8:20:e0:87:ab:ac:be:7f:82:a0:ab:a0:a1:d7: 21:a9:56:05:55:bb:5d:b0:ec:6c:ea:32:8f:db:1c:91:ba:82: 4c:e1:3a:84:20:f6:22:14:11:32:ec:7b:b5:cd:01:76:3a:06: 53:48:8d:eb:4d:78:ab:99:09:3d:86:fb:55:9e:dd:0d:c7:17: 8a:0f:9a:63:71:60:28:e3:ea:9d:44:8f:47:fd:80:9d:cb:66: 42:b8:97:60:0b:11:65:e5:39:cc:b5:83:69:15:9e:c2:92:8a: d9:13:31:81:14:98:17:e4:2f:9d:bf:0a:0d:fb:de:72:b2:f7: c5:3d:40:c9:f4:ce:c2:7c:96:1c:b9:c3:cd:7f:cf:b1:3b:86: 05:3c:4a:37:a5:00:63:de:cc:51:19:4d:16:75:9a:67:41:d5: f7:dd:00:a5:a8:80:b7:82:2a:46:c5:63:f4:ea:f0:a8:6a:3b: 0f:07:1e:5f:92:75:e3:a9:53:5d:81:23:a6:86:ae:d2:91:80: 33:f5:78:4e:4a:47:87:08:5d:a6:8a:dc:ed:10:47:14:0b:c4: 61:fa:62:89 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUNS7hwGpylPRUlKa14qIWO0yFlr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjAxMjAwMjE1MTRaFw0yNzAxMTkwMjIwMTRaMDMxMTAvBgNV BAMTKEVEMEQ3OUMyNzUxNDZFNTczODdFMERGQTJCQkQxRTEzODlGMTQzM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0hh1c3LW/O4aanT0OhoO5P8kj vP9oGcNH84Hm7Q8WI5xorv5L3iITZ5t6jo1SDKzXVQVBSNUm7hu8fJC2kLbU0OOB mfQHjEs8XoaiIuK4bmTSyEwt0z0JWWkRqYqN4SyPtsCMQkKYM2irUzjdUw6lAAan te3DhiQsMWEYcQRwBt3sfDg7ZoWfUi5zwigjYthNapvw+svl2A06SE4k9fWfdKRx zT09TWNoxen5OpVvDFP+DGynmvDgt0L5i3Ic/yAwEvU0gPeUpfMYjmCqDHQLP9vt ElgOE7Hy9Wj/KGg4fwsOQhln6DtmxEiszJhwTC+vQAGXJvrmqB/0E4fXN6ebAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU7Q15wnUUblc4fg36K70eE4nxQzswHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2Nzk5MTA1LzAvMzEzMjMzMmUzNDM5 MmUzMjM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHsx9TANBgkqhkiG9w0BAQsFAAOCAQEAp4IA8CsYgPk9WeXOVb0p59Od9JCg jIC+puo+f0UWTwIbLvBO6kM29Mgg4IerrL5/gqCroKHXIalWBVW7XbDsbOoyj9sc kbqCTOE6hCD2IhQRMux7tc0BdjoGU0iN6014q5kJPYb7VZ7dDccXig+aY3FgKOPq nUSPR/2AnctmQriXYAsRZeU5zLWDaRWewpKK2RMxgRSYF+Qvnb8KDfvecrL3xT1A yfTOwnyWHLnDzX/PsTuGBTxKN6UAY97MURlNFnWaZ0HV990ApaiAt4IqRsVj9Orw qGo7DwceX5J146lTXYEjpoau0pGAM/V4TkpHhwhdporc7RBHFAvEYfpiiQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:51:57 2026 by rpki-client