This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234352e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3234352e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: URY/fnRSKZtxcyZMIV2zonyjJhXZIXVlZKxZiD23qHc= Subject key identifier: 7E:9C:90:88:D3:A1:DC:46:D0:2C:75:11:AD:40:26:E3:89:BF:BA:15 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 5343B4016C0AB541C93D3B6CC9D64B3A21B1947A Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234352e302f32342d3234203d3e203633363431.roa Signing time: Tue 20 Jan 2026 02:20:15 +0000 ROA not before: Tue 20 Jan 2026 02:15:15 +0000 ROA not after: Tue 19 Jan 2027 02:20:15 +0000 asID: 63641 IP address blocks: 123.49.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 07:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:43:b4:01:6c:0a:b5:41:c9:3d:3b:6c:c9:d6:4b:3a:21:b1:94:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Jan 20 02:15:15 2026 GMT Not After : Jan 19 02:20:15 2027 GMT Subject: CN=7E9C9088D3A1DC46D02C7511AD4026E389BFBA15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:24:f9:e8:22:32:b4:b9:c0:d6:7f:9b:d9:c2: 8e:0f:b0:4a:3d:84:1d:15:38:8c:63:4c:5a:ef:ac: 7e:84:a3:9a:81:a8:28:c8:dd:61:ee:8e:90:e2:a6: b6:0a:f5:44:3b:fe:c7:2f:38:27:94:5f:46:1c:b0: 3d:6d:f7:ab:27:ea:b1:81:50:d7:0a:3d:6a:c1:d5: 6b:e0:26:86:0b:26:5d:62:f7:5c:c7:9b:67:de:1c: 5d:6e:f6:77:0d:16:46:67:43:c5:62:09:1c:9f:23: 93:8f:bf:bd:b2:54:67:7d:00:87:57:1e:9f:ae:ea: d8:e2:f2:f1:b5:31:f4:e0:e4:2b:1b:31:ad:c2:7b: 89:d0:3d:8f:5f:1f:28:c5:10:b0:6a:b2:cf:d2:0a: 98:5b:81:73:4b:95:6f:e9:d1:8c:03:28:1d:69:52: 5c:7e:a9:05:0f:92:da:93:77:4d:d4:58:c7:67:87: 7e:b0:02:9e:27:62:20:d6:75:0c:f8:5c:c5:51:09: bf:69:a8:30:a4:eb:1f:da:3a:ad:8b:32:f6:28:98: 93:90:b3:04:42:fa:1d:b3:0a:59:54:e1:0a:0a:5f: b0:72:03:2d:33:c0:11:f6:40:7b:8b:e9:51:f7:5f: c6:0f:95:57:4e:a9:9b:a4:32:cd:f3:88:4c:ad:4f: ec:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9C:90:88:D3:A1:DC:46:D0:2C:75:11:AD:40:26:E3:89:BF:BA:15 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234352e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.245.0/24 Signature Algorithm: sha256WithRSAEncryption 00:c4:4b:75:70:ff:8e:36:dd:b5:8a:7f:df:21:c9:17:66:e2: 25:01:9d:d9:6f:3b:ba:0b:9d:73:bb:a2:a2:a8:3e:92:10:3a: 2d:a4:ab:33:59:c8:f5:94:2d:46:33:9a:fd:e0:28:2c:66:ca: 16:b7:fd:80:98:30:5d:c0:c9:82:cc:b3:b3:4a:e1:5f:f3:a2: 48:97:bc:48:5b:90:eb:1f:2b:7e:83:39:d4:32:71:21:41:53: 44:43:75:77:f5:b0:7f:69:cd:e5:f7:f2:f2:e7:16:44:7f:a2: cf:f2:a4:78:1b:93:41:47:71:f8:5d:dc:95:79:52:03:e4:8b: 1c:ec:06:39:d0:43:c3:7d:09:83:86:04:47:41:8e:6c:d6:3c: db:6a:4c:54:16:41:20:8a:50:3e:63:51:03:1b:61:01:97:37: c7:78:20:7c:f1:24:63:2f:5d:9c:53:87:08:90:67:cf:4f:c3: 03:43:6f:1e:67:df:05:da:ad:d0:50:ad:cf:61:c6:af:f5:55: 70:9b:cd:5e:d0:cc:c4:e3:7e:1d:3c:f4:17:d5:5e:e8:04:42: 95:a3:c9:7e:d9:1a:f8:ab:2f:54:e7:b7:c7:38:0f:05:4b:62: b5:36:c7:cf:af:6f:6c:7f:9e:41:8c:cd:41:f6:73:08:b2:28: 41:45:dc:ec -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUU0O0AWwKtUHJPTtsydZLOiGxlHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjAxMjAwMjE1MTVaFw0yNzAxMTkwMjIwMTVaMDMxMTAvBgNV BAMTKDdFOUM5MDg4RDNBMURDNDZEMDJDNzUxMUFENDAyNkUzODlCRkJBMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyJPnoIjK0ucDWf5vZwo4PsEo9 hB0VOIxjTFrvrH6Eo5qBqCjI3WHujpDiprYK9UQ7/scvOCeUX0YcsD1t96sn6rGB UNcKPWrB1WvgJoYLJl1i91zHm2feHF1u9ncNFkZnQ8ViCRyfI5OPv72yVGd9AIdX Hp+u6tji8vG1MfTg5CsbMa3Ce4nQPY9fHyjFELBqss/SCphbgXNLlW/p0YwDKB1p Ulx+qQUPktqTd03UWMdnh36wAp4nYiDWdQz4XMVRCb9pqDCk6x/aOq2LMvYomJOQ swRC+h2zCllU4QoKX7ByAy0zwBH2QHuL6VH3X8YPlVdOqZukMs3ziEytT+wfAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUfpyQiNOh3EbQLHURrUAm44m/uhUwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzIzNDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsx9TANBgkqhkiG9w0BAQsFAAOCAQEAAMRLdXD/jjbdtYp/3yHJF2bi JQGd2W87ugudc7uioqg+khA6LaSrM1nI9ZQtRjOa/eAoLGbKFrf9gJgwXcDJgsyz s0rhX/OiSJe8SFuQ6x8rfoM51DJxIUFTREN1d/Wwf2nN5ffy8ucWRH+iz/KkeBuT QUdx+F3clXlSA+SLHOwGOdBDw30Jg4YER0GObNY822pMVBZBIIpQPmNRAxthAZc3 x3ggfPEkYy9dnFOHCJBnz0/DA0NvHmffBdqt0FCtz2HGr/VVcJvNXtDMxON+HTz0 F9Ve6ARClaPJftka+KsvVOe3xzgPBUtitTbHz69vbH+eQYzNQfZzCLIoQUXc7A== -----END CERTIFICATE-----Generated at Sun Jan 25 15:51:52 2026 by rpki-client