This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234362e302f32342d3234203d3e2034353135.roa File: 3132332e34392e3234362e302f32342d3234203d3e2034353135.roa (raw, json) Hash identifier: iOY+HPVvGy3/dXGKhLG1Kw8dLVPZsso+CaY41zAgyRY= Subject key identifier: F2:68:7B:D5:BD:F5:E6:4A:F9:A3:D2:31:F4:87:19:B1:2A:2B:1E:28 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 32ED8DEE0C055418ACD6DF18F58E3AAC03328F6A Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234362e302f32342d3234203d3e2034353135.roa Signing time: Tue 20 Jan 2026 02:20:15 +0000 ROA not before: Tue 20 Jan 2026 02:15:15 +0000 ROA not after: Tue 19 Jan 2027 02:20:15 +0000 asID: 4515 IP address blocks: 123.49.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 07:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ed:8d:ee:0c:05:54:18:ac:d6:df:18:f5:8e:3a:ac:03:32:8f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Jan 20 02:15:15 2026 GMT Not After : Jan 19 02:20:15 2027 GMT Subject: CN=F2687BD5BDF5E64AF9A3D231F48719B12A2B1E28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:2b:ae:ee:49:a7:90:d5:ad:07:aa:8f:10: 99:b2:e8:fc:42:39:d6:46:94:d8:ab:9e:7a:2a:06: f7:7b:82:a5:87:56:03:34:d0:95:f7:a5:8a:98:91: 56:f8:37:15:6e:8d:3c:b7:c1:2f:66:ac:52:89:97: 61:97:84:71:33:7f:9e:32:89:3a:30:8a:7a:37:d8: 8e:bb:df:21:fd:e1:89:dd:b4:4d:dc:73:38:eb:0a: 23:84:fd:f9:d4:f3:f1:cc:1f:d9:90:b3:36:e7:7f: f9:17:8c:c6:44:9d:87:42:14:c2:6c:4b:5d:c8:cc: 7f:71:62:b6:b9:f4:ff:1c:87:86:bc:d5:e9:66:ff: 27:78:39:0d:67:0a:32:34:68:23:3c:5b:81:27:ce: da:7e:20:3b:23:81:a2:16:9f:93:aa:8d:7e:92:93: 7c:54:25:59:43:41:0b:53:02:d0:5a:c8:8a:c6:18: 7a:5c:63:1a:4e:02:d8:bf:96:a8:3b:bc:e4:6b:be: fe:99:4c:32:dd:2e:a1:ed:74:3d:a7:f4:f8:d3:47: 71:13:b1:b7:3a:21:27:4a:84:6f:8a:cf:18:ba:f9: 53:41:30:19:9d:d5:25:b2:7c:19:75:f0:ea:4c:51: 00:2d:a2:a0:2f:9f:5d:76:86:70:d9:41:b6:b4:95: 98:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:68:7B:D5:BD:F5:E6:4A:F9:A3:D2:31:F4:87:19:B1:2A:2B:1E:28 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234362e302f32342d3234203d3e2034353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.246.0/24 Signature Algorithm: sha256WithRSAEncryption 41:9c:5c:65:bf:74:ab:b1:8a:6a:39:81:24:b3:b2:b1:76:e5: 49:66:01:c4:16:26:7c:80:2e:6d:c9:f5:9e:da:f5:c5:f2:68: dc:2f:5f:92:48:a9:84:92:70:38:82:9b:3e:80:dc:6c:7e:1b: e4:24:6f:9c:e9:25:df:da:95:7b:8f:2d:ba:28:95:07:5b:22: ec:bb:e4:ef:b5:40:f1:2f:cf:df:7d:05:3c:5b:e2:c6:5a:da: b1:a3:be:57:75:83:56:2d:77:78:af:33:31:0f:d8:80:ef:f8: 6a:aa:70:64:5c:c4:53:3b:d6:a2:23:68:8d:14:c2:8d:03:06: aa:4f:10:d5:5f:39:c3:94:68:66:80:e4:a7:4e:51:89:06:34: d3:fb:99:6e:dd:36:93:d4:3c:83:97:42:0c:41:4c:c4:66:65: 8f:f7:2a:b2:03:ab:62:9b:66:e1:37:be:72:c3:fd:1b:41:42: 53:c7:e2:32:8b:c7:93:74:43:49:1f:7b:0f:61:4c:c5:4a:c3: 27:8b:b1:3b:a6:81:2f:3c:0e:9e:5f:11:a2:0c:92:90:fa:bf: 67:cf:fd:41:ce:a5:e5:6c:a5:7a:1f:dd:32:f2:fa:dd:58:1a: e2:ae:f3:34:1c:22:84:1e:c5:30:3d:65:40:48:09:83:9e:fb: fd:a4:dd:ba -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUMu2N7gwFVBis1t8Y9Y46rAMyj2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjAxMjAwMjE1MTVaFw0yNzAxMTkwMjIwMTVaMDMxMTAvBgNV BAMTKEYyNjg3QkQ1QkRGNUU2NEFGOUEzRDIzMUY0ODcxOUIxMkEyQjFFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdNyuu7kmnkNWtB6qPEJmy6PxC OdZGlNirnnoqBvd7gqWHVgM00JX3pYqYkVb4NxVujTy3wS9mrFKJl2GXhHEzf54y iTowino32I673yH94YndtE3cczjrCiOE/fnU8/HMH9mQszbnf/kXjMZEnYdCFMJs S13IzH9xYra59P8ch4a81elm/yd4OQ1nCjI0aCM8W4Enztp+IDsjgaIWn5OqjX6S k3xUJVlDQQtTAtBayIrGGHpcYxpOAti/lqg7vORrvv6ZTDLdLqHtdD2n9PjTR3ET sbc6ISdKhG+Kzxi6+VNBMBmd1SWyfBl18OpMUQAtoqAvn112hnDZQba0lZiDAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU8mh71b315kr5o9Ix9IcZsSorHigwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2Nzk5MTA1LzAvMzEzMjMzMmUzNDM5 MmUzMjM0MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM1MzEzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHsx9jANBgkqhkiG9w0BAQsFAAOCAQEAQZxcZb90q7GKajmBJLOysXblSWYB xBYmfIAubcn1ntr1xfJo3C9fkkiphJJwOIKbPoDcbH4b5CRvnOkl39qVe48tuiiV B1si7Lvk77VA8S/P330FPFvixlrasaO+V3WDVi13eK8zMQ/YgO/4aqpwZFzEUzvW oiNojRTCjQMGqk8Q1V85w5RoZoDkp05RiQY00/uZbt02k9Q8g5dCDEFMxGZlj/cq sgOrYptm4Te+csP9G0FCU8fiMovHk3RDSR97D2FMxUrDJ4uxO6aBLzwOnl8RogyS kPq/Z8/9Qc6l5Wyleh/dMvL63Vga4q7zNBwihB7FMD1lQEgJg577/aTdug== -----END CERTIFICATE-----Generated at Sun Jan 25 15:51:51 2026 by rpki-client