This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234362e302f32342d3234203d3e203633363431.roa
File: 3132332e34392e3234362e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier: ZLaSbqkhr0ckiAj1yXpXnIu2V3obfSobsdCH83ZzjdY=
Subject key identifier: F0:34:CF:78:F8:B5:44:4E:C8:49:F3:C4:9A:9D:FA:54:BE:D2:45:FF
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 13C816F20BC279C783B033E00678B5FABA8D1F4E
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234362e302f32342d3234203d3e203633363431.roa
Signing time: Tue 20 Jan 2026 02:20:15 +0000
ROA not before: Tue 20 Jan 2026 02:15:15 +0000
ROA not after: Tue 19 Jan 2027 02:20:15 +0000
asID: 63641
IP address blocks: 123.49.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 07:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c8:16:f2:0b:c2:79:c7:83:b0:33:e0:06:78:b5:fa:ba:8d:1f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Jan 20 02:15:15 2026 GMT
Not After : Jan 19 02:20:15 2027 GMT
Subject: CN=F034CF78F8B5444EC849F3C49A9DFA54BED245FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d7:ed:82:06:5b:f8:60:4a:a6:86:0e:ed:f6:
04:7b:ca:5f:0c:38:55:01:81:be:67:a6:24:78:ce:
b5:1c:94:13:41:0d:7d:b6:fa:02:4a:a7:5c:22:e2:
65:13:1d:86:02:71:d6:eb:8e:f9:e4:c9:f5:ef:d6:
31:ac:e0:fa:74:a9:cf:a4:2e:85:f6:e5:5a:b7:93:
6a:e8:8b:73:4f:52:f3:8d:7a:e0:79:eb:86:c4:1d:
24:99:c8:05:20:99:23:83:e9:8a:7f:2b:94:23:18:
1e:83:0e:ad:bd:09:65:27:b7:75:5e:d9:33:15:16:
08:8f:ac:37:6d:40:a9:d6:20:9e:4a:c6:51:09:58:
8e:af:23:4b:40:a9:1d:55:b7:3e:af:0e:cf:d6:10:
da:38:1f:6f:86:1f:b9:b8:c8:57:58:7e:f5:83:dc:
f7:db:95:00:50:56:1a:01:24:0e:78:51:c0:93:a4:
35:98:da:22:20:5d:eb:10:41:43:58:4e:0f:52:53:
c3:62:74:fc:fb:21:6e:49:97:de:b7:8c:66:ec:4b:
e2:f0:e7:2b:de:4c:47:e4:fd:b6:03:d7:8a:4a:16:
fa:aa:13:72:6e:a9:46:a2:af:1f:45:88:6e:6a:7c:
f9:3f:ff:4b:99:26:13:c0:d3:ad:e8:6b:39:a5:4b:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:34:CF:78:F8:B5:44:4E:C8:49:F3:C4:9A:9D:FA:54:BE:D2:45:FF
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234362e302f32342d3234203d3e203633363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.49.246.0/24
Signature Algorithm: sha256WithRSAEncryption
38:91:55:15:fd:49:ad:dc:a8:c0:fe:fe:73:a9:db:eb:d9:fb:
ac:39:8f:ce:4e:35:a2:f9:5b:33:41:e2:bd:65:1a:f5:b4:3d:
b8:4a:44:e1:fb:40:30:48:c1:ed:f5:b7:22:15:e3:58:0c:bb:
cc:7a:2a:6a:a2:f0:5b:6e:2b:fa:4a:3a:0f:fb:ac:22:73:92:
79:2c:9a:d2:9f:d8:77:39:d2:50:13:47:21:92:89:89:4d:de:
93:81:17:6d:41:1a:94:e1:c2:a9:37:1a:3c:3d:81:d6:56:0f:
cb:79:2b:11:52:62:5a:03:97:01:5f:17:df:6d:a6:f3:61:a3:
d7:64:3f:36:11:93:5d:fa:ce:95:dc:92:2a:f5:a7:e0:80:86:
11:83:a7:46:24:72:1c:c1:7a:b6:32:29:a3:30:36:05:dd:f1:
c2:85:e9:a0:cb:d0:63:1d:3d:f8:a3:35:b8:1b:d5:db:e3:56:
d5:94:9c:e8:ea:d2:cf:33:5c:35:cb:07:bf:f3:aa:0d:5c:04:
fc:50:24:a8:f2:6c:9e:16:ff:99:89:fc:e3:2c:63:0a:79:55:
3d:ed:ca:41:76:91:9e:7b:d5:70:3c:16:04:57:7c:a4:18:af:
d1:a8:0c:0b:94:b0:4f:13:a6:ac:30:00:f8:80:a9:64:2a:73:
15:97:d0:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:49 2026 by rpki-client