This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234372e302f32342d3234203d3e2034353135.roa File: 3132332e34392e3234372e302f32342d3234203d3e2034353135.roa (raw, json) Hash identifier: kAVWZq0A9zD+vWiTRlhRcXBRkWNI+ZpkNQpWt0I2T2w= Subject key identifier: C2:80:44:DC:2F:BA:80:3A:64:F0:3D:9C:38:7B:40:6B:27:85:29:98 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 746FF046C3EE1C8D6713B24AE545F7CCBE9B64DF Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234372e302f32342d3234203d3e2034353135.roa Signing time: Tue 20 Jan 2026 02:20:14 +0000 ROA not before: Tue 20 Jan 2026 02:15:14 +0000 ROA not after: Tue 19 Jan 2027 02:20:14 +0000 asID: 4515 IP address blocks: 123.49.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 07:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:6f:f0:46:c3:ee:1c:8d:67:13:b2:4a:e5:45:f7:cc:be:9b:64:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Jan 20 02:15:14 2026 GMT Not After : Jan 19 02:20:14 2027 GMT Subject: CN=C28044DC2FBA803A64F03D9C387B406B27852998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:56:2d:03:b8:bd:e7:3c:60:f3:13:c8:47:85: db:e8:ff:91:f7:b3:a9:65:07:eb:b6:36:bb:06:a7: f7:cf:e7:ca:29:15:27:3c:d0:5a:02:ac:a7:a6:3d: 1d:52:a3:f2:8e:3c:35:e9:96:e7:a6:59:97:70:56: 9f:70:79:e1:17:88:a4:da:35:97:90:ce:f5:3f:24: 81:dc:23:a2:35:d5:8c:80:20:2c:66:14:82:43:aa: 67:df:4b:f5:59:b5:06:c7:c7:56:8e:bb:88:e9:07: d0:65:20:4c:19:37:6b:48:49:b2:26:48:8c:03:dd: 80:5a:61:28:36:74:49:bf:a1:8c:76:bb:f1:1f:2b: b5:ce:53:c2:74:5c:e2:dd:d0:92:66:1a:93:1c:07: ab:d6:64:6c:df:c7:84:8a:fe:1a:22:5f:23:77:15: 49:a2:2a:b0:a6:a2:47:ee:92:ca:1d:2d:7e:de:4b: af:e0:c1:55:0f:16:21:73:79:d1:ca:e6:7c:42:b0: 15:9c:70:d4:80:6d:38:c2:40:a3:cd:5b:ea:bd:09: 24:84:d6:19:b1:60:fd:b1:d6:d4:fb:3e:49:62:16: 34:42:39:47:81:5e:d4:82:a8:46:ca:83:b0:99:27: e2:4a:b7:fc:49:ce:10:64:2e:c2:23:e4:d4:6a:96: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:80:44:DC:2F:BA:80:3A:64:F0:3D:9C:38:7B:40:6B:27:85:29:98 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234372e302f32342d3234203d3e2034353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.247.0/24 Signature Algorithm: sha256WithRSAEncryption 36:5a:6f:e6:81:01:05:f4:e0:58:d4:6d:88:ef:99:b1:52:00: 16:f3:43:fc:5d:36:86:ce:b8:2f:a4:60:06:c9:cb:4b:97:0d: 6c:a4:81:7f:21:8d:8e:ab:38:f6:f0:1c:01:eb:c3:d4:32:93: 5f:16:23:02:65:14:34:2a:a3:23:2b:79:f6:49:9c:89:1a:17: 77:61:81:93:de:e2:c7:28:a4:b4:36:4e:0c:5d:da:c5:4b:cd: bb:4a:75:5f:3e:83:12:cc:eb:b5:28:15:f8:14:11:49:89:79: a5:2f:4e:68:13:4e:ec:16:07:2c:9e:82:64:6b:15:8a:c3:66: 87:e6:f0:f7:bf:64:81:81:58:98:3b:c0:53:8a:b1:9e:18:ee: 41:cf:9d:67:0c:44:ad:17:36:81:47:e4:27:90:31:f5:fa:ed: d4:6b:f5:c9:c4:2f:82:8e:ad:d6:c1:90:27:ae:25:57:5c:81: 38:38:04:02:dd:4a:2e:88:c0:4c:b6:3f:b2:0c:e5:9a:d9:be: b2:29:6c:d2:4d:4d:61:95:a1:2c:3c:c5:37:3e:89:70:bb:ce: b3:fb:03:18:c1:a5:97:10:8a:7f:7f:fe:72:42:12:d9:9a:96: 08:2b:82:65:20:78:fb:ed:bc:d8:c1:fe:85:2f:e8:72:e3:b5: c5:54:28:74 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUdG/wRsPuHI1nE7JK5UX3zL6bZN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjAxMjAwMjE1MTRaFw0yNzAxMTkwMjIwMTRaMDMxMTAvBgNV BAMTKEMyODA0NERDMkZCQTgwM0E2NEYwM0Q5QzM4N0I0MDZCMjc4NTI5OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvVi0DuL3nPGDzE8hHhdvo/5H3 s6llB+u2NrsGp/fP58opFSc80FoCrKemPR1So/KOPDXpluemWZdwVp9weeEXiKTa NZeQzvU/JIHcI6I11YyAICxmFIJDqmffS/VZtQbHx1aOu4jpB9BlIEwZN2tISbIm SIwD3YBaYSg2dEm/oYx2u/EfK7XOU8J0XOLd0JJmGpMcB6vWZGzfx4SK/hoiXyN3 FUmiKrCmokfuksodLX7eS6/gwVUPFiFzedHK5nxCsBWccNSAbTjCQKPNW+q9CSSE 1hmxYP2x1tT7PkliFjRCOUeBXtSCqEbKg7CZJ+JKt/xJzhBkLsIj5NRqln15AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUwoBE3C+6gDpk8D2cOHtAayeFKZgwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2Nzk5MTA1LzAvMzEzMjMzMmUzNDM5 MmUzMjM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM1MzEzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHsx9zANBgkqhkiG9w0BAQsFAAOCAQEANlpv5oEBBfTgWNRtiO+ZsVIAFvND /F02hs64L6RgBsnLS5cNbKSBfyGNjqs49vAcAevD1DKTXxYjAmUUNCqjIyt59kmc iRoXd2GBk97ixyiktDZODF3axUvNu0p1Xz6DEszrtSgV+BQRSYl5pS9OaBNO7BYH LJ6CZGsVisNmh+bw979kgYFYmDvAU4qxnhjuQc+dZwxErRc2gUfkJ5Ax9frt1Gv1 ycQvgo6t1sGQJ64lV1yBODgEAt1KLojATLY/sgzlmtm+sils0k1NYZWhLDzFNz6J cLvOs/sDGMGllxCKf3/+ckIS2ZqWCCuCZSB4++282MH+hS/ocuO1xVQodA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:51:58 2026 by rpki-client