This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234372e302f32342d3234203d3e203633363431.roa
File: 3132332e34392e3234372e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier: p79j4YGmWW4IV+Ou8ryXl//w37lh9IuSadq/jTt/hgA=
Subject key identifier: 62:6E:AE:03:73:DA:33:C8:7C:34:8B:35:56:92:A5:85:0F:49:CE:40
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 78F9707BEBC22B82A1247F916ABCC553B8B6DAF6
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234372e302f32342d3234203d3e203633363431.roa
Signing time: Tue 20 Jan 2026 02:20:14 +0000
ROA not before: Tue 20 Jan 2026 02:15:14 +0000
ROA not after: Tue 19 Jan 2027 02:20:14 +0000
asID: 63641
IP address blocks: 123.49.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 07:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f9:70:7b:eb:c2:2b:82:a1:24:7f:91:6a:bc:c5:53:b8:b6:da:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Jan 20 02:15:14 2026 GMT
Not After : Jan 19 02:20:14 2027 GMT
Subject: CN=626EAE0373DA33C87C348B355692A5850F49CE40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:3a:4d:b1:8e:cd:fe:d3:18:1d:21:4d:60:
71:cc:8e:ed:34:3b:76:d4:fd:6c:b7:b1:f4:0b:14:
91:13:9a:63:75:27:d6:86:7f:da:46:88:77:aa:b6:
d0:ed:b5:b3:d1:81:6a:11:d0:14:ec:65:f9:d1:b1:
5b:49:72:14:b1:5d:b4:91:a6:bc:10:24:1b:56:3c:
cd:1e:3d:3f:1d:17:29:22:21:87:7f:bb:98:a9:38:
8c:24:80:76:46:05:ef:28:d0:50:ae:4e:92:43:57:
8c:52:db:52:c9:a7:eb:ff:da:37:d4:5e:ed:67:8a:
7b:30:18:77:5f:42:e1:31:29:f9:1d:46:15:43:9a:
ce:b6:06:da:0a:c0:13:c7:60:66:ee:5f:e1:a8:cb:
62:e8:ab:f2:7b:43:4e:a7:ad:89:91:b2:94:90:f0:
98:02:55:ae:c6:a3:64:96:7c:a6:25:80:82:4d:eb:
3d:08:65:d0:3f:c0:6a:e8:69:f7:dd:b4:5d:0c:05:
a3:a1:81:3d:e9:f6:e2:e1:ba:7a:3f:3c:76:8b:5f:
da:f1:bc:04:0a:6f:e2:ae:de:4f:98:b6:4c:75:7d:
8b:45:3d:a8:b4:bd:00:a0:09:af:e1:8b:ac:cc:50:
92:87:7d:50:0a:15:30:78:d5:49:8c:9d:28:89:b6:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6E:AE:03:73:DA:33:C8:7C:34:8B:35:56:92:A5:85:0F:49:CE:40
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234372e302f32342d3234203d3e203633363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.49.247.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:32:68:7f:a0:df:c5:9e:46:ad:03:da:58:e1:21:75:3f:53:
7d:59:ea:3b:9c:54:6e:35:5d:b0:af:1f:34:2e:8d:37:3c:8d:
6c:51:e0:42:04:a6:60:03:40:be:f7:0b:b7:2c:b2:a2:3d:5f:
b1:42:09:22:2e:54:fd:79:9d:ea:99:6f:bd:fd:8e:b4:72:bc:
02:c9:ac:d8:4c:80:c1:c6:b5:3c:94:e0:bf:78:63:de:bb:19:
5d:36:f1:70:c7:9c:cc:df:38:d1:ae:3a:64:0d:ca:14:4f:c8:
3a:6a:09:1a:c1:a3:b2:23:f7:65:c2:59:4a:fe:4f:f8:47:d8:
a7:10:75:06:54:73:47:c2:b4:e0:64:eb:c9:84:dc:4e:cf:cb:
c8:0e:ad:ce:f2:20:69:6c:60:79:23:c9:3d:d8:aa:0f:5a:80:
1c:d9:99:32:30:69:22:d4:85:f5:e1:02:39:11:d0:b4:43:0a:
e8:02:7a:c1:3b:6f:e8:30:bc:f4:92:d3:87:09:66:21:c1:18:
46:11:58:15:4a:d8:58:ec:18:ae:0a:65:32:7e:24:d0:ea:4e:
e4:1a:e3:cb:fe:e0:6a:9c:1d:94:3f:a5:96:de:a8:e3:1f:d2:
31:d9:e6:00:a5:ea:bc:8b:41:b2:3d:7a:02:cf:f8:92:21:c6:
9b:0c:49:47
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:56 2026 by rpki-client