This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e312e302f32342d3234203d3e2034383132.roa
File: 3132342e31342e312e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier: XFRJp6zS1ERcSGN1XE2RvWKAzZUpGDHg4WQCg4nt+Og=
Subject key identifier: 4C:CD:88:2C:35:0C:CA:68:A2:F5:78:9F:BF:44:F8:40:C9:5D:0D:05
Certificate issuer: /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial: 0D3AAFFC40FA7A52CA445DE6502BECAC68A3E842
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e312e302f32342d3234203d3e2034383132.roa
Signing time: Tue 20 Jan 2026 02:28:29 +0000
ROA not before: Tue 20 Jan 2026 02:23:29 +0000
ROA not after: Tue 19 Jan 2027 02:28:29 +0000
asID: 4812
IP address blocks: 124.14.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 12:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:3a:af:fc:40:fa:7a:52:ca:44:5d:e6:50:2b:ec:ac:68:a3:e8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
Validity
Not Before: Jan 20 02:23:29 2026 GMT
Not After : Jan 19 02:28:29 2027 GMT
Subject: CN=4CCD882C350CCA68A2F5789FBF44F840C95D0D05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:eb:c4:2b:4c:8c:61:c5:de:42:9c:16:c6:26:
de:c7:04:ed:8d:5f:d9:c2:ee:d0:39:77:ff:f1:a6:
aa:cd:58:75:86:40:96:4a:c9:69:49:0d:6b:9e:f6:
a5:7d:c0:64:b9:d2:d4:fe:71:d2:8d:9e:75:2a:86:
fa:7d:e0:ab:f3:68:ec:78:23:7c:4a:b4:99:af:21:
07:7f:3f:e4:ba:ca:2e:b7:38:ed:9d:c5:7a:cb:8b:
ed:dc:4d:33:c7:67:d3:3c:f7:18:70:0f:61:37:09:
03:d6:18:24:c9:df:37:e9:84:9d:ed:40:79:fa:62:
65:85:b6:30:b6:76:9b:9a:2e:c5:a6:d2:ed:3b:7d:
02:01:f3:5b:81:80:6a:a9:9b:9f:94:c9:0b:6f:03:
20:d5:72:bd:94:1c:b0:1a:4d:df:e4:ed:72:e3:b7:
f1:02:7d:c3:97:c5:28:30:08:83:9e:26:e8:67:e0:
25:62:22:6c:91:c8:1a:1f:9b:cc:2a:e3:92:e7:35:
2f:aa:65:aa:fd:20:bf:01:ac:ee:a3:17:80:35:c7:
d0:0b:c4:21:18:d0:4e:40:ce:4a:1f:7f:ea:ca:76:
3b:1a:ed:5a:d7:a0:c9:b1:47:b8:8d:f0:9c:99:6b:
6b:9f:b3:97:c8:c8:83:94:ef:2c:ef:35:48:2f:55:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CD:88:2C:35:0C:CA:68:A2:F5:78:9F:BF:44:F8:40:C9:5D:0D:05
X509v3 Authority Key Identifier:
keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e312e302f32342d3234203d3e2034383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.14.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:78:97:c4:4c:b9:a2:02:4f:85:fa:0f:14:1f:e5:53:9f:c8:
32:6f:55:97:a2:37:2a:13:c8:b7:f7:62:45:8d:49:4e:e1:24:
f3:cd:27:83:38:52:ed:40:d3:99:a4:05:b9:d5:7a:8b:63:b1:
78:6a:e7:9e:62:c1:8f:31:95:b1:eb:ec:e9:00:f1:9e:fe:69:
bb:ed:dc:e2:db:c9:36:f4:8f:5d:9c:f5:d6:bd:62:8f:e8:a5:
e7:93:4c:6a:20:ca:5a:e3:ce:b4:80:96:29:3c:7b:f8:f8:a5:
18:40:d3:d0:23:d3:8d:4b:85:47:8a:df:9d:b0:c4:68:c3:d3:
ec:09:3d:7f:1e:94:77:21:20:21:96:4e:f1:8a:04:2a:7d:72:
db:69:de:83:08:37:9b:a6:7a:01:ef:2f:78:9c:e0:33:be:9a:
0a:de:f7:36:be:78:a2:a7:99:97:f6:7c:ec:1f:8e:b7:8a:85:
5c:ae:34:a7:b8:90:bd:74:b2:3f:73:1c:84:fb:50:2b:df:a5:
cf:c6:f0:0e:cb:cd:37:c6:10:7b:f3:30:1f:16:1d:9c:39:8c:
89:7e:5d:dc:a9:db:de:ab:1a:80:dc:69:61:17:da:6a:13:3c:
08:1f:ad:48:9e:00:f8:09:42:c2:a4:c8:48:8d:38:92:54:8d:
f7:76:01:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:49:24 2026 by rpki-client