This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e302e302f31392d3139203d3e203633353636.roa
File: 3132322e31312e302e302f31392d3139203d3e203633353636.roa (raw, json)
Hash identifier: WA5zg0AZiOq5/XX/UbhAjR810o8hOdpxMzpDns/KOgQ=
Subject key identifier: 5F:4A:0C:D8:A2:08:F1:45:4E:3F:D7:87:01:4A:D9:79:56:F5:C1:4B
Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial: 579C9DE85DCE23FBA0A562EB56266E413CE572E9
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e302e302f31392d3139203d3e203633353636.roa
Signing time: Tue 20 Jan 2026 02:10:55 +0000
ROA not before: Tue 20 Jan 2026 02:05:55 +0000
ROA not after: Tue 19 Jan 2027 02:10:55 +0000
asID: 63566
IP address blocks: 122.11.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 14:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:9c:9d:e8:5d:ce:23:fb:a0:a5:62:eb:56:26:6e:41:3c:e5:72:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
Validity
Not Before: Jan 20 02:05:55 2026 GMT
Not After : Jan 19 02:10:55 2027 GMT
Subject: CN=5F4A0CD8A208F1454E3FD787014AD97956F5C14B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:8a:6c:52:42:ff:09:39:ad:8f:7d:f6:95:
42:8e:29:ce:60:6f:a3:b0:2e:6b:5c:af:f8:13:4a:
a0:75:53:00:00:1a:c3:4b:f6:d9:2e:68:eb:6f:96:
d7:00:be:c9:70:44:c1:1f:bf:f3:6d:f3:48:57:c9:
8c:79:72:c3:a1:1e:c3:b3:6b:cd:2b:e4:57:47:d1:
c1:e8:62:f2:2d:35:81:81:59:92:70:14:c8:c8:86:
05:36:6d:2f:2c:85:69:9b:1d:ba:00:48:93:7e:00:
59:f1:64:6b:c6:5f:a6:8c:59:a3:e7:cb:b4:61:a5:
4d:3e:1d:bc:41:b1:94:24:b7:5b:b5:c8:2a:3e:d9:
e9:a4:ab:4e:ba:59:fd:97:1f:ec:c4:68:5d:40:cb:
8b:65:0f:1c:90:7d:47:b5:84:2e:c1:e5:2e:94:48:
26:59:d4:00:b8:2d:c9:b5:46:50:63:9b:22:ed:b0:
1c:02:d3:75:6f:8e:dd:1d:31:5f:39:a2:21:4d:c2:
a3:de:50:3b:45:8d:67:09:8a:5d:8e:5b:6d:40:66:
98:4c:ad:13:21:32:09:5c:88:69:9e:0d:eb:c0:95:
28:cd:0e:58:6a:8d:ee:cc:1e:02:ab:0f:7a:b0:46:
da:05:9b:4b:86:6b:d9:3b:af:eb:d6:09:bc:c5:c5:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4A:0C:D8:A2:08:F1:45:4E:3F:D7:87:01:4A:D9:79:56:F5:C1:4B
X509v3 Authority Key Identifier:
keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e302e302f31392d3139203d3e203633353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.11.0.0/19
Signature Algorithm: sha256WithRSAEncryption
48:7b:7d:c5:8b:2c:07:0d:26:a2:85:f5:98:41:5a:42:f7:1b:
74:ed:3a:0b:60:ae:0d:1a:62:28:be:be:b2:14:60:78:13:67:
eb:e0:88:9a:11:a7:49:23:42:5f:59:c5:a4:53:07:2d:37:ba:
d4:6e:84:45:c1:aa:c4:09:d1:99:6c:d2:b7:d0:13:77:8e:d9:
3a:7e:18:b4:ab:f2:e1:dc:88:dd:70:4a:bf:60:0b:bf:03:a9:
be:b4:2c:0f:e1:65:62:60:70:82:0a:3b:07:60:f9:01:3f:7a:
cb:7b:52:dc:34:ff:79:31:c1:87:aa:cf:3e:bf:02:fe:ff:48:
90:49:a5:a2:92:10:64:28:cd:76:4f:51:6f:27:aa:9e:ce:c4:
c0:96:47:b1:96:29:36:c6:72:d2:6f:50:70:de:33:eb:42:6b:
74:6c:23:24:92:11:77:b5:20:eb:ff:b1:93:d9:a5:98:d7:7a:
b2:a6:1a:e3:f7:dc:b4:29:f8:cd:5b:13:26:ec:0e:42:ed:12:
60:15:12:69:2f:29:86:56:4a:66:7a:58:01:a6:59:f4:0f:51:
49:07:c0:80:a0:d5:5f:77:4f:b1:ef:cc:25:f2:d7:29:41:77:
99:7a:68:a2:f7:c7:89:d1:ec:17:d2:a4:31:f4:25:92:15:7f:
e2:a8:72:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:08:33 2026 by rpki-client