This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e35302e302f32342d3234203d3e203633313939.roa
File: 3133392e3135392e35302e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: htnGuaz2MsHiJIKc2wvhToZZ5NT4EQSJoH274B7vPNs=
Subject key identifier: FC:FC:33:9D:49:52:90:02:06:93:94:CA:C3:84:0D:4D:C1:EC:91:76
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 37344C31851352D3B1900C1049161817A6766732
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e35302e302f32342d3234203d3e203633313939.roa
Signing time: Tue 20 Jan 2026 02:23:49 +0000
ROA not before: Tue 20 Jan 2026 02:18:49 +0000
ROA not after: Tue 19 Jan 2027 02:23:49 +0000
asID: 63199
IP address blocks: 139.159.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 16:37:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:34:4c:31:85:13:52:d3:b1:90:0c:10:49:16:18:17:a6:76:67:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jan 20 02:18:49 2026 GMT
Not After : Jan 19 02:23:49 2027 GMT
Subject: CN=FCFC339D49529002069394CAC3840D4DC1EC9176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:58:e4:49:f1:7f:8a:be:3c:f9:9b:ad:fb:
00:d5:bb:be:0e:ef:a0:1d:41:00:8a:2b:08:88:a7:
e4:ed:e5:cd:eb:a2:21:c6:f3:cd:3f:a2:26:9c:17:
82:72:85:42:c0:31:a8:f5:13:06:94:f1:14:64:07:
1c:df:12:45:7f:2b:1a:9f:1c:11:78:4b:e6:c1:e3:
7b:5e:ba:6f:db:3f:0c:31:ab:a8:d2:51:b0:fa:d4:
53:3b:d6:1b:36:07:82:bb:3e:99:60:8a:3c:25:13:
bc:94:2f:5b:e5:d3:1d:80:ee:5b:7d:fa:2d:f9:63:
17:fd:e5:88:e5:e2:50:a6:5f:71:01:f5:b0:5a:8d:
00:37:b9:d7:48:72:6e:ea:48:bc:05:c8:2a:bf:f6:
61:ce:3f:86:a7:9b:39:60:d5:db:d4:d7:01:2c:86:
a8:f0:06:67:b9:e5:eb:17:7e:c2:9b:24:91:bf:30:
8b:1d:e7:c3:9b:4e:cf:30:00:a0:69:23:0a:9c:c9:
88:e2:97:6c:0f:53:05:27:08:3e:d9:de:ce:fa:f8:
0a:f3:43:ed:4e:b6:ed:af:c8:e5:8b:f1:64:38:89:
66:a4:d9:c9:3f:63:a7:14:84:bf:4f:3a:51:a8:e9:
14:34:e9:5c:2f:14:15:2f:05:ac:3e:ed:1a:b9:50:
7b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FC:33:9D:49:52:90:02:06:93:94:CA:C3:84:0D:4D:C1:EC:91:76
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e35302e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:88:30:aa:29:20:d0:ea:26:fb:65:65:22:52:43:ce:4e:9b:
98:e5:68:e6:ef:85:83:4a:99:90:a6:8b:b3:42:1c:37:80:62:
c8:7d:52:2e:27:bd:cf:29:2a:e3:c9:be:9e:99:88:fc:f9:75:
e7:fd:d2:a2:3d:4b:ec:53:e3:bc:56:e5:34:6f:ff:05:5c:66:
52:9d:87:fe:39:d4:e3:b4:f7:de:58:8d:72:2e:63:54:bf:56:
9a:74:2d:a7:1c:9e:77:e9:6f:8d:02:c7:05:33:75:93:b6:28:
58:1b:2e:f5:43:ef:cc:02:ce:96:2e:0f:7f:21:1c:1b:36:0b:
e1:50:63:ef:44:bd:c2:3d:f6:f1:7b:4f:00:11:57:f4:27:dc:
6d:b9:b1:25:ec:5a:e7:98:68:1c:f7:9f:fc:bc:d2:06:43:16:
dd:91:ab:f7:b2:07:42:99:a1:2f:aa:87:ef:dd:f6:65:d8:a9:
38:40:90:b2:9a:a1:bd:e1:c2:36:30:e4:eb:7e:58:02:65:00:
9d:0d:76:5d:d8:e9:f6:ee:e2:8d:3b:d7:ef:24:c0:56:9b:93:
15:6c:2c:90:07:a6:7f:1b:4b:e0:ab:e5:2c:23:1b:7e:4f:db:
c0:17:65:42:0f:ec:e7:e9:c5:d7:75:51:b0:28:be:23:f7:a4:
43:90:04:e6
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUNzRMMYUTUtOxkAwQSRYYF6Z2ZzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE
RUYwMERCQTAeFw0yNjAxMjAwMjE4NDlaFw0yNzAxMTkwMjIzNDlaMDMxMTAvBgNV
BAMTKEZDRkMzMzlENDk1MjkwMDIwNjkzOTRDQUMzODQwRDREQzFFQzkxNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBP1jkSfF/ir48+Zut+wDVu74O
76AdQQCKKwiIp+Tt5c3roiHG880/oiacF4JyhULAMaj1EwaU8RRkBxzfEkV/Kxqf
HBF4S+bB43teum/bPwwxq6jSUbD61FM71hs2B4K7PplgijwlE7yUL1vl0x2A7lt9
+i35Yxf95Yjl4lCmX3EB9bBajQA3uddIcm7qSLwFyCq/9mHOP4anmzlg1dvU1wEs
hqjwBme55esXfsKbJJG/MIsd58ObTs8wAKBpIwqcyYjil2wPUwUnCD7Z3s76+Arz
Q+1Otu2vyOWL8WQ4iWak2ck/Y6cUhL9POlGo6RQ06VwvFBUvBaw+7Rq5UHt/AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU/PwznUlSkAIGk5TKw4QNTcHskXYwHwYDVR0j
BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx
ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODE1NjkzMC8xLzMxMzMzOTJlMzEz
NTM5MmUzNTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzMxMzkzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAIufMjANBgkqhkiG9w0BAQsFAAOCAQEAuYgwqikg0Oom+2VlIlJDzk6b
mOVo5u+Fg0qZkKaLs0IcN4BiyH1SLie9zykq48m+npmI/Pl15/3Soj1L7FPjvFbl
NG//BVxmUp2H/jnU47T33liNci5jVL9WmnQtpxyed+lvjQLHBTN1k7YoWBsu9UPv
zALOli4PfyEcGzYL4VBj70S9wj328XtPABFX9CfcbbmxJexa55hoHPef/LzSBkMW
3ZGr97IHQpmhL6qH7932ZdipOECQspqhveHCNjDk635YAmUAnQ12Xdjp9u7ijTvX
7yTAVpuTFWwskAemfxtL4KvlLCMbfk/bwBdlQg/s5+nF13VRsCi+I/ekQ5AE5g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:11:17 2026 by rpki-client