This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721662465/0/3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa
File: 3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa (raw, json)
Hash identifier: POleG0l4wno//ZX5b+0oZBB9yM8f+wy3+HMPXea5rYs=
Subject key identifier: 57:42:47:29:06:97:3B:31:3D:8E:C9:BA:E8:93:14:F2:DF:61:34:78
Certificate issuer: /CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
Certificate serial: 1962431B5D8CB7B3D775B6711FF9A2F6E7E7096E
Authority key identifier: 12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa
Signing time: Tue 20 Jan 2026 02:23:46 +0000
ROA not before: Tue 20 Jan 2026 02:18:46 +0000
ROA not after: Tue 19 Jan 2027 02:23:46 +0000
asID: 135542
IP address blocks: 144.79.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 09:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:62:43:1b:5d:8c:b7:b3:d7:75:b6:71:1f:f9:a2:f6:e7:e7:09:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
Validity
Not Before: Jan 20 02:18:46 2026 GMT
Not After : Jan 19 02:23:46 2027 GMT
Subject: CN=5742472906973B313D8EC9BAE89314F2DF613478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:6c:e3:7e:d3:cc:51:7b:dc:8e:26:26:e8:
ca:22:7e:0f:b0:27:c8:83:06:ad:dc:e9:f3:58:5d:
2d:16:bb:59:08:39:ba:da:62:39:24:d5:62:a0:fa:
66:dc:30:01:28:36:36:d6:cd:da:7f:8f:90:df:04:
1d:11:91:87:7c:28:fd:58:48:b3:30:ec:c8:7f:f9:
a5:cd:74:c5:99:3e:3a:48:c6:21:e8:09:ec:38:b9:
0b:2f:3d:78:7d:f4:83:fc:51:75:6e:4d:f3:81:eb:
ee:96:55:e8:db:45:4a:15:22:4b:86:0d:21:7c:6e:
b3:7f:df:b5:d4:e1:4c:23:f4:9e:ec:a5:31:4a:ae:
65:91:e0:1e:93:19:e6:72:0e:c3:dc:c7:57:8c:db:
59:9b:3b:c5:79:84:bb:d3:61:59:43:aa:a3:be:45:
fd:d8:75:5c:c6:8f:a9:c6:51:5a:aa:a0:de:fc:0d:
a0:7f:fd:01:28:3b:aa:8e:24:94:f2:76:2e:3d:ff:
3a:69:b7:a8:b6:51:8d:8e:68:ab:5e:51:ec:9d:94:
27:45:a5:54:7f:46:d6:20:7d:5c:10:f4:7e:f6:57:
43:64:de:5e:bb:35:5b:b6:f6:5b:48:0c:88:5b:e0:
ad:9e:69:eb:9f:e2:c9:2c:84:4e:21:36:57:fc:40:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:42:47:29:06:97:3B:31:3D:8E:C9:BA:E8:93:14:F2:DF:61:34:78
X509v3 Authority Key Identifier:
keyid:12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.79.118.0/24
Signature Algorithm: sha256WithRSAEncryption
58:04:c9:fb:56:7d:a0:42:d0:7d:73:18:9b:cf:b3:c9:36:15:
f1:af:b4:48:d4:93:e0:f6:e4:34:b6:3f:83:a6:90:1c:5d:77:
87:e7:b7:75:21:a4:3b:f0:8d:79:91:cd:8e:e5:f0:d5:3a:87:
07:b5:da:45:d2:7a:ea:54:9f:44:7c:2c:87:d9:31:87:f6:e7:
3f:c0:9a:44:6d:d5:e5:e5:9f:17:8d:a7:67:cb:30:e4:87:9e:
0f:78:14:c4:b8:a1:61:66:4e:89:36:d2:8d:76:55:83:12:59:
d2:bc:34:31:3f:d3:69:7b:6c:84:e7:3c:65:cf:9b:cd:cd:a1:
20:35:e7:33:a6:ca:33:04:a5:da:70:f0:2b:0e:1f:6e:69:7f:
93:c8:1d:6b:66:5b:50:08:f3:8d:4c:36:3f:44:b8:4b:92:a0:
70:9d:a7:12:9f:85:17:f9:fc:cc:0d:01:45:7b:04:7f:64:c5:
4c:0a:f8:7c:77:ce:e2:a2:95:26:43:b1:40:76:af:a2:60:cc:
ac:43:c9:22:02:c0:f5:79:54:f4:61:6c:cb:de:c3:fa:18:a1:
b9:5a:b8:f0:eb:38:6d:0c:db:6c:5e:11:cd:f6:55:85:c5:45:
a8:ce:89:80:6f:a4:71:88:49:88:e5:60:e9:bb:09:b7:00:f2:
15:84:e5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:59:25 2026 by rpki-client