This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e302e302f31392d3139203d3e2034383038.roa
File: 3131372e35302e302e302f31392d3139203d3e2034383038.roa (raw, json)
Hash identifier: ksQgyeBILEabJIoq1hnYwvkf4pFPyIO3xM7xeNjQUnM=
Subject key identifier: 6A:C2:02:00:E7:AD:92:44:02:6F:17:1D:13:5E:F8:EF:27:E3:3B:31
Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial: 4BEB28210DD346FF950A577486359EEB7E3A68DE
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e302e302f31392d3139203d3e2034383038.roa
Signing time: Tue 20 Jan 2026 02:10:51 +0000
ROA not before: Tue 20 Jan 2026 02:05:51 +0000
ROA not after: Tue 19 Jan 2027 02:10:51 +0000
asID: 4808
IP address blocks: 117.50.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:eb:28:21:0d:d3:46:ff:95:0a:57:74:86:35:9e:eb:7e:3a:68:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Validity
Not Before: Jan 20 02:05:51 2026 GMT
Not After : Jan 19 02:10:51 2027 GMT
Subject: CN=6AC20200E7AD9244026F171D135EF8EF27E33B31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:d1:ed:55:c4:b7:a1:27:7c:79:fb:e2:92:
5a:be:a8:88:e8:4e:67:c2:29:88:2d:0f:24:70:8e:
c4:b3:0e:08:14:0e:af:e2:1b:b6:58:ee:49:28:7f:
fd:36:c4:fb:3d:b5:5b:80:dc:cf:68:58:ed:78:dc:
a3:6b:ce:4e:b0:8c:c2:da:b3:c2:2e:56:8a:28:9d:
62:79:af:40:26:fd:fc:e0:57:2d:e3:99:60:2e:4a:
05:d1:1f:c9:77:21:69:69:a4:49:25:6b:e1:39:77:
47:61:e5:c2:ff:f7:6b:e8:b7:50:04:92:20:9d:5e:
65:18:7f:bf:b9:bd:81:ef:9b:72:62:90:54:ae:dd:
27:b1:5e:f7:57:dc:1b:ea:ff:de:6d:f1:ab:29:ec:
b2:ff:6c:1c:4d:86:b9:7e:de:58:0d:f7:15:71:aa:
3d:7b:4c:9b:54:c5:3c:da:ba:04:a2:dc:68:79:1d:
3c:8a:7f:2f:0d:82:53:f4:76:1b:7e:b1:e6:d9:5e:
b9:74:7f:99:84:b0:19:73:7b:d7:50:4b:d1:f2:1c:
59:c2:29:7e:7b:e4:1c:60:bf:35:73:80:2b:42:dc:
61:70:db:f9:6b:b2:46:5a:19:87:3e:50:5a:ac:d6:
7a:fe:c8:f3:1b:2c:3b:1c:f5:07:cb:44:38:d8:fd:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C2:02:00:E7:AD:92:44:02:6F:17:1D:13:5E:F8:EF:27:E3:3B:31
X509v3 Authority Key Identifier:
keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e302e302f31392d3139203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.50.0.0/19
Signature Algorithm: sha256WithRSAEncryption
38:69:9e:a3:18:6a:44:8a:51:12:a8:78:ad:c1:a7:a3:b3:9d:
1f:43:3f:90:f2:cf:82:66:6e:1e:35:7e:47:f1:bd:a4:20:54:
bc:e1:cf:f4:bc:ab:10:35:7b:48:94:cd:55:fd:1d:e0:92:12:
e2:36:6f:02:82:f3:23:20:85:46:87:ef:fe:a6:4d:dc:6f:e0:
ba:99:96:dd:87:39:31:05:66:50:55:61:e5:f7:92:85:08:e2:
a0:99:a5:b0:3b:24:ae:cb:a3:49:6c:c3:b0:09:84:80:f8:48:
7a:48:33:3a:40:ec:e9:f7:15:65:f8:05:af:92:c2:7e:45:7b:
79:b2:66:06:e1:e8:30:9c:c1:f5:72:23:75:ad:67:34:b9:55:
8d:b5:24:04:29:3c:03:48:5c:d3:c3:0b:1d:1b:dc:e8:64:f8:
95:76:29:ec:aa:17:4c:5b:32:74:79:44:19:a8:a3:31:8b:10:
44:f8:52:57:5b:6a:0b:49:ac:60:27:24:f2:f8:82:51:43:ab:
a6:6c:ce:e5:71:74:58:40:11:b0:4b:54:bc:ad:ce:56:7a:78:
d4:ae:fc:9c:a9:bf:91:7c:a2:9a:04:af:f9:30:2e:b6:c5:99:
c4:cf:b5:bd:9b:f7:78:bf:47:6a:29:88:29:61:06:f6:70:4b:
0c:1c:86:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:22:14 2026 by rpki-client