This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e33322e302f31392d3139203d3e2034383038.roa
File: 3131372e35302e33322e302f31392d3139203d3e2034383038.roa (raw, json)
Hash identifier: KgDOM43VrjVpDgOduUtmcy7edwlF4mnKhMaMmShyaWY=
Subject key identifier: 98:1B:62:2B:63:59:C0:1B:46:C8:1C:27:AF:B9:C1:E6:06:8E:03:1F
Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial: 415577E0450E8DC2EC7F88E4B1BA832CD74E653D
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e33322e302f31392d3139203d3e2034383038.roa
Signing time: Tue 20 Jan 2026 02:10:50 +0000
ROA not before: Tue 20 Jan 2026 02:05:50 +0000
ROA not after: Tue 19 Jan 2027 02:10:50 +0000
asID: 4808
IP address blocks: 117.50.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:55:77:e0:45:0e:8d:c2:ec:7f:88:e4:b1:ba:83:2c:d7:4e:65:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Validity
Not Before: Jan 20 02:05:50 2026 GMT
Not After : Jan 19 02:10:50 2027 GMT
Subject: CN=981B622B6359C01B46C81C27AFB9C1E6068E031F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:69:0c:5f:ff:65:ff:d0:e2:4d:fd:a1:87:73:
b5:90:ab:ba:7e:d1:41:11:6e:ef:7a:fb:d6:ef:01:
1f:8b:16:a7:9d:bc:7d:93:c0:6e:c6:8d:fe:77:1b:
29:78:84:1d:83:51:53:fc:ed:f0:99:02:3e:2c:46:
cd:9c:39:8a:9a:85:c1:f3:e6:78:ce:b8:69:66:42:
50:e0:f3:ac:4c:aa:cb:d7:2b:6e:71:83:7e:1e:71:
71:bb:e6:c3:f7:9a:c1:20:0d:61:91:bc:4f:01:32:
8d:8d:8c:e3:e4:a1:7b:0e:c5:53:0c:f4:63:d5:5a:
f1:d4:59:ac:a2:04:22:51:fb:23:74:25:ea:2a:fa:
9f:d3:67:85:ff:44:1c:2e:21:e9:a5:fc:46:05:68:
2e:bb:f1:71:b3:a3:d0:e8:35:dc:df:4c:a0:9a:7a:
5c:bc:75:dc:14:54:9b:db:94:19:71:db:6b:e4:8d:
ec:78:64:e6:bf:f4:77:e7:c3:38:d2:cd:57:bb:d6:
61:2c:43:3a:78:65:a3:c4:9a:28:46:d6:74:5d:40:
13:dd:8a:50:b8:4e:d4:fa:68:ef:20:4e:e2:68:0f:
6d:1d:9b:f6:bc:e9:de:09:92:fa:e1:4e:c5:a0:9c:
e3:5d:60:75:7d:0a:5f:3f:02:52:01:1d:83:68:49:
6f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1B:62:2B:63:59:C0:1B:46:C8:1C:27:AF:B9:C1:E6:06:8E:03:1F
X509v3 Authority Key Identifier:
keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e33322e302f31392d3139203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
d7:2c:20:8a:5a:48:d7:a4:08:f6:c0:71:70:df:32:68:39:e8:
14:72:f2:16:67:f7:19:89:36:9d:54:71:02:ab:0d:63:f2:a6:
ec:b9:ae:ef:ce:6a:74:c5:7a:c0:d4:27:59:b3:47:0b:ed:8c:
20:9d:05:39:15:06:fc:dc:10:e0:37:38:0b:f3:46:76:02:3e:
dd:7d:f6:96:f1:ee:c9:2e:7e:d2:12:1a:8a:fd:19:1a:be:5e:
ff:a9:a6:28:1b:22:a9:18:b7:45:4a:92:44:99:a4:65:b2:e4:
de:be:73:81:e8:f0:d7:6a:7a:01:5c:64:75:09:c6:b4:51:a0:
9c:65:63:c9:65:5a:97:0c:a9:32:57:99:20:03:9b:24:82:62:
66:56:24:8f:16:2a:ca:b9:70:ba:87:7c:b6:e9:77:cd:2e:75:
82:49:d9:ef:5c:23:72:26:26:82:4a:05:87:e6:fc:39:d2:c4:
3b:74:b3:92:d9:0d:5c:f6:03:45:5d:2c:1d:c4:12:8a:dd:d7:
76:56:44:72:d5:ab:26:de:28:be:7c:20:6e:60:65:87:3a:57:
02:fd:5f:95:33:81:85:38:48:28:be:f1:e4:a4:ec:fd:1c:26:
f9:da:56:68:1e:c2:f1:c8:50:5b:68:fb:c1:78:62:db:b6:e5:
13:91:1f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:23:20 2026 by rpki-client