This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e36342e302f31392d3139203d3e203233373234.roa
File: 3131372e35302e36342e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier: 8qCLnnZwagiF2m6Y2lkjwEO/f5RPdTqhzT3DWs/3v8s=
Subject key identifier: 3F:D1:C5:38:F7:FB:15:DF:6B:E9:10:49:0C:3E:B7:E0:6D:62:49:27
Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial: 0749BE1F785D7E1D3BE5563064ACE776DD8A9BE4
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e36342e302f31392d3139203d3e203233373234.roa
Signing time: Tue 20 Jan 2026 02:10:46 +0000
ROA not before: Tue 20 Jan 2026 02:05:46 +0000
ROA not after: Tue 19 Jan 2027 02:10:46 +0000
asID: 23724
IP address blocks: 117.50.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:49:be:1f:78:5d:7e:1d:3b:e5:56:30:64:ac:e7:76:dd:8a:9b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Validity
Not Before: Jan 20 02:05:46 2026 GMT
Not After : Jan 19 02:10:46 2027 GMT
Subject: CN=3FD1C538F7FB15DF6BE910490C3EB7E06D624927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:e5:1c:c6:f7:71:64:98:ae:27:41:57:6c:
96:03:d2:c6:c6:85:9d:cd:7a:83:71:71:b1:a3:96:
88:2f:23:db:2a:62:cf:d7:a8:70:b6:43:41:5b:d5:
d6:f5:1b:46:9e:bb:39:cb:c7:52:1f:78:06:e2:ff:
ba:1f:3c:47:dd:6d:76:19:03:56:49:f4:28:3c:ec:
67:5a:be:96:40:91:0e:37:a3:7b:0e:ba:e5:86:30:
78:89:c0:46:28:a9:2e:52:b4:ef:2a:18:2b:de:1c:
8b:2a:fa:82:93:32:95:b4:91:dc:f2:42:a1:7b:61:
4f:75:55:89:5b:72:dd:89:72:be:30:1e:f8:a6:81:
55:f5:a4:bc:a0:63:d4:cc:32:35:71:87:1b:98:88:
e7:89:ef:dd:77:ee:96:80:b2:d7:eb:39:4d:14:c9:
61:ae:dc:84:d5:76:97:95:9d:61:c3:c1:5a:3e:97:
b7:d5:18:0e:34:bd:53:6e:20:38:70:9c:17:8f:d0:
2b:5e:d5:c6:c0:da:14:cc:30:97:1b:42:c1:c8:6c:
81:ff:42:a7:b1:19:71:b2:06:15:a7:89:5e:12:b7:
0b:e1:82:4c:f9:cb:98:ed:26:40:09:b5:fc:31:ee:
92:07:2a:26:7f:3e:f9:24:58:d1:9a:a5:49:a3:37:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D1:C5:38:F7:FB:15:DF:6B:E9:10:49:0C:3E:B7:E0:6D:62:49:27
X509v3 Authority Key Identifier:
keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e36342e302f31392d3139203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.50.64.0/19
Signature Algorithm: sha256WithRSAEncryption
62:ba:81:8f:a8:3b:35:22:dd:a4:14:54:d3:5a:56:d8:db:37:
09:f9:4e:8e:df:47:ff:a5:f6:ae:a5:46:28:41:54:8a:1f:d2:
6a:61:bf:1b:28:26:f3:39:31:3e:f9:d2:80:95:98:de:33:de:
63:6f:56:56:f5:d7:fe:63:60:fc:35:a3:a1:a8:6f:64:48:ac:
8e:44:07:95:61:e0:c2:04:62:51:e1:46:6f:49:36:26:b4:f4:
f9:ea:ee:22:08:54:b9:43:bd:54:27:66:9e:89:41:ed:b5:84:
c1:f7:c8:fd:f7:56:de:d8:3a:e3:73:28:db:46:78:a1:23:fe:
54:7e:d1:bb:2a:fe:8f:1e:03:15:0c:b6:61:00:a5:f0:35:d4:
be:4f:f7:c8:5a:53:0d:a2:8e:ba:57:26:69:f1:7b:b1:18:15:
90:21:bb:ed:f7:e3:2c:93:65:ba:69:2c:01:9c:6a:4a:34:69:
56:7c:1f:a6:dd:c0:15:fc:35:c7:f4:a7:60:d1:f4:15:eb:2e:
c3:83:fa:e6:3d:f6:d0:cc:74:80:84:83:9a:7f:8a:e4:4b:5a:
05:a3:f4:f4:95:77:c5:7c:a2:53:3f:a7:1b:86:1a:e1:c1:e1:
f6:8e:79:61:97:38:fa:ad:a9:28:fa:94:ce:7d:0b:c0:7c:35:
30:26:8c:d7
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUB0m+H3hdfh075VYwZKzndt2Km+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB
OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDZaFw0yNzAxMTkwMjEwNDZaMDMxMTAvBgNV
BAMTKDNGRDFDNTM4RjdGQjE1REY2QkU5MTA0OTBDM0VCN0UwNkQ2MjQ5MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6fuUcxvdxZJiuJ0FXbJYD0sbG
hZ3NeoNxcbGjlogvI9sqYs/XqHC2Q0Fb1db1G0aeuznLx1IfeAbi/7ofPEfdbXYZ
A1ZJ9Cg87GdavpZAkQ43o3sOuuWGMHiJwEYoqS5StO8qGCveHIsq+oKTMpW0kdzy
QqF7YU91VYlbct2Jcr4wHvimgVX1pLygY9TMMjVxhxuYiOeJ79137paAstfrOU0U
yWGu3ITVdpeVnWHDwVo+l7fVGA40vVNuIDhwnBeP0Cte1cbA2hTMMJcbQsHIbIH/
QqexGXGyBhWniV4Stwvhgkz5y5jtJkAJtfwx7pIHKiZ/PvkkWNGapUmjN3tDAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUP9HFOPf7Fd9r6RBJDD634G1iSScwHwYDVR0j
BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4
MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMTM3MmUzNTMw
MmUzNjM0MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBXUyQDANBgkqhkiG9w0BAQsFAAOCAQEAYrqBj6g7NSLdpBRU01pW2Ns3CflO
jt9H/6X2rqVGKEFUih/SamG/Gygm8zkxPvnSgJWY3jPeY29WVvXX/mNg/DWjoahv
ZEisjkQHlWHgwgRiUeFGb0k2JrT0+eruIghUuUO9VCdmnolB7bWEwffI/fdW3tg6
43Mo20Z4oSP+VH7Ruyr+jx4DFQy2YQCl8DXUvk/3yFpTDaKOulcmafF7sRgVkCG7
7ffjLJNlumksAZxqSjRpVnwfpt3AFfw1x/SnYNH0Fesuw4P65j320Mx0gISDmn+K
5EtaBaP09JV3xXyiUz+nG4Ya4cHh9o55YZc4+q2pKPqUzn0LwHw1MCaM1w==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:23:20 2026 by rpki-client