This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e39362e302f31392d3139203d3e203233373234.roa
File: 3131372e35302e39362e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier: uoeW9OcVL4M7VnRRLsQYAels918yOnwLvAijkZ7bpcg=
Subject key identifier: 9E:91:DE:7D:2C:7F:1C:2D:87:8C:4B:00:77:D3:EF:AE:FE:34:EC:ED
Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial: 518189532B50A6A28B98335FA0E81B637ADE6405
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e39362e302f31392d3139203d3e203233373234.roa
Signing time: Tue 20 Jan 2026 02:10:50 +0000
ROA not before: Tue 20 Jan 2026 02:05:50 +0000
ROA not after: Tue 19 Jan 2027 02:10:50 +0000
asID: 23724
IP address blocks: 117.50.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:81:89:53:2b:50:a6:a2:8b:98:33:5f:a0:e8:1b:63:7a:de:64:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Validity
Not Before: Jan 20 02:05:50 2026 GMT
Not After : Jan 19 02:10:50 2027 GMT
Subject: CN=9E91DE7D2C7F1C2D878C4B0077D3EFAEFE34ECED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:2f:ca:9f:92:1d:ac:d0:60:6f:24:d3:62:
f1:63:bd:84:c3:f0:be:ff:e8:35:f8:b7:b7:0f:2b:
dc:72:ab:6d:ae:2f:0e:47:96:5f:15:3b:81:1d:98:
9b:24:cb:b8:52:6b:7e:07:a7:6c:73:54:92:44:96:
8f:57:e9:00:cd:57:27:22:7b:c4:d7:d0:60:06:97:
a0:bb:1d:fe:7e:c5:7f:61:5a:da:99:7e:1c:e8:7e:
09:40:5e:61:50:9e:34:30:b5:4b:87:a3:9e:c2:cb:
13:19:91:65:f0:32:9e:9b:e7:a9:a9:62:db:7c:b5:
a8:eb:8a:2d:5e:ad:e7:d9:39:06:be:80:27:d7:de:
a7:97:34:bb:8f:01:da:c4:a6:01:dc:9a:67:45:e1:
ed:05:86:fd:a0:16:11:54:9d:e3:48:da:8e:d2:15:
7d:50:d1:dd:c8:f3:87:4f:62:fd:7d:5c:9b:07:d3:
b8:3a:a8:5c:bb:8b:e4:9b:89:76:88:16:b1:c2:58:
72:da:40:36:c7:ae:3c:1d:9d:c6:6a:49:2e:51:34:
6c:3e:33:d0:31:47:50:cb:54:36:f1:14:c1:de:5f:
76:4c:f8:97:88:71:ba:e4:4b:f6:7a:c4:0e:30:2b:
31:7d:bb:38:03:ac:a5:5a:43:52:0e:e1:b3:4d:17:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:91:DE:7D:2C:7F:1C:2D:87:8C:4B:00:77:D3:EF:AE:FE:34:EC:ED
X509v3 Authority Key Identifier:
keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e39362e302f31392d3139203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.50.96.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:b3:32:be:67:e6:e6:69:75:0e:3d:1c:bb:15:db:d9:e1:f6:
ef:d0:71:34:06:1e:df:1c:50:82:ee:72:74:79:76:fa:74:d5:
26:3f:6b:53:e1:0b:b8:f7:e6:59:f9:91:b9:e8:5e:a7:e3:ba:
63:06:89:9a:11:d7:c6:b3:03:64:64:0f:45:64:7f:3c:a7:ef:
3f:e5:c3:ec:2f:67:0d:a8:49:22:be:43:4b:65:fb:0a:88:cb:
25:8f:0a:ab:9a:d7:b3:54:b0:b8:9a:e6:79:16:c2:88:ee:67:
8d:87:23:2b:f4:0b:21:5d:57:e5:58:84:8d:ed:48:bf:e9:3c:
fd:71:99:f9:c0:ef:77:94:d5:1c:14:3c:6e:22:9f:7a:61:72:
b8:ac:6d:81:92:dd:09:64:a5:ae:4b:0f:d7:e3:0c:86:cd:f0:
54:82:12:29:9b:93:06:d8:5d:a3:8e:1b:1b:d8:30:6d:98:3a:
60:71:23:2a:4c:d8:55:3c:d7:ce:df:eb:23:83:28:9d:48:18:
7c:d0:18:08:88:f8:70:92:99:26:0f:a3:6a:7f:e9:5f:45:e1:
72:cb:bd:f7:e0:00:a7:d7:3d:c6:98:f3:e7:c7:a9:f7:af:68:
c6:68:13:fd:c3:4e:14:c7:64:18:d0:fc:ed:85:e5:24:69:1b:
b8:c4:3a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:23:26 2026 by rpki-client