This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/34392e35312e3134362e302f32332d3234203d3e20313332323033.roa
File: 34392e35312e3134362e302f32332d3234203d3e20313332323033.roa (raw, json)
Hash identifier: uIV/dmn3TVHh2QVgkyPZUpUMRN5xFb2AeTCQlqGyDio=
Subject key identifier: 3A:23:6A:B8:BE:FA:9D:4C:25:09:2A:99:F3:38:FA:CE:7B:F8:76:A7
Certificate issuer: /CN=4F94A5F36F866F21180775DFFF3827990F956B62
Certificate serial: 6C1F948695CB2CD0A2F5A6D2899F29A2D69D642F
Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/34392e35312e3134362e302f32332d3234203d3e20313332323033.roa
Signing time: Tue 20 Jan 2026 02:26:07 +0000
ROA not before: Tue 20 Jan 2026 02:21:07 +0000
ROA not after: Tue 19 Jan 2027 02:26:07 +0000
asID: 132203
IP address blocks: 49.51.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 05:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:1f:94:86:95:cb:2c:d0:a2:f5:a6:d2:89:9f:29:a2:d6:9d:64:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62
Validity
Not Before: Jan 20 02:21:07 2026 GMT
Not After : Jan 19 02:26:07 2027 GMT
Subject: CN=3A236AB8BEFA9D4C25092A99F338FACE7BF876A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:63:e4:cb:00:56:2c:94:0f:f6:8e:f3:59:
5a:41:1f:d6:6f:ef:54:2c:b8:92:b7:f3:e7:0f:dc:
e5:27:4d:4b:c5:1a:c6:60:e4:a6:45:08:24:5c:09:
02:41:91:5a:30:d1:7d:d1:ae:9a:50:fd:c4:f7:12:
c1:6e:01:90:61:45:1b:01:72:48:4c:f0:63:43:04:
9b:9b:7f:cb:fb:c5:fa:d4:8e:de:7a:46:4b:7f:17:
cb:a3:f5:e1:54:b6:4f:67:b2:c2:74:9b:2f:bb:0f:
45:e7:6d:c9:60:06:b5:d6:93:cb:c8:b3:f7:67:34:
58:7b:52:23:58:d2:bb:27:26:d0:b0:d5:fc:f3:d1:
be:f3:36:0f:b5:c2:94:7e:ba:2a:16:32:1b:09:1f:
0c:81:58:36:5a:93:fd:ca:a2:55:5b:25:a8:f5:e5:
87:3d:53:19:a0:fb:db:78:29:1d:3f:4a:9b:0a:12:
ba:63:76:be:e1:98:bf:1a:53:fb:ca:75:38:2b:91:
e5:e2:96:a5:f6:d6:75:e3:62:69:31:22:5a:8a:a1:
4c:88:ff:92:dc:62:d7:e9:e3:92:a2:78:71:47:57:
81:00:2f:77:c7:8f:08:23:35:fc:4a:3a:d2:36:5a:
b2:e7:ee:d7:8d:40:97:31:dc:1b:fa:93:c4:67:dd:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:23:6A:B8:BE:FA:9D:4C:25:09:2A:99:F3:38:FA:CE:7B:F8:76:A7
X509v3 Authority Key Identifier:
keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/34392e35312e3134362e302f32332d3234203d3e20313332323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.51.146.0/23
Signature Algorithm: sha256WithRSAEncryption
09:63:47:a7:67:89:05:fb:cc:70:59:ae:97:81:8c:ae:06:80:
1d:4b:0b:89:cb:42:2f:11:31:2e:94:9c:67:39:fb:ca:cf:c8:
22:35:9f:4c:ca:46:59:ea:0e:f2:b9:5b:74:e6:7e:05:07:41:
ab:23:3d:25:b1:4e:fa:c3:92:25:70:84:51:d9:da:4d:bb:06:
f2:5d:df:ad:91:44:2c:e1:95:ab:ba:0d:08:b5:e0:19:44:58:
8c:7f:f8:64:81:57:c0:8f:4d:a7:51:92:2e:55:95:2a:ee:27:
8a:67:23:b3:50:dc:37:f7:34:51:55:7a:01:39:48:9f:19:c8:
cb:3d:4d:01:02:60:f6:4d:f7:01:c1:a9:96:58:4c:e4:c9:a5:
8d:79:55:12:e0:26:dc:15:70:1e:fb:95:76:46:56:5e:c6:9a:
61:d9:31:c3:84:2a:aa:5d:80:80:bb:b4:37:72:5a:1e:f7:f7:
fa:d4:ae:7f:b2:14:8a:3a:c3:33:c1:26:f6:42:9e:7f:24:6c:
06:e4:55:8c:db:6b:7b:53:cb:27:93:c8:8d:d6:42:03:f5:b5:
f3:0d:d5:bc:f4:35:60:a3:ff:b4:db:8d:36:cf:ee:d6:56:cf:
a7:c8:16:89:4e:64:78:c1:27:59:39:d1:56:2a:11:65:cd:f0:
75:a4:5a:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 14:53:43 2026 by rpki-client