This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3234382e302f32342d3234203d3e20313335333737.roa File: 3130312e3233372e3234382e302f32342d3234203d3e20313335333737.roa (raw, json) Hash identifier: uNY0lT3ImTwET1hiiz2W9VjBVUdWnjo2vYPMAq96BQA= Subject key identifier: CB:F3:BC:9B:8A:D3:EC:2E:1B:5F:F2:A7:A6:CE:7F:1C:A9:2C:2C:19 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 15FDA799FD6775E3A25C4DF04EDBCC5A6E3FFA41 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3234382e302f32342d3234203d3e20313335333737.roa Signing time: Tue 20 Jan 2026 02:10:50 +0000 ROA not before: Tue 20 Jan 2026 02:05:50 +0000 ROA not after: Tue 19 Jan 2027 02:10:50 +0000 asID: 135377 IP address blocks: 101.237.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:fd:a7:99:fd:67:75:e3:a2:5c:4d:f0:4e:db:cc:5a:6e:3f:fa:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:50 2026 GMT Not After : Jan 19 02:10:50 2027 GMT Subject: CN=CBF3BC9B8AD3EC2E1B5FF2A7A6CE7F1CA92C2C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:a8:0c:3c:ff:4d:89:77:03:28:8a:a1:74: e8:46:ed:8c:9f:7b:b5:70:ed:15:21:c2:f9:e2:6d: 68:09:af:6e:0b:15:f7:bf:25:e6:ab:58:98:0e:92: cd:78:06:84:4b:5b:b5:ce:c5:74:26:92:04:7d:32: 8f:c4:ef:c3:52:c5:c2:53:bb:54:b1:6a:4d:83:41: af:39:a7:4f:95:9a:cb:f6:7a:34:82:ff:fa:59:bd: e6:f9:12:49:85:3f:07:2a:0f:a2:c7:a5:41:42:3d: c3:78:ad:37:98:6b:5f:03:07:41:b4:c0:60:14:77: f9:8c:3d:6b:c0:ca:b2:cd:ff:0c:93:c3:c1:00:50: 4b:41:6a:3e:dc:62:4c:56:81:8f:ef:d9:cd:79:73: fe:1a:1d:2f:ab:15:87:16:1b:9e:c5:bf:d3:2e:ff: 09:ac:23:4e:cb:9f:e8:7e:b1:c3:92:63:77:9a:94: 4b:f6:66:94:d7:a8:3c:04:91:59:7e:65:51:cb:99: b9:e6:03:d8:f5:05:fb:ae:e9:53:51:67:e9:d8:33: 41:0d:0b:f2:89:71:93:63:03:cd:78:ea:96:c1:31: de:23:e9:f7:8f:9f:ed:68:b8:13:c4:89:80:e5:e2: eb:fc:f9:80:06:9d:27:7e:19:46:d1:dd:d2:d3:b4: c9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F3:BC:9B:8A:D3:EC:2E:1B:5F:F2:A7:A6:CE:7F:1C:A9:2C:2C:19 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3234382e302f32342d3234203d3e20313335333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.237.248.0/24 Signature Algorithm: sha256WithRSAEncryption cd:e1:fd:18:b5:3b:b4:39:07:52:58:a6:24:f1:f9:49:9f:3c: 9e:4d:b6:34:4e:ee:26:78:2b:b8:8e:05:bb:81:60:55:cd:a9: d5:1f:5b:14:2a:4d:40:75:17:ae:17:1f:cf:e3:20:ae:5d:14: 7d:2a:16:05:0b:e8:db:a9:ed:f1:00:b2:90:ea:89:b3:13:c9: bf:8a:07:6d:53:4c:9a:91:b5:37:5a:c4:d5:43:fd:cc:94:6c: f6:b3:de:fb:76:3d:b2:ce:3c:e1:a9:cf:89:f5:41:a9:30:8b: 6a:a9:b8:b4:64:da:8f:ef:d8:93:df:99:46:5c:e3:c1:df:87: 3f:02:76:30:f4:31:e4:ef:ca:25:16:08:30:81:25:0d:90:bc: 03:62:86:46:84:c0:1c:1b:cb:9d:8a:c7:55:82:dd:d2:da:3d: c0:70:c9:a4:be:b6:5a:ca:9c:98:bf:2d:ae:0c:86:1a:4d:a3: e6:13:b6:ea:3c:6b:f3:e3:c9:a6:f4:81:7e:66:bf:be:8a:92: a5:db:f1:00:ac:22:09:8d:c2:a5:ca:fa:4e:9c:53:70:0c:e7: 36:bb:58:11:ee:b9:89:5a:98:66:c6:46:34:ee:94:b9:e1:12: 03:df:d0:d0:1e:a8:cb:1e:4e:75:6f:bd:a7:58:b4:8e:38:0e: 4a:3a:b7:56 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUFf2nmf1ndeOiXE3wTtvMWm4/+kEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NTBaFw0yNzAxMTkwMjEwNTBaMDMxMTAvBgNV BAMTKENCRjNCQzlCOEFEM0VDMkUxQjVGRjJBN0E2Q0U3RjFDQTkyQzJDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqqgMPP9NiXcDKIqhdOhG7Yyf e7Vw7RUhwvnibWgJr24LFfe/JearWJgOks14BoRLW7XOxXQmkgR9Mo/E78NSxcJT u1Sxak2DQa85p0+Vmsv2ejSC//pZveb5EkmFPwcqD6LHpUFCPcN4rTeYa18DB0G0 wGAUd/mMPWvAyrLN/wyTw8EAUEtBaj7cYkxWgY/v2c15c/4aHS+rFYcWG57Fv9Mu /wmsI07Ln+h+scOSY3ealEv2ZpTXqDwEkVl+ZVHLmbnmA9j1Bfuu6VNRZ+nYM0EN C/KJcZNjA8146pbBMd4j6fePn+1ouBPEiYDl4uv8+YAGnSd+GUbR3dLTtMkdAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUy/O8m4rT7C4bX/Knps5/HKksLBkwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMDMxMmUz MjMzMzcyZTMyMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTMzMzcz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGXt+DANBgkqhkiG9w0BAQsFAAOCAQEAzeH9GLU7tDkHUlim JPH5SZ88nk22NE7uJngruI4Fu4FgVc2p1R9bFCpNQHUXrhcfz+Mgrl0UfSoWBQvo 26nt8QCykOqJsxPJv4oHbVNMmpG1N1rE1UP9zJRs9rPe+3Y9ss484anPifVBqTCL aqm4tGTaj+/Yk9+ZRlzjwd+HPwJ2MPQx5O/KJRYIMIElDZC8A2KGRoTAHBvLnYrH VYLd0to9wHDJpL62WsqcmL8trgyGGk2j5hO26jxr8+PJpvSBfma/voqSpdvxAKwi CY3Cpcr6TpxTcAznNrtYEe65iVqYZsZGNO6UueESA9/Q0B6oyx5OdW+9p1i0jjgO Sjq3Vg== -----END CERTIFICATE-----Generated at Wed Jan 21 01:32:55 2026 by rpki-client