This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3234392e302f32342d3234203d3e20313335333737.roa File: 3130312e3233372e3234392e302f32342d3234203d3e20313335333737.roa (raw, json) Hash identifier: Lrn7XM1kyvSB+8M0V2mJkGwWKa4sQnzZIh8UX16m9yQ= Subject key identifier: 74:09:D9:26:F7:FA:AF:1A:35:1D:B8:6C:7A:5D:11:36:57:20:31:7B Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 63AD683882DEBE3723CFDF93DFCCE9A0669B04C6 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3234392e302f32342d3234203d3e20313335333737.roa Signing time: Tue 20 Jan 2026 02:10:48 +0000 ROA not before: Tue 20 Jan 2026 02:05:48 +0000 ROA not after: Tue 19 Jan 2027 02:10:48 +0000 asID: 135377 IP address blocks: 101.237.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ad:68:38:82:de:be:37:23:cf:df:93:df:cc:e9:a0:66:9b:04:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:48 2026 GMT Not After : Jan 19 02:10:48 2027 GMT Subject: CN=7409D926F7FAAF1A351DB86C7A5D11365720317B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:0c:81:42:94:31:4c:12:62:9f:87:4a:2a: 38:99:63:8c:45:3f:97:da:91:ae:a2:1a:ee:58:01: a4:b8:62:af:bd:a1:de:bb:67:b3:b5:10:3c:53:38: ec:0c:0c:7e:da:91:0f:a6:ff:8b:9a:62:f1:d3:15: fe:60:29:67:b8:da:0d:be:35:3b:b8:ed:37:0c:af: 55:0b:24:c3:16:a9:ce:93:c3:e6:47:88:aa:4d:20: 65:f5:74:71:4a:12:d4:fa:82:7b:9c:f5:b5:53:e2: ff:9c:e1:b6:f9:03:26:af:d6:fa:a7:52:61:77:c2: 4e:5b:cd:8d:ed:9f:19:2a:f0:14:50:54:4a:4f:5a: 0d:4b:c0:b0:25:e5:af:8f:1d:3c:0f:08:61:01:72: 73:1e:25:9c:87:df:1f:92:fc:c7:c9:aa:26:a4:f1: 15:2b:29:9d:45:55:70:14:88:d0:10:37:3b:17:ae: 9f:5d:54:5a:dd:a9:ce:47:2f:4c:59:36:fc:73:1a: da:ef:3f:c9:96:0f:58:1c:64:e3:10:fa:7e:38:54: c8:1d:0e:9d:b8:13:eb:40:ac:49:4c:f3:d8:a5:79: 4c:88:8c:7f:80:7a:bb:5a:f0:4d:99:74:16:8e:ac: 87:77:fe:5b:71:b1:8c:96:e7:a6:b4:da:0a:43:e0: 90:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:09:D9:26:F7:FA:AF:1A:35:1D:B8:6C:7A:5D:11:36:57:20:31:7B X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3234392e302f32342d3234203d3e20313335333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.237.249.0/24 Signature Algorithm: sha256WithRSAEncryption d2:ae:ce:06:f7:72:cd:70:23:b4:cd:de:e9:03:cc:f9:be:d1: 1a:74:d4:80:f0:b7:2f:db:80:66:e3:d7:b8:54:d5:b6:d0:b6: ca:54:e5:b5:41:e9:09:da:61:43:05:02:6a:95:ec:9f:5d:61: d9:8f:3a:50:73:cf:d7:5f:02:93:28:2e:41:18:e8:17:39:2f: b1:c8:ed:5c:d9:4e:b9:11:ef:40:b6:09:7c:24:b7:fd:b0:a8: 50:86:0d:65:55:24:56:e9:9a:ff:d2:6a:35:58:43:53:7f:f8: d6:d7:25:ac:5c:ff:b0:c8:ae:be:3a:62:30:9f:f7:58:b6:51: 23:6e:12:dd:f6:2e:2b:ed:1c:3c:65:83:0f:e0:95:75:b8:a5: f5:01:1b:b3:fe:0d:25:c6:0e:e7:41:f8:33:64:4b:2d:b8:b6: 61:37:d8:d8:f9:c6:be:fc:57:0f:f9:6f:08:0c:60:d2:c8:2e: 47:bd:83:f7:2a:7d:f5:51:a4:45:e5:1b:32:c5:99:ce:4f:e9: c8:59:2e:6f:a4:b8:e9:8f:3a:34:14:7c:c2:bc:b2:3c:2e:59: 3e:80:5a:3e:b0:20:3b:82:5e:19:ed:5e:a1:8a:28:78:9d:cc: 5e:f3:65:d1:c7:9c:90:a5:3b:19:8d:10:ea:6e:06:dc:dc:de: 36:23:db:26 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUY61oOILevjcjz9+T38zpoGabBMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDhaFw0yNzAxMTkwMjEwNDhaMDMxMTAvBgNV BAMTKDc0MDlEOTI2RjdGQUFGMUEzNTFEQjg2QzdBNUQxMTM2NTcyMDMxN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeSgyBQpQxTBJin4dKKjiZY4xF P5faka6iGu5YAaS4Yq+9od67Z7O1EDxTOOwMDH7akQ+m/4uaYvHTFf5gKWe42g2+ NTu47TcMr1ULJMMWqc6Tw+ZHiKpNIGX1dHFKEtT6gnuc9bVT4v+c4bb5Ayav1vqn UmF3wk5bzY3tnxkq8BRQVEpPWg1LwLAl5a+PHTwPCGEBcnMeJZyH3x+S/MfJqiak 8RUrKZ1FVXAUiNAQNzsXrp9dVFrdqc5HL0xZNvxzGtrvP8mWD1gcZOMQ+n44VMgd Dp24E+tArElM89ileUyIjH+Aerta8E2ZdBaOrId3/ltxsYyW56a02gpD4JARAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUdAnZJvf6rxo1Hbhsel0RNlcgMXswHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMDMxMmUz MjMzMzcyZTMyMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTMzMzcz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGXt+TANBgkqhkiG9w0BAQsFAAOCAQEA0q7OBvdyzXAjtM3e 6QPM+b7RGnTUgPC3L9uAZuPXuFTVttC2ylTltUHpCdphQwUCapXsn11h2Y86UHPP 118CkyguQRjoFzkvscjtXNlOuRHvQLYJfCS3/bCoUIYNZVUkVuma/9JqNVhDU3/4 1tclrFz/sMiuvjpiMJ/3WLZRI24S3fYuK+0cPGWDD+CVdbil9QEbs/4NJcYO50H4 M2RLLbi2YTfY2PnGvvxXD/lvCAxg0sguR72D9yp99VGkReUbMsWZzk/pyFkub6S4 6Y86NBR8wryyPC5ZPoBaPrAgO4JeGe1eoYooeJ3MXvNl0ceckKU7GY0Q6m4G3Nze NiPbJg== -----END CERTIFICATE-----Generated at Wed Jan 21 01:32:55 2026 by rpki-client