This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3235312e302f32342d3234203d3e20313335333737.roa File: 3130312e3233372e3235312e302f32342d3234203d3e20313335333737.roa (raw, json) Hash identifier: T9wfvHT0+EOWHnpppdZ8NzeLGHAdSj7KyJa+V/1B4xk= Subject key identifier: 8F:61:31:5F:DB:53:FE:3D:8F:7F:7E:D1:78:79:12:24:A9:B7:63:C2 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 44AAF4425EA9F0E42AB2F6A776A25F01911CBE7F Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3235312e302f32342d3234203d3e20313335333737.roa Signing time: Tue 20 Jan 2026 02:10:48 +0000 ROA not before: Tue 20 Jan 2026 02:05:48 +0000 ROA not after: Tue 19 Jan 2027 02:10:48 +0000 asID: 135377 IP address blocks: 101.237.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:aa:f4:42:5e:a9:f0:e4:2a:b2:f6:a7:76:a2:5f:01:91:1c:be:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:48 2026 GMT Not After : Jan 19 02:10:48 2027 GMT Subject: CN=8F61315FDB53FE3D8F7F7ED178791224A9B763C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:f0:bc:20:35:ca:02:fd:94:85:df:8c:31: 4a:a8:0e:49:ea:61:45:7f:53:89:59:80:f2:c4:a3: 3d:66:e4:16:48:b4:fe:dc:a1:35:ce:ad:c1:20:7c: e6:8f:47:53:ca:cb:e1:b0:68:cc:06:52:4f:a3:50: 11:35:fd:1a:99:28:e4:7b:a2:13:8f:57:44:7c:64: 13:3e:df:68:5c:a2:10:d3:da:98:9a:8d:c1:5e:6d: 0c:7e:d5:40:98:11:ac:b5:a7:07:ea:a1:f6:3b:82: 19:12:e0:e9:ba:cd:74:62:8e:b2:c7:36:23:7a:c4: 38:31:07:c8:64:16:60:1f:50:83:1c:7c:67:bf:6c: 2a:e3:2a:9b:7e:24:92:39:0e:6c:67:19:89:53:e3: cc:eb:6e:f8:09:e2:6f:b9:6d:ad:ca:35:10:31:41: 1b:01:39:d5:83:a7:e9:3d:d7:a4:e4:7b:34:61:47: a4:5f:0b:83:d4:7c:5c:88:a0:63:fb:2f:c2:43:1f: 0b:44:95:66:25:b6:94:29:87:70:44:35:62:53:41: 60:07:41:d0:28:bf:62:10:f0:20:54:f5:0f:5e:f7: e1:88:8c:a7:ef:eb:a1:31:ae:80:60:85:c7:ef:84: cf:51:0f:40:62:a0:5f:60:b4:c0:36:f5:39:ce:b2: bb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:61:31:5F:DB:53:FE:3D:8F:7F:7E:D1:78:79:12:24:A9:B7:63:C2 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3235312e302f32342d3234203d3e20313335333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.237.251.0/24 Signature Algorithm: sha256WithRSAEncryption 49:45:e7:4d:1f:d7:e9:b6:43:36:3e:e9:1e:87:50:4e:0c:57: fc:00:c3:4d:35:01:0c:81:12:db:49:b5:d1:6a:2d:3d:65:63: 26:ad:74:32:76:d2:92:51:8f:c3:9d:68:83:cf:d1:2b:80:b4: e0:a8:6e:f9:44:90:d6:fa:dd:41:0c:c8:46:91:89:2b:60:a5: 06:7b:1c:31:ce:b7:d2:59:69:f1:13:a8:34:d0:8a:d1:16:27: 38:44:bc:05:e4:3c:e1:0b:ae:c4:33:44:62:5d:68:4c:69:4a: a4:82:42:36:be:9d:46:9b:81:b0:00:ad:4b:c5:28:d8:d4:61: 6a:d1:63:dd:05:42:b5:3a:17:74:dc:00:c2:cd:ec:40:32:6c: 89:2f:fd:c8:20:3d:e4:67:85:7e:72:c3:67:0a:5d:a8:b3:98: 2c:49:d4:12:de:4f:71:52:ab:d0:ae:fb:6b:5f:a6:63:e8:90: 1e:18:1a:2e:de:2b:21:35:51:b8:e0:f1:70:e2:d9:00:77:74: cc:7b:b1:13:ed:eb:15:5a:1b:c4:d7:a9:c5:a8:9b:3e:8a:5f: 29:cd:cd:c5:10:14:b3:ed:90:8d:7a:c2:02:19:b4:76:2c:21: 18:0b:4f:26:78:ed:80:96:2f:b0:9a:1e:fa:c1:0f:5e:93:ab: 06:16:77:86 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIURKr0Ql6p8OQqsvandqJfAZEcvn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDhaFw0yNzAxMTkwMjEwNDhaMDMxMTAvBgNV BAMTKDhGNjEzMTVGREI1M0ZFM0Q4RjdGN0VEMTc4NzkxMjI0QTlCNzYzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kfC8IDXKAv2Uhd+MMUqoDknq YUV/U4lZgPLEoz1m5BZItP7coTXOrcEgfOaPR1PKy+GwaMwGUk+jUBE1/RqZKOR7 ohOPV0R8ZBM+32hcohDT2piajcFebQx+1UCYEay1pwfqofY7ghkS4Om6zXRijrLH NiN6xDgxB8hkFmAfUIMcfGe/bCrjKpt+JJI5DmxnGYlT48zrbvgJ4m+5ba3KNRAx QRsBOdWDp+k916TkezRhR6RfC4PUfFyIoGP7L8JDHwtElWYltpQph3BENWJTQWAH QdAov2IQ8CBU9Q9e9+GIjKfv66ExroBghcfvhM9RD0BioF9gtMA29TnOsrtHAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUj2ExX9tT/j2Pf37ReHkSJKm3Y8IwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMDMxMmUz MjMzMzcyZTMyMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTMzMzcz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGXt+zANBgkqhkiG9w0BAQsFAAOCAQEASUXnTR/X6bZDNj7p HodQTgxX/ADDTTUBDIES20m10WotPWVjJq10MnbSklGPw51og8/RK4C04Khu+USQ 1vrdQQzIRpGJK2ClBnscMc630llp8ROoNNCK0RYnOES8BeQ84QuuxDNEYl1oTGlK pIJCNr6dRpuBsACtS8Uo2NRhatFj3QVCtToXdNwAws3sQDJsiS/9yCA95GeFfnLD ZwpdqLOYLEnUEt5PcVKr0K77a1+mY+iQHhgaLt4rITVRuODxcOLZAHd0zHuxE+3r FVobxNepxaibPopfKc3NxRAUs+2QjXrCAhm0diwhGAtPJnjtgJYvsJoe+sEPXpOr BhZ3hg== -----END CERTIFICATE-----Generated at Wed Jan 21 01:31:59 2026 by rpki-client