This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3235322e302f32342d3234203d3e20313335333737.roa File: 3130312e3233372e3235322e302f32342d3234203d3e20313335333737.roa (raw, json) Hash identifier: H2ilbQFXofD7U+jGPKWCR2lBj/XvG1Q+tdKKE2/D5S4= Subject key identifier: C5:31:11:CE:2C:1A:71:8A:E3:16:46:8B:51:E3:E1:A7:62:A3:CD:D3 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 76CF53BD34861A630F336F21F8B4A9862D435316 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3235322e302f32342d3234203d3e20313335333737.roa Signing time: Tue 20 Jan 2026 02:10:48 +0000 ROA not before: Tue 20 Jan 2026 02:05:48 +0000 ROA not after: Tue 19 Jan 2027 02:10:48 +0000 asID: 135377 IP address blocks: 101.237.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 07:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:cf:53:bd:34:86:1a:63:0f:33:6f:21:f8:b4:a9:86:2d:43:53:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:48 2026 GMT Not After : Jan 19 02:10:48 2027 GMT Subject: CN=C53111CE2C1A718AE316468B51E3E1A762A3CDD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:70:8a:0e:c0:76:f0:0b:45:de:f4:5f:dc: d4:3e:96:86:9f:b5:6f:8e:8c:5b:14:1f:f5:a7:dc: a1:c0:9d:f1:07:8a:d1:7f:95:bc:a0:7f:2b:48:65: ad:6b:2e:a4:49:94:69:d0:d8:d5:49:2d:b8:7d:88: f8:39:4a:a5:f0:86:d8:97:f1:a3:00:d9:28:20:84: 90:97:63:43:26:b0:8a:2b:68:ab:d4:0b:ee:b0:b1: b1:62:db:a2:7e:0c:f0:f4:31:03:4c:83:f3:28:a7: ed:6f:5a:e4:4a:cb:75:00:9d:8c:94:ff:90:29:46: 51:7e:66:a6:03:53:94:d1:d3:83:26:ac:4f:e3:7e: 3b:7e:97:ea:0a:e3:25:42:4c:1e:a9:78:fb:44:df: 41:ce:f4:be:29:2c:35:28:6a:fd:c7:e9:97:97:21: 9f:7d:8b:08:48:94:3a:41:26:80:24:68:65:a3:22: 7d:8a:0a:a8:ab:3d:d0:39:d4:63:7d:43:c9:b0:e1: ef:b1:84:f2:d7:ce:2a:ba:88:ee:e5:11:49:4e:bf: f8:b4:4b:cd:8c:7e:95:cb:5f:bf:e1:c6:96:83:98: 5f:b4:55:87:77:1e:6e:9d:46:38:a5:a3:98:a6:bf: b5:7a:96:aa:6d:0d:8e:b8:1f:e5:44:5f:c4:35:48: 87:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:31:11:CE:2C:1A:71:8A:E3:16:46:8B:51:E3:E1:A7:62:A3:CD:D3 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3235322e302f32342d3234203d3e20313335333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.237.252.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:0b:56:76:64:a6:ed:43:86:e8:2a:98:ef:25:7c:92:10:26: a6:11:72:69:14:5f:a2:67:17:15:a0:24:af:bb:93:b7:23:b4: a1:21:7e:ae:cb:7d:81:7f:ca:b4:22:7b:f3:4e:23:2c:7c:4a: 68:94:73:d0:ac:5a:bc:ed:0d:df:2e:f5:d7:24:1f:ec:23:46: 0f:02:b9:2d:64:6b:11:43:e9:0a:ce:ce:c0:89:9f:a3:cd:ef: 48:e8:a4:5f:7a:ce:21:4e:d7:34:fe:b4:eb:72:b3:6f:fc:32: bd:e9:5d:d5:3a:c1:f8:e9:c7:11:69:cc:e1:d8:0f:0a:6f:97: 92:17:7f:0b:02:4d:a8:f5:32:4f:52:43:97:1c:39:08:2e:fc: 9a:1c:c5:dc:8e:7f:68:68:31:ce:17:76:7b:f2:1b:2c:eb:5f: 4d:0d:65:d4:cf:29:83:66:fa:b6:ee:ee:4e:85:43:fa:6e:a8: c4:25:ab:59:1a:35:51:9e:38:91:cd:c2:63:64:f1:d3:cf:a5: 80:99:51:ae:98:48:ad:8a:58:b6:f4:3a:b4:1f:fc:e1:4d:68: bd:cf:f7:a1:fe:a5:d1:8a:50:20:09:09:f3:d7:26:70:ee:b3: 0f:a5:4a:79:65:81:09:2f:93:41:3f:5b:15:8e:d7:6d:9b:57: 5f:eb:e3:2f -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUds9TvTSGGmMPM28h+LSphi1DUxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDhaFw0yNzAxMTkwMjEwNDhaMDMxMTAvBgNV BAMTKEM1MzExMUNFMkMxQTcxOEFFMzE2NDY4QjUxRTNFMUE3NjJBM0NERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhXCKDsB28AtF3vRf3NQ+loaf tW+OjFsUH/Wn3KHAnfEHitF/lbygfytIZa1rLqRJlGnQ2NVJLbh9iPg5SqXwhtiX 8aMA2SgghJCXY0MmsIoraKvUC+6wsbFi26J+DPD0MQNMg/Mop+1vWuRKy3UAnYyU /5ApRlF+ZqYDU5TR04MmrE/jfjt+l+oK4yVCTB6pePtE30HO9L4pLDUoav3H6ZeX IZ99iwhIlDpBJoAkaGWjIn2KCqirPdA51GN9Q8mw4e+xhPLXziq6iO7lEUlOv/i0 S82MfpXLX7/hxpaDmF+0VYd3Hm6dRjilo5imv7V6lqptDY64H+VEX8Q1SIc9AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUxTERziwacYrjFkaLUePhp2KjzdMwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMDMxMmUz MjMzMzcyZTMyMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTMzMzcz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGXt/DANBgkqhkiG9w0BAQsFAAOCAQEAOgtWdmSm7UOG6CqY 7yV8khAmphFyaRRfomcXFaAkr7uTtyO0oSF+rst9gX/KtCJ7804jLHxKaJRz0Kxa vO0N3y711yQf7CNGDwK5LWRrEUPpCs7OwImfo83vSOikX3rOIU7XNP6063Kzb/wy veld1TrB+OnHEWnM4dgPCm+Xkhd/CwJNqPUyT1JDlxw5CC78mhzF3I5/aGgxzhd2 e/IbLOtfTQ1l1M8pg2b6tu7uToVD+m6oxCWrWRo1UZ44kc3CY2Tx08+lgJlRrphI rYpYtvQ6tB/84U1ovc/3of6l0YpQIAkJ89cmcO6zD6VKeWWBCS+TQT9bFY7XbZtX X+vjLw== -----END CERTIFICATE-----Generated at Wed Jan 21 01:32:03 2026 by rpki-client