This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3235332e302f32342d3234203d3e20313335333737.roa File: 3130312e3233372e3235332e302f32342d3234203d3e20313335333737.roa (raw, json) Hash identifier: 2wXGJlKe+KMW5Ur5yNCBm3HIzbehfbs4H7me9qvYaM8= Subject key identifier: 51:43:76:49:66:83:F9:D3:AD:25:F7:74:A0:A7:75:6B:37:18:FF:93 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 4C9E86B650C49719FFCE4D4DCCB51B9710FD0DA1 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3235332e302f32342d3234203d3e20313335333737.roa Signing time: Tue 20 Jan 2026 02:10:48 +0000 ROA not before: Tue 20 Jan 2026 02:05:48 +0000 ROA not after: Tue 19 Jan 2027 02:10:48 +0000 asID: 135377 IP address blocks: 101.237.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 07:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:9e:86:b6:50:c4:97:19:ff:ce:4d:4d:cc:b5:1b:97:10:fd:0d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:48 2026 GMT Not After : Jan 19 02:10:48 2027 GMT Subject: CN=514376496683F9D3AD25F774A0A7756B3718FF93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ba:55:80:b4:37:ca:46:c1:69:17:43:10:9c: 73:0a:f3:25:78:be:d1:4d:50:7d:0e:55:70:a4:40: c4:99:56:c2:d5:7e:e9:d3:4a:71:5c:a6:83:33:b6: db:8c:83:c2:c9:38:56:38:ab:25:17:57:be:f2:e2: eb:78:c6:0e:01:c9:d7:86:86:03:d8:91:c2:1e:5c: c7:94:b4:9a:07:a3:77:ae:a9:8b:55:0c:ee:eb:1e: ca:ee:a1:a6:19:37:f6:8d:f6:28:50:a0:a4:63:6e: 11:a5:59:79:41:e1:5b:57:2a:19:95:9e:40:60:40: 77:5e:55:11:bc:c9:14:f0:0a:40:d3:0d:c1:29:4f: 46:ac:fe:18:1d:43:e5:f1:58:1d:d6:c0:f4:58:56: e6:15:d1:46:76:91:f5:89:af:a6:d5:df:37:30:66: c9:75:03:0a:58:19:61:9d:18:40:ac:84:65:fa:84: c6:43:91:97:f0:de:b6:5a:d5:ad:18:61:9b:b8:54: 37:70:1e:6e:41:e2:ff:9a:c6:e2:66:cf:2e:4c:14: d2:74:3a:79:9f:99:9e:25:c0:02:0a:7c:7b:82:ba: 0c:69:37:f4:08:60:b4:06:5e:49:de:ac:b2:89:e0: b0:9e:6c:13:fa:db:59:77:93:77:fc:30:84:08:e3: c2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:43:76:49:66:83:F9:D3:AD:25:F7:74:A0:A7:75:6B:37:18:FF:93 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3235332e302f32342d3234203d3e20313335333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.237.253.0/24 Signature Algorithm: sha256WithRSAEncryption 04:4a:49:e5:f9:7d:88:73:42:c5:44:d3:65:f8:ad:2f:57:72: 90:f3:e3:2f:91:d9:62:9b:77:0a:75:70:ec:8f:4d:a8:da:0a: 38:f2:3c:c7:f4:4b:3f:48:8b:20:60:3e:1f:cc:d5:09:75:9f: f9:5a:d0:3b:10:d3:1f:ef:b7:1d:9e:6a:36:92:bf:c7:42:e5: 66:57:79:40:58:10:25:5b:0d:ce:86:5c:75:e5:1e:66:ad:72: 1f:2c:c6:23:9c:35:28:0f:5b:53:41:b3:c6:9e:cb:93:16:f3: 78:ef:2b:65:61:e4:a2:33:39:77:69:ca:bf:9c:a2:30:53:53: fe:37:26:46:b6:5a:c6:14:73:2a:bf:e6:3a:f7:90:61:d6:1f: 1f:4c:1f:78:a8:83:ef:52:d0:84:eb:fd:a8:c3:40:c3:b0:5c: 40:6d:a4:98:47:ad:fe:c5:ad:0e:27:f2:8f:06:01:f3:07:a1: c8:37:9e:a5:0c:3c:44:15:47:34:38:75:bb:5d:9a:20:73:1d: 1d:20:c8:e1:19:9e:7c:0b:9e:2b:92:c2:fb:80:25:47:5f:20: bc:24:14:df:13:94:9c:53:f0:30:af:5f:48:cb:bd:5b:d4:e1: 8b:88:29:7f:80:45:92:39:1d:60:22:a8:e9:dd:36:a6:1f:d1: e0:e9:68:9e -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUTJ6GtlDElxn/zk1NzLUblxD9DaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDhaFw0yNzAxMTkwMjEwNDhaMDMxMTAvBgNV BAMTKDUxNDM3NjQ5NjY4M0Y5RDNBRDI1Rjc3NEEwQTc3NTZCMzcxOEZGOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSulWAtDfKRsFpF0MQnHMK8yV4 vtFNUH0OVXCkQMSZVsLVfunTSnFcpoMzttuMg8LJOFY4qyUXV77y4ut4xg4BydeG hgPYkcIeXMeUtJoHo3euqYtVDO7rHsruoaYZN/aN9ihQoKRjbhGlWXlB4VtXKhmV nkBgQHdeVRG8yRTwCkDTDcEpT0as/hgdQ+XxWB3WwPRYVuYV0UZ2kfWJr6bV3zcw Zsl1AwpYGWGdGECshGX6hMZDkZfw3rZa1a0YYZu4VDdwHm5B4v+axuJmzy5MFNJ0 OnmfmZ4lwAIKfHuCugxpN/QIYLQGXknerLKJ4LCebBP621l3k3f8MIQI48K7AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUUUN2SWaD+dOtJfd0oKd1azcY/5MwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMDMxMmUz MjMzMzcyZTMyMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTMzMzcz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGXt/TANBgkqhkiG9w0BAQsFAAOCAQEABEpJ5fl9iHNCxUTT ZfitL1dykPPjL5HZYpt3CnVw7I9NqNoKOPI8x/RLP0iLIGA+H8zVCXWf+VrQOxDT H++3HZ5qNpK/x0LlZld5QFgQJVsNzoZcdeUeZq1yHyzGI5w1KA9bU0Gzxp7Lkxbz eO8rZWHkojM5d2nKv5yiMFNT/jcmRrZaxhRzKr/mOveQYdYfH0wfeKiD71LQhOv9 qMNAw7BcQG2kmEet/sWtDifyjwYB8wehyDeepQw8RBVHNDh1u12aIHMdHSDI4Rme fAueK5LC+4AlR18gvCQU3xOUnFPwMK9fSMu9W9Thi4gpf4BFkjkdYCKo6d02ph/R 4Olong== -----END CERTIFICATE-----Generated at Wed Jan 21 01:32:48 2026 by rpki-client