This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e33372e302f32342d3234203d3e203233373234.roa
File: 3130312e3233372e33372e302f32342d3234203d3e203233373234.roa (raw, json)
Hash identifier: BmmGd1/PmIuwh77Kwh5P5rgIjAi+UdP9fHgO8ajZRbo=
Subject key identifier: 12:25:14:68:D0:18:A0:12:F2:74:F8:69:3B:72:EE:33:91:EF:70:81
Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial: 3E94D2116F292F0C53CBB4ABCA68053EDD3586AF
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e33372e302f32342d3234203d3e203233373234.roa
Signing time: Tue 20 Jan 2026 02:10:52 +0000
ROA not before: Tue 20 Jan 2026 02:05:52 +0000
ROA not after: Tue 19 Jan 2027 02:10:52 +0000
asID: 23724
IP address blocks: 101.237.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:94:d2:11:6f:29:2f:0c:53:cb:b4:ab:ca:68:05:3e:dd:35:86:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Validity
Not Before: Jan 20 02:05:52 2026 GMT
Not After : Jan 19 02:10:52 2027 GMT
Subject: CN=12251468D018A012F274F8693B72EE3391EF7081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f8:77:1a:8c:51:6e:57:00:65:e1:31:d3:c2:
8a:05:6b:12:bc:4b:89:bd:9d:c0:aa:81:3a:af:63:
d0:d7:22:de:70:24:e7:32:f4:31:dd:4b:6f:e2:09:
7a:75:9c:52:5c:60:a3:2d:ad:ab:cc:d7:3e:62:8c:
20:05:9a:f6:cd:11:4b:55:e1:5e:cc:81:60:df:3c:
69:3b:6f:3e:9a:b0:73:fb:79:d4:8b:06:04:0d:7d:
9b:fa:98:45:7e:b4:56:a0:3e:c6:a8:7f:84:e9:5e:
d3:a3:51:aa:b6:c6:a7:39:9c:af:a4:be:01:c3:80:
9e:da:55:fb:ba:26:5d:e7:0f:52:5d:ea:e0:72:56:
4e:51:1e:89:17:75:4a:30:e2:b1:53:97:e6:4e:56:
46:55:aa:dd:41:61:bb:84:d5:97:67:33:08:c4:54:
ea:33:0d:4c:6a:cc:92:c4:08:98:c0:cd:ab:28:d5:
01:a8:2b:a5:78:1b:72:95:22:63:d6:81:55:dd:fd:
73:a1:f6:6b:d3:1b:a6:1e:09:fe:36:14:62:62:06:
ba:d8:74:29:fa:91:3c:81:28:20:78:a2:cb:d4:b2:
96:d0:ca:11:ba:e7:86:b7:c7:cb:f1:15:ae:52:66:
0c:a8:8e:1f:56:03:a8:ca:2b:09:44:50:33:23:5f:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:25:14:68:D0:18:A0:12:F2:74:F8:69:3B:72:EE:33:91:EF:70:81
X509v3 Authority Key Identifier:
keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e33372e302f32342d3234203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.237.37.0/24
Signature Algorithm: sha256WithRSAEncryption
af:d6:a8:d4:aa:6a:99:f4:fa:36:fd:ad:8b:10:26:e8:c0:4b:
65:09:99:2f:bb:54:50:ab:7f:e6:f3:07:b6:bc:e1:ac:83:8b:
ef:0c:78:4e:55:94:8a:f8:93:22:b6:f0:e5:1c:c8:76:fd:ec:
59:41:e7:f4:9b:cc:48:96:f9:16:94:06:0b:60:18:e5:3d:ec:
7f:7e:a3:d8:1e:75:e2:b2:bb:2b:81:e3:c0:a1:fe:f7:9d:40:
d5:4a:77:d0:65:01:b8:03:59:9d:86:27:b5:73:4b:30:b4:10:
db:93:34:ca:b4:cb:c5:6e:ee:5a:40:5a:cb:53:b1:e4:d2:91:
fc:ef:7a:4d:3f:b9:89:45:50:09:e7:5e:08:a9:10:a1:f6:ff:
17:07:26:95:d6:49:a5:ee:ca:a2:48:be:8e:82:15:a1:42:e0:
54:a6:1a:a4:9e:e9:cc:92:1a:10:4d:23:8d:7c:65:28:b0:6d:
e8:30:87:2f:5f:fb:df:bf:1a:ff:cb:72:31:c5:c0:6f:28:dd:
0d:d9:31:9c:6f:bc:eb:09:0e:15:79:2d:3d:0f:c2:54:12:ce:
d3:a8:e9:ce:05:69:69:7e:71:1d:22:ee:cd:66:c0:ff:c3:da:
36:88:e0:e1:22:b5:87:22:74:3d:4a:99:14:7b:5f:4f:58:62:
40:a4:f8:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:24:07 2026 by rpki-client