This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3131322e302f32302d3230203d3e2034383131.roa File: 3131332e33312e3131322e302f32302d3230203d3e2034383131.roa (raw, json) Hash identifier: qQ4IpOar5CGXdTXYxOiXyUepLqatuegh+Tps62iZ+As= Subject key identifier: AA:F1:24:54:DA:19:BC:FD:43:A0:4D:88:DA:81:73:B8:7D:3F:06:77 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 6CDE43E493CE5D2FA39DAC760E47FB0424D930C6 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3131322e302f32302d3230203d3e2034383131.roa Signing time: Tue 20 Jan 2026 02:10:47 +0000 ROA not before: Tue 20 Jan 2026 02:05:47 +0000 ROA not after: Tue 19 Jan 2027 02:10:47 +0000 asID: 4811 IP address blocks: 113.31.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:de:43:e4:93:ce:5d:2f:a3:9d:ac:76:0e:47:fb:04:24:d9:30:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:47 2026 GMT Not After : Jan 19 02:10:47 2027 GMT Subject: CN=AAF12454DA19BCFD43A04D88DA8173B87D3F0677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:6a:ab:9d:df:ac:3a:05:26:0e:4b:d4:38: 3f:a0:f8:fd:d2:1e:c5:0d:b1:0e:12:5c:41:9a:d2: c6:25:d1:cb:60:8c:68:53:e2:66:3d:eb:70:8d:a0: 1b:ed:bd:d5:d5:90:e5:dc:c8:10:ae:9c:85:52:b8: 4b:4b:d4:85:e9:89:69:bb:34:ea:0a:d8:7f:03:e7: 50:a6:41:9e:34:73:ca:4e:93:df:e0:a1:0e:d2:ed: 66:10:89:d6:bf:01:19:49:73:e1:07:46:7a:05:9c: 69:54:06:27:00:bf:62:73:de:6b:c7:63:8e:41:71: 53:04:f1:57:21:af:ab:cd:92:79:05:62:d4:ef:29: 8e:3b:f2:d6:c3:15:48:e0:1d:35:cd:65:8a:39:65: 1f:e9:9d:df:0b:48:ee:29:64:89:40:72:65:b9:1a: 43:ed:33:34:a4:78:6e:e0:4c:56:93:7b:a1:45:e1: a6:af:56:9a:51:ce:5c:55:2f:1d:28:6b:1f:34:71: 5c:63:27:61:5a:c2:26:92:cb:75:39:da:df:ce:f1: 5e:d1:5b:e5:3f:53:c1:c7:08:95:47:7f:0b:d8:07: d9:d9:7b:e4:96:5f:1e:31:6f:fd:c5:78:b8:2d:06: ae:42:8c:bd:05:f0:77:b5:01:af:92:b1:4c:24:42: c8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F1:24:54:DA:19:BC:FD:43:A0:4D:88:DA:81:73:B8:7D:3F:06:77 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3131322e302f32302d3230203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.31.112.0/20 Signature Algorithm: sha256WithRSAEncryption 24:9c:20:9f:1c:ef:23:8f:f2:d4:0d:46:be:28:f9:9a:f6:03: 35:2c:6c:30:f1:43:cf:33:7f:38:9c:46:c8:cd:ee:70:7f:53: f3:4a:4d:bf:40:78:a5:9c:31:dd:4d:2b:42:17:35:67:e6:b1: 1e:ea:6c:a6:7b:b7:d2:6b:b6:81:31:14:89:23:c7:f5:6d:3e: 10:74:62:0b:77:8e:9e:d1:78:f6:ee:5c:bf:6e:8d:f4:f0:f6: 35:f6:28:57:19:41:c6:6e:dc:3b:d8:17:d9:42:fa:4e:f3:2e: a6:81:b8:d9:04:db:f2:59:4f:7d:d9:39:a9:d9:86:19:d5:ce: fd:55:f3:bc:2b:94:eb:de:71:60:dc:04:a5:72:85:fc:02:43: 29:dd:a8:1f:fd:8a:86:7b:cc:10:b3:04:3d:5b:40:be:5f:8a: 9f:c8:ea:01:84:79:81:92:d7:5a:97:7c:0e:2e:be:4b:f1:5a: c1:5e:82:2f:d1:b0:5b:da:30:51:ce:79:e9:31:89:42:63:63: 3f:53:3e:22:75:3c:1a:92:d5:40:58:d3:75:bb:57:ff:9e:8d: 6c:86:d7:70:f0:8f:b0:88:22:d6:aa:df:ef:a2:ec:8a:a9:1e: 79:89:da:7b:96:86:ac:0d:5b:85:21:65:69:c8:4a:92:9a:a1: ee:01:54:7a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUbN5D5JPOXS+jnax2Dkf7BCTZMMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDdaFw0yNzAxMTkwMjEwNDdaMDMxMTAvBgNV BAMTKEFBRjEyNDU0REExOUJDRkQ0M0EwNEQ4OERBODE3M0I4N0QzRjA2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu72qrnd+sOgUmDkvUOD+g+P3S HsUNsQ4SXEGa0sYl0ctgjGhT4mY963CNoBvtvdXVkOXcyBCunIVSuEtL1IXpiWm7 NOoK2H8D51CmQZ40c8pOk9/goQ7S7WYQida/ARlJc+EHRnoFnGlUBicAv2Jz3mvH Y45BcVME8Vchr6vNknkFYtTvKY478tbDFUjgHTXNZYo5ZR/pnd8LSO4pZIlAcmW5 GkPtMzSkeG7gTFaTe6FF4aavVppRzlxVLx0oax80cVxjJ2FawiaSy3U52t/O8V7R W+U/U8HHCJVHfwvYB9nZe+SWXx4xb/3FeLgtBq5CjL0F8He1Aa+SsUwkQsjvAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUqvEkVNoZvP1DoE2I2oFzuH0/BncwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMTMzMmUzMzMx MmUzMTMxMzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHEfcDANBgkqhkiG9w0BAQsFAAOCAQEAJJwgnxzvI4/y1A1Gvij5mvYDNSxs MPFDzzN/OJxGyM3ucH9T80pNv0B4pZwx3U0rQhc1Z+axHupspnu30mu2gTEUiSPH 9W0+EHRiC3eOntF49u5cv26N9PD2NfYoVxlBxm7cO9gX2UL6TvMupoG42QTb8llP fdk5qdmGGdXO/VXzvCuU695xYNwEpXKF/AJDKd2oH/2KhnvMELMEPVtAvl+Kn8jq AYR5gZLXWpd8Di6+S/FawV6CL9GwW9owUc556TGJQmNjP1M+InU8GpLVQFjTdbtX /56NbIbXcPCPsIgi1qrf76LsiqkeeYnae5aGrA1bhSFlachKkpqh7gFUeg== -----END CERTIFICATE-----Generated at Wed Jan 21 04:22:45 2026 by rpki-client