This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3134342e302f32302d3230203d3e2034383131.roa
File: 3131332e33312e3134342e302f32302d3230203d3e2034383131.roa (raw, json)
Hash identifier: YuVh4rwOoMEgJl+Gk1vR0z610PZTEzWl3JazjmJn9as=
Subject key identifier: 8C:93:46:FA:77:45:06:9A:D7:18:40:7F:F4:74:68:92:64:7B:85:B2
Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial: 21C8A966D75B7DD4C9A1BBE9E558E8752A666851
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3134342e302f32302d3230203d3e2034383131.roa
Signing time: Tue 20 Jan 2026 02:10:48 +0000
ROA not before: Tue 20 Jan 2026 02:05:48 +0000
ROA not after: Tue 19 Jan 2027 02:10:48 +0000
asID: 4811
IP address blocks: 113.31.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c8:a9:66:d7:5b:7d:d4:c9:a1:bb:e9:e5:58:e8:75:2a:66:68:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Validity
Not Before: Jan 20 02:05:48 2026 GMT
Not After : Jan 19 02:10:48 2027 GMT
Subject: CN=8C9346FA7745069AD718407FF4746892647B85B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:9b:2c:70:91:49:0e:63:dc:e6:2a:38:49:
d6:e8:f0:62:37:59:23:dd:9c:50:3f:e1:e7:23:99:
2e:55:dd:96:06:bc:49:4a:29:fe:10:fc:d3:75:f6:
b5:94:81:a7:7e:ab:78:23:54:27:99:4f:69:27:17:
ce:91:48:fe:53:8b:da:a2:22:e5:b7:29:1f:2a:fa:
27:88:7f:13:ee:86:a9:57:2c:cf:fe:31:60:0d:09:
a0:8c:45:d0:66:e8:c1:58:4f:13:9d:f6:88:80:60:
84:0c:b4:09:97:73:78:b3:1a:55:fd:00:03:14:1f:
d9:8e:4b:a0:19:84:74:df:9a:28:90:51:ab:a9:71:
51:ee:9d:b8:da:85:4c:ab:ed:56:72:7e:67:59:90:
b6:55:3c:06:f1:2a:09:32:31:32:e5:28:78:a5:24:
f3:f4:a7:6f:90:ff:b6:aa:0a:3e:d5:ab:cc:45:1d:
7e:ed:71:17:de:3b:40:05:74:88:eb:f7:63:d9:fc:
67:9f:5b:d6:cb:a8:4d:a5:bc:cd:08:5a:26:fe:46:
dc:19:ab:2b:ac:9a:b1:35:4b:b0:88:c8:88:92:8d:
74:2b:fd:0f:e6:dd:a0:aa:3d:a7:95:41:b4:d6:5f:
52:3d:1d:8f:ed:58:b9:12:7a:e6:d6:95:48:59:dd:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:93:46:FA:77:45:06:9A:D7:18:40:7F:F4:74:68:92:64:7B:85:B2
X509v3 Authority Key Identifier:
keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3134342e302f32302d3230203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.31.144.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:39:2d:7d:2b:2e:e7:b0:35:05:6b:e4:dc:d7:85:d9:c1:2d:
24:33:85:30:8f:6a:3f:42:8c:43:eb:56:19:82:6c:9b:d9:18:
f6:86:0b:2f:d5:a7:72:50:a4:cc:4c:78:f1:2b:53:e2:f9:32:
a0:4c:01:d6:d0:50:26:02:e2:10:42:ba:42:52:75:a5:83:97:
9e:1f:aa:eb:76:14:f6:14:5d:86:3e:9b:3b:c8:d8:21:d8:14:
c9:91:06:80:cc:44:a6:be:70:41:b4:0e:5b:50:56:ff:94:45:
4e:94:fe:54:4c:75:a9:05:2b:61:32:0c:5c:bc:c5:92:e5:d7:
88:8d:60:c9:c8:32:ba:14:b1:90:2d:3c:cb:f9:4e:4e:2a:92:
d4:5b:28:fc:aa:fd:49:e6:7e:c7:90:c6:ee:f4:dc:92:80:d1:
20:ed:e8:45:2b:f7:b6:27:06:23:a9:05:57:8d:9a:76:4a:b0:
a2:78:df:4e:c0:e7:87:3e:34:c6:03:a0:e3:98:0d:88:56:cb:
8a:75:5b:67:be:e6:2b:76:5f:ea:96:8c:03:c0:07:1f:0b:ab:
28:4e:f5:a4:ed:fd:32:87:9a:f8:08:5d:17:d1:6b:fb:44:d8:
55:9f:42:cd:9e:3c:84:b6:de:92:b7:8e:87:4a:fe:64:c5:45:
e1:af:1e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:22:45 2026 by rpki-client