This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3136302e302f32302d3230203d3e203137363231.roa
File: 3131332e33312e3136302e302f32302d3230203d3e203137363231.roa (raw, json)
Hash identifier: fVoVfdnCxhPpHw+pkKGHo/4cCBfRBkfRr+xpv61EOuk=
Subject key identifier: C9:A3:5E:CB:BB:D8:5D:E6:6D:48:03:D5:7A:51:94:EF:22:8D:AF:6B
Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial: 77AA555C532C9C72694E295B66024B5207F56B52
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3136302e302f32302d3230203d3e203137363231.roa
Signing time: Tue 20 Jan 2026 02:10:48 +0000
ROA not before: Tue 20 Jan 2026 02:05:48 +0000
ROA not after: Tue 19 Jan 2027 02:10:48 +0000
asID: 17621
IP address blocks: 113.31.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:aa:55:5c:53:2c:9c:72:69:4e:29:5b:66:02:4b:52:07:f5:6b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Validity
Not Before: Jan 20 02:05:48 2026 GMT
Not After : Jan 19 02:10:48 2027 GMT
Subject: CN=C9A35ECBBBD85DE66D4803D57A5194EF228DAF6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:1c:ec:d7:9e:a3:3e:51:f4:c1:ff:42:aa:
55:1d:41:61:fc:fb:56:ba:1a:75:9f:68:4d:2a:93:
95:01:63:c3:74:6d:74:da:6d:7c:cc:80:83:36:47:
d0:67:18:1e:1c:92:62:86:65:51:2d:94:73:60:1d:
b4:c8:d2:be:e6:ba:31:dc:4d:01:10:24:ca:5e:7d:
1c:34:ae:2c:a6:11:34:25:59:0b:91:aa:28:92:c9:
03:b6:dc:70:62:9b:33:4f:aa:68:8b:d5:4f:47:ec:
6c:96:cf:29:4c:20:d6:c3:f6:d5:0a:84:e8:5d:89:
69:d2:46:3c:11:1d:bb:5f:ac:fe:d7:01:c4:6c:52:
13:f4:be:44:2b:58:13:a2:0c:1e:fe:0f:8b:be:01:
95:e0:6b:62:e6:cf:ec:4d:e6:3d:9a:51:fc:00:e5:
86:e2:57:62:cd:b8:7b:46:9d:6f:fe:40:2d:82:6b:
09:a4:c4:e4:0e:8e:45:69:aa:3d:6c:24:7f:9c:64:
a5:64:5f:f5:0b:c1:63:d1:bd:d9:b2:19:5c:67:2a:
04:0b:f1:a2:a1:8d:c2:67:46:f4:61:59:21:97:4d:
92:81:93:46:b4:c3:42:e6:80:b1:98:9f:70:9d:ae:
21:fe:a5:24:98:64:5e:76:61:55:94:7d:e1:14:4d:
c9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A3:5E:CB:BB:D8:5D:E6:6D:48:03:D5:7A:51:94:EF:22:8D:AF:6B
X509v3 Authority Key Identifier:
keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3136302e302f32302d3230203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.31.160.0/20
Signature Algorithm: sha256WithRSAEncryption
03:04:94:4a:d8:8c:52:d4:8f:8e:63:bb:8d:85:32:e2:56:a9:
8f:01:d6:f2:03:97:93:48:b5:1d:58:f9:58:2c:11:9f:a2:5b:
73:11:e8:94:5f:f0:54:b4:c4:de:f8:af:61:27:3c:0e:f9:b5:
af:83:8a:eb:43:5d:6c:3e:1b:22:96:d3:1f:78:9e:ff:2a:ef:
9a:b8:d5:cc:80:0a:46:aa:47:c0:19:7c:2f:af:62:36:bd:b5:
51:59:32:fb:e9:ba:5e:a6:88:2e:e1:8a:9c:c8:bd:89:c7:06:
ab:9d:9b:54:4a:88:12:f2:b6:b5:e7:0e:cc:ec:97:a6:e6:59:
99:5f:41:f5:a1:21:1b:c6:cd:66:3a:03:f0:78:7e:51:e1:6d:
f3:dd:14:96:6e:ef:dc:e1:df:97:84:0d:bc:f8:51:7a:88:e3:
9a:b2:fb:d3:95:13:7b:1a:5b:53:74:86:9f:84:35:ea:dd:c8:
87:5f:e0:2c:e9:79:36:4d:54:5e:41:41:9e:e9:e8:77:00:f4:
37:c3:1b:ae:e1:81:33:64:85:81:b7:57:87:ec:47:4d:99:83:
66:92:a4:76:38:b6:ee:64:6f:e1:b7:32:2c:f4:43:fe:e6:52:
f5:9e:5a:c2:16:0d:9d:ea:b6:25:f8:f7:cd:3a:9e:19:ec:94:
e6:b9:09:e1
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUd6pVXFMsnHJpTilbZgJLUgf1a1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB
OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDhaFw0yNzAxMTkwMjEwNDhaMDMxMTAvBgNV
BAMTKEM5QTM1RUNCQkJEODVERTY2RDQ4MDNENTdBNTE5NEVGMjI4REFGNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBaRzs156jPlH0wf9CqlUdQWH8
+1a6GnWfaE0qk5UBY8N0bXTabXzMgIM2R9BnGB4ckmKGZVEtlHNgHbTI0r7mujHc
TQEQJMpefRw0riymETQlWQuRqiiSyQO23HBimzNPqmiL1U9H7GyWzylMINbD9tUK
hOhdiWnSRjwRHbtfrP7XAcRsUhP0vkQrWBOiDB7+D4u+AZXga2Lmz+xN5j2aUfwA
5YbiV2LNuHtGnW/+QC2CawmkxOQOjkVpqj1sJH+cZKVkX/ULwWPRvdmyGVxnKgQL
8aKhjcJnRvRhWSGXTZKBk0a0w0LmgLGYn3CdriH+pSSYZF52YVWUfeEUTcnpAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUyaNey7vYXeZtSAPVelGU7yKNr2swHwYDVR0j
BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4
MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDU4OTE4Ny8wLzMxMzEzMzJlMzMz
MTJlMzEzNjMwMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzNzM2MzIzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBHEfoDANBgkqhkiG9w0BAQsFAAOCAQEAAwSUStiMUtSPjmO7jYUy4lap
jwHW8gOXk0i1HVj5WCwRn6JbcxHolF/wVLTE3vivYSc8Dvm1r4OK60NdbD4bIpbT
H3ie/yrvmrjVzIAKRqpHwBl8L69iNr21UVky++m6XqaILuGKnMi9iccGq52bVEqI
EvK2tecOzOyXpuZZmV9B9aEhG8bNZjoD8Hh+UeFt890Ulm7v3OHfl4QNvPhReojj
mrL705UTexpbU3SGn4Q16t3Ih1/gLOl5Nk1UXkFBnunodwD0N8MbruGBM2SFgbdX
h+xHTZmDZpKkdji27mRv4bcyLPRD/uZS9Z5awhYNneq2Jfj3zTqeGeyU5rkJ4Q==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:23:21 2026 by rpki-client