This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3136302e302f32302d3230203d3e2034383131.roa
File: 3131332e33312e3136302e302f32302d3230203d3e2034383131.roa (raw, json)
Hash identifier: +ksKiur7E24m122r+qNrN9IfRHkdbaD7AqlEfNU2bAU=
Subject key identifier: F6:1B:62:DD:A5:6F:AA:E4:3F:E5:28:BE:74:B1:54:10:D3:34:2E:AB
Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial: 5212413AD71032BF36643B74A357DFED75C4E5E5
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3136302e302f32302d3230203d3e2034383131.roa
Signing time: Tue 20 Jan 2026 02:10:52 +0000
ROA not before: Tue 20 Jan 2026 02:05:52 +0000
ROA not after: Tue 19 Jan 2027 02:10:52 +0000
asID: 4811
IP address blocks: 113.31.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:12:41:3a:d7:10:32:bf:36:64:3b:74:a3:57:df:ed:75:c4:e5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Validity
Not Before: Jan 20 02:05:52 2026 GMT
Not After : Jan 19 02:10:52 2027 GMT
Subject: CN=F61B62DDA56FAAE43FE528BE74B15410D3342EAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:f9:39:bb:2d:c0:f2:aa:a3:7c:2a:22:0d:
fb:05:a3:55:10:6b:d9:81:be:39:55:3a:55:f8:01:
6d:90:d4:fc:75:97:b4:06:0d:f8:fd:43:0d:42:70:
9a:99:9e:31:f8:68:ce:07:c0:96:73:06:91:72:88:
67:5d:33:5d:8f:55:1c:a5:17:59:a6:84:a3:92:f2:
cb:99:36:44:1e:0f:bf:22:c4:10:de:67:da:7f:83:
44:45:3c:39:b6:03:2f:33:02:da:41:8e:a8:83:61:
f4:53:8e:73:c7:e1:9e:6c:b7:29:91:57:86:44:d0:
42:ec:aa:b5:7c:c6:69:9a:47:26:9a:22:61:d8:0f:
af:94:30:a2:73:30:65:63:65:bd:ab:cf:f0:23:69:
d3:6d:cb:99:46:ee:07:36:2a:41:06:cc:d5:4d:86:
1f:26:1a:b2:d7:5a:83:d3:2a:1f:13:c0:3e:f3:67:
d4:c7:aa:2e:d5:73:85:93:91:68:d3:51:0b:e5:01:
df:e4:20:31:3e:49:70:50:c9:b0:64:d0:3c:e1:fa:
62:3e:57:7f:95:1c:b9:4d:75:2e:a7:b7:56:02:a8:
c9:ab:0b:46:23:a5:d5:c9:c0:f4:87:7a:c0:d9:23:
94:ba:62:67:c1:3d:43:96:77:50:2d:67:f4:33:2d:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1B:62:DD:A5:6F:AA:E4:3F:E5:28:BE:74:B1:54:10:D3:34:2E:AB
X509v3 Authority Key Identifier:
keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3136302e302f32302d3230203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.31.160.0/20
Signature Algorithm: sha256WithRSAEncryption
e0:4f:46:6c:d7:2a:60:2b:e0:93:1a:25:05:8a:70:14:16:b2:
d3:bb:7d:30:fd:75:8c:56:a8:73:14:a6:2e:3f:ce:92:1d:c9:
d9:80:07:38:d3:6e:27:80:a2:3b:9f:28:a9:27:d6:e4:9b:5c:
da:cc:7d:73:d3:3e:2c:1b:ec:75:af:c0:1c:c4:bd:0f:e0:e0:
07:f1:47:2b:f7:f4:2d:8e:05:ab:43:a9:6f:db:e4:23:34:c0:
ca:70:0a:96:07:97:8b:69:4f:98:13:b2:ae:72:b7:3d:01:be:
51:23:82:59:53:f2:7e:88:cb:a5:cd:02:fc:75:88:87:d9:c2:
56:92:18:4f:c8:b7:95:fe:ad:9d:ae:cb:f0:27:f1:b8:08:9a:
1b:7c:8f:c4:3c:8f:50:f9:f3:61:3f:dd:b6:86:be:e7:2e:a6:
9d:de:d7:b4:4f:eb:34:7d:62:fe:17:c4:87:b1:4d:09:d3:2f:
0f:72:ac:b3:f1:c5:1c:d4:d8:3d:fc:e4:a6:80:c1:73:b1:2d:
6d:ae:7b:20:69:fd:cf:c6:06:08:7c:06:89:88:6a:bf:50:a0:
2b:1a:3f:f0:9f:54:f2:d1:1c:07:57:d9:20:21:54:b0:c1:4a:
4f:b3:b6:f5:42:57:75:e4:d3:c3:3e:90:4c:98:8e:5a:93:ef:
38:db:94:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:22:46 2026 by rpki-client