This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e39362e302f32302d3230203d3e203137363231.roa File: 3131332e33312e39362e302f32302d3230203d3e203137363231.roa (raw, json) Hash identifier: HZaXhtuy/aRRQkoFR3DoNQKzI+qUp7CXWcJIvyElElg= Subject key identifier: 98:E1:6D:32:FB:5D:65:23:30:24:9D:D0:11:9A:63:54:DF:CF:4A:FF Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 71648AC318192B340BA8D49757BED36D4B18870D Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e39362e302f32302d3230203d3e203137363231.roa Signing time: Tue 20 Jan 2026 02:10:52 +0000 ROA not before: Tue 20 Jan 2026 02:05:52 +0000 ROA not after: Tue 19 Jan 2027 02:10:52 +0000 asID: 17621 IP address blocks: 113.31.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:64:8a:c3:18:19:2b:34:0b:a8:d4:97:57:be:d3:6d:4b:18:87:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:52 2026 GMT Not After : Jan 19 02:10:52 2027 GMT Subject: CN=98E16D32FB5D652330249DD0119A6354DFCF4AFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:9a:ad:fa:4f:63:f9:fc:30:6f:c4:34:af: 4f:b1:cb:0d:23:41:f5:08:b4:bb:61:4d:eb:33:c7: b1:01:56:e4:7b:26:02:5f:f2:01:6a:5f:21:b4:2d: 42:55:dd:98:b9:e5:c1:a8:b6:3f:e4:3b:8e:5f:aa: 76:e3:e2:69:9c:ae:d3:ca:ec:ff:79:ef:3d:7b:3b: 1b:37:63:b5:46:42:a4:30:70:19:e8:3c:9f:05:dd: 9c:91:02:26:1e:30:87:c2:f8:98:5b:66:fb:50:2b: 6b:f6:3b:35:f6:cb:b5:02:0f:52:bf:79:bc:bf:15: c7:cf:b9:f2:b9:f9:f6:a3:91:07:9a:16:01:6f:de: d6:bb:e0:cd:02:0b:6e:6e:2f:c3:ee:bd:cd:07:0c: 5f:c4:d5:f9:a8:3b:e0:41:3c:59:bd:bd:a0:20:f8: ad:e8:4d:89:9f:4c:70:f8:bc:2b:c3:ae:68:63:f9: 6d:ef:07:7c:1b:a4:e8:da:40:dc:e8:b7:5d:5b:26: 2c:e7:26:6b:a2:3f:43:f7:73:f8:1b:b0:6a:1b:1c: e1:8c:e6:0b:31:1e:73:c0:2b:b6:be:1e:95:24:7c: 3e:97:70:ed:f4:4b:5d:7d:fb:2e:62:86:dd:93:ca: 9b:bf:59:4a:b1:8b:d8:8d:fc:e2:1c:12:5e:5c:5d: d9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E1:6D:32:FB:5D:65:23:30:24:9D:D0:11:9A:63:54:DF:CF:4A:FF X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e39362e302f32302d3230203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.31.96.0/20 Signature Algorithm: sha256WithRSAEncryption d4:ad:d1:ee:43:28:a9:18:03:2f:92:19:e5:0e:81:b2:79:03: 07:4e:1e:89:d0:65:da:0b:29:1c:24:2d:0e:4a:eb:ec:ad:42: ea:1f:83:f2:6c:44:37:bd:47:46:e6:a4:f2:8d:72:2a:e2:c6: 07:8a:10:05:00:5d:40:ec:e5:7f:10:c1:e1:f1:e9:31:f9:3f: b2:29:1d:e2:c2:3b:6b:7b:e6:88:4e:97:1d:0d:0c:8f:00:13: ec:33:5d:fe:2b:c5:81:44:17:0a:1a:81:bf:0c:29:1e:c8:00: 15:01:c7:4a:4f:98:93:d4:86:3b:95:be:3a:9a:b1:fe:5a:1e: 41:8a:4c:68:92:1a:0a:d4:ce:75:00:8f:d7:a7:15:db:6d:cd: cc:11:d2:ca:5a:49:29:2b:0a:4c:86:b3:45:b9:c8:c0:6a:d9: fa:4a:00:c9:34:4d:5d:c9:cc:3b:10:0f:12:18:80:c1:bc:4b: a9:4c:01:29:cf:25:07:bb:a3:08:dd:a3:d4:bd:42:83:aa:3e: 11:d6:8d:47:fd:55:2f:05:cb:48:52:48:7b:f9:79:63:84:66: e9:00:38:ef:7b:3e:6a:b6:50:c1:f2:e9:84:c0:2b:52:3d:7a: a4:d0:a7:70:c7:67:ff:7b:2f:d2:56:2c:0d:f1:78:3d:ba:d3: de:0c:19:21 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUcWSKwxgZKzQLqNSXV77TbUsYhw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NTJaFw0yNzAxMTkwMjEwNTJaMDMxMTAvBgNV BAMTKDk4RTE2RDMyRkI1RDY1MjMzMDI0OUREMDExOUE2MzU0REZDRjRBRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01Zqt+k9j+fwwb8Q0r0+xyw0j QfUItLthTeszx7EBVuR7JgJf8gFqXyG0LUJV3Zi55cGotj/kO45fqnbj4mmcrtPK 7P957z17Oxs3Y7VGQqQwcBnoPJ8F3ZyRAiYeMIfC+JhbZvtQK2v2OzX2y7UCD1K/ eby/FcfPufK5+fajkQeaFgFv3ta74M0CC25uL8Puvc0HDF/E1fmoO+BBPFm9vaAg +K3oTYmfTHD4vCvDrmhj+W3vB3wbpOjaQNzot11bJiznJmuiP0P3c/gbsGobHOGM 5gsxHnPAK7a+HpUkfD6XcO30S119+y5iht2Typu/WUqxi9iN/OIcEl5cXdmjAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUmOFtMvtdZSMwJJ3QEZpjVN/PSv8wHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMTMzMmUzMzMx MmUzOTM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzNzM2MzIzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHEfYDANBgkqhkiG9w0BAQsFAAOCAQEA1K3R7kMoqRgDL5IZ5Q6BsnkDB04e idBl2gspHCQtDkrr7K1C6h+D8mxEN71HRuak8o1yKuLGB4oQBQBdQOzlfxDB4fHp Mfk/sikd4sI7a3vmiE6XHQ0MjwAT7DNd/ivFgUQXChqBvwwpHsgAFQHHSk+Yk9SG O5W+Opqx/loeQYpMaJIaCtTOdQCP16cV223NzBHSylpJKSsKTIazRbnIwGrZ+koA yTRNXcnMOxAPEhiAwbxLqUwBKc8lB7ujCN2j1L1Cg6o+EdaNR/1VLwXLSFJIe/l5 Y4Rm6QA473s+arZQwfLphMArUj16pNCncMdn/3sv0lYsDfF4PbrT3gwZIQ== -----END CERTIFICATE-----Generated at Wed Jan 21 04:22:11 2026 by rpki-client