This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e33322e302f31392d3234203d3e2034383131.roa File: 3131382e3134352e33322e302f31392d3234203d3e2034383131.roa (raw, json) Hash identifier: XAOL98THnuq5De4jaIhjdwDi+ncmOAWGx0e8j/CD3jE= Subject key identifier: 13:01:4B:D8:D2:0C:15:85:6F:5B:D1:87:04:61:CF:98:B3:BA:A5:46 Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 2B210AB785B8E0E8ECFD1513E6F6EDCDFC1F7D32 Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e33322e302f31392d3234203d3e2034383131.roa Signing time: Tue 20 Jan 2026 02:09:45 +0000 ROA not before: Tue 20 Jan 2026 02:04:45 +0000 ROA not after: Tue 19 Jan 2027 02:09:45 +0000 asID: 4811 IP address blocks: 118.145.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:21:0a:b7:85:b8:e0:e8:ec:fd:15:13:e6:f6:ed:cd:fc:1f:7d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jan 20 02:04:45 2026 GMT Not After : Jan 19 02:09:45 2027 GMT Subject: CN=13014BD8D20C15856F5BD1870461CF98B3BAA546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:31:a8:be:7f:32:08:ee:59:ff:3b:52:24:b9: a1:a9:79:6a:14:16:c1:60:5f:dd:e0:82:65:7d:fa: 7b:1a:b9:2a:e3:0c:58:29:73:0f:ef:e2:b0:f5:0e: 30:70:9b:4c:74:c2:66:91:68:5c:fc:7a:d1:60:1e: ed:9a:20:c1:39:bc:5e:aa:b6:e7:c1:8f:c2:96:13: 05:7c:1a:a9:f9:c7:90:a9:74:4c:65:a5:dc:66:98: 3d:73:e4:e4:ef:3f:18:8e:5f:25:b0:f6:f5:92:a7: 8f:95:44:8e:16:45:50:6b:32:eb:d2:a4:ef:61:fe: de:83:be:68:cb:62:f1:b8:13:2c:25:b7:67:a0:53: 08:c1:f5:fa:77:dc:f3:2b:96:3c:8f:e3:24:ad:86: ee:99:0f:d5:f8:ff:2c:58:5b:17:54:d7:bf:24:18: ff:7d:c1:6e:4d:8f:35:fb:2f:f5:07:a9:44:3c:1a: 56:bd:7f:78:62:a0:8d:6d:9f:1c:89:14:1b:ae:11: c7:e7:b1:06:a4:f8:6b:07:16:93:3a:eb:1e:99:57: 44:73:e5:da:27:72:2c:c5:d5:f8:b4:f7:4a:ea:98: 46:ce:f3:c5:c2:02:4b:33:de:cb:e9:f8:32:a6:86: dd:b4:a5:66:33:07:24:73:97:4a:47:47:13:84:5f: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:01:4B:D8:D2:0C:15:85:6F:5B:D1:87:04:61:CF:98:B3:BA:A5:46 X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e33322e302f31392d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.145.32.0/19 Signature Algorithm: sha256WithRSAEncryption 3d:47:20:64:8c:0f:0d:72:e9:a6:89:27:f1:3d:57:87:bf:c6: e1:ea:fd:ad:0b:74:85:55:9b:d6:98:47:bf:2e:8b:50:32:00: 98:55:6a:8b:7c:a9:f3:7d:c1:9b:13:7b:a5:79:8d:d2:15:ba: 11:08:34:28:0d:60:c2:d3:17:71:64:a5:cd:0d:21:53:76:ff: c7:68:f6:94:39:74:27:2b:2f:4f:b3:db:ec:69:5a:b0:c9:42: 61:36:15:2d:c0:38:93:a5:32:2f:ab:5f:6c:ac:75:e6:fd:e1: d2:08:ec:b6:99:13:17:09:39:29:cf:90:6b:08:38:84:13:8f: 7b:25:95:c2:20:65:36:9d:ac:ef:1a:c2:71:c3:8b:3f:ee:28: 09:11:fe:66:46:80:ce:27:6d:50:45:ef:03:8c:ca:12:a1:13: b0:de:66:13:26:c4:e2:ae:8e:0e:f2:03:6c:91:3e:c3:45:13: bc:ee:ed:96:76:d7:48:db:05:6d:54:51:32:3f:bd:a0:a9:c2: 06:88:cc:d5:b3:13:65:f0:8d:ed:f7:ad:f7:79:e9:a1:47:0d: 4d:2a:1a:7b:cf:02:e3:a0:9f:28:2a:a9:98:a3:68:89:33:36: a8:e1:bf:23:92:d5:3f:0f:eb:cc:33:82:5a:7a:55:63:c6:f3: 68:7f:0e:62 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUKyEKt4W44Ojs/RUT5vbtzfwffTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjAxMjAwMjA0NDVaFw0yNzAxMTkwMjA5NDVaMDMxMTAvBgNV BAMTKDEzMDE0QkQ4RDIwQzE1ODU2RjVCRDE4NzA0NjFDRjk4QjNCQUE1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Mai+fzII7ln/O1IkuaGpeWoU FsFgX93ggmV9+nsauSrjDFgpcw/v4rD1DjBwm0x0wmaRaFz8etFgHu2aIME5vF6q tufBj8KWEwV8Gqn5x5CpdExlpdxmmD1z5OTvPxiOXyWw9vWSp4+VRI4WRVBrMuvS pO9h/t6DvmjLYvG4Eywlt2egUwjB9fp33PMrljyP4ySthu6ZD9X4/yxYWxdU178k GP99wW5NjzX7L/UHqUQ8Gla9f3hioI1tnxyJFBuuEcfnsQak+GsHFpM66x6ZV0Rz 5doncizF1fi090rqmEbO88XCAksz3svp+DKmht20pWYzByRzl0pHRxOEXyIDAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUEwFL2NIMFYVvW9GHBGHPmLO6pUYwHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUwLzAvMzEzMTM4MmUzMTM0 MzUyZTMzMzIyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXaRIDANBgkqhkiG9w0BAQsFAAOCAQEAPUcgZIwPDXLppokn8T1Xh7/G4er9 rQt0hVWb1phHvy6LUDIAmFVqi3yp833BmxN7pXmN0hW6EQg0KA1gwtMXcWSlzQ0h U3b/x2j2lDl0JysvT7Pb7GlasMlCYTYVLcA4k6UyL6tfbKx15v3h0gjstpkTFwk5 Kc+Qawg4hBOPeyWVwiBlNp2s7xrCccOLP+4oCRH+ZkaAzidtUEXvA4zKEqETsN5m EybE4q6ODvIDbJE+w0UTvO7tlnbXSNsFbVRRMj+9oKnCBojM1bMTZfCN7fet93np oUcNTSoae88C46CfKCqpmKNoiTM2qOG/I5LVPw/rzDOCWnpVY8bzaH8OYg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:00 2026 by rpki-client