This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e302e302f32312d3234203d3e2034383131.roa File: 31342e3130332e302e302f32312d3234203d3e2034383131.roa (raw, json) Hash identifier: GTPQRnSkGR+LsQ94NjQA0u8cbgClpaiMj7Yrmhusvus= Subject key identifier: 5D:D7:74:0A:5D:E1:40:E4:50:E7:3D:D7:3E:8A:76:3D:11:D5:9A:2A Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 2150C0355D3241E6F3EF7EEB51EADBBD02BC56A3 Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e302e302f32312d3234203d3e2034383131.roa Signing time: Tue 20 Jan 2026 02:09:45 +0000 ROA not before: Tue 20 Jan 2026 02:04:45 +0000 ROA not after: Tue 19 Jan 2027 02:09:45 +0000 asID: 4811 IP address blocks: 14.103.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 07:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:50:c0:35:5d:32:41:e6:f3:ef:7e:eb:51:ea:db:bd:02:bc:56:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jan 20 02:04:45 2026 GMT Not After : Jan 19 02:09:45 2027 GMT Subject: CN=5DD7740A5DE140E450E73DD73E8A763D11D59A2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:80:3b:23:88:b6:47:36:f1:ad:33:8a:bc:42: c7:bf:59:f0:14:16:3f:78:d9:5f:3d:de:04:9b:ad: de:84:f5:8d:04:1b:28:51:41:d9:a4:cc:1f:56:a8: 02:ac:63:88:5a:36:a5:4b:6e:a4:cc:ba:bd:2a:5a: 14:64:1e:17:0e:94:88:d3:ff:1d:fa:4e:b0:cd:84: 81:e0:3f:37:8b:e7:d3:fe:89:45:f7:2c:26:5b:92: 8c:40:0f:ca:78:9b:5b:7b:46:02:b9:95:62:19:41: 1a:5a:5a:33:5a:37:d7:87:2f:a3:82:8d:6b:9d:06: 06:ac:ab:ee:6f:8f:9d:fd:f9:3a:76:18:9c:39:7a: dd:58:87:82:51:bf:7f:72:b5:7d:91:d9:a1:48:bb: 17:20:cc:8b:ba:47:e1:b7:c7:90:50:1b:01:9c:b1: c4:50:db:e1:32:76:eb:f9:27:d6:03:89:a9:22:6e: f9:52:ca:35:28:51:e5:68:73:e2:d9:1c:ff:2c:5a: 20:c1:9d:2f:1f:5d:2a:14:66:83:b8:ef:7b:ca:12: 94:b7:64:1d:c3:c4:06:ff:50:5a:2c:fd:4d:cf:75: 8b:91:1b:95:0f:32:91:14:87:c6:53:2b:98:9b:76: e6:fa:c9:93:59:44:de:0b:05:6c:e7:b1:be:05:0e: 99:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D7:74:0A:5D:E1:40:E4:50:E7:3D:D7:3E:8A:76:3D:11:D5:9A:2A X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e302e302f32312d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.103.0.0/21 Signature Algorithm: sha256WithRSAEncryption 2b:00:29:5a:97:30:05:3c:df:b0:2a:64:05:d6:3d:51:ab:09: b3:12:80:fa:05:0d:11:d6:b1:79:ca:e5:05:84:09:05:9f:48: d0:56:04:cc:2a:5c:7b:77:00:fc:1c:ee:9a:f5:60:d0:d2:3f: d0:da:9d:64:6d:cb:bb:e8:ee:cb:97:75:13:80:ec:e2:6e:1d: 35:9b:16:79:ca:3d:ba:b4:8a:f9:44:ce:9f:5f:ee:6a:7a:28: 95:e3:1d:42:84:6d:2d:cc:ac:5e:48:d7:53:8c:0c:03:a3:7e: 58:47:78:47:a6:2d:ee:4b:ec:2a:65:3a:74:64:0e:73:94:74: 51:40:c1:a1:10:1f:b3:c5:b2:88:32:9b:4c:05:a1:30:80:09: d9:fb:05:4e:a9:1e:5a:d5:0f:13:2f:a8:a2:e2:24:9c:4a:06: d0:96:30:62:53:f9:4b:af:f6:83:b5:88:26:e7:af:74:a0:bb: 41:85:b9:5c:bc:3a:99:16:52:95:36:c5:13:94:1b:78:c0:aa: d6:54:84:8e:c8:60:f8:e6:c3:9b:d7:af:a2:aa:b5:b0:8d:34: ea:be:e4:3b:43:3b:68:a9:90:15:ac:8d:2a:fb:90:d8:c3:28: cf:d6:20:0c:21:a0:57:d2:ff:04:27:cd:4a:a8:f3:57:49:4f: e2:f4:a4:94 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUIVDANV0yQebz737rUerbvQK8VqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjAxMjAwMjA0NDVaFw0yNzAxMTkwMjA5NDVaMDMxMTAvBgNV BAMTKDVERDc3NDBBNURFMTQwRTQ1MEU3M0RENzNFOEE3NjNEMTFENTlBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5gDsjiLZHNvGtM4q8Qse/WfAU Fj942V893gSbrd6E9Y0EGyhRQdmkzB9WqAKsY4haNqVLbqTMur0qWhRkHhcOlIjT /x36TrDNhIHgPzeL59P+iUX3LCZbkoxAD8p4m1t7RgK5lWIZQRpaWjNaN9eHL6OC jWudBgasq+5vj539+Tp2GJw5et1Yh4JRv39ytX2R2aFIuxcgzIu6R+G3x5BQGwGc scRQ2+Eyduv5J9YDiakibvlSyjUoUeVoc+LZHP8sWiDBnS8fXSoUZoO473vKEpS3 ZB3DxAb/UFos/U3PdYuRG5UPMpEUh8ZTK5ibdub6yZNZRN4LBWznsb4FDplpAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUXdd0Cl3hQORQ5z3XPop2PRHVmiowHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUwLzAvMzEzNDJlMzEzMDMz MmUzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM0MzgzMTMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD DmcAMA0GCSqGSIb3DQEBCwUAA4IBAQArAClalzAFPN+wKmQF1j1RqwmzEoD6BQ0R 1rF5yuUFhAkFn0jQVgTMKlx7dwD8HO6a9WDQ0j/Q2p1kbcu76O7Ll3UTgOzibh01 mxZ5yj26tIr5RM6fX+5qeiiV4x1ChG0tzKxeSNdTjAwDo35YR3hHpi3uS+wqZTp0 ZA5zlHRRQMGhEB+zxbKIMptMBaEwgAnZ+wVOqR5a1Q8TL6ii4iScSgbQljBiU/lL r/aDtYgm5690oLtBhblcvDqZFlKVNsUTlBt4wKrWVISOyGD45sOb16+iqrWwjTTq vuQ7QztoqZAVrI0q+5DYwyjP1iAMIaBX0v8EJ81KqPNXSU/i9KSU -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:03 2026 by rpki-client