This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e35362e302f32312d3234203d3e2034383131.roa
File: 31342e3130332e35362e302f32312d3234203d3e2034383131.roa (raw, json)
Hash identifier: QV+s/WZHv04nFbuRVq7XxLTuVg5o07r6D/EJUk/gpSM=
Subject key identifier: 39:AC:E2:78:DF:8B:FF:8A:49:85:DE:D4:9A:3B:28:B5:E0:55:C4:92
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 4642A6CE2E9BC45DD50E34B434F30ACF6D7F5064
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e35362e302f32312d3234203d3e2034383131.roa
Signing time: Tue 20 Jan 2026 02:09:44 +0000
ROA not before: Tue 20 Jan 2026 02:04:44 +0000
ROA not after: Tue 19 Jan 2027 02:09:44 +0000
asID: 4811
IP address blocks: 14.103.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 07:16:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:42:a6:ce:2e:9b:c4:5d:d5:0e:34:b4:34:f3:0a:cf:6d:7f:50:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Jan 20 02:04:44 2026 GMT
Not After : Jan 19 02:09:44 2027 GMT
Subject: CN=39ACE278DF8BFF8A4985DED49A3B28B5E055C492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:81:d9:b6:54:d4:9a:b2:1d:f7:b3:d6:d3:
73:c9:37:4f:97:97:4b:14:d0:a9:d7:82:d4:ed:f9:
04:10:52:02:6e:52:7f:e9:9e:f7:a5:5a:5a:91:f2:
c2:37:1a:1d:a5:21:f9:af:57:d6:21:29:54:57:f3:
da:0c:b4:5a:62:c3:0e:1a:9d:cf:cd:20:4a:cf:5f:
30:61:1d:28:84:3b:cc:c9:96:d9:52:41:b8:d8:8d:
5c:50:fe:eb:45:e1:76:2c:57:8e:65:0c:c2:09:1c:
79:d0:de:cd:0b:58:39:63:cf:d0:f4:20:18:ad:a8:
a5:96:e5:ee:b5:c8:67:b0:45:3e:43:b9:d2:88:ba:
d4:f7:7e:7b:c4:e0:9b:80:a6:db:2e:bf:2e:e6:f8:
de:dc:8b:e4:93:53:d5:94:fb:48:6c:30:10:12:bc:
a7:a8:dc:ff:9b:e7:61:69:2e:37:1f:25:74:71:e1:
b5:4f:e5:61:af:b5:eb:ab:7c:43:a1:1e:e3:12:4e:
68:97:66:0a:35:d1:0e:3a:1f:dd:5a:16:71:b4:47:
72:b0:a0:7a:be:53:46:86:8c:08:c7:87:d6:04:8a:
1f:de:53:7d:e0:23:94:8a:18:89:42:15:a0:ca:59:
02:5e:50:2f:4d:d7:bb:05:80:94:08:a9:93:4a:94:
36:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AC:E2:78:DF:8B:FF:8A:49:85:DE:D4:9A:3B:28:B5:E0:55:C4:92
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e35362e302f32312d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.103.56.0/21
Signature Algorithm: sha256WithRSAEncryption
67:1a:c0:ff:ff:5d:11:b6:6c:f0:ea:39:78:7e:40:4f:6d:56:
e8:ba:e1:38:77:4d:88:bc:22:40:98:68:42:bd:8c:c9:51:86:
bc:db:84:5e:d2:ff:25:01:89:9e:07:40:44:5e:22:91:a0:ae:
1a:b3:bf:b7:a3:1a:a1:73:a5:6e:62:91:19:06:97:13:c3:9d:
6a:1e:e4:07:ca:0f:ef:f7:c8:13:1c:47:cd:75:34:6b:67:a6:
37:9a:33:9d:ad:ed:01:00:1e:0a:82:f1:bc:c5:56:53:ec:59:
de:9d:db:d1:1e:d3:c1:52:d5:5b:b8:0a:d9:9c:9d:93:17:d3:
92:cc:04:5b:47:42:55:f7:90:96:70:5e:d7:df:a7:e4:82:67:
d9:62:8e:e0:90:56:de:24:05:44:c9:61:bd:f7:d7:4e:47:3c:
c9:37:8d:da:1e:56:d0:64:33:a4:33:17:92:a7:82:2b:72:15:
db:3d:89:56:67:37:f4:cd:88:ba:a5:dd:f3:82:2f:0d:76:be:
9d:0c:32:06:ae:b5:3e:80:a9:c4:a0:e8:0e:8a:9d:de:d5:de:
bf:f1:64:49:f7:9c:69:ef:ea:57:41:50:0a:f0:4e:65:bc:54:
f7:a2:46:85:96:47:eb:6b:b0:15:48:f3:3d:c8:94:c8:7b:49:
6d:9e:97:72
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIURkKmzi6bxF3VDjS0NPMKz21/UGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE
MUVFRjM4RjAeFw0yNjAxMjAwMjA0NDRaFw0yNzAxMTkwMjA5NDRaMDMxMTAvBgNV
BAMTKDM5QUNFMjc4REY4QkZGOEE0OTg1REVENDlBM0IyOEI1RTA1NUM0OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fYHZtlTUmrId97PW03PJN0+X
l0sU0KnXgtTt+QQQUgJuUn/pnvelWlqR8sI3Gh2lIfmvV9YhKVRX89oMtFpiww4a
nc/NIErPXzBhHSiEO8zJltlSQbjYjVxQ/utF4XYsV45lDMIJHHnQ3s0LWDljz9D0
IBitqKWW5e61yGewRT5DudKIutT3fnvE4JuAptsuvy7m+N7ci+STU9WU+0hsMBAS
vKeo3P+b52FpLjcfJXRx4bVP5WGvteurfEOhHuMSTmiXZgo10Q46H91aFnG0R3Kw
oHq+U0aGjAjHh9YEih/eU33gI5SKGIlCFaDKWQJeUC9N17sFgJQIqZNKlDbtAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUOazieN+L/4pJhd7UmjsoteBVxJIwHwYDVR0j
BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB
NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUwLzAvMzEzNDJlMzEzMDMz
MmUzNTM2MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzQzODMxMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAMOZzgwDQYJKoZIhvcNAQELBQADggEBAGcawP//XRG2bPDqOXh+QE9tVui64Th3
TYi8IkCYaEK9jMlRhrzbhF7S/yUBiZ4HQEReIpGgrhqzv7ejGqFzpW5ikRkGlxPD
nWoe5AfKD+/3yBMcR811NGtnpjeaM52t7QEAHgqC8bzFVlPsWd6d29Ee08FS1Vu4
CtmcnZMX05LMBFtHQlX3kJZwXtffp+SCZ9lijuCQVt4kBUTJYb33105HPMk3jdoe
VtBkM6QzF5KngityFds9iVZnN/TNiLql3fOCLw12vp0MMgautT6AqcSg6A6Knd7V
3r/xZEn3nGnv6ldBUArwTmW8VPeiRoWWR+trsBVI8z3IlMh7SW2el3I=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:33:26 2026 by rpki-client