This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e38382e302f32312d3234203d3e2034383131.roa File: 31342e3130332e38382e302f32312d3234203d3e2034383131.roa (raw, json) Hash identifier: umvAhUsyYeICPzxJ1v9P+4IPKPz1rGO/zgM+GGObHjg= Subject key identifier: DF:3F:E2:3A:54:92:FA:C1:99:CE:20:FB:2F:5D:CA:4F:CE:51:8B:AA Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 21EB095A91A72E678233284ECB389AC1D70F748A Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e38382e302f32312d3234203d3e2034383131.roa Signing time: Tue 20 Jan 2026 02:09:45 +0000 ROA not before: Tue 20 Jan 2026 02:04:45 +0000 ROA not after: Tue 19 Jan 2027 02:09:45 +0000 asID: 4811 IP address blocks: 14.103.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:eb:09:5a:91:a7:2e:67:82:33:28:4e:cb:38:9a:c1:d7:0f:74:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jan 20 02:04:45 2026 GMT Not After : Jan 19 02:09:45 2027 GMT Subject: CN=DF3FE23A5492FAC199CE20FB2F5DCA4FCE518BAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:00:3b:cf:36:1e:59:94:ab:9f:2d:1f:93:e7: d0:3b:df:a7:69:29:cc:93:7e:ae:a5:17:73:9b:f4: 14:d9:4f:c5:40:8f:77:15:bf:cf:89:a5:d7:e8:36: 4d:df:ee:6c:88:fd:3e:06:2e:d9:47:fe:7b:3d:08: 22:a9:8c:48:ae:57:ca:00:85:6f:d6:e7:32:6e:fb: 64:be:fa:df:c3:87:35:76:d3:49:8d:50:6c:f1:53: da:32:c3:fc:e8:42:07:4e:e9:7b:c0:e0:ac:8c:15: b1:0b:ac:94:1a:f7:cb:61:82:a9:a7:f5:cf:23:0e: 55:a1:5f:73:de:d5:c1:a1:f1:d3:03:0c:8a:1c:e5: e5:0f:64:d2:56:85:56:69:47:69:6b:9f:0e:f1:8f: 7a:0f:95:43:36:11:80:7e:b4:d3:88:6b:a8:88:65: b4:68:3c:2c:8c:a1:53:c6:f6:1f:b9:24:cd:c2:d7: 52:59:c5:3c:88:e9:aa:d9:d5:d2:87:e8:d8:48:3a: fd:87:56:76:6e:ec:75:39:bb:0a:76:b8:52:1a:65: af:b9:ce:b3:c4:64:4e:88:a7:99:04:07:0d:44:30: 31:1a:3f:b4:61:26:68:a8:51:e7:ab:a9:08:35:e2: c9:0c:db:9e:be:08:13:be:02:aa:0b:04:45:9b:d0: 90:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3F:E2:3A:54:92:FA:C1:99:CE:20:FB:2F:5D:CA:4F:CE:51:8B:AA X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e38382e302f32312d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.103.88.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:69:8f:3c:ad:4f:26:b0:2d:ed:1b:7a:5d:cd:31:b8:f1:20: 83:4c:45:df:dc:f7:97:c0:21:87:74:61:03:c5:a4:43:0f:c5: 7c:ce:0d:65:47:b0:0d:f6:45:5f:cc:f4:74:a7:a2:6f:4e:9c: 13:02:c5:55:ce:31:1e:da:d8:42:67:52:e8:e3:99:0d:13:dd: 20:6e:b2:12:fd:02:d3:cf:66:df:dc:9a:9e:69:9a:56:8f:31: 1c:0c:c4:0b:21:1b:cc:61:78:d5:e2:1c:8e:1f:4d:22:fd:03: 8d:a3:20:1f:ff:ea:98:12:19:2c:4c:64:34:64:08:98:c4:46: f6:e8:61:82:8c:d7:b3:f2:f7:2e:04:7c:d4:65:a4:f3:b9:58: 3e:5e:85:74:68:33:55:a0:61:11:b4:c5:a6:ba:af:96:a9:44: 33:07:89:ea:f7:0d:1d:04:22:40:26:e4:e5:bc:49:95:16:24: 4b:bf:34:13:1e:12:93:90:df:e6:25:ad:50:13:7a:8b:40:b2: de:c5:9c:0c:be:18:82:e8:14:bc:02:a8:3d:4e:29:48:bc:de: bc:b5:38:13:6a:39:a5:b8:c1:fb:14:06:4a:10:f2:bf:94:ba: 31:a6:2d:51:7d:57:6b:c8:1d:7d:60:fd:6e:57:0e:95:1f:87: 4f:56:c1:2d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUIesJWpGnLmeCMyhOyziawdcPdIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjAxMjAwMjA0NDVaFw0yNzAxMTkwMjA5NDVaMDMxMTAvBgNV BAMTKERGM0ZFMjNBNTQ5MkZBQzE5OUNFMjBGQjJGNURDQTRGQ0U1MThCQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyADvPNh5ZlKufLR+T59A736dp KcyTfq6lF3Ob9BTZT8VAj3cVv8+JpdfoNk3f7myI/T4GLtlH/ns9CCKpjEiuV8oA hW/W5zJu+2S++t/DhzV200mNUGzxU9oyw/zoQgdO6XvA4KyMFbELrJQa98thgqmn 9c8jDlWhX3Pe1cGh8dMDDIoc5eUPZNJWhVZpR2lrnw7xj3oPlUM2EYB+tNOIa6iI ZbRoPCyMoVPG9h+5JM3C11JZxTyI6arZ1dKH6NhIOv2HVnZu7HU5uwp2uFIaZa+5 zrPEZE6Ip5kEBw1EMDEaP7RhJmioUeerqQg14skM256+CBO+AqoLBEWb0JC3AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU3z/iOlSS+sGZziD7L13KT85Ri6owHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUwLzAvMzEzNDJlMzEzMDMz MmUzODM4MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzQzODMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAMOZ1gwDQYJKoZIhvcNAQELBQADggEBAE9pjzytTyawLe0bel3NMbjxIINMRd/c 95fAIYd0YQPFpEMPxXzODWVHsA32RV/M9HSnom9OnBMCxVXOMR7a2EJnUujjmQ0T 3SBushL9AtPPZt/cmp5pmlaPMRwMxAshG8xheNXiHI4fTSL9A42jIB//6pgSGSxM ZDRkCJjERvboYYKM17Py9y4EfNRlpPO5WD5ehXRoM1WgYRG0xaa6r5apRDMHier3 DR0EIkAm5OW8SZUWJEu/NBMeEpOQ3+YlrVATeotAst7FnAy+GILoFLwCqD1OKUi8 3ry1OBNqOaW4wfsUBkoQ8r+UujGmLVF9V2vIHX1g/W5XDpUfh09WwS0= -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:36 2026 by rpki-client