This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37302e302f32342d3332203d3e2034383337.roa File: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (raw, json) Hash identifier: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk= Subject key identifier: 7F:89:03:50:23:23:9D:75:7B:02:87:40:42:05:7C:BD:A5:C4:B8:17 Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Certificate serial: 16708042703DFE74C385712A898900D3411631F5 Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37302e302f32342d3332203d3e2034383337.roa Signing time: Tue 20 Jan 2026 02:07:16 +0000 ROA not before: Tue 20 Jan 2026 02:02:16 +0000 ROA not after: Tue 19 Jan 2027 02:07:16 +0000 asID: 4837 IP address blocks: 165.101.70.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 20:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:70:80:42:70:3d:fe:74:c3:85:71:2a:89:89:00:d3:41:16:31:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Validity Not Before: Jan 20 02:02:16 2026 GMT Not After : Jan 19 02:07:16 2027 GMT Subject: CN=7F89035023239D757B02874042057CBDA5C4B817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:99:64:da:8e:2d:34:d7:f9:e9:99:f0:06:18: fc:68:9a:ed:64:9e:f8:f2:cc:ff:61:fb:a3:3c:cb: e8:ec:1c:2b:bc:bd:82:34:74:22:c9:de:67:0d:e8: bf:dc:67:55:aa:ca:50:0f:05:80:72:ce:97:c6:8e: 27:50:d9:71:1f:b9:41:17:27:df:1f:f0:32:72:9b: 3f:e2:9e:51:3b:64:2c:9c:ac:86:22:5d:ce:b8:af: f9:d3:a9:27:ee:1c:ef:10:cc:fa:a3:90:12:60:8f: e1:b6:c0:c6:d1:22:6e:d2:a7:ec:bd:b3:8c:10:af: 96:06:a6:10:38:0b:c4:09:a3:b5:d4:27:11:8e:8c: 90:50:9a:94:c6:34:48:97:2b:eb:6d:b8:6c:86:8e: 66:2f:5b:3b:b3:f9:51:f2:74:26:07:25:65:a9:7a: 36:53:2c:04:b5:0f:a6:d1:35:8e:3e:d7:87:5e:a0: 15:cc:1e:67:b3:a0:66:27:78:45:3e:3a:50:3e:fc: 8f:35:50:c4:24:7e:a4:32:b2:33:6c:a1:ca:28:9f: 4b:5f:1a:b9:2f:65:34:fa:76:88:49:bb:e9:8e:c8: fb:c2:b9:f1:ec:ea:3b:87:09:91:d1:16:55:fa:19: b9:c2:54:0c:0b:7b:71:c7:cf:3d:02:0e:3f:5c:aa: 9b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:89:03:50:23:23:9D:75:7B:02:87:40:42:05:7C:BD:A5:C4:B8:17 X509v3 Authority Key Identifier: keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37302e302f32342d3332203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.70.0/24 Signature Algorithm: sha256WithRSAEncryption 36:cb:b5:c2:8a:64:df:d8:a9:a0:46:ef:67:c8:d5:21:35:e4: 0e:3a:12:7a:24:35:05:b7:74:4d:d2:9e:0f:71:ba:e5:a3:e0: df:39:16:93:93:ab:b7:4d:8e:6b:a3:3a:a1:61:f6:ce:43:37: 3e:3b:61:c9:3a:f8:67:79:08:6a:f5:e2:80:59:f0:ab:62:93: 5e:83:46:b0:1e:af:6e:2b:34:0e:dd:e1:02:88:23:90:f1:3f: 72:e3:e5:44:0a:d5:b2:93:8a:32:8c:42:d7:a7:aa:d0:64:55: 24:7d:e2:a1:98:76:8c:5f:19:c2:1f:e1:36:d1:c0:22:b4:80: ac:fa:af:5f:eb:4d:e4:e4:f9:d6:26:1b:57:f4:43:5a:97:11: 01:9c:c4:7a:61:e3:7e:82:9a:0f:49:00:e0:7c:d3:e3:6e:29: c0:e6:eb:e1:5f:10:b2:f2:6a:80:97:1c:0d:a4:56:49:6a:95: a8:89:15:5b:49:77:c9:d3:0e:dd:3a:72:86:75:82:19:e1:e6: ad:4f:41:5c:d7:11:39:dc:f6:8b:64:7e:e7:3d:31:cc:ca:8f: 76:15:cf:26:f4:f3:b9:c6:18:b5:df:7b:3a:af:a8:1c:c3:1e: 22:8e:fa:41:d8:ff:e7:7c:56:c3:a3:5f:f8:40:8d:b1:09:bc: ce:9c:b4:da -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUFnCAQnA9/nTDhXEqiYkA00EWMfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB MkQ4Qjg1MjAeFw0yNjAxMjAwMjAyMTZaFw0yNzAxMTkwMjA3MTZaMDMxMTAvBgNV BAMTKDdGODkwMzUwMjMyMzlENzU3QjAyODc0MDQyMDU3Q0JEQTVDNEI4MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLmWTaji001/npmfAGGPxomu1k nvjyzP9h+6M8y+jsHCu8vYI0dCLJ3mcN6L/cZ1WqylAPBYByzpfGjidQ2XEfuUEX J98f8DJymz/inlE7ZCycrIYiXc64r/nTqSfuHO8QzPqjkBJgj+G2wMbRIm7Sp+y9 s4wQr5YGphA4C8QJo7XUJxGOjJBQmpTGNEiXK+ttuGyGjmYvWzuz+VHydCYHJWWp ejZTLAS1D6bRNY4+14deoBXMHmezoGYneEU+OlA+/I81UMQkfqQysjNsocoon0tf GrkvZTT6dohJu+mOyPvCufHs6juHCZHRFlX6GbnCVAwLe3HHzz0CDj9cqpsPAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUf4kDUCMjnXV7AodAQgV8vaXEuBcwHwYDVR0j BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2 RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NjUxNzE1LzEvMzEzNjM1MmUzMTMw MzEyZTM3MzAyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAKVlRjANBgkqhkiG9w0BAQsFAAOCAQEANsu1wopk39ipoEbvZ8jVITXkDjoS eiQ1Bbd0TdKeD3G65aPg3zkWk5Ort02Oa6M6oWH2zkM3PjthyTr4Z3kIavXigFnw q2KTXoNGsB6vbis0Dt3hAogjkPE/cuPlRArVspOKMoxC16eq0GRVJH3ioZh2jF8Z wh/hNtHAIrSArPqvX+tN5OT51iYbV/RDWpcRAZzEemHjfoKaD0kA4HzT424pwObr 4V8QsvJqgJccDaRWSWqVqIkVW0l3ydMO3TpyhnWCGeHmrU9BXNcROdz2i2R+5z0x zMqPdhXPJvTzucYYtd97Oq+oHMMeIo76Qdj/53xWw6Nf+ECNsQm8zpy02g== -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:59 2026 by rpki-client