This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa
File: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (raw, json)
Hash identifier: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=
Subject key identifier: FB:64:D5:41:9D:8D:BB:C5:18:FF:69:EF:26:47:87:38:D6:31:EA:F9
Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
Certificate serial: 266C8E7E1B0FD28E999254BEF9D8DEED0A4C9CDF
Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa
Signing time: Tue 20 Jan 2026 02:07:17 +0000
ROA not before: Tue 20 Jan 2026 02:02:17 +0000
ROA not after: Tue 19 Jan 2027 02:07:17 +0000
asID: 139187
IP address blocks: 165.101.71.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 09:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:6c:8e:7e:1b:0f:d2:8e:99:92:54:be:f9:d8:de:ed:0a:4c:9c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
Validity
Not Before: Jan 20 02:02:17 2026 GMT
Not After : Jan 19 02:07:17 2027 GMT
Subject: CN=FB64D5419D8DBBC518FF69EF26478738D631EAF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:76:37:04:4f:a5:fe:73:34:bf:81:63:98:
e2:b2:6e:b1:25:0f:6e:f4:ab:ba:4b:e8:c1:e1:37:
e4:ee:f0:b1:ec:41:75:68:9b:dc:35:11:93:a6:2b:
6d:9a:0a:9f:7b:25:0a:47:09:f5:a3:cb:c5:4e:52:
24:5c:78:da:df:a5:67:06:79:ac:89:21:28:23:9e:
d9:5f:d0:ed:bd:51:58:01:26:c3:25:bb:d4:e7:bf:
dc:11:dc:70:f1:c5:7d:2b:47:ae:6d:8a:48:d8:f6:
8c:a3:1f:d0:b2:8f:a4:fa:4a:e3:fc:ee:69:32:cd:
6a:f2:7c:e7:7a:13:c6:8d:c0:c3:31:d9:00:a9:49:
bc:72:92:27:d8:c3:35:d6:dc:93:34:ae:df:fa:b0:
53:0c:49:47:e5:82:17:14:0d:eb:14:db:1a:84:9e:
ff:1b:38:bf:59:79:f0:aa:0b:98:48:7a:ed:94:15:
5b:e6:aa:ac:a6:c5:55:5b:0c:7f:04:12:7c:9f:b1:
e3:dd:54:8e:92:11:d6:d9:6a:17:3f:b4:9e:d0:88:
c5:61:96:ae:5b:99:1c:2e:39:d3:56:18:ce:43:df:
3b:fe:2e:ea:1f:1f:67:d9:e2:44:06:67:1e:08:24:
0f:91:f8:a7:8d:66:8f:88:3f:ef:f1:a8:ec:f3:59:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:64:D5:41:9D:8D:BB:C5:18:FF:69:EF:26:47:87:38:D6:31:EA:F9
X509v3 Authority Key Identifier:
keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.101.71.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:2c:64:8c:9e:54:6e:ed:a2:23:b6:01:a4:1c:da:8f:97:b4:
a7:a7:0f:2b:e1:0a:b1:62:13:d3:0d:b2:39:3c:18:7e:92:7d:
48:96:e9:a6:0d:dc:d4:b5:85:81:6a:9f:50:f2:f1:2d:b2:33:
8a:2c:be:6d:4b:25:5f:76:35:83:52:65:a5:39:34:1a:6b:c5:
88:cd:02:f3:bf:1c:6c:e3:55:48:1a:94:4f:8a:a9:09:53:8a:
a1:ae:71:7c:a2:8c:43:ee:d0:54:5d:81:35:f4:b5:e1:0b:06:
23:ff:23:fe:12:12:85:e3:23:f5:31:ef:04:26:ad:09:5e:f6:
a1:8c:b6:ba:65:40:39:df:3f:25:e7:f6:98:65:19:88:6c:bb:
3a:14:c0:07:41:d0:44:0a:b0:cc:3b:93:e8:c7:3e:8c:d7:66:
99:a2:4b:03:8b:b5:94:8e:12:06:48:59:85:4f:0f:7c:bc:a3:
0e:4a:01:0d:6d:d9:87:13:d3:57:d0:28:18:a2:c6:2a:ef:11:
a6:f5:53:ac:05:ef:c8:3b:c5:8a:97:40:11:82:e5:f3:28:d0:
25:23:e1:b0:6b:bd:9f:4a:0f:39:9c:1f:76:f8:c3:6d:10:e1:
eb:ef:5a:31:c3:36:95:41:2b:f6:99:f7:7b:9a:9c:e3:4e:64:
f2:ce:cf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:52:53 2026 by rpki-client