This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37312e302f32342d3332203d3e203136353039.roa
File: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (raw, json)
Hash identifier: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=
Subject key identifier: E0:10:D8:9E:A0:47:41:7A:2B:20:CF:64:C2:28:67:59:88:C5:1E:BB
Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
Certificate serial: 0D7CBD9793A8BD7240BE84FD7BD9CACAB3FD8095
Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37312e302f32342d3332203d3e203136353039.roa
Signing time: Tue 20 Jan 2026 02:07:16 +0000
ROA not before: Tue 20 Jan 2026 02:02:16 +0000
ROA not after: Tue 19 Jan 2027 02:07:16 +0000
asID: 16509
IP address blocks: 165.101.71.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 16:37:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:7c:bd:97:93:a8:bd:72:40:be:84:fd:7b:d9:ca:ca:b3:fd:80:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
Validity
Not Before: Jan 20 02:02:16 2026 GMT
Not After : Jan 19 02:07:16 2027 GMT
Subject: CN=E010D89EA047417A2B20CF64C228675988C51EBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:2b:3d:75:cc:dc:38:93:da:57:c0:a8:e7:
a6:73:cf:47:46:37:1e:8a:1f:17:bc:4c:87:1b:d7:
4f:26:0a:fb:42:f8:fc:62:3b:7d:c9:dd:84:6a:de:
fc:2f:15:fd:a8:f5:b9:e1:05:06:b8:85:74:30:ba:
10:5b:2d:16:22:da:1b:d9:87:31:cf:85:cc:f3:9e:
17:09:f3:bd:53:7a:ba:cb:54:a5:cf:ef:e7:7f:79:
de:22:9f:a9:23:a9:cf:73:b2:9c:eb:dd:97:5b:74:
41:1c:54:e6:f3:56:dc:59:bf:60:24:38:1e:7b:a5:
81:cc:c0:3b:84:0a:07:be:2f:90:bd:98:11:a5:ba:
ef:d0:f4:18:52:be:ed:f9:f5:7e:f1:7d:30:e5:9e:
5e:73:ae:76:91:1d:89:e3:70:44:0c:c4:28:6f:84:
99:c0:70:f6:2e:87:e3:bf:43:ae:63:a9:f2:e9:cf:
97:0f:39:e8:3c:05:93:c4:e1:0c:0e:a2:4f:09:a1:
37:56:41:c0:0f:cb:b9:a0:d5:79:01:93:9d:58:dc:
e9:b5:59:c5:e0:3f:13:78:d1:29:f7:dd:ae:90:67:
0d:e9:ec:58:07:a0:f1:89:bf:99:2f:2e:65:60:d1:
4e:e1:01:c9:0e:1e:44:cd:03:fa:2d:89:73:78:bc:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:10:D8:9E:A0:47:41:7A:2B:20:CF:64:C2:28:67:59:88:C5:1E:BB
X509v3 Authority Key Identifier:
keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37312e302f32342d3332203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.101.71.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e9:5f:3e:d8:1f:9e:39:8c:09:bd:cc:46:1d:32:99:fa:85:
c4:b2:94:6f:8c:96:c8:26:27:39:68:6c:76:74:51:0e:42:68:
0f:be:6f:6a:90:54:92:36:8a:de:aa:1a:84:d7:0a:e6:0f:03:
35:7b:af:1f:b8:ee:a2:a9:cd:3f:79:c8:2d:c9:ba:18:eb:ba:
40:d2:cc:d5:26:29:0c:79:37:e7:cb:6c:c9:85:68:3d:bf:c2:
76:8c:a3:5e:2b:16:b7:5f:a5:35:82:71:5c:9b:c0:39:b0:22:
d3:82:d0:7c:d1:98:41:48:78:9b:9e:4b:37:30:21:4d:cc:6b:
46:24:70:60:7c:cc:2f:60:45:19:17:26:ca:d6:63:48:80:fb:
bf:88:0b:6d:bc:6c:3e:c2:c8:74:46:55:fe:da:50:f1:6f:39:
2a:cc:ab:00:12:35:13:18:84:ce:a9:7c:87:30:cd:0c:7d:23:
7d:84:cc:5c:89:46:1e:4b:06:fe:15:07:65:a7:19:1d:09:06:
9b:fb:99:78:83:80:f3:0d:1c:c7:61:43:6c:0c:78:2c:ac:b9:
50:02:95:6e:dc:01:54:2c:aa:da:b6:e6:2c:f7:0d:19:94:dc:
18:44:35:1b:af:3d:89:84:9e:ec:a6:6a:bd:1a:ab:25:e2:0c:
1c:ce:08:0e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUDXy9l5OovXJAvoT9e9nKyrP9gJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB
MkQ4Qjg1MjAeFw0yNjAxMjAwMjAyMTZaFw0yNzAxMTkwMjA3MTZaMDMxMTAvBgNV
BAMTKEUwMTBEODlFQTA0NzQxN0EyQjIwQ0Y2NEMyMjg2NzU5ODhDNTFFQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKys9dczcOJPaV8Co56Zzz0dG
Nx6KHxe8TIcb108mCvtC+PxiO33J3YRq3vwvFf2o9bnhBQa4hXQwuhBbLRYi2hvZ
hzHPhczznhcJ871TerrLVKXP7+d/ed4in6kjqc9zspzr3ZdbdEEcVObzVtxZv2Ak
OB57pYHMwDuECge+L5C9mBGluu/Q9BhSvu359X7xfTDlnl5zrnaRHYnjcEQMxChv
hJnAcPYuh+O/Q65jqfLpz5cPOeg8BZPE4QwOok8JoTdWQcAPy7mg1XkBk51Y3Om1
WcXgPxN40Sn33a6QZw3p7FgHoPGJv5kvLmVg0U7hAckOHkTNA/otiXN4vPaLAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU4BDYnqBHQXorIM9kwihnWYjFHrswHwYDVR0j
BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2
RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzY1MTcxNS8xLzMxMzYzNTJlMzEz
MDMxMmUzNzMxMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzNjM1MzAzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAKVlRzANBgkqhkiG9w0BAQsFAAOCAQEAfelfPtgfnjmMCb3MRh0ymfqF
xLKUb4yWyCYnOWhsdnRRDkJoD75vapBUkjaK3qoahNcK5g8DNXuvH7juoqnNP3nI
Lcm6GOu6QNLM1SYpDHk358tsyYVoPb/CdoyjXisWt1+lNYJxXJvAObAi04LQfNGY
QUh4m55LNzAhTcxrRiRwYHzML2BFGRcmytZjSID7v4gLbbxsPsLIdEZV/tpQ8W85
KsyrABI1ExiEzql8hzDNDH0jfYTMXIlGHksG/hUHZacZHQkGm/uZeIOA8w0cx2FD
bAx4LKy5UAKVbtwBVCyq2rbmLPcNGZTcGEQ1G689iYSe7KZqvRqrJeIMHM4IDg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:30:58 2026 by rpki-client