This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548091394/0/3131352e33312e36382e302f32322d3234203d3e2034313334.roa
File: 3131352e33312e36382e302f32322d3234203d3e2034313334.roa (raw, json)
Hash identifier: wiABJMCaF79W5EEi2xfEeLU6IA1XQuc2FhncQSa3p3s=
Subject key identifier: AA:ED:96:BE:38:A9:31:77:B1:A7:9F:2C:9F:DD:32:8F:17:3C:34:D1
Certificate issuer: /CN=76A37FE81BADF4B4BF90B4C81A85E56ACB366710
Certificate serial: 343CFCEDE02654ACD76890A29476999880AC27CF
Authority key identifier: 76:A3:7F:E8:1B:AD:F4:B4:BF:90:B4:C8:1A:85:E5:6A:CB:36:67:10
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/3131352e33312e36382e302f32322d3234203d3e2034313334.roa
Signing time: Tue 20 Jan 2026 02:13:05 +0000
ROA not before: Tue 20 Jan 2026 02:08:05 +0000
ROA not after: Tue 19 Jan 2027 02:13:05 +0000
asID: 4134
IP address blocks: 115.31.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:3c:fc:ed:e0:26:54:ac:d7:68:90:a2:94:76:99:98:80:ac:27:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76A37FE81BADF4B4BF90B4C81A85E56ACB366710
Validity
Not Before: Jan 20 02:08:05 2026 GMT
Not After : Jan 19 02:13:05 2027 GMT
Subject: CN=AAED96BE38A93177B1A79F2C9FDD328F173C34D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4d:2a:62:65:8e:0a:58:4a:35:80:b5:9d:b3:
b8:cb:ca:fe:5e:4a:14:10:ad:71:6c:2b:68:f8:13:
c6:38:57:8d:36:95:0b:c1:b5:84:43:ba:ed:4b:aa:
62:93:92:da:0c:95:d3:0e:1d:4b:76:e7:66:05:78:
86:46:4c:19:b7:c1:40:71:37:84:65:59:84:3c:cb:
9d:bb:6c:d0:78:da:8a:a7:df:e4:62:5a:59:eb:88:
d4:30:b0:43:26:d4:93:28:e1:23:70:89:b8:7a:1c:
54:bc:1b:8f:b0:a7:e1:b5:25:90:9d:cc:13:8a:84:
26:ca:bc:41:b9:5c:eb:ac:10:ad:eb:63:d5:d2:0d:
44:28:bf:2a:cf:ce:5a:63:80:06:82:f1:3b:2c:ac:
73:de:be:48:e6:b2:77:b1:a9:04:50:1c:9f:6c:6f:
89:ad:34:f2:07:6e:19:37:e2:9c:49:b6:d5:cd:94:
c7:a5:3a:dc:0a:c9:8c:94:63:de:7b:ca:58:84:00:
0f:39:fd:46:45:26:b9:53:f8:13:95:b5:61:e2:c4:
34:3f:cd:d6:f6:44:08:d5:6e:92:96:bb:24:8b:fa:
b7:2b:e4:d7:5f:47:dc:7d:f1:86:6f:6e:b7:d6:e6:
32:2c:7d:11:b5:9c:2e:22:1f:a4:c0:c5:37:96:4d:
b5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:ED:96:BE:38:A9:31:77:B1:A7:9F:2C:9F:DD:32:8F:17:3C:34:D1
X509v3 Authority Key Identifier:
keyid:76:A3:7F:E8:1B:AD:F4:B4:BF:90:B4:C8:1A:85:E5:6A:CB:36:67:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/3131352e33312e36382e302f32322d3234203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.31.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:4d:26:6b:e1:b3:42:b0:39:a2:51:39:d0:6e:f0:74:82:30:
61:dc:11:49:10:82:38:48:31:07:d5:c8:25:46:98:82:20:09:
00:00:c8:26:b8:b7:ef:50:3e:36:09:89:f6:cf:86:c5:c5:91:
f6:cd:8d:d5:3a:1e:f1:bb:9f:0d:fe:c7:10:b0:f3:da:4f:e5:
32:47:4f:92:51:8b:42:e9:7f:f0:18:35:38:4d:03:c5:9d:6f:
d2:86:b0:67:6d:a8:0e:11:be:9c:73:2b:ff:90:95:6d:79:da:
03:14:c0:28:7a:3d:00:4e:de:fd:3e:a9:d4:b3:a4:76:47:b6:
60:ed:05:e4:4a:31:a3:5d:6f:eb:f6:19:f9:ab:d7:58:1f:d7:
45:d6:14:91:13:ec:08:a0:c5:5a:57:03:a9:0a:2b:6f:ea:1c:
51:d4:13:b0:c9:d7:cc:a4:52:32:ad:0f:cd:6d:c4:dc:46:8b:
2a:72:76:ba:d9:73:9d:71:04:52:ce:7f:0f:12:76:1f:2c:30:
f9:ad:f2:ae:25:48:24:a8:88:23:27:74:56:66:2d:38:a7:64:
93:c7:4a:c1:27:cd:59:89:b4:20:3b:78:c1:54:ce:de:9d:e9:
fb:51:d0:bd:d2:89:aa:96:a6:97:34:44:8f:07:3f:9b:0a:b6:
03:b1:61:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:12:38 2026 by rpki-client