This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e302e302f31392d3139203d3e2034383038.roa File: 3130362e37352e302e302f31392d3139203d3e2034383038.roa (raw, json) Hash identifier: /VHBiWB3bo74q7ryXMjm6+Gt+aIer3whFKovK6YgcKE= Subject key identifier: B4:F1:D8:87:BF:03:BB:BB:F8:AB:DF:31:3E:C8:B0:95:6D:70:8F:22 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 72CD1871F3F289287FD1BCE92DE73849B24C168B Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e302e302f31392d3139203d3e2034383038.roa Signing time: Tue 20 Jan 2026 02:10:48 +0000 ROA not before: Tue 20 Jan 2026 02:05:48 +0000 ROA not after: Tue 19 Jan 2027 02:10:48 +0000 asID: 4808 IP address blocks: 106.75.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:cd:18:71:f3:f2:89:28:7f:d1:bc:e9:2d:e7:38:49:b2:4c:16:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:48 2026 GMT Not After : Jan 19 02:10:48 2027 GMT Subject: CN=B4F1D887BF03BBBBF8ABDF313EC8B0956D708F22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:20:9d:65:75:d7:f0:0e:cb:7b:71:06:30:cf: 27:f4:5b:37:a3:a2:42:05:a4:86:ce:72:01:08:c8: 54:09:29:ef:13:e6:48:04:97:f4:0b:8d:e7:ee:8c: 91:6d:11:c5:f2:9c:86:26:72:27:e4:a2:65:a6:15: b5:66:8d:20:80:95:3d:1c:2b:45:d0:04:dd:e5:5e: d0:39:ef:11:53:41:99:d1:aa:ec:62:47:0f:dd:72: a0:27:4d:76:ad:aa:f7:6a:57:02:00:5f:d4:09:4c: 57:9e:62:cd:7b:db:5f:0d:49:02:ce:25:44:f2:c7: ff:ee:23:e0:f5:23:5a:98:03:30:c8:05:e6:dc:4f: 18:31:dc:88:7a:41:04:90:8b:fa:90:62:88:12:11: b3:8e:15:dd:82:b1:1a:40:db:1e:f9:4e:30:72:7b: 29:d6:5b:b3:b7:26:d0:d1:37:85:8f:01:97:80:df: 2c:a8:1e:0e:52:a4:60:95:4e:7c:27:79:7f:29:4b: c6:0b:bd:87:f3:84:71:4c:5f:99:bd:9d:5a:3f:f0: 92:06:ac:03:06:49:92:42:fb:50:d7:6b:90:49:e0: 3c:ab:50:18:10:0f:87:07:ce:d6:6f:d7:8d:1d:29: 00:67:86:7a:33:5c:0f:0c:04:6b:71:d6:87:e3:0f: 2d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F1:D8:87:BF:03:BB:BB:F8:AB:DF:31:3E:C8:B0:95:6D:70:8F:22 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e302e302f31392d3139203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.75.0.0/19 Signature Algorithm: sha256WithRSAEncryption e5:b5:e9:2b:a2:56:7d:8d:71:b7:f1:9a:80:f7:01:ee:4d:d9: a3:91:ac:3e:1d:66:fb:09:d0:d8:30:1a:cc:0b:ce:be:5f:5f: b7:1d:3d:3b:ac:94:0d:07:ef:f1:b8:c8:26:94:34:03:7c:4c: 89:f6:8b:cb:8c:29:bd:ee:f5:62:0c:1d:4c:5a:76:a2:19:68: 72:48:af:a6:47:b9:c1:6b:2c:53:80:32:c3:6c:a6:5e:48:2e: 2a:9c:a4:da:ab:ef:a0:b2:81:90:3b:89:58:41:04:ab:72:68: a1:ae:18:97:96:04:a2:8b:8f:78:a2:a2:ea:5e:0e:28:17:8b: e4:c2:79:b4:63:22:cb:d0:d0:3e:75:6b:de:92:ad:83:ce:8b: 60:79:40:36:32:58:7c:cf:3c:70:79:be:50:72:c3:12:33:ab: a3:24:92:e6:c0:1d:b1:ba:60:a9:72:f3:3a:4c:74:f5:74:92: d7:76:19:89:61:62:e8:b9:38:d9:39:72:96:47:4e:b1:e9:a8: 85:a5:87:b7:a5:0c:1e:00:12:37:72:ff:50:2c:b1:ea:1d:1f: dd:9a:a3:25:3e:8a:df:9b:38:00:d8:95:92:2c:f6:10:6e:6e: 50:0a:b7:a7:d0:15:a6:fe:b9:67:35:63:92:de:a8:f6:f7:f9: c6:64:e0:bf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUcs0YcfPyiSh/0bzpLec4SbJMFoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDhaFw0yNzAxMTkwMjEwNDhaMDMxMTAvBgNV BAMTKEI0RjFEODg3QkYwM0JCQkJGOEFCREYzMTNFQzhCMDk1NkQ3MDhGMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtIJ1lddfwDst7cQYwzyf0Wzej okIFpIbOcgEIyFQJKe8T5kgEl/QLjefujJFtEcXynIYmcifkomWmFbVmjSCAlT0c K0XQBN3lXtA57xFTQZnRquxiRw/dcqAnTXatqvdqVwIAX9QJTFeeYs17218NSQLO JUTyx//uI+D1I1qYAzDIBebcTxgx3Ih6QQSQi/qQYogSEbOOFd2CsRpA2x75TjBy eynWW7O3JtDRN4WPAZeA3yyoHg5SpGCVTnwneX8pS8YLvYfzhHFMX5m9nVo/8JIG rAMGSZJC+1DXa5BJ4DyrUBgQD4cHztZv140dKQBnhnozXA8MBGtx1ofjDy1LAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUtPHYh78Du7v4q98xPsiwlW1wjyIwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMDM2MmUzNzM1 MmUzMDJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDM0MzgzMDM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF aksAMA0GCSqGSIb3DQEBCwUAA4IBAQDltekrolZ9jXG38ZqA9wHuTdmjkaw+HWb7 CdDYMBrMC86+X1+3HT07rJQNB+/xuMgmlDQDfEyJ9ovLjCm97vViDB1MWnaiGWhy SK+mR7nBayxTgDLDbKZeSC4qnKTaq++gsoGQO4lYQQSrcmihrhiXlgSii494oqLq Xg4oF4vkwnm0YyLL0NA+dWvekq2DzotgeUA2Mlh8zzxweb5QcsMSM6ujJJLmwB2x umCpcvM6THT1dJLXdhmJYWLouTjZOXKWR06x6aiFpYe3pQweABI3cv9QLLHqHR/d mqMlPorfmzgA2JWSLPYQbm5QCren0BWm/rlnNWOS3qj29/nGZOC/ -----END CERTIFICATE-----Generated at Wed Jan 21 04:22:15 2026 by rpki-client