This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3132382e302f32302d3230203d3e203538343636.roa
File: 3130362e37352e3132382e302f32302d3230203d3e203538343636.roa (raw, json)
Hash identifier: g22L82ugI3YqUpIDEY7YpIO0respFjP+SwXzZmqN8Vk=
Subject key identifier: C9:5D:3A:B2:D2:C3:3A:E1:DC:F5:0A:60:04:0A:FE:6B:21:D7:FB:EA
Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial: 76EEF67B0C902ADC3B807512850174D0808AA082
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3132382e302f32302d3230203d3e203538343636.roa
Signing time: Tue 20 Jan 2026 02:10:49 +0000
ROA not before: Tue 20 Jan 2026 02:05:49 +0000
ROA not after: Tue 19 Jan 2027 02:10:49 +0000
asID: 58466
IP address blocks: 106.75.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ee:f6:7b:0c:90:2a:dc:3b:80:75:12:85:01:74:d0:80:8a:a0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Validity
Not Before: Jan 20 02:05:49 2026 GMT
Not After : Jan 19 02:10:49 2027 GMT
Subject: CN=C95D3AB2D2C33AE1DCF50A60040AFE6B21D7FBEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ac:58:e0:dd:49:ad:5c:86:38:2b:e6:65:d3:
fc:68:c9:6e:d9:14:59:34:94:ac:b2:89:48:59:ff:
cf:d2:4e:46:d2:7b:49:63:07:aa:3e:e9:0d:7e:80:
13:01:20:3e:c3:99:f5:f6:6a:bb:a9:d6:13:6f:f1:
e7:45:94:61:c6:c2:ed:f1:3c:29:b6:a7:cf:52:1c:
14:4c:f9:f9:95:d3:61:9e:e9:90:d1:72:ef:80:85:
3d:0e:5b:2a:aa:fb:a3:6c:8e:4a:32:b7:88:bc:9c:
3d:17:6c:62:89:f7:31:3c:b8:aa:28:b6:ae:06:82:
60:d2:d7:ff:3b:0c:6a:f9:42:9f:0b:48:07:dc:4b:
78:06:62:56:c3:a1:f6:1e:ca:6f:86:1e:7b:79:a9:
32:81:02:e4:20:60:13:b8:3e:5f:49:ef:6b:fc:7d:
a4:f9:e4:39:62:37:4b:b9:42:02:b1:8d:1f:21:9b:
64:90:2b:76:4f:27:dc:06:ad:ee:a1:ab:26:42:e5:
e2:c3:e9:d8:a6:76:26:8f:60:f5:e4:ee:35:8f:bc:
0d:1f:1e:c2:39:7d:c3:21:2f:97:7c:43:0b:40:51:
52:69:fc:6b:22:39:b0:c8:3b:80:fb:e5:9c:26:90:
cc:9f:dc:63:33:39:6c:e6:cc:fc:6a:af:a7:bf:02:
63:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5D:3A:B2:D2:C3:3A:E1:DC:F5:0A:60:04:0A:FE:6B:21:D7:FB:EA
X509v3 Authority Key Identifier:
keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3132382e302f32302d3230203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.75.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:59:17:db:88:dd:6c:f4:c8:8a:21:43:d2:af:c7:d3:5e:da:
14:47:1f:87:54:0c:fd:55:b5:53:b8:57:bd:a3:7e:9f:ed:1c:
6e:5c:5d:72:e6:75:d9:f6:40:29:0f:b8:bf:58:73:8a:98:12:
bb:9e:d8:3e:3d:cf:15:bd:aa:a7:1c:0b:7a:f7:31:3d:ae:40:
57:89:3c:71:cf:57:2a:49:b9:94:aa:6e:8f:a2:79:7a:b8:99:
88:a7:6c:d7:94:f4:2e:44:69:d8:a2:9c:96:67:62:03:03:ac:
8a:74:41:d8:a9:f8:ca:af:79:ac:35:08:3a:92:7d:45:a6:7b:
32:06:31:70:b8:e6:2e:9c:6c:93:03:4b:73:bb:09:59:77:39:
c3:15:c0:53:1e:74:e4:8b:a5:c0:12:bb:8d:95:95:27:61:42:
10:7e:3b:21:46:bb:d4:c8:bd:61:46:4c:70:94:48:06:3d:ba:
9c:08:72:ee:83:4b:9c:42:a6:84:da:76:0e:48:cf:e5:a3:10:
f8:e5:7f:2f:4e:e5:c5:28:b2:6f:57:8b:cb:be:a8:a2:f6:c1:
72:4b:ec:6a:1a:3e:5f:6e:c7:7c:b4:2a:7f:d8:85:91:a1:9c:
17:ac:3c:e7:32:bc:03:61:0e:91:8e:c8:30:d3:be:21:0a:2a:
eb:08:84:5f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUdu72ewyQKtw7gHUShQF00ICKoIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB
OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDlaFw0yNzAxMTkwMjEwNDlaMDMxMTAvBgNV
BAMTKEM5NUQzQUIyRDJDMzNBRTFEQ0Y1MEE2MDA0MEFGRTZCMjFEN0ZCRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrFjg3UmtXIY4K+Zl0/xoyW7Z
FFk0lKyyiUhZ/8/STkbSe0ljB6o+6Q1+gBMBID7DmfX2arup1hNv8edFlGHGwu3x
PCm2p89SHBRM+fmV02Ge6ZDRcu+AhT0OWyqq+6Nsjkoyt4i8nD0XbGKJ9zE8uKoo
tq4GgmDS1/87DGr5Qp8LSAfcS3gGYlbDofYeym+GHnt5qTKBAuQgYBO4Pl9J72v8
faT55DliN0u5QgKxjR8hm2SQK3ZPJ9wGre6hqyZC5eLD6dimdiaPYPXk7jWPvA0f
HsI5fcMhL5d8QwtAUVJp/GsiObDIO4D75ZwmkMyf3GMzOWzmzPxqr6e/AmPlAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUyV06stLDOuHc9QpgBAr+ayHX++owHwYDVR0j
BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4
MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDU4OTE4Ny8wLzMxMzAzNjJlMzcz
NTJlMzEzMjM4MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzODM0MzYzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBGpLgDANBgkqhkiG9w0BAQsFAAOCAQEAO1kX24jdbPTIiiFD0q/H017a
FEcfh1QM/VW1U7hXvaN+n+0cblxdcuZ12fZAKQ+4v1hzipgSu57YPj3PFb2qpxwL
evcxPa5AV4k8cc9XKkm5lKpuj6J5eriZiKds15T0LkRp2KKclmdiAwOsinRB2Kn4
yq95rDUIOpJ9RaZ7MgYxcLjmLpxskwNLc7sJWXc5wxXAUx505IulwBK7jZWVJ2FC
EH47IUa71Mi9YUZMcJRIBj26nAhy7oNLnEKmhNp2DkjP5aMQ+OV/L07lxSiyb1eL
y76oovbBckvsaho+X27HfLQqf9iFkaGcF6w85zK8A2EOkY7IMNO+IQoq6wiEXw==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:22:11 2026 by rpki-client