This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3132382e302f32302d3230203d3e203539303737.roa
File: 3130362e37352e3132382e302f32302d3230203d3e203539303737.roa (raw, json)
Hash identifier: JlXgzyXzDCBCQD6SB6hXITg8bQU8+06flKUpacXfVHQ=
Subject key identifier: 44:CA:DC:6A:16:CC:6F:D4:3B:1D:27:7B:D9:54:D0:45:7C:E6:E0:1C
Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial: 475A19E063AF77F338D000C26AF816DB648B4D54
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3132382e302f32302d3230203d3e203539303737.roa
Signing time: Tue 20 Jan 2026 02:10:49 +0000
ROA not before: Tue 20 Jan 2026 02:05:49 +0000
ROA not after: Tue 19 Jan 2027 02:10:49 +0000
asID: 59077
IP address blocks: 106.75.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:5a:19:e0:63:af:77:f3:38:d0:00:c2:6a:f8:16:db:64:8b:4d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Validity
Not Before: Jan 20 02:05:49 2026 GMT
Not After : Jan 19 02:10:49 2027 GMT
Subject: CN=44CADC6A16CC6FD43B1D277BD954D0457CE6E01C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:d2:67:09:ee:0a:38:ed:49:84:2d:17:5f:
b1:23:12:68:fa:8b:80:cc:2a:63:18:be:56:11:98:
b0:e7:a4:cd:e4:69:fa:b8:fe:5c:bb:29:c5:0f:c3:
b4:88:99:a3:f8:89:8d:66:70:37:74:b1:6c:eb:02:
a7:e9:ce:3f:18:c9:1f:39:90:b5:3f:7c:82:3a:80:
00:83:7f:bf:3f:3a:5b:fe:35:23:3c:9a:7c:a0:f9:
95:6a:0d:8c:5a:55:45:b5:bc:6e:91:d5:3b:d9:3e:
27:2e:ee:14:82:bf:75:78:58:cc:b0:7f:98:9b:85:
19:b0:e0:0f:4a:16:97:c7:fe:65:54:0a:af:33:31:
76:88:70:78:e5:b9:aa:4f:35:be:db:ae:76:67:2b:
5f:83:c4:66:c7:21:20:01:0e:5e:41:ac:04:06:8d:
4f:64:e9:8c:71:a4:54:f9:c9:d5:cf:f5:ca:69:a8:
72:8d:98:43:e4:a3:7d:69:d1:82:8c:14:d3:48:8d:
12:fc:f0:58:1c:13:f3:bd:b5:e6:21:e1:8e:5e:49:
6d:0e:2e:d4:a8:59:50:36:58:92:a5:cb:7f:b1:d4:
01:7a:a3:a9:f6:be:ac:94:1b:eb:d0:11:6c:7b:6e:
a7:ba:d7:d2:33:f5:97:f2:aa:9f:9e:bd:a9:d0:ec:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CA:DC:6A:16:CC:6F:D4:3B:1D:27:7B:D9:54:D0:45:7C:E6:E0:1C
X509v3 Authority Key Identifier:
keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3132382e302f32302d3230203d3e203539303737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.75.128.0/20
Signature Algorithm: sha256WithRSAEncryption
c1:ec:67:14:96:d7:b6:b9:7b:f5:49:30:dc:2d:a0:71:cd:72:
12:50:16:7e:d5:3c:12:85:02:d5:e7:d8:d4:b5:28:3e:d7:40:
ea:c0:14:b8:a0:51:24:c0:1a:3b:d5:2c:51:2a:dd:ad:91:89:
99:f0:aa:55:f5:d7:9d:b0:dc:b6:a3:33:c0:bc:23:a2:ce:d4:
c4:84:62:a2:23:ab:8d:bd:af:88:e1:95:52:3f:e0:cf:3a:d1:
a1:02:fd:5e:09:b9:af:93:16:a9:e9:13:dd:66:99:4a:36:94:
0f:c4:33:71:0b:dd:0d:b2:dc:2a:f7:3f:26:ba:85:d3:5b:80:
ad:9f:54:32:10:56:89:06:20:ee:3f:65:44:97:e9:1e:1e:89:
86:07:67:c0:c2:aa:ef:ec:58:2a:14:cb:34:22:04:9e:7b:b1:
3e:54:02:ed:43:24:e2:32:65:b4:aa:b7:41:2e:10:a0:29:b8:
a2:c5:11:61:6c:47:d0:01:5f:e2:ce:db:e5:43:e0:22:eb:2f:
7b:3d:53:a0:f3:7e:09:b0:f1:75:8b:4f:c3:99:e0:11:f7:a6:
66:69:6c:47:5f:2c:12:12:23:12:51:4b:14:31:83:da:ce:b5:
29:61:77:4a:6f:9c:d3:f5:22:12:5d:69:13:54:ed:05:4f:4b:
d7:66:ee:28
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:22:45 2026 by rpki-client