This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3134342e302f32302d3230203d3e203538343636.roa File: 3130362e37352e3134342e302f32302d3230203d3e203538343636.roa (raw, json) Hash identifier: O/Xj9j3lTUQqyHRRxPuSeaOXmhA+8FDWeJk9AWab6t0= Subject key identifier: 16:16:77:F4:51:9C:98:EA:82:7F:C8:F5:29:D7:2A:19:52:AA:BC:00 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 609318E5621A8D8DB7B5ADEBE97CFA4FD99F2136 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3134342e302f32302d3230203d3e203538343636.roa Signing time: Tue 20 Jan 2026 02:10:47 +0000 ROA not before: Tue 20 Jan 2026 02:05:47 +0000 ROA not after: Tue 19 Jan 2027 02:10:47 +0000 asID: 58466 IP address blocks: 106.75.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:93:18:e5:62:1a:8d:8d:b7:b5:ad:eb:e9:7c:fa:4f:d9:9f:21:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:47 2026 GMT Not After : Jan 19 02:10:47 2027 GMT Subject: CN=161677F4519C98EA827FC8F529D72A1952AABC00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e4:65:19:57:7c:d8:d4:ef:69:9a:6d:dd:d8: c1:8a:1f:f1:a1:bb:74:b7:8b:9f:3b:76:06:7b:a1: 7d:fa:02:c3:3c:6e:43:59:07:3d:de:46:d5:b3:df: 6f:0e:82:aa:69:dc:66:4a:c2:b9:22:36:06:79:77: 20:5b:9f:8e:7a:2c:6f:c0:be:28:f4:df:fd:a1:bf: b3:e6:66:f3:94:4e:e1:7b:6f:d3:64:31:1c:b8:1d: b5:a3:65:fa:5e:4d:ca:f0:74:84:08:f5:69:c2:23: 11:06:e6:90:1d:13:15:b8:ad:15:14:23:b3:0c:2a: 0f:18:a7:97:87:36:10:1f:08:1b:69:2d:64:a8:fa: e5:00:6a:78:97:d8:79:38:f6:76:9d:50:45:e2:3a: 71:92:46:f4:4b:21:65:2a:27:08:63:da:4e:25:03: d2:48:3a:15:c7:1f:e6:a5:b4:60:8e:7d:ec:5c:14: f9:41:54:66:f8:39:d9:fd:a4:bf:8a:fc:1f:2e:4f: 39:75:b1:db:29:0f:86:c3:e6:90:f6:90:0c:48:f7: 5b:e6:38:0d:50:79:9b:49:1e:b2:f4:3e:6f:9b:30: 9b:31:2b:04:e2:02:3c:44:f7:a1:46:d6:c1:5c:c8: 0a:a0:65:9d:a7:33:e5:a1:5e:73:83:c8:a5:95:30: e5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:16:77:F4:51:9C:98:EA:82:7F:C8:F5:29:D7:2A:19:52:AA:BC:00 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3134342e302f32302d3230203d3e203538343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.75.144.0/20 Signature Algorithm: sha256WithRSAEncryption 95:30:2f:d6:c1:db:d4:27:6a:1e:24:72:a4:f2:50:cc:d7:21: 00:6d:d4:fb:47:19:46:08:58:fb:59:b4:9c:e0:ff:92:2a:20: 2b:52:95:d3:50:64:3f:75:0d:9c:6d:a5:7d:9f:c6:1f:b3:b5: 2c:b9:88:7d:b0:95:3e:f4:83:a5:d4:d0:d3:47:81:38:f7:b4: 65:e3:b0:53:03:92:ff:25:d9:ad:13:5d:7e:99:4a:8d:77:ec: 61:dd:1f:d6:7d:07:bb:2e:4c:92:5c:59:06:52:95:db:6c:0b: 4f:e1:9d:16:7b:e1:3c:a2:f0:b3:75:d3:05:29:84:61:d8:01: 25:89:23:cb:36:8f:b1:ed:f5:26:58:99:54:f5:32:c3:60:a0: cf:01:c8:ba:f5:43:76:ff:24:1a:c2:78:df:4b:2a:0b:8d:87: bc:c6:e2:29:ef:d7:5d:75:3f:25:70:63:4c:56:bf:dd:83:f7: de:7c:d6:df:49:e7:7f:5f:8a:49:8a:b0:78:67:db:08:c3:18: a3:50:82:ac:07:75:b5:30:f1:ac:67:71:bf:3c:8e:04:c9:b2: f1:eb:74:24:e4:8f:f3:e5:4c:61:72:cf:82:fc:12:43:76:8f: c9:67:8d:e3:0e:39:f4:fc:e0:7a:4f:7d:f2:e3:3b:54:84:62: 0b:ca:d4:14 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUYJMY5WIajY23ta3r6Xz6T9mfITYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDdaFw0yNzAxMTkwMjEwNDdaMDMxMTAvBgNV BAMTKDE2MTY3N0Y0NTE5Qzk4RUE4MjdGQzhGNTI5RDcyQTE5NTJBQUJDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi5GUZV3zY1O9pmm3d2MGKH/Gh u3S3i587dgZ7oX36AsM8bkNZBz3eRtWz328Ogqpp3GZKwrkiNgZ5dyBbn456LG/A vij03/2hv7PmZvOUTuF7b9NkMRy4HbWjZfpeTcrwdIQI9WnCIxEG5pAdExW4rRUU I7MMKg8Yp5eHNhAfCBtpLWSo+uUAaniX2Hk49nadUEXiOnGSRvRLIWUqJwhj2k4l A9JIOhXHH+altGCOfexcFPlBVGb4Odn9pL+K/B8uTzl1sdspD4bD5pD2kAxI91vm OA1QeZtJHrL0Pm+bMJsxKwTiAjxE96FG1sFcyAqgZZ2nM+WhXnODyKWVMOW7AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUFhZ39FGcmOqCf8j1KdcqGVKqvAAwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDU4OTE4Ny8wLzMxMzAzNjJlMzcz NTJlMzEzNDM0MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzODM0MzYzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBGpLkDANBgkqhkiG9w0BAQsFAAOCAQEAlTAv1sHb1CdqHiRypPJQzNch AG3U+0cZRghY+1m0nOD/kiogK1KV01BkP3UNnG2lfZ/GH7O1LLmIfbCVPvSDpdTQ 00eBOPe0ZeOwUwOS/yXZrRNdfplKjXfsYd0f1n0Huy5MklxZBlKV22wLT+GdFnvh PKLws3XTBSmEYdgBJYkjyzaPse31JliZVPUyw2CgzwHIuvVDdv8kGsJ430sqC42H vMbiKe/XXXU/JXBjTFa/3YP33nzW30nnf1+KSYqweGfbCMMYo1CCrAd1tTDxrGdx vzyOBMmy8et0JOSP8+VMYXLPgvwSQ3aPyWeN4w459Pzgek998uM7VIRiC8rUFA== -----END CERTIFICATE-----Generated at Wed Jan 21 04:22:47 2026 by rpki-client