This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3137362e302f32302d3230203d3e203538343636.roa
File: 3130362e37352e3137362e302f32302d3230203d3e203538343636.roa (raw, json)
Hash identifier: vnxh5j4iy/xRpcsh8UAsIAX0F1EQLtGTl8U1KZU4mSg=
Subject key identifier: D9:7C:17:26:5F:19:88:22:D7:3E:56:88:62:D7:8F:5F:56:A7:E7:69
Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial: 453A17D4315874FB2102198041EBEA4917F0B2CE
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3137362e302f32302d3230203d3e203538343636.roa
Signing time: Tue 20 Jan 2026 02:10:49 +0000
ROA not before: Tue 20 Jan 2026 02:05:49 +0000
ROA not after: Tue 19 Jan 2027 02:10:49 +0000
asID: 58466
IP address blocks: 106.75.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:3a:17:d4:31:58:74:fb:21:02:19:80:41:eb:ea:49:17:f0:b2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Validity
Not Before: Jan 20 02:05:49 2026 GMT
Not After : Jan 19 02:10:49 2027 GMT
Subject: CN=D97C17265F198822D73E568862D78F5F56A7E769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:72:9d:ec:ec:ee:b4:ac:cb:f6:c5:b8:75:
46:1a:6c:1f:b9:57:c9:90:3b:ff:b6:33:bf:0c:49:
7a:98:72:fd:6f:9c:08:b7:80:3f:3b:33:b9:59:3a:
58:78:31:11:5a:f6:98:ff:63:25:12:2c:8b:7b:5c:
bb:72:70:64:c5:fb:19:83:63:77:bc:e5:ee:e1:a6:
e0:be:ab:ee:66:bb:2e:3f:66:9f:5a:7b:85:29:ac:
55:50:6c:e7:57:a0:9c:89:1f:4c:f7:10:9c:83:36:
4a:af:34:fd:46:7a:7a:b3:e5:c5:af:1a:92:ac:f1:
fe:b1:09:b2:5c:79:17:74:d0:96:99:97:e7:3e:05:
7b:6c:b2:50:b7:88:4f:0b:a5:3a:70:79:3d:43:18:
6a:5c:b3:d0:46:98:08:67:30:f8:8a:79:8b:ca:c1:
ee:61:05:56:51:55:e6:89:60:4a:c2:be:0d:10:c0:
0f:ec:7f:48:f8:dd:dc:58:7a:81:3a:ff:c6:65:1b:
4e:d3:4f:cc:9a:b6:cb:74:50:88:65:20:e3:44:56:
e5:86:4c:45:17:d1:3d:07:8b:9f:70:11:12:f5:1c:
ff:a3:a4:53:2c:1b:e3:30:73:04:0a:27:dc:47:b9:
07:e8:94:5a:3a:ce:13:49:b8:5b:62:6f:38:e0:7b:
18:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7C:17:26:5F:19:88:22:D7:3E:56:88:62:D7:8F:5F:56:A7:E7:69
X509v3 Authority Key Identifier:
keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3137362e302f32302d3230203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.75.176.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:4e:e4:0e:47:60:ad:86:94:20:f6:47:79:fa:4c:53:97:39:
18:b5:f3:7a:86:ee:e9:9f:e0:bc:b6:21:e1:9e:95:ae:95:e2:
ee:db:76:be:74:e3:b7:f0:7b:64:aa:f8:f7:5d:e5:c2:3b:cb:
22:58:f4:e8:7a:9d:55:6f:af:93:76:87:8b:50:41:0e:27:c2:
3b:29:e4:47:c3:76:54:c2:56:da:49:b0:64:a0:7c:a9:62:83:
35:fa:5a:66:a6:78:28:e6:39:40:9b:c5:8c:91:fb:e6:cb:78:
ee:e7:d1:e8:a2:b5:34:a7:96:f3:1b:7b:68:14:e9:d1:73:77:
a4:ce:a7:a2:d3:88:56:21:33:ab:8b:ba:70:e5:4e:ea:0f:6d:
cc:e0:38:a5:0b:62:48:c5:8d:af:e2:f6:9d:e0:ce:fb:23:bf:
cb:c5:3b:fd:d9:b6:5d:e3:5c:3a:99:2a:a9:ce:93:39:02:be:
ad:b1:dd:b9:c7:62:d2:c5:a2:dc:86:0c:f9:e2:ca:9a:58:23:
67:cf:90:2c:2f:14:01:ef:6e:34:7e:87:15:fd:9d:c5:55:32:
69:57:c1:16:64:67:90:78:ba:79:48:92:59:84:f6:5b:ce:69:
1d:9f:b7:0f:63:0a:87:89:17:c2:c0:3a:9d:7d:fd:6b:77:9a:
45:0b:39:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:23:21 2026 by rpki-client