This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3230382e302f32302d3230203d3e203137363231.roa File: 3130362e37352e3230382e302f32302d3230203d3e203137363231.roa (raw, json) Hash identifier: 1a6LkWDU+6OnmTd8ubptv9wkm9Noxzf9QQIf2Jh6PoE= Subject key identifier: C3:AD:A1:C5:FF:C0:0C:D2:DD:D1:F2:B5:30:74:C1:10:46:DE:79:F6 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 260739A1AA74AFCFA8AA8F84D3B1E6E6F8004EEB Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3230382e302f32302d3230203d3e203137363231.roa Signing time: Tue 20 Jan 2026 02:10:51 +0000 ROA not before: Tue 20 Jan 2026 02:05:51 +0000 ROA not after: Tue 19 Jan 2027 02:10:51 +0000 asID: 17621 IP address blocks: 106.75.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:07:39:a1:aa:74:af:cf:a8:aa:8f:84:d3:b1:e6:e6:f8:00:4e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:51 2026 GMT Not After : Jan 19 02:10:51 2027 GMT Subject: CN=C3ADA1C5FFC00CD2DDD1F2B53074C11046DE79F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:02:35:72:a5:c0:f7:33:fc:d3:ba:b0:47: 2f:fb:2a:50:12:21:ca:07:bb:d5:b6:1f:b5:2d:d1: 14:e7:ef:7f:93:db:df:92:56:8a:d5:a6:b2:a2:91: e0:49:72:05:4f:b0:b4:7b:05:07:38:c3:a9:da:05: 98:3b:8f:7d:71:0e:ad:46:b0:be:a3:a9:e6:12:ba: 57:d6:ef:15:4c:6b:76:db:d8:71:4a:b5:0f:94:aa: 8a:ae:37:8e:51:6e:c4:b1:cf:a0:7e:a5:86:1e:63: 32:10:25:46:6e:0f:c8:36:7f:f9:07:b7:f8:f1:06: be:e1:14:31:cf:05:12:54:4f:f4:14:b2:72:07:5c: 91:6d:f0:a7:0b:42:1f:fe:78:a3:31:11:14:fd:e3: d6:55:72:45:95:75:bd:3c:7a:a1:ec:38:af:6d:66: 38:84:67:c8:ef:65:d7:c7:34:c2:0c:e3:a4:75:db: e1:17:23:98:81:d3:11:e4:54:cc:fe:ab:eb:e2:88: 7b:02:33:5c:35:34:c7:be:2e:8d:c2:37:f6:dd:b5: e8:ec:cb:26:cb:41:1a:08:6e:4f:31:2b:6f:3b:33: 6a:54:b9:5f:fb:39:ff:5f:35:37:12:25:ac:4b:73: 42:a2:cd:14:0e:26:4a:be:01:9b:71:71:7e:87:53: 7b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AD:A1:C5:FF:C0:0C:D2:DD:D1:F2:B5:30:74:C1:10:46:DE:79:F6 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3230382e302f32302d3230203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.75.208.0/20 Signature Algorithm: sha256WithRSAEncryption d9:2f:b8:43:a8:84:10:d4:d2:59:d4:4f:30:e4:b3:c4:7a:29: 25:e4:f3:02:30:dc:57:ed:6e:04:1c:aa:a8:5f:96:05:84:51: ea:4a:ff:6d:21:7e:4f:cc:27:3a:6a:38:a8:26:54:5f:93:9e: 60:6b:99:40:e8:0f:f5:55:2d:eb:0a:53:73:3f:66:5c:df:8a: 20:98:b2:63:2f:62:c1:37:ca:4f:3f:57:1c:04:e7:fd:44:79: 47:ca:84:d4:ba:4e:1e:42:71:2b:ae:69:6f:d2:c1:b6:f6:d5: 23:46:29:0e:18:1a:95:19:29:6f:f5:3d:94:d7:c9:95:1b:a6: 27:c2:67:1d:b6:0f:f2:0b:6c:b0:94:e6:d7:79:31:94:5c:a0: 84:e7:91:98:c1:1a:c6:c5:52:8c:0a:92:12:80:af:68:2e:c5: cd:9f:b5:41:35:a1:d1:0f:b1:15:f3:10:04:fa:56:02:fc:03: b1:e8:8f:4f:50:55:82:0a:a0:23:af:7b:03:df:6e:b6:51:57: 87:02:46:e8:26:58:55:74:a3:6d:7a:50:4d:63:17:dc:ba:17: 82:d9:ed:08:19:00:73:3a:51:7a:1a:fc:e0:6f:ea:65:b6:6e: fd:89:da:de:10:7d:32:64:c9:f5:38:7f:4e:13:65:9c:40:45: 23:58:af:3c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJgc5oap0r8+oqo+E07Hm5vgATuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NTFaFw0yNzAxMTkwMjEwNTFaMDMxMTAvBgNV BAMTKEMzQURBMUM1RkZDMDBDRDJEREQxRjJCNTMwNzRDMTEwNDZERTc5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzAI1cqXA9zP807qwRy/7KlAS IcoHu9W2H7Ut0RTn73+T29+SVorVprKikeBJcgVPsLR7BQc4w6naBZg7j31xDq1G sL6jqeYSulfW7xVMa3bb2HFKtQ+UqoquN45RbsSxz6B+pYYeYzIQJUZuD8g2f/kH t/jxBr7hFDHPBRJUT/QUsnIHXJFt8KcLQh/+eKMxERT949ZVckWVdb08eqHsOK9t ZjiEZ8jvZdfHNMIM46R12+EXI5iB0xHkVMz+q+viiHsCM1w1NMe+Lo3CN/bdtejs yybLQRoIbk8xK287M2pUuV/7Of9fNTcSJaxLc0KizRQOJkq+AZtxcX6HU3tvAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUw62hxf/ADNLd0fK1MHTBEEbeefYwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDU4OTE4Ny8wLzMxMzAzNjJlMzcz NTJlMzIzMDM4MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzNzM2MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBGpL0DANBgkqhkiG9w0BAQsFAAOCAQEA2S+4Q6iEENTSWdRPMOSzxHop JeTzAjDcV+1uBByqqF+WBYRR6kr/bSF+T8wnOmo4qCZUX5OeYGuZQOgP9VUt6wpT cz9mXN+KIJiyYy9iwTfKTz9XHATn/UR5R8qE1LpOHkJxK65pb9LBtvbVI0YpDhga lRkpb/U9lNfJlRumJ8JnHbYP8gtssJTm13kxlFyghOeRmMEaxsVSjAqSEoCvaC7F zZ+1QTWh0Q+xFfMQBPpWAvwDseiPT1BVggqgI697A99utlFXhwJG6CZYVXSjbXpQ TWMX3LoXgtntCBkAczpRehr84G/qZbZu/Yna3hB9MmTJ9Th/ThNlnEBFI1ivPA== -----END CERTIFICATE-----Generated at Wed Jan 21 04:22:16 2026 by rpki-client