This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3230382e302f32302d3230203d3e2034383131.roa File: 3130362e37352e3230382e302f32302d3230203d3e2034383131.roa (raw, json) Hash identifier: OkGd9biIMF9Eo5sU1PxRRr8oX16CmZV7JqBXAS9+ZXw= Subject key identifier: F7:5B:2A:50:2D:68:E8:76:64:E3:99:C3:02:EA:0F:C9:FC:58:B6:98 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 78341ECE435D801D02F3D5F5B7F40023505DD2C1 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3230382e302f32302d3230203d3e2034383131.roa Signing time: Tue 20 Jan 2026 02:10:46 +0000 ROA not before: Tue 20 Jan 2026 02:05:46 +0000 ROA not after: Tue 19 Jan 2027 02:10:46 +0000 asID: 4811 IP address blocks: 106.75.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:34:1e:ce:43:5d:80:1d:02:f3:d5:f5:b7:f4:00:23:50:5d:d2:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:46 2026 GMT Not After : Jan 19 02:10:46 2027 GMT Subject: CN=F75B2A502D68E87664E399C302EA0FC9FC58B698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2b:4d:7d:df:c0:c9:ee:b1:2f:a4:0b:8f:ff: 47:31:b3:e8:a3:92:be:33:fd:fc:23:b9:3d:d1:b5: 2f:73:19:d2:95:cc:f2:f2:c4:f1:36:97:bf:ce:99: 3c:86:08:00:72:e2:f3:7e:99:10:03:65:3c:59:d4: 09:44:4d:c3:d2:73:63:a3:b6:49:31:83:03:fb:aa: d0:9b:22:77:76:8d:8a:d9:17:4c:55:14:e7:3e:95: d0:99:d4:5c:58:f7:cd:74:59:af:46:f9:43:16:90: 2d:a2:5f:5a:fc:08:25:35:ac:26:36:6d:f4:54:fe: 63:c6:f5:0b:b6:5e:30:20:68:78:d1:10:aa:45:cd: e3:1d:d2:a3:a3:eb:36:d6:1b:39:42:31:b0:7e:3a: 36:b8:05:27:e9:b4:8a:2c:fe:69:4a:3a:fa:0a:49: 59:b4:5f:21:ae:52:21:e2:07:0d:05:a3:79:e8:6e: 5e:4a:5e:79:54:42:ce:3a:ae:46:6c:55:ca:9e:a5: 96:63:a3:fe:6a:cc:3f:dc:bd:e4:eb:25:0f:0f:55: d3:09:a8:41:67:89:c8:4a:51:a5:19:86:8b:12:c1: e9:d5:c1:2a:34:b2:ed:ef:14:e3:3a:b0:01:97:35: 4c:97:87:26:04:0a:44:5b:18:c7:a7:de:83:b9:c1: 2a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5B:2A:50:2D:68:E8:76:64:E3:99:C3:02:EA:0F:C9:FC:58:B6:98 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3230382e302f32302d3230203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.75.208.0/20 Signature Algorithm: sha256WithRSAEncryption 29:6e:d1:68:60:33:6e:c3:e1:43:ec:c5:fd:5f:b3:5c:21:35: 06:48:35:d0:53:ac:80:43:9c:00:aa:ea:13:c6:39:90:ee:0c: 56:05:c6:4f:e1:e9:92:31:75:52:6d:aa:3d:f8:ec:d7:dd:64: 9e:f6:9f:b5:fc:1d:3e:cf:08:76:d0:ac:7f:c8:9e:5d:f6:fc: 81:1a:ec:d4:56:da:d2:73:0a:1b:67:21:3a:78:84:3a:61:73: c3:29:a5:22:a2:09:84:a8:7c:65:1a:90:52:95:94:cd:a6:ec: 69:2f:80:84:63:55:55:7b:27:ee:33:1e:b1:07:65:3a:25:21: 49:e6:cc:63:d3:7f:eb:15:c4:4c:f5:b1:45:aa:06:8a:98:a7: 35:fe:6e:8d:fa:4d:e4:13:b3:9c:06:44:81:46:51:21:87:58: de:47:b1:22:0c:d6:06:2b:f6:4c:b8:78:15:9c:31:80:c5:30: d6:93:0e:0c:7d:db:32:71:d4:db:f0:f8:cf:2d:b8:72:05:21: 98:8c:2a:80:4b:7c:9d:9e:1c:cf:5b:4a:11:4f:82:59:85:a4: 96:99:ef:be:51:15:7c:9b:23:bd:f7:1a:8f:8f:79:c5:21:8a: 33:78:9e:fc:3e:d9:ae:91:67:2c:92:0a:02:52:a1:12:ae:07: 83:5e:bc:6c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUeDQezkNdgB0C89X1t/QAI1Bd0sEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDZaFw0yNzAxMTkwMjEwNDZaMDMxMTAvBgNV BAMTKEY3NUIyQTUwMkQ2OEU4NzY2NEUzOTlDMzAyRUEwRkM5RkM1OEI2OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJK01938DJ7rEvpAuP/0cxs+ij kr4z/fwjuT3RtS9zGdKVzPLyxPE2l7/OmTyGCABy4vN+mRADZTxZ1AlETcPSc2Oj tkkxgwP7qtCbInd2jYrZF0xVFOc+ldCZ1FxY9810Wa9G+UMWkC2iX1r8CCU1rCY2 bfRU/mPG9Qu2XjAgaHjREKpFzeMd0qOj6zbWGzlCMbB+Oja4BSfptIos/mlKOvoK SVm0XyGuUiHiBw0Fo3nobl5KXnlUQs46rkZsVcqepZZjo/5qzD/cveTrJQ8PVdMJ qEFnichKUaUZhosSwenVwSo0su3vFOM6sAGXNUyXhyYECkRbGMen3oO5wSrpAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU91sqUC1o6HZk45nDAuoPyfxYtpgwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMDM2MmUzNzM1 MmUzMjMwMzgyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBGpL0DANBgkqhkiG9w0BAQsFAAOCAQEAKW7RaGAzbsPhQ+zF/V+zXCE1Bkg1 0FOsgEOcAKrqE8Y5kO4MVgXGT+HpkjF1Um2qPfjs191knvaftfwdPs8IdtCsf8ie Xfb8gRrs1Fba0nMKG2chOniEOmFzwymlIqIJhKh8ZRqQUpWUzabsaS+AhGNVVXsn 7jMesQdlOiUhSebMY9N/6xXETPWxRaoGipinNf5ujfpN5BOznAZEgUZRIYdY3kex IgzWBiv2TLh4FZwxgMUw1pMODH3bMnHU2/D4zy24cgUhmIwqgEt8nZ4cz1tKEU+C WYWklpnvvlEVfJsjvfcaj495xSGKM3ie/D7ZrpFnLJIKAlKhEq4Hg168bA== -----END CERTIFICATE-----Generated at Wed Jan 21 04:22:21 2026 by rpki-client