This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3234302e302f32302d3230203d3e203137363231.roa File: 3130362e37352e3234302e302f32302d3230203d3e203137363231.roa (raw, json) Hash identifier: 6bKgFUOf8t/nLYbGnVMgX5H3Z6KDy8eINtCOZuqGC94= Subject key identifier: 11:59:D8:E0:D8:57:44:33:54:25:49:79:49:B1:05:7B:46:1E:33:5E Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 410F0B7E5C806E09DE539D4AE6A332DC9CFACC2A Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3234302e302f32302d3230203d3e203137363231.roa Signing time: Tue 20 Jan 2026 02:10:51 +0000 ROA not before: Tue 20 Jan 2026 02:05:51 +0000 ROA not after: Tue 19 Jan 2027 02:10:51 +0000 asID: 17621 IP address blocks: 106.75.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:0f:0b:7e:5c:80:6e:09:de:53:9d:4a:e6:a3:32:dc:9c:fa:cc:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:51 2026 GMT Not After : Jan 19 02:10:51 2027 GMT Subject: CN=1159D8E0D85744335425497949B1057B461E335E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:20:b3:b7:01:20:0c:36:8c:f2:a5:f5:7e: 21:f0:2a:c7:98:3b:4b:d6:8a:ff:c2:3d:59:3a:ce: 91:fa:e2:12:d8:bc:74:f0:84:cb:b4:d3:e7:79:79: 65:21:92:81:73:38:92:a4:7f:f7:fb:7d:33:f5:cd: 25:da:b6:55:c7:19:9e:a0:cd:6b:33:27:27:5e:b6: 37:5b:12:35:29:e2:6d:2e:f8:21:fd:eb:82:07:8e: 10:5c:75:53:9f:15:f8:79:06:d1:3f:24:b7:36:f6: 86:b0:8c:84:6f:d4:e2:d3:3e:7f:e2:c8:2f:51:8f: a9:02:b4:ac:be:2d:5a:fd:0c:0a:47:40:54:d4:9e: da:90:2f:f8:7f:84:c0:de:7c:36:73:a0:16:98:98: 54:33:29:5b:6d:37:81:b6:1f:ca:15:85:13:52:e7: 04:e6:69:60:f2:8c:b7:25:1a:1a:32:5c:d7:96:85: 8e:d1:6d:18:4e:09:f0:fa:de:68:b6:65:24:b6:dd: 45:70:e8:bf:4d:ce:c0:00:54:32:e2:b4:e1:ab:34: 96:81:dd:59:30:84:e3:bf:c9:3f:8d:2d:93:7d:6e: ff:c4:3a:47:b2:cb:91:f9:03:bc:27:b4:eb:f9:f0: 87:c3:cd:df:ee:88:66:38:c1:d5:41:7d:b4:05:20: cf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:59:D8:E0:D8:57:44:33:54:25:49:79:49:B1:05:7B:46:1E:33:5E X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3234302e302f32302d3230203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.75.240.0/20 Signature Algorithm: sha256WithRSAEncryption 20:1b:8d:08:79:af:6b:3d:2d:62:0c:1a:3e:eb:4d:34:63:58: 82:48:f8:63:d3:7a:2e:e3:24:93:52:dc:43:a0:d7:34:9a:aa: 4b:a7:4b:50:f1:f5:2e:9c:c8:3d:03:a1:7b:9f:b7:de:94:af: de:08:16:dc:da:23:4d:6d:e8:4a:85:f6:70:94:57:d5:4e:90: f3:17:4c:6d:15:65:ad:aa:e2:e8:e4:6c:e8:3d:49:00:1c:e7: d8:b6:80:95:78:94:49:b6:26:4a:38:fa:89:3d:59:87:b4:84: 19:6c:73:88:2e:32:77:87:ef:6e:7b:0a:af:a6:b4:49:50:eb: 03:10:5c:7d:9b:7f:12:82:b8:c3:6f:e1:a4:2c:ac:47:44:83: 27:86:2c:01:18:75:95:94:77:ce:4b:f7:d7:3e:f0:83:c0:47: 27:5a:4e:c7:3c:c3:d9:2e:c3:43:7a:cf:9d:b3:a0:64:33:50: 8f:73:a4:44:28:d9:99:15:07:a7:d5:ea:b0:ba:bd:38:8e:e0: c6:dc:6f:cb:d7:48:a8:cf:00:4a:ce:a9:9c:d7:ca:ce:35:b7: 3e:65:d9:51:01:7a:17:a4:25:da:2c:37:53:dd:10:61:8e:ab: 99:4b:c0:76:63:49:1f:2d:c5:9c:23:a8:c0:d2:a1:bf:54:f3: 4c:cc:b0:44 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUQQ8LflyAbgneU51K5qMy3Jz6zCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NTFaFw0yNzAxMTkwMjEwNTFaMDMxMTAvBgNV BAMTKDExNTlEOEUwRDg1NzQ0MzM1NDI1NDk3OTQ5QjEwNTdCNDYxRTMzNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmCyCztwEgDDaM8qX1fiHwKseY O0vWiv/CPVk6zpH64hLYvHTwhMu00+d5eWUhkoFzOJKkf/f7fTP1zSXatlXHGZ6g zWszJydetjdbEjUp4m0u+CH964IHjhBcdVOfFfh5BtE/JLc29oawjIRv1OLTPn/i yC9Rj6kCtKy+LVr9DApHQFTUntqQL/h/hMDefDZzoBaYmFQzKVttN4G2H8oVhRNS 5wTmaWDyjLclGhoyXNeWhY7RbRhOCfD63mi2ZSS23UVw6L9NzsAAVDLitOGrNJaB 3VkwhOO/yT+NLZN9bv/EOkeyy5H5A7wntOv58IfDzd/uiGY4wdVBfbQFIM9RAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUEVnY4NhXRDNUJUl5SbEFe0YeM14wHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDU4OTE4Ny8wLzMxMzAzNjJlMzcz NTJlMzIzNDMwMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzNzM2MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBGpL8DANBgkqhkiG9w0BAQsFAAOCAQEAIBuNCHmvaz0tYgwaPutNNGNY gkj4Y9N6LuMkk1LcQ6DXNJqqS6dLUPH1LpzIPQOhe5+33pSv3ggW3NojTW3oSoX2 cJRX1U6Q8xdMbRVlrari6ORs6D1JABzn2LaAlXiUSbYmSjj6iT1Zh7SEGWxziC4y d4fvbnsKr6a0SVDrAxBcfZt/EoK4w2/hpCysR0SDJ4YsARh1lZR3zkv31z7wg8BH J1pOxzzD2S7DQ3rPnbOgZDNQj3OkRCjZmRUHp9XqsLq9OI7gxtxvy9dIqM8ASs6p nNfKzjW3PmXZUQF6F6Ql2iw3U90QYY6rmUvAdmNJHy3FnCOowNKhv1TzTMywRA== -----END CERTIFICATE-----Generated at Wed Jan 21 04:22:10 2026 by rpki-client