This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3234302e302f32302d3230203d3e2034383132.roa File: 3130362e37352e3234302e302f32302d3230203d3e2034383132.roa (raw, json) Hash identifier: sQoWLMb0nTkllYs+Qc2JUYSxGZM9Fe3jG8czJdR6bnI= Subject key identifier: 5D:2A:3B:66:4D:57:8C:50:F4:BC:60:9F:2C:24:C5:59:0E:4E:53:12 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 355BDF09AD8E1A799C373173A8973FBEA1F9AA06 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3234302e302f32302d3230203d3e2034383132.roa Signing time: Tue 20 Jan 2026 02:10:52 +0000 ROA not before: Tue 20 Jan 2026 02:05:52 +0000 ROA not after: Tue 19 Jan 2027 02:10:52 +0000 asID: 4812 IP address blocks: 106.75.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5b:df:09:ad:8e:1a:79:9c:37:31:73:a8:97:3f:be:a1:f9:aa:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:52 2026 GMT Not After : Jan 19 02:10:52 2027 GMT Subject: CN=5D2A3B664D578C50F4BC609F2C24C5590E4E5312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:65:88:57:cd:50:f0:be:cc:de:82:ba:ed: a9:2f:2c:b7:f4:06:31:8c:e8:39:22:0e:da:cc:30: 9f:7b:9e:09:8d:4a:36:58:03:ba:9c:37:46:a9:90: 4e:d8:e8:a3:33:ec:08:5c:da:d6:4e:ff:b1:fa:0c: 2a:c9:c1:3e:2a:b9:41:f7:2f:0e:6c:69:50:fa:ef: 93:61:a7:e7:87:15:40:fc:54:af:ce:a4:a3:f2:4c: d5:35:88:43:3a:28:71:e2:80:98:c9:8f:ea:0e:eb: 43:db:30:3c:21:8d:26:2b:35:92:2f:87:1b:ff:d0: fe:9e:c9:65:28:5f:e9:f7:cf:dd:c1:ab:74:4f:1a: 7d:73:7d:5a:c3:38:b8:d2:cc:40:c6:1c:e8:33:03: 92:31:df:11:2b:a7:78:28:10:6d:1e:a4:c0:ba:1a: 45:51:ca:03:ee:94:ae:0b:b7:7d:18:77:dc:9e:d6: 74:1f:40:83:dd:c5:fe:4e:d4:45:27:4c:6a:86:c1: 94:6c:fb:7a:90:44:bb:67:84:85:4b:e2:d2:8d:2d: e1:7f:e7:ca:85:4e:b5:85:58:49:f6:db:62:34:0e: 25:25:8a:0f:85:b5:9b:9d:31:6f:05:fc:e3:2a:87: 25:92:de:b5:e6:37:43:70:40:e8:63:36:8b:79:14: 5f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2A:3B:66:4D:57:8C:50:F4:BC:60:9F:2C:24:C5:59:0E:4E:53:12 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3234302e302f32302d3230203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.75.240.0/20 Signature Algorithm: sha256WithRSAEncryption ae:03:f7:39:93:a4:93:95:43:6a:fa:b2:e8:8d:5a:a8:96:13: 04:1b:bc:e7:0a:67:9c:26:1d:32:04:c8:0c:b1:fd:85:64:51: 6f:25:c0:e8:f7:09:96:e0:00:82:5e:40:7d:41:6d:7d:22:e4: 24:d4:06:a0:dd:4f:46:67:a0:b2:67:80:3d:6b:0c:65:f7:05: 99:cc:ca:39:8e:e2:80:60:d2:ea:9e:6d:07:d6:47:7d:1c:fc: 69:cb:14:c5:0c:a9:e1:ab:09:d2:a8:4c:09:f6:be:cb:dd:f8: 46:e2:98:a9:dd:43:bc:5b:22:55:ad:be:87:1a:f1:14:a3:94: e7:42:9f:75:16:0f:ee:97:db:82:91:2e:d4:a7:98:8e:ce:7e: 3c:3a:ca:76:a4:b8:49:53:8a:e0:e0:a6:67:ce:63:3c:77:9d: 2f:84:1c:ca:d4:12:e1:a3:a8:ca:5c:9e:62:86:13:5d:77:f7: 18:10:29:a4:df:81:75:7c:2e:47:cf:44:78:72:37:6d:93:1d: 9f:4e:54:11:a9:c5:56:d5:4f:f2:69:d8:f8:ce:41:6a:8f:b2: 37:4e:8d:df:57:09:3f:57:d1:3b:a1:00:cf:fe:fd:46:48:b8: 07:d4:b3:80:b0:a5:25:c4:e3:b9:53:5c:03:58:cd:93:25:bf: f7:c0:66:7a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUNVvfCa2OGnmcNzFzqJc/vqH5qgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NTJaFw0yNzAxMTkwMjEwNTJaMDMxMTAvBgNV BAMTKDVEMkEzQjY2NEQ1NzhDNTBGNEJDNjA5RjJDMjRDNTU5MEU0RTUzMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqI2WIV81Q8L7M3oK67akvLLf0 BjGM6DkiDtrMMJ97ngmNSjZYA7qcN0apkE7Y6KMz7Ahc2tZO/7H6DCrJwT4quUH3 Lw5saVD675Nhp+eHFUD8VK/OpKPyTNU1iEM6KHHigJjJj+oO60PbMDwhjSYrNZIv hxv/0P6eyWUoX+n3z93Bq3RPGn1zfVrDOLjSzEDGHOgzA5Ix3xErp3goEG0epMC6 GkVRygPulK4Lt30Yd9ye1nQfQIPdxf5O1EUnTGqGwZRs+3qQRLtnhIVL4tKNLeF/ 58qFTrWFWEn222I0DiUlig+FtZudMW8F/OMqhyWS3rXmN0NwQOhjNot5FF87AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUXSo7Zk1XjFD0vGCfLCTFWQ5OUxIwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMDM2MmUzNzM1 MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBGpL8DANBgkqhkiG9w0BAQsFAAOCAQEArgP3OZOkk5VDavqy6I1aqJYTBBu8 5wpnnCYdMgTIDLH9hWRRbyXA6PcJluAAgl5AfUFtfSLkJNQGoN1PRmegsmeAPWsM ZfcFmczKOY7igGDS6p5tB9ZHfRz8acsUxQyp4asJ0qhMCfa+y934RuKYqd1DvFsi Va2+hxrxFKOU50KfdRYP7pfbgpEu1KeYjs5+PDrKdqS4SVOK4OCmZ85jPHedL4Qc ytQS4aOoylyeYoYTXXf3GBAppN+BdXwuR89EeHI3bZMdn05UEanFVtVP8mnY+M5B ao+yN06N31cJP1fRO6EAz/79Rki4B9SzgLClJcTjuVNcA1jNkyW/98Bmeg== -----END CERTIFICATE-----Generated at Wed Jan 21 04:22:47 2026 by rpki-client