This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e33322e302f31392d3139203d3e203233373234.roa
File: 3130362e37352e33322e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier: Cd7+ZmrxH553jGTI+1CD8bVTWCrBViVb/WY93/28PXg=
Subject key identifier: 2A:7F:21:80:2D:1F:18:5D:54:3C:18:D9:8E:DC:3F:F8:2F:2C:A5:20
Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial: 091E9A12DF78B3831E0C2648129EC595ED8C0D24
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e33322e302f31392d3139203d3e203233373234.roa
Signing time: Tue 20 Jan 2026 02:10:51 +0000
ROA not before: Tue 20 Jan 2026 02:05:51 +0000
ROA not after: Tue 19 Jan 2027 02:10:51 +0000
asID: 23724
IP address blocks: 106.75.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:1e:9a:12:df:78:b3:83:1e:0c:26:48:12:9e:c5:95:ed:8c:0d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Validity
Not Before: Jan 20 02:05:51 2026 GMT
Not After : Jan 19 02:10:51 2027 GMT
Subject: CN=2A7F21802D1F185D543C18D98EDC3FF82F2CA520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:c0:8e:00:f5:8e:b1:42:c0:f1:ac:4a:96:
29:14:9d:79:31:57:a5:13:9d:6d:f7:ef:34:b9:10:
3d:f2:a4:99:fd:78:db:6d:1d:3c:80:4e:7f:7e:ce:
87:08:49:13:34:52:d7:f4:44:f3:7a:2e:bf:19:79:
25:80:a6:0d:0e:fd:6b:b2:4f:94:83:41:d2:f2:f3:
a4:49:6a:8b:e1:85:6c:19:61:9f:21:f1:a4:44:98:
a2:80:12:b2:78:05:47:d8:06:e7:5b:94:d5:d4:0f:
ab:b2:02:2d:e4:51:d4:8d:2f:43:7c:d1:60:e2:91:
8b:97:b9:37:5e:43:17:48:3c:89:9c:e8:d5:df:2f:
f5:b0:61:db:22:2b:ee:c4:55:23:b8:43:d2:22:70:
82:0a:ab:0e:d4:b4:e1:4b:ad:3c:d8:fa:65:15:9b:
91:05:cb:44:5c:15:0a:b9:63:8b:fd:00:1f:44:15:
0e:73:52:4b:af:8d:5b:f3:d8:50:6f:98:b2:35:9e:
50:fe:ab:01:ec:d1:0f:8d:17:76:5f:75:f6:b0:ae:
f6:30:dd:f5:30:8c:86:c6:e7:93:7a:93:95:89:b1:
7b:6a:6b:d8:9e:83:c8:21:6e:c1:43:31:75:04:f2:
d7:69:fe:56:dc:b1:3e:92:2f:f8:7c:ce:eb:ee:b2:
05:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7F:21:80:2D:1F:18:5D:54:3C:18:D9:8E:DC:3F:F8:2F:2C:A5:20
X509v3 Authority Key Identifier:
keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e33322e302f31392d3139203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.75.32.0/19
Signature Algorithm: sha256WithRSAEncryption
02:66:55:58:32:57:f2:65:ad:69:18:0e:d6:8d:98:8e:5b:61:
3f:24:63:23:35:a8:bd:42:4a:94:83:56:ea:a9:8a:49:b5:98:
f0:07:c4:ef:5f:05:ed:5a:64:ad:7a:4a:98:17:b9:31:99:24:
b3:9b:fd:43:70:91:c3:4a:8e:68:6a:ac:34:27:48:c3:10:51:
84:fd:a3:66:b3:dd:a2:a9:aa:52:5c:3f:91:85:1e:5d:92:e4:
14:6b:7c:fb:66:b8:ac:8f:ee:18:65:8e:51:3c:21:18:c9:3d:
ba:83:28:dc:de:95:67:42:3c:ef:4a:4c:91:c7:09:1c:f5:6f:
99:c0:86:22:6a:2f:9d:5f:bb:9e:4c:2f:15:04:b4:00:50:a7:
ac:6b:00:76:6c:1c:c3:a0:7e:01:99:bd:99:87:2c:26:b8:cc:
3e:08:22:c2:28:e3:c1:06:e7:c3:99:39:ed:a6:19:d2:33:b4:
87:37:a6:57:aa:b7:ae:31:dc:9b:0e:bf:db:5d:53:37:56:2b:
f1:96:1c:16:fc:30:f1:d6:b0:45:be:fd:df:d9:04:88:90:e7:
1b:16:a3:09:95:45:ac:55:a3:1a:5a:1b:7e:59:0a:de:4b:a5:
f8:db:e2:59:4b:7c:ea:c7:fc:c8:1b:7c:ae:56:a2:1e:03:5d:
36:77:fd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:23:26 2026 by rpki-client