This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e33322e302f31392d3139203d3e2034383038.roa File: 3130362e37352e33322e302f31392d3139203d3e2034383038.roa (raw, json) Hash identifier: xMn3RtQUvqRt9SXwiVDjmUAe9igl72/m0sHL1OFhk8o= Subject key identifier: 39:9A:42:90:AA:A2:59:64:7E:1C:DD:4A:74:32:54:3B:E2:A3:47:F2 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 40285BB9176DD8B4A4CEE539399EF06BB716309D Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e33322e302f31392d3139203d3e2034383038.roa Signing time: Tue 20 Jan 2026 02:10:47 +0000 ROA not before: Tue 20 Jan 2026 02:05:47 +0000 ROA not after: Tue 19 Jan 2027 02:10:47 +0000 asID: 4808 IP address blocks: 106.75.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:28:5b:b9:17:6d:d8:b4:a4:ce:e5:39:39:9e:f0:6b:b7:16:30:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:47 2026 GMT Not After : Jan 19 02:10:47 2027 GMT Subject: CN=399A4290AAA259647E1CDD4A7432543BE2A347F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:18:e8:51:82:c3:1d:c4:94:ba:74:c7:e6:2a: 5e:db:83:d8:54:e9:44:90:b0:81:a4:59:d8:8c:ee: de:a2:3d:b2:6c:23:3f:cc:e5:91:fa:17:15:50:6c: 93:4d:b7:3b:81:de:98:6c:15:64:81:49:cc:ff:04: 17:3a:af:b2:04:7c:91:f4:7c:4b:7d:e4:04:af:8f: a5:cc:d9:cd:64:a9:67:a1:4e:7c:a1:62:0e:aa:33: 85:77:29:3a:3c:e6:00:fb:6f:45:0d:57:fe:d2:4a: 79:23:7a:d6:79:cf:d5:52:06:4a:a4:b2:d7:c4:ea: 8e:fc:cc:da:04:fc:2e:78:6c:3f:ee:93:21:d8:c9: b2:6f:60:a2:b1:e5:d2:65:41:cb:40:56:03:6a:f6: c1:99:1e:a6:32:a3:ea:0f:09:7f:00:39:7f:e9:11: 5c:ad:3d:3a:be:c0:00:04:f7:53:db:d6:1f:84:de: 5c:34:82:99:44:86:87:7f:74:c2:a3:cc:bc:3e:b8: 0a:fb:6e:89:72:fe:8d:a1:6d:25:47:02:2b:36:68: b5:34:ff:be:c6:25:4c:26:4f:04:2d:89:35:23:10: ae:73:77:0a:16:b9:41:a3:42:e8:a6:ba:e4:21:3f: b3:14:1f:2b:83:60:31:b0:9e:bd:42:5f:71:94:34: 0e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9A:42:90:AA:A2:59:64:7E:1C:DD:4A:74:32:54:3B:E2:A3:47:F2 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e33322e302f31392d3139203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.75.32.0/19 Signature Algorithm: sha256WithRSAEncryption 54:8b:27:a7:e1:52:79:0d:02:f0:23:c2:e3:c0:05:7f:0b:6c: f8:9c:29:53:f7:b7:f3:87:56:e8:7b:dc:8d:0b:33:c4:a0:e9: a3:02:43:70:d8:bf:05:0a:c7:25:36:51:5c:c1:e2:81:c4:83: 01:5e:fd:0c:4a:21:49:a1:ed:47:aa:25:03:94:b5:5a:aa:8d: 7c:a2:c7:66:5f:fe:e5:14:8b:f2:6c:60:7e:f0:e5:e7:5a:af: b1:1f:9c:fa:55:8a:7a:f4:69:0b:03:26:87:d6:02:32:c4:c0: 9a:17:89:3b:f1:4a:62:14:ec:cf:a1:2a:30:ea:eb:d3:cf:ba: 67:10:41:b8:09:7d:25:c3:1b:a1:73:33:74:4d:50:82:9c:03: 51:03:cf:10:2a:f4:4e:63:fc:c9:a2:23:4d:61:a9:d6:d0:d7: ec:b0:9f:32:c7:45:26:34:b0:7b:ac:1e:71:03:cf:04:fd:46: 58:35:4c:f5:56:f5:b6:67:92:c2:a9:33:60:02:3c:a4:c5:73: 38:05:dd:9a:72:79:ee:76:0a:fc:fc:b8:24:f8:5c:79:66:c0: be:89:48:c7:a2:61:04:83:3c:b3:d9:b2:82:b8:7e:66:2d:00: 32:02:b0:7b:22:b9:9c:ce:c1:22:e5:e3:4e:e8:18:61:57:82: 57:8a:03:1c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUQChbuRdt2LSkzuU5OZ7wa7cWMJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDdaFw0yNzAxMTkwMjEwNDdaMDMxMTAvBgNV BAMTKDM5OUE0MjkwQUFBMjU5NjQ3RTFDREQ0QTc0MzI1NDNCRTJBMzQ3RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSGOhRgsMdxJS6dMfmKl7bg9hU 6USQsIGkWdiM7t6iPbJsIz/M5ZH6FxVQbJNNtzuB3phsFWSBScz/BBc6r7IEfJH0 fEt95ASvj6XM2c1kqWehTnyhYg6qM4V3KTo85gD7b0UNV/7SSnkjetZ5z9VSBkqk stfE6o78zNoE/C54bD/ukyHYybJvYKKx5dJlQctAVgNq9sGZHqYyo+oPCX8AOX/p EVytPTq+wAAE91Pb1h+E3lw0gplEhod/dMKjzLw+uAr7boly/o2hbSVHAis2aLU0 /77GJUwmTwQtiTUjEK5zdwoWuUGjQuimuuQhP7MUHyuDYDGwnr1CX3GUNA5PAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUOZpCkKqiWWR+HN1KdDJUO+KjR/IwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMDM2MmUzNzM1 MmUzMzMyMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAVqSyAwDQYJKoZIhvcNAQELBQADggEBAFSLJ6fhUnkNAvAjwuPABX8LbPicKVP3 t/OHVuh73I0LM8Sg6aMCQ3DYvwUKxyU2UVzB4oHEgwFe/QxKIUmh7UeqJQOUtVqq jXyix2Zf/uUUi/JsYH7w5edar7EfnPpVinr0aQsDJofWAjLEwJoXiTvxSmIU7M+h KjDq69PPumcQQbgJfSXDG6FzM3RNUIKcA1EDzxAq9E5j/MmiI01hqdbQ1+ywnzLH RSY0sHusHnEDzwT9Rlg1TPVW9bZnksKpM2ACPKTFczgF3Zpyee52Cvz8uCT4XHlm wL6JSMeiYQSDPLPZsoK4fmYtADICsHsiuZzOwSLl407oGGFXgleKAxw= -----END CERTIFICATE-----Generated at Wed Jan 21 04:22:45 2026 by rpki-client