This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e36342e302f31392d3139203d3e2034383038.roa
File: 3130362e37352e36342e302f31392d3139203d3e2034383038.roa (raw, json)
Hash identifier: RfQHeIO8/xKO5TJIhiHEaT00t8oVkwTkM7rcyNu7bR4=
Subject key identifier: A5:C6:70:EA:54:30:69:B1:91:42:E6:E1:63:5E:AB:1D:B9:A0:E5:ED
Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial: 6B9EE7207BF8A0708BD713F11831B9B2B89DD5C9
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e36342e302f31392d3139203d3e2034383038.roa
Signing time: Tue 20 Jan 2026 02:10:48 +0000
ROA not before: Tue 20 Jan 2026 02:05:48 +0000
ROA not after: Tue 19 Jan 2027 02:10:48 +0000
asID: 4808
IP address blocks: 106.75.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:9e:e7:20:7b:f8:a0:70:8b:d7:13:f1:18:31:b9:b2:b8:9d:d5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Validity
Not Before: Jan 20 02:05:48 2026 GMT
Not After : Jan 19 02:10:48 2027 GMT
Subject: CN=A5C670EA543069B19142E6E1635EAB1DB9A0E5ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:b9:3e:b4:e3:65:56:ea:4f:ee:fc:f0:e9:
52:e7:d9:4d:c2:c8:ea:af:48:bb:0c:88:27:db:eb:
b7:43:70:67:86:3c:84:04:ad:c3:eb:ec:2b:3e:c4:
9e:02:74:f0:93:eb:05:b6:7c:10:1b:7c:24:4d:24:
2f:5d:f1:2e:a9:d3:49:78:c7:4a:a5:3c:17:ad:17:
10:77:ef:58:e9:72:41:91:b9:c3:93:54:5f:80:6c:
42:6e:12:e3:e9:1c:4c:62:7b:28:e6:d2:74:d1:20:
06:bc:bb:f1:f6:5f:59:68:2d:22:25:a7:ff:7f:5b:
f0:34:a6:11:7c:ed:61:79:37:6b:10:27:b4:62:41:
c6:8f:f9:a5:41:80:80:a9:35:9b:83:06:44:39:34:
e1:7a:19:24:b5:8c:8b:f7:0e:58:0a:f7:6a:ec:df:
bf:66:44:e2:04:cf:1b:2e:62:dd:7d:b5:96:73:69:
07:a0:0b:5d:02:1c:cf:ff:43:20:c0:67:dd:b3:75:
da:0e:35:f7:67:2f:7f:55:2f:e9:79:19:f9:d3:7c:
a4:9a:47:10:3d:1d:49:26:f5:53:68:a3:48:27:0d:
51:bc:da:b9:06:4d:15:51:cc:69:ef:06:7d:71:78:
cc:2b:ba:99:a9:05:10:f6:07:3e:e0:6b:95:e2:f8:
29:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C6:70:EA:54:30:69:B1:91:42:E6:E1:63:5E:AB:1D:B9:A0:E5:ED
X509v3 Authority Key Identifier:
keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e36342e302f31392d3139203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.75.64.0/19
Signature Algorithm: sha256WithRSAEncryption
96:c6:ef:97:c8:c4:44:23:91:76:f1:dd:c2:ad:fd:ef:de:be:
46:49:19:23:8d:59:15:2e:06:c1:4d:50:54:0d:0a:7d:5a:26:
ee:a0:33:6a:cd:4e:a8:55:5a:06:cb:7e:86:9d:d7:0b:5d:9d:
9b:2e:0f:64:ce:08:ce:aa:89:0e:32:a3:47:32:52:7d:47:bf:
92:b6:cb:bd:df:bf:e8:c3:65:17:56:24:51:da:9e:1e:4f:1d:
25:c2:c0:97:18:fc:70:e7:15:08:73:6f:e2:e4:c4:23:dc:8b:
4a:34:5c:ec:94:c2:52:14:1f:23:e7:eb:02:30:34:0f:c7:75:
a4:04:ff:f9:82:57:cb:9b:66:b8:f9:5a:4c:8e:94:b5:9c:85:
3d:fc:8c:c7:15:1c:03:4e:a0:78:87:22:bd:eb:52:6c:45:01:
68:02:a4:11:8f:55:2d:b6:ca:de:0d:22:5b:f3:50:59:4d:4c:
19:d5:31:6a:b2:4b:a7:a9:f2:c5:96:4d:ed:6b:45:8c:51:9e:
40:8c:d2:82:57:c7:48:d5:0b:2a:57:dc:c8:a1:c2:7c:5d:76:
da:6b:9a:6b:fa:64:63:2f:00:94:e7:e0:68:90:38:d1:f1:1e:
50:64:eb:86:9b:ec:e5:64:fb:8b:fa:96:e3:ba:ac:b8:6f:ac:
3d:3b:0f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:22:12 2026 by rpki-client