This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132342e302e302f31342d3134203d3e203337393633.roa File: 3131322e3132342e302e302f31342d3134203d3e203337393633.roa (raw, json) Hash identifier: RlIzuqtLZFY/AyZ+gI2Uy7dDwcT3KJRDY+Kan/fqhVU= Subject key identifier: 31:4B:A6:76:95:A3:8C:2F:73:6A:93:8E:98:EE:67:F5:A1:E3:71:9A Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 7C9C5DFE46FE010D59ED4F00515A8745407FBB82 Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132342e302e302f31342d3134203d3e203337393633.roa Signing time: Tue 20 Jan 2026 07:00:30 +0000 ROA not before: Tue 20 Jan 2026 06:55:30 +0000 ROA not after: Tue 19 Jan 2027 07:00:30 +0000 asID: 37963 IP address blocks: 112.124.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 21:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9c:5d:fe:46:fe:01:0d:59:ed:4f:00:51:5a:87:45:40:7f:bb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Jan 20 06:55:30 2026 GMT Not After : Jan 19 07:00:30 2027 GMT Subject: CN=314BA67695A38C2F736A938E98EE67F5A1E3719A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:12:9b:69:f9:c3:f4:78:85:a9:85:c3:5f: a8:68:88:98:4e:29:a4:20:49:8d:71:94:4e:2c:1e: 34:e6:46:bf:97:d0:0e:23:8c:4a:b2:f1:01:78:5b: 40:30:05:3d:29:ef:19:cc:24:9e:37:65:a9:a8:6f: a9:aa:71:cd:96:b2:4c:c6:a8:b0:0a:5b:2d:d8:cb: 22:67:de:bd:80:1d:10:df:89:28:74:cc:b0:fe:9c: f3:39:74:3c:29:03:10:7b:ac:32:9f:f7:0e:01:f7: 81:ba:43:59:8e:f0:b9:73:78:00:e5:85:ea:c7:eb: 59:96:7e:be:88:fa:2b:1e:c9:5e:02:0e:6d:22:bf: 41:53:87:7d:7b:33:9e:fb:f6:a5:6d:62:16:85:c0: 8f:4b:d3:8e:02:20:1a:aa:ae:64:23:af:9d:57:fd: bf:d5:8e:38:00:9e:04:ae:68:0e:e8:1b:61:43:6c: cc:cd:a8:a7:54:10:53:96:0d:9e:88:a5:19:49:d0: d5:b1:77:59:a7:23:36:e0:77:a5:1b:e4:c0:a7:d6: ff:49:a9:62:be:88:e1:6f:a8:d2:3f:22:57:1d:2a: 70:28:6f:3e:21:b2:f4:1e:89:21:91:32:1a:87:e4: 4b:bb:6a:f1:ac:a7:2f:31:91:2d:98:06:ad:20:ff: 63:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4B:A6:76:95:A3:8C:2F:73:6A:93:8E:98:EE:67:F5:A1:E3:71:9A X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132342e302e302f31342d3134203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 112.124.0.0/14 Signature Algorithm: sha256WithRSAEncryption 03:26:e2:29:22:e8:4a:9a:91:d1:08:7d:d0:01:15:f1:af:24: d0:3a:68:c6:9f:5d:e1:5a:02:70:97:8f:16:01:fe:73:35:b9: 58:3f:32:22:25:f7:92:e2:b9:d0:5d:d6:72:97:fc:a9:0d:5d: 00:c6:32:06:86:f3:ac:34:f0:48:6f:78:45:6c:3e:ae:b7:20: 40:90:cf:7e:f6:84:9d:8f:38:c1:8b:24:91:43:b2:db:8d:b8: 2c:dc:af:63:c3:a7:31:96:6f:c0:91:47:54:08:98:80:8c:35: 45:75:72:6b:96:3d:b6:e8:8f:ba:c7:57:54:9b:2d:06:87:9c: e2:ad:f0:7e:14:83:0c:79:6c:8c:30:0d:fb:ac:b6:60:52:0c: 51:e0:77:6d:17:9d:2d:6d:88:d5:5f:98:1c:25:a2:f9:15:fe: 72:7c:ad:fe:25:1d:42:b5:ce:3a:d2:74:ef:f4:f4:df:3b:64: 43:46:91:a9:19:97:0f:81:72:d3:95:86:e7:0d:e1:87:89:79: 9d:d3:ac:2e:27:e3:8d:2d:c2:19:b2:b9:0d:7a:8a:8f:81:1c: 5c:b1:a2:56:9b:01:67:8f:f7:6a:7a:af:47:be:22:2a:73:84: 4c:1d:54:3c:c6:29:5e:dd:27:44:0f:01:bc:0e:43:5f:9e:1e: a7:fc:55:b3 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUfJxd/kb+AQ1Z7U8AUVqHRUB/u4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjAxMjAwNjU1MzBaFw0yNzAxMTkwNzAwMzBaMDMxMTAvBgNV BAMTKDMxNEJBNjc2OTVBMzhDMkY3MzZBOTM4RTk4RUU2N0Y1QTFFMzcxOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvCxKbafnD9HiFqYXDX6hoiJhO KaQgSY1xlE4sHjTmRr+X0A4jjEqy8QF4W0AwBT0p7xnMJJ43Zamob6mqcc2WskzG qLAKWy3YyyJn3r2AHRDfiSh0zLD+nPM5dDwpAxB7rDKf9w4B94G6Q1mO8LlzeADl herH61mWfr6I+iseyV4CDm0iv0FTh317M5779qVtYhaFwI9L044CIBqqrmQjr51X /b/VjjgAngSuaA7oG2FDbMzNqKdUEFOWDZ6IpRlJ0NWxd1mnIzbgd6Ub5MCn1v9J qWK+iOFvqNI/IlcdKnAobz4hsvQeiSGRMhqH5Eu7avGspy8xkS2YBq0g/2ONAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUMUumdpWjjC9zapOOmO5n9aHjcZowHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzEzMTMyMmUzMTMy MzQyZTMwMmUzMDJmMzEzNDJkMzEzNDIwM2QzZTIwMzMzNzM5MzYzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAnB8MA0GCSqGSIb3DQEBCwUAA4IBAQADJuIpIuhKmpHRCH3QARXxryTQOmjG n13hWgJwl48WAf5zNblYPzIiJfeS4rnQXdZyl/ypDV0AxjIGhvOsNPBIb3hFbD6u tyBAkM9+9oSdjzjBiySRQ7Lbjbgs3K9jw6cxlm/AkUdUCJiAjDVFdXJrlj226I+6 x1dUmy0Gh5zirfB+FIMMeWyMMA37rLZgUgxR4HdtF50tbYjVX5gcJaL5Ff5yfK3+ JR1Ctc460nTv9PTfO2RDRpGpGZcPgXLTlYbnDeGHiXmd06wuJ+ONLcIZsrkNeoqP gRxcsaJWmwFnj/dqeq9HviIqc4RMHVQ8xile3SdEDwG8DkNfnh6n/FWz -----END CERTIFICATE-----Generated at Wed Jan 21 21:07:04 2026 by rpki-client