This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132342e302e302f31352d3135203d3e203337393633.roa File: 3131322e3132342e302e302f31352d3135203d3e203337393633.roa (raw, json) Hash identifier: HrxzZSXdX7+SXiAtVFXWEaXNTmRFpOf1krlUUQGaq4Y= Subject key identifier: 7C:72:36:17:B0:22:10:53:C8:9F:AF:42:68:69:B8:D2:BE:C8:CD:29 Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 2A963B27D517AC32E6F138F9A0B4F6BA3D12C7B4 Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132342e302e302f31352d3135203d3e203337393633.roa Signing time: Tue 20 Jan 2026 07:00:31 +0000 ROA not before: Tue 20 Jan 2026 06:55:31 +0000 ROA not after: Tue 19 Jan 2027 07:00:31 +0000 asID: 37963 IP address blocks: 112.124.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 21:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:96:3b:27:d5:17:ac:32:e6:f1:38:f9:a0:b4:f6:ba:3d:12:c7:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Jan 20 06:55:31 2026 GMT Not After : Jan 19 07:00:31 2027 GMT Subject: CN=7C723617B0221053C89FAF426869B8D2BEC8CD29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4e:f7:a9:f1:cf:12:7f:cb:4b:f2:ca:3e:34: 0a:a3:1d:ca:c6:fa:b0:02:2b:50:1f:75:ab:01:80: 4c:7d:7d:16:af:15:e7:cd:d5:7a:a9:98:98:36:74: ac:1c:96:22:cd:df:a7:34:35:57:61:15:7b:3d:44: ea:fe:3f:a1:00:db:64:6b:8a:e6:53:f1:cc:ec:58: 47:2d:5d:7c:ed:40:af:2f:36:5b:eb:06:c6:eb:0c: 14:c1:53:f3:1a:3b:9c:b7:0f:af:82:52:ae:67:38: 8b:1a:17:ea:79:c9:f5:3d:02:43:da:c6:3b:9b:54: f1:7b:3b:b4:8f:35:a0:df:a6:50:fd:d4:82:bf:b5: 81:d7:76:21:2f:ce:ac:6b:71:00:a8:f2:c1:f0:e2: 48:02:9e:47:fa:35:a3:4c:e4:e9:b9:7f:64:fc:64: b0:94:81:83:b3:be:fe:af:5e:06:58:7c:5c:b8:3e: 22:d9:73:96:b5:c2:73:52:6c:99:39:68:a4:d5:8c: f0:02:90:d3:6f:4e:c8:ff:97:c2:72:85:74:7a:49: b8:c1:18:24:a9:44:b5:23:37:4f:a1:cd:99:90:1c: 0e:f1:b8:15:0c:63:7e:2e:d7:8e:f2:bb:f4:87:91: aa:56:d6:32:87:ff:3e:b3:36:04:b9:89:85:01:f0: 3b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:72:36:17:B0:22:10:53:C8:9F:AF:42:68:69:B8:D2:BE:C8:CD:29 X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132342e302e302f31352d3135203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 112.124.0.0/15 Signature Algorithm: sha256WithRSAEncryption 7f:52:0d:54:87:1f:52:e6:0a:29:90:51:fa:9a:4b:1c:1b:65: 25:04:7e:5c:2d:ba:65:f5:af:da:c9:cc:dd:05:03:2b:02:85: 44:c7:a6:e5:1b:8a:d7:16:74:52:20:5f:ee:8d:39:85:78:08: 76:de:bd:6c:f3:82:ee:32:d8:81:f3:f4:08:25:76:76:fa:b0: da:22:34:e2:d6:2f:a9:db:a0:58:2c:33:95:5f:32:8c:70:fc: 90:2d:14:01:c7:b3:27:92:0f:f6:5e:9b:00:6b:7d:f6:14:12: 66:f8:6c:1e:43:33:09:e6:f8:5e:2b:87:7a:59:91:02:6e:a7: 08:e2:8c:94:c4:09:72:1c:b5:ee:e6:ed:92:5c:65:d7:df:85: 90:d3:16:74:c1:ac:5b:2f:73:ad:60:f2:1a:aa:45:17:e6:a3: b3:cf:5b:63:1d:45:c3:ac:ea:b2:18:ce:ef:39:e9:e5:46:91: 9a:64:22:39:95:e6:65:9b:72:ea:33:71:6c:37:ba:52:89:db: 51:d8:f7:a0:03:a6:a5:43:a5:c9:62:fe:d9:0d:d4:0b:d9:ed: 32:ec:8b:ae:70:65:0a:2b:6f:92:a8:49:b4:37:e9:eb:6d:53: b8:b5:f3:78:85:7c:32:91:88:3a:f5:b1:10:b3:c8:31:d8:57: 09:2a:cc:59 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUKpY7J9UXrDLm8Tj5oLT2uj0Sx7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjAxMjAwNjU1MzFaFw0yNzAxMTkwNzAwMzFaMDMxMTAvBgNV BAMTKDdDNzIzNjE3QjAyMjEwNTNDODlGQUY0MjY4NjlCOEQyQkVDOENEMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjTvep8c8Sf8tL8so+NAqjHcrG +rACK1AfdasBgEx9fRavFefN1XqpmJg2dKwcliLN36c0NVdhFXs9ROr+P6EA22Rr iuZT8czsWEctXXztQK8vNlvrBsbrDBTBU/MaO5y3D6+CUq5nOIsaF+p5yfU9AkPa xjubVPF7O7SPNaDfplD91IK/tYHXdiEvzqxrcQCo8sHw4kgCnkf6NaNM5Om5f2T8 ZLCUgYOzvv6vXgZYfFy4PiLZc5a1wnNSbJk5aKTVjPACkNNvTsj/l8JyhXR6SbjB GCSpRLUjN0+hzZmQHA7xuBUMY34u147yu/SHkapW1jKH/z6zNgS5iYUB8DuVAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUfHI2F7AiEFPIn69CaGm40r7IzSkwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzEzMTMyMmUzMTMy MzQyZTMwMmUzMDJmMzEzNTJkMzEzNTIwM2QzZTIwMzMzNzM5MzYzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAXB8MA0GCSqGSIb3DQEBCwUAA4IBAQB/Ug1Uhx9S5gopkFH6mkscG2UlBH5c Lbpl9a/ayczdBQMrAoVEx6blG4rXFnRSIF/ujTmFeAh23r1s84LuMtiB8/QIJXZ2 +rDaIjTi1i+p26BYLDOVXzKMcPyQLRQBx7Mnkg/2XpsAa332FBJm+GweQzMJ5vhe K4d6WZECbqcI4oyUxAlyHLXu5u2SXGXX34WQ0xZ0waxbL3OtYPIaqkUX5qOzz1tj HUXDrOqyGM7vOenlRpGaZCI5leZlm3LqM3FsN7pSidtR2PegA6alQ6XJYv7ZDdQL 2e0y7IuucGUKK2+SqEm0N+nrbVO4tfN4hXwykYg69bEQs8gx2FcJKsxZ -----END CERTIFICATE-----Generated at Wed Jan 21 21:07:05 2026 by rpki-client