This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132342e302e302f31362d3234203d3e203337393633.roa File: 3131322e3132342e302e302f31362d3234203d3e203337393633.roa (raw, json) Hash identifier: Mk/05zpZqtgnYq/+gGO7xCjBwe9RIZVxgBhE9qeWpDc= Subject key identifier: 52:C6:E7:3A:03:3D:C5:8E:66:FC:F7:6A:2C:8A:49:9F:83:C2:A1:AB Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 5416516A207285B064261B7BBA6874DDCBDBBE02 Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132342e302e302f31362d3234203d3e203337393633.roa Signing time: Tue 20 Jan 2026 07:00:30 +0000 ROA not before: Tue 20 Jan 2026 06:55:30 +0000 ROA not after: Tue 19 Jan 2027 07:00:30 +0000 asID: 37963 IP address blocks: 112.124.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 21:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:16:51:6a:20:72:85:b0:64:26:1b:7b:ba:68:74:dd:cb:db:be:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Jan 20 06:55:30 2026 GMT Not After : Jan 19 07:00:30 2027 GMT Subject: CN=52C6E73A033DC58E66FCF76A2C8A499F83C2A1AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0e:4c:ed:94:d2:88:8e:af:7d:09:5e:34:82: 51:90:2f:22:32:86:0f:40:e4:6c:2a:42:95:97:22: 7b:af:a9:d2:39:d6:a5:7c:16:db:fe:02:9c:86:1d: 91:92:87:e6:86:dd:ec:d7:1a:ac:db:be:bd:e7:48: ee:e2:81:63:a0:af:eb:df:eb:d4:ba:0e:fe:86:34: 41:0e:55:23:29:06:73:f1:50:b3:af:f8:dc:f0:ab: e6:00:ab:41:e1:c7:df:d0:0d:5d:36:f6:01:ed:e1: 42:94:a4:58:34:50:1e:9c:80:76:66:2c:09:ed:0e: 67:dd:31:cf:a1:a8:09:8f:d9:91:9b:02:be:71:a8: 8c:4d:b9:9b:5e:6c:d5:95:72:bf:e6:61:a2:f4:8d: d0:f3:17:6d:02:1c:4b:a8:22:f3:87:79:68:a3:60: d3:1d:e3:76:33:02:94:96:f3:d6:a5:fc:c6:c6:00: 18:04:b0:7c:22:47:6e:dc:fc:eb:58:9b:bd:b7:51: e4:96:92:32:5d:e6:d8:67:01:3c:93:b5:76:10:5b: 70:9e:d3:0d:b0:55:03:bc:2b:69:80:f3:a2:be:41: 31:a3:92:14:97:92:b8:c5:d1:d5:93:50:50:0e:89: f8:61:94:78:00:93:fe:f4:d3:94:c9:28:4f:a4:2b: bb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C6:E7:3A:03:3D:C5:8E:66:FC:F7:6A:2C:8A:49:9F:83:C2:A1:AB X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132342e302e302f31362d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 112.124.0.0/16 Signature Algorithm: sha256WithRSAEncryption a8:f4:c6:f0:60:e5:38:a6:4f:f9:e9:48:c6:94:03:64:e2:4f: 69:28:3a:fd:5b:b1:70:30:48:a6:8a:dc:f5:f0:88:c3:57:dc: 12:eb:31:67:23:c7:5b:b8:d6:90:2e:c4:33:db:0c:41:dc:c8: f8:7a:56:38:18:fd:20:16:85:86:df:3b:23:41:82:f1:31:06: 7e:40:43:57:10:2a:38:ef:0f:2e:5e:26:7e:bc:1b:ce:9f:fd: 49:8d:7d:ab:eb:08:06:ad:f1:61:d4:23:0f:16:8e:2a:11:58: aa:02:f5:60:01:c7:de:1b:6f:24:08:b2:8a:35:32:89:7d:ea: 60:1c:96:73:7b:e4:cd:35:28:c9:f2:ff:bf:b6:be:15:48:bf: 61:24:40:8f:38:22:59:2a:db:b3:eb:d8:78:60:7c:34:c5:ab: 8f:62:69:19:f7:ef:c3:76:40:81:23:08:35:b8:f1:53:fc:d1: 18:77:f6:5c:fb:66:37:69:5e:f5:f9:2a:0e:2f:b8:2d:9c:f6: de:1f:ef:09:ca:5e:3a:31:26:af:c8:23:a6:80:0e:19:08:1b: 3a:25:cb:02:de:b1:0c:27:1a:77:78:fc:63:e7:a1:c3:3b:bb: 11:35:b2:97:5f:b6:8c:5c:f8:66:10:63:64:cf:c6:b5:a7:a9: 5e:df:54:ed -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUVBZRaiByhbBkJht7umh03cvbvgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjAxMjAwNjU1MzBaFw0yNzAxMTkwNzAwMzBaMDMxMTAvBgNV BAMTKDUyQzZFNzNBMDMzREM1OEU2NkZDRjc2QTJDOEE0OTlGODNDMkExQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DkztlNKIjq99CV40glGQLyIy hg9A5GwqQpWXInuvqdI51qV8Ftv+ApyGHZGSh+aG3ezXGqzbvr3nSO7igWOgr+vf 69S6Dv6GNEEOVSMpBnPxULOv+Nzwq+YAq0Hhx9/QDV029gHt4UKUpFg0UB6cgHZm LAntDmfdMc+hqAmP2ZGbAr5xqIxNuZtebNWVcr/mYaL0jdDzF20CHEuoIvOHeWij YNMd43YzApSW89al/MbGABgEsHwiR27c/OtYm723UeSWkjJd5thnATyTtXYQW3Ce 0w2wVQO8K2mA86K+QTGjkhSXkrjF0dWTUFAOifhhlHgAk/7005TJKE+kK7szAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUUsbnOgM9xY5m/PdqLIpJn4PCoaswHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzEzMTMyMmUzMTMy MzQyZTMwMmUzMDJmMzEzNjJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAHB8MA0GCSqGSIb3DQEBCwUAA4IBAQCo9MbwYOU4pk/56UjGlANk4k9pKDr9 W7FwMEimitz18IjDV9wS6zFnI8dbuNaQLsQz2wxB3Mj4elY4GP0gFoWG3zsjQYLx MQZ+QENXECo47w8uXiZ+vBvOn/1JjX2r6wgGrfFh1CMPFo4qEViqAvVgAcfeG28k CLKKNTKJfepgHJZze+TNNSjJ8v+/tr4VSL9hJECPOCJZKtuz69h4YHw0xauPYmkZ 9+/DdkCBIwg1uPFT/NEYd/Zc+2Y3aV71+SoOL7gtnPbeH+8Jyl46MSavyCOmgA4Z CBs6JcsC3rEMJxp3ePxj56HDO7sRNbKXX7aMXPhmEGNkz8a1p6le31Tt -----END CERTIFICATE-----Generated at Wed Jan 21 21:07:51 2026 by rpki-client