This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132352e302e302f31362d3234203d3e203337393633.roa File: 3131322e3132352e302e302f31362d3234203d3e203337393633.roa (raw, json) Hash identifier: aVwCtUf4CHRKNiIbNF2n4nOJkda7r3fi/o0daicqHfo= Subject key identifier: 76:23:24:7D:7B:F0:53:AC:22:85:13:79:BA:6D:62:2F:5D:B8:10:79 Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 6CBDBFC0BBF7EE188BE06DB08C17CEBBBE6F379D Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132352e302e302f31362d3234203d3e203337393633.roa Signing time: Tue 20 Jan 2026 07:00:30 +0000 ROA not before: Tue 20 Jan 2026 06:55:30 +0000 ROA not after: Tue 19 Jan 2027 07:00:30 +0000 asID: 37963 IP address blocks: 112.125.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 21:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:bd:bf:c0:bb:f7:ee:18:8b:e0:6d:b0:8c:17:ce:bb:be:6f:37:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Jan 20 06:55:30 2026 GMT Not After : Jan 19 07:00:30 2027 GMT Subject: CN=7623247D7BF053AC22851379BA6D622F5DB81079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2c:c5:de:68:5f:a8:5f:16:4e:39:61:59:a1: 54:cd:5e:61:46:64:99:23:e1:f5:67:58:87:ea:d2: 29:c5:8a:ac:54:af:8b:88:21:dd:8e:36:16:42:c4: 82:d5:b0:c4:ef:37:2c:01:52:b7:0e:d3:f1:06:d9: f0:94:6b:f1:ff:67:b0:21:e9:af:22:b9:8a:e9:9a: 09:33:8b:e9:03:16:c5:bd:93:00:e8:33:33:44:c0: d7:f0:37:4b:ab:f2:7f:f6:89:64:74:87:da:9f:d9: 86:2d:6d:3c:3d:8c:a5:7f:e8:56:48:fc:1e:a5:6c: 78:9c:d0:d0:61:70:3c:29:61:b0:85:bb:c5:25:5f: 1a:f5:58:90:94:ec:a4:a8:02:ea:e4:2b:58:53:8b: 5e:0a:6a:f8:b7:29:b8:bc:7c:dd:26:54:9d:dc:9a: 05:82:f3:36:d5:59:e4:df:13:8d:39:75:e3:86:d6: ad:b1:79:00:2a:d7:97:da:5f:fc:60:1a:f1:f2:46: 7d:51:63:f6:80:cb:5d:df:f2:13:30:05:e9:7c:42: 09:53:60:fe:5a:fc:69:d4:77:ec:47:16:e3:e4:14: 73:b9:e7:7b:e8:d6:9a:89:30:c4:fa:c2:f9:62:ee: 78:cb:65:7e:ea:53:74:0b:b0:0c:61:ce:ea:ca:be: 01:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:23:24:7D:7B:F0:53:AC:22:85:13:79:BA:6D:62:2F:5D:B8:10:79 X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132352e302e302f31362d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 112.125.0.0/16 Signature Algorithm: sha256WithRSAEncryption 55:1f:12:55:57:ae:2e:7c:7c:8f:21:10:cf:e6:8b:e6:d3:af: b7:f5:85:0e:37:ba:54:6b:73:6e:ef:12:1f:3a:d0:9b:f0:83: e6:e0:f7:a4:77:ed:00:10:58:ff:24:f8:f2:ad:39:c6:d9:f5: 07:1c:a3:5c:5a:1c:06:d7:c0:68:b7:31:d9:0d:f5:22:31:a2: d9:61:85:69:68:27:45:2b:64:c7:37:3f:65:30:f4:f4:ab:1b: a2:ea:68:5d:b5:4b:f1:f1:3c:aa:4f:23:92:fa:3d:4b:6b:7c: b5:a4:5f:ce:0d:dc:d6:b9:18:fa:7b:33:2d:af:b7:90:2e:91: 84:c9:c2:58:7b:56:22:56:7d:f4:1d:f1:43:f4:95:a7:a5:b2: b8:0d:08:18:0a:7b:10:e6:e0:15:03:c1:a8:10:6c:d6:95:97: 8b:a0:5f:1e:d9:d0:6b:70:9e:51:28:14:14:40:01:71:84:a8: 99:99:03:d7:d9:a5:2f:32:8e:b1:5b:02:51:13:85:78:d7:05: f0:79:83:6c:5a:9b:ca:20:ab:9e:dc:0f:ae:64:ea:eb:bf:fe: dd:8a:1e:2d:47:73:0f:e9:17:ee:ce:49:3d:a7:e2:58:fe:b6: 9d:aa:df:9b:5b:d0:dc:2b:97:6c:d2:35:6c:ec:11:41:31:43: 52:17:2b:a4 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUbL2/wLv37hiL4G2wjBfOu75vN50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjAxMjAwNjU1MzBaFw0yNzAxMTkwNzAwMzBaMDMxMTAvBgNV BAMTKDc2MjMyNDdEN0JGMDUzQUMyMjg1MTM3OUJBNkQ2MjJGNURCODEwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoLMXeaF+oXxZOOWFZoVTNXmFG ZJkj4fVnWIfq0inFiqxUr4uIId2ONhZCxILVsMTvNywBUrcO0/EG2fCUa/H/Z7Ah 6a8iuYrpmgkzi+kDFsW9kwDoMzNEwNfwN0ur8n/2iWR0h9qf2YYtbTw9jKV/6FZI /B6lbHic0NBhcDwpYbCFu8UlXxr1WJCU7KSoAurkK1hTi14Kavi3Kbi8fN0mVJ3c mgWC8zbVWeTfE405deOG1q2xeQAq15faX/xgGvHyRn1RY/aAy13f8hMwBel8QglT YP5a/GnUd+xHFuPkFHO553vo1pqJMMT6wvli7njLZX7qU3QLsAxhzurKvgERAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUdiMkfXvwU6wihRN5um1iL124EHkwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzEzMTMyMmUzMTMy MzUyZTMwMmUzMDJmMzEzNjJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAHB9MA0GCSqGSIb3DQEBCwUAA4IBAQBVHxJVV64ufHyPIRDP5ovm06+39YUO N7pUa3Nu7xIfOtCb8IPm4Pekd+0AEFj/JPjyrTnG2fUHHKNcWhwG18BotzHZDfUi MaLZYYVpaCdFK2THNz9lMPT0qxui6mhdtUvx8TyqTyOS+j1La3y1pF/ODdzWuRj6 ezMtr7eQLpGEycJYe1YiVn30HfFD9JWnpbK4DQgYCnsQ5uAVA8GoEGzWlZeLoF8e 2dBrcJ5RKBQUQAFxhKiZmQPX2aUvMo6xWwJRE4V41wXweYNsWpvKIKue3A+uZOrr v/7dih4tR3MP6Rfuzkk9p+JY/radqt+bW9DcK5ds0jVs7BFBMUNSFyuk -----END CERTIFICATE-----Generated at Wed Jan 21 21:09:05 2026 by rpki-client