This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132362e302e302f31362d3234203d3e203337393633.roa File: 3131322e3132362e302e302f31362d3234203d3e203337393633.roa (raw, json) Hash identifier: azRrezG+l+poPSWi8QrlWFGHsPHHzef6/dDX2yt64dc= Subject key identifier: AC:4C:BD:3B:F3:FD:E0:51:1E:25:2F:97:17:89:97:2F:B1:34:95:BD Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 3DFE800FD0C5DA3A712971F372C81A069F1CFEAF Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132362e302e302f31362d3234203d3e203337393633.roa Signing time: Tue 20 Jan 2026 07:00:30 +0000 ROA not before: Tue 20 Jan 2026 06:55:30 +0000 ROA not after: Tue 19 Jan 2027 07:00:30 +0000 asID: 37963 IP address blocks: 112.126.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 21:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fe:80:0f:d0:c5:da:3a:71:29:71:f3:72:c8:1a:06:9f:1c:fe:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Jan 20 06:55:30 2026 GMT Not After : Jan 19 07:00:30 2027 GMT Subject: CN=AC4CBD3BF3FDE0511E252F971789972FB13495BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:bc:fe:62:39:bd:c7:6b:6f:f6:30:80:3d: 36:63:f4:70:aa:38:6f:fe:a5:72:01:61:be:62:fc: bc:70:4f:68:65:b9:16:d3:38:53:9c:4d:75:97:d3: 4b:0d:9b:44:2d:42:a3:3b:47:70:ed:6c:ee:4c:c9: 4d:45:08:ce:35:a4:2a:40:25:73:b1:e3:aa:c1:b6: 71:ff:07:5d:b0:9c:05:b6:cc:7c:0c:f8:c5:92:a5: e4:a6:b8:20:2b:20:f2:91:6c:0f:75:52:fa:fc:36: 17:29:01:74:9e:cb:f8:31:a1:2d:79:25:36:a4:94: 8f:de:33:91:3c:9a:20:70:5e:d7:f9:3c:4c:b0:05: bb:bb:96:ee:83:f5:e2:da:d1:2a:66:60:ea:ef:7a: 01:d1:52:89:12:55:5a:d6:33:41:d8:b7:e1:1d:1e: d4:37:1f:a8:44:46:8e:43:8c:1e:dd:ee:77:bb:d3: 66:07:f0:47:95:35:68:75:be:3c:7c:06:29:2b:fa: e0:d0:4f:49:02:73:40:15:da:a6:7e:b3:27:5d:73: 47:f5:b3:9e:90:b3:d0:ae:b2:5c:3c:66:8b:11:e6: 01:96:84:58:ca:e5:1f:bb:07:73:db:d8:ee:5b:ff: ce:7d:28:55:35:61:4e:10:b1:72:d1:28:46:2d:f7: 88:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4C:BD:3B:F3:FD:E0:51:1E:25:2F:97:17:89:97:2F:B1:34:95:BD X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132362e302e302f31362d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 112.126.0.0/16 Signature Algorithm: sha256WithRSAEncryption 44:ff:63:7c:0f:da:cf:eb:35:e6:aa:00:33:4f:26:f1:bc:2c: 05:0a:fe:c0:e6:f6:b5:20:a5:1a:fc:a4:29:80:58:80:38:de: e1:06:8f:5e:9f:aa:a1:b7:64:d3:06:ab:98:57:fd:bd:96:c9: 9b:9f:ee:ca:14:9e:0e:c0:c5:dc:6f:ea:bf:4c:77:b4:a2:0a: 50:fb:3f:98:8d:fe:55:95:38:14:70:9f:d3:b1:78:2b:c6:27: 3a:56:14:d0:3e:a4:70:dd:e3:82:04:8a:93:a8:41:7d:66:ed: ca:ae:3e:29:f0:e8:49:f5:14:c8:ed:2e:d0:c0:0f:90:72:0c: 3b:60:ea:28:d9:77:44:cb:eb:ca:ec:2d:a0:a6:09:60:d5:bd: b3:83:99:6e:83:87:a6:1a:78:c1:f9:28:f5:3b:28:e5:50:ce: f6:a4:15:2b:9d:9a:6c:f7:bd:74:44:9c:5c:88:83:d6:2a:3e: 44:84:81:09:7d:86:d6:df:22:fb:58:10:ed:58:e3:a4:e7:13: 4d:b5:9c:96:3e:6a:55:89:10:54:a1:b9:a6:00:ba:6c:96:2d: 55:9c:88:6d:a7:ee:fa:4a:96:80:85:45:b8:95:88:9f:a0:6e: 70:27:48:21:47:e7:0b:3c:96:0c:e1:90:c3:31:30:29:f3:77: c0:7f:74:62 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUPf6AD9DF2jpxKXHzcsgaBp8c/q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjAxMjAwNjU1MzBaFw0yNzAxMTkwNzAwMzBaMDMxMTAvBgNV BAMTKEFDNENCRDNCRjNGREUwNTExRTI1MkY5NzE3ODk5NzJGQjEzNDk1QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0D7z+Yjm9x2tv9jCAPTZj9HCq OG/+pXIBYb5i/LxwT2hluRbTOFOcTXWX00sNm0QtQqM7R3DtbO5MyU1FCM41pCpA JXOx46rBtnH/B12wnAW2zHwM+MWSpeSmuCArIPKRbA91Uvr8NhcpAXSey/gxoS15 JTaklI/eM5E8miBwXtf5PEywBbu7lu6D9eLa0SpmYOrvegHRUokSVVrWM0HYt+Ed HtQ3H6hERo5DjB7d7ne702YH8EeVNWh1vjx8Bikr+uDQT0kCc0AV2qZ+syddc0f1 s56Qs9Cuslw8ZosR5gGWhFjK5R+7B3Pb2O5b/859KFU1YU4QsXLRKEYt94gpAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUrEy9O/P94FEeJS+XF4mXL7E0lb0wHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzEzMTMyMmUzMTMy MzYyZTMwMmUzMDJmMzEzNjJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAHB+MA0GCSqGSIb3DQEBCwUAA4IBAQBE/2N8D9rP6zXmqgAzTybxvCwFCv7A 5va1IKUa/KQpgFiAON7hBo9en6qht2TTBquYV/29lsmbn+7KFJ4OwMXcb+q/THe0 ogpQ+z+Yjf5VlTgUcJ/TsXgrxic6VhTQPqRw3eOCBIqTqEF9Zu3Krj4p8OhJ9RTI 7S7QwA+Qcgw7YOoo2XdEy+vK7C2gpglg1b2zg5lug4emGnjB+Sj1OyjlUM72pBUr nZps9710RJxciIPWKj5EhIEJfYbW3yL7WBDtWOOk5xNNtZyWPmpViRBUobmmALps li1VnIhtp+76SpaAhUW4lYifoG5wJ0ghR+cLPJYM4ZDDMTAp83fAf3Ri -----END CERTIFICATE-----Generated at Wed Jan 21 21:09:05 2026 by rpki-client