This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132372e302e302f31362d3234203d3e203337393633.roa File: 3131322e3132372e302e302f31362d3234203d3e203337393633.roa (raw, json) Hash identifier: goE3v337E72XTpSyZ1GGzQZcIkJqpGaZayoHHRYCyyI= Subject key identifier: 1B:3B:03:A5:EA:7C:84:A8:5C:A2:70:62:9D:2A:53:DD:67:AB:F1:83 Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 0794E783C751422094F0903AD336EE2652C05429 Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132372e302e302f31362d3234203d3e203337393633.roa Signing time: Tue 20 Jan 2026 07:00:30 +0000 ROA not before: Tue 20 Jan 2026 06:55:30 +0000 ROA not after: Tue 19 Jan 2027 07:00:30 +0000 asID: 37963 IP address blocks: 112.127.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 21:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:94:e7:83:c7:51:42:20:94:f0:90:3a:d3:36:ee:26:52:c0:54:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Jan 20 06:55:30 2026 GMT Not After : Jan 19 07:00:30 2027 GMT Subject: CN=1B3B03A5EA7C84A85CA270629D2A53DD67ABF183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:69:3c:75:d2:5f:ac:a7:bc:b9:86:ba:f5: f3:95:24:c7:ca:45:24:cf:98:96:4f:b6:b0:44:a0: 11:f6:63:a3:f6:31:5d:09:a5:dd:32:c1:98:4a:f7: e6:ab:50:a9:15:1e:a1:73:af:7c:f1:77:b6:52:12: 1e:e0:7a:fd:b3:38:ef:fa:40:38:64:08:08:c9:a4: 7d:6c:3d:8b:a3:ef:f9:e2:8f:89:77:f5:07:c1:dc: cf:23:81:58:c9:81:72:d6:9d:ad:13:e0:c8:05:31: 14:71:b4:1f:e5:6c:d7:cc:fa:22:b1:54:9d:de:64: e9:bc:8e:60:6b:59:cc:25:ce:55:02:fe:13:c5:54: ba:cb:99:94:8f:9d:b9:1f:dc:e2:79:73:9b:3d:e9: 6e:a9:e1:b3:58:0b:4c:e4:41:e0:8d:ac:1f:c6:c6: 29:1e:33:b2:c6:29:08:22:85:d1:4d:31:77:41:a2: 9b:b6:1f:7f:dc:6f:3e:98:84:8f:7f:0f:d8:39:04: 02:0f:f3:54:87:57:b3:7a:41:3b:8b:77:97:9a:de: 70:e2:9e:63:2d:e3:99:f5:09:d4:65:77:df:62:47: 31:03:92:e9:3a:7c:9d:55:d3:88:5c:88:39:de:ed: ad:38:d1:af:bb:83:08:0e:69:6e:4a:65:b5:5c:27: f0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3B:03:A5:EA:7C:84:A8:5C:A2:70:62:9D:2A:53:DD:67:AB:F1:83 X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131322e3132372e302e302f31362d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 112.127.0.0/16 Signature Algorithm: sha256WithRSAEncryption a3:21:a5:63:d9:84:0c:91:e2:6e:8d:f8:fd:d1:de:2b:d0:1a: d6:86:58:97:cd:3e:98:88:02:19:32:04:34:3d:4e:50:61:19: b6:16:dc:20:d9:f0:61:07:6d:e7:1b:70:82:61:31:21:fb:ad: c6:3f:48:8a:cf:33:08:48:5b:55:c3:ea:02:22:ce:64:79:47: 13:d1:c0:d0:6e:29:13:7f:d3:6f:6f:f0:fb:03:b6:dc:1e:88: e4:3d:66:65:88:d3:a5:99:ed:f9:0b:f2:f0:d3:49:55:b4:63: 0a:a6:34:f8:e0:05:70:67:b2:f8:4a:6b:d6:2f:da:e3:39:ad: 54:e2:43:fd:0d:2b:ec:1c:48:9b:55:fa:15:43:6d:2b:61:1f: 1f:1c:87:f6:f4:9d:8a:86:39:ee:5b:b0:d3:4f:72:d6:ce:48: 6f:d0:2b:14:aa:47:ef:51:e2:56:f4:8e:15:07:be:ac:f1:2c: 1b:8a:94:c1:f7:1c:8e:0d:f2:01:bf:e7:b0:12:a4:c9:06:3f: a0:c7:06:e0:24:3f:8f:6c:5e:dd:4c:d2:0a:d2:36:c6:21:3e: e5:16:da:be:87:8d:89:17:a0:bc:10:b4:24:4d:26:bf:a5:86: f5:35:79:ea:33:57:53:8d:70:3f:cf:2d:2f:4f:91:28:3b:89: fa:a0:8c:69 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUB5Tng8dRQiCU8JA60zbuJlLAVCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjAxMjAwNjU1MzBaFw0yNzAxMTkwNzAwMzBaMDMxMTAvBgNV BAMTKDFCM0IwM0E1RUE3Qzg0QTg1Q0EyNzA2MjlEMkE1M0RENjdBQkYxODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypmk8ddJfrKe8uYa69fOVJMfK RSTPmJZPtrBEoBH2Y6P2MV0Jpd0ywZhK9+arUKkVHqFzr3zxd7ZSEh7gev2zOO/6 QDhkCAjJpH1sPYuj7/nij4l39QfB3M8jgVjJgXLWna0T4MgFMRRxtB/lbNfM+iKx VJ3eZOm8jmBrWcwlzlUC/hPFVLrLmZSPnbkf3OJ5c5s96W6p4bNYC0zkQeCNrB/G xikeM7LGKQgihdFNMXdBopu2H3/cbz6YhI9/D9g5BAIP81SHV7N6QTuLd5ea3nDi nmMt45n1CdRld99iRzEDkuk6fJ1V04hciDne7a040a+7gwgOaW5KZbVcJ/DXAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUGzsDpep8hKhconBinSpT3Wer8YMwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzEzMTMyMmUzMTMy MzcyZTMwMmUzMDJmMzEzNjJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAHB/MA0GCSqGSIb3DQEBCwUAA4IBAQCjIaVj2YQMkeJujfj90d4r0BrWhliX zT6YiAIZMgQ0PU5QYRm2Ftwg2fBhB23nG3CCYTEh+63GP0iKzzMISFtVw+oCIs5k eUcT0cDQbikTf9Nvb/D7A7bcHojkPWZliNOlme35C/Lw00lVtGMKpjT44AVwZ7L4 SmvWL9rjOa1U4kP9DSvsHEibVfoVQ20rYR8fHIf29J2KhjnuW7DTT3LWzkhv0CsU qkfvUeJW9I4VB76s8SwbipTB9xyODfIBv+ewEqTJBj+gxwbgJD+PbF7dTNIK0jbG IT7lFtq+h42JF6C8ELQkTSa/pYb1NXnqM1dTjXA/zy0vT5EoO4n6oIxp -----END CERTIFICATE-----Generated at Wed Jan 21 21:09:06 2026 by rpki-client