This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3135372e3131392e3139322e302f32322d3234203d3e203337393633.roa File: 3135372e3131392e3139322e302f32322d3234203d3e203337393633.roa (raw, json) Hash identifier: NvYcvgpbx6I9/r422RHq98K59aloqU/WXru2lzELV3o= Subject key identifier: 1F:54:76:94:21:82:A7:08:89:C4:10:39:07:F9:50:5A:89:03:B9:49 Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 6C1925E7645CE7F3F7CED97EA872CE4F947B6B19 Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3135372e3131392e3139322e302f32322d3234203d3e203337393633.roa Signing time: Tue 20 Jan 2026 07:00:30 +0000 ROA not before: Tue 20 Jan 2026 06:55:30 +0000 ROA not after: Tue 19 Jan 2027 07:00:30 +0000 asID: 37963 IP address blocks: 157.119.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 21:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:19:25:e7:64:5c:e7:f3:f7:ce:d9:7e:a8:72:ce:4f:94:7b:6b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Jan 20 06:55:30 2026 GMT Not After : Jan 19 07:00:30 2027 GMT Subject: CN=1F5476942182A70889C4103907F9505A8903B949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:ab:8b:d6:be:a1:a5:ed:e3:45:26:45:70: ab:53:11:0b:f4:eb:07:af:2e:f0:3c:72:11:ae:f4: d0:77:16:14:f5:be:c5:06:a9:7a:10:87:ad:78:d3: 2a:87:49:05:33:ea:f9:19:69:8f:32:1e:ad:b0:39: fc:2d:bd:a7:69:84:e2:8a:b9:2f:89:cc:47:eb:0a: 6a:b0:9d:9f:bb:7f:46:79:78:75:37:bb:2a:c6:68: 45:23:01:ec:d6:81:59:52:bc:a7:1d:b3:89:e2:bc: 71:e6:f3:dc:4f:bc:52:19:51:6e:b3:68:79:3f:ef: 09:bf:0b:82:47:b7:53:73:d5:c5:47:ca:80:22:70: e4:87:47:d7:0f:8f:2c:d7:da:80:76:e7:13:36:5b: bf:c2:6f:8c:40:de:4f:38:8a:e8:2c:16:9f:b4:93: a1:63:96:61:6a:81:21:2c:4c:24:3f:ce:5d:1f:aa: db:4b:ad:fc:66:b2:fd:06:96:1d:d0:9b:7f:29:13: 25:7f:55:40:5c:cd:17:97:73:53:76:0d:92:1b:c7: 4d:26:3a:b7:33:ba:50:24:fc:4a:80:7c:f9:22:06: ba:b3:38:f4:53:f9:58:c2:09:5f:ed:d1:55:8b:71: b2:77:27:69:f8:31:c7:0e:f3:07:aa:f4:9a:f3:4a: 38:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:54:76:94:21:82:A7:08:89:C4:10:39:07:F9:50:5A:89:03:B9:49 X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3135372e3131392e3139322e302f32322d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.119.192.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:b9:7b:fb:09:da:28:37:75:e2:5a:5a:81:92:d2:c9:30:6a: b0:22:7e:14:a2:fb:b8:d6:62:21:b8:d8:16:6d:4a:ca:30:4b: 28:c9:7a:cd:8d:ac:42:52:81:72:95:ef:a1:80:85:7e:24:a5: 0b:03:b5:de:d8:8e:91:16:1d:03:fe:78:31:62:37:70:3e:3c: 25:03:8d:b5:9f:86:8e:cb:6c:8c:75:cb:76:29:26:ac:9c:8a: b9:9c:ff:85:8c:71:b3:c2:79:2c:e2:8f:eb:19:53:9a:74:1e: 62:39:50:a7:2f:6f:a3:94:a2:f8:bf:5c:c3:ed:f2:57:a2:f9: 38:49:98:52:0a:9e:65:28:97:ec:46:af:87:06:09:50:83:02: e3:9e:87:ef:21:9e:45:34:65:fa:18:12:e0:46:be:56:10:18: 0d:b0:9a:f9:00:eb:19:e8:a5:99:de:bc:4d:23:38:f5:23:89: 47:0b:b1:01:a5:99:9c:9d:ea:7f:01:e9:ad:48:8a:e8:27:43: d1:fc:76:ad:c8:03:2d:7f:29:14:8c:fc:8f:17:52:a3:4f:2f: c3:7c:2a:97:16:08:a2:a5:0d:a8:ae:d2:14:f6:68:fc:b2:f1: 1b:1d:26:17:1d:a4:b6:e8:6e:d3:7f:08:19:d4:c4:b7:b0:1e: ca:67:13:00 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUbBkl52Rc5/P3ztl+qHLOT5R7axkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjAxMjAwNjU1MzBaFw0yNzAxMTkwNzAwMzBaMDMxMTAvBgNV BAMTKDFGNTQ3Njk0MjE4MkE3MDg4OUM0MTAzOTA3Rjk1MDVBODkwM0I5NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpz6uL1r6hpe3jRSZFcKtTEQv0 6wevLvA8chGu9NB3FhT1vsUGqXoQh6140yqHSQUz6vkZaY8yHq2wOfwtvadphOKK uS+JzEfrCmqwnZ+7f0Z5eHU3uyrGaEUjAezWgVlSvKcds4nivHHm89xPvFIZUW6z aHk/7wm/C4JHt1Nz1cVHyoAicOSHR9cPjyzX2oB25xM2W7/Cb4xA3k84iugsFp+0 k6FjlmFqgSEsTCQ/zl0fqttLrfxmsv0Glh3Qm38pEyV/VUBczReXc1N2DZIbx00m OrczulAk/EqAfPkiBrqzOPRT+VjCCV/t0VWLcbJ3J2n4MccO8weq9JrzSjjpAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUH1R2lCGCpwiJxBA5B/lQWokDuUkwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU4ODc2NDQwOTA2MzAxNDUvMC8zMTM1MzcyZTMx MzEzOTJlMzEzOTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAp13wDANBgkqhkiG9w0BAQsFAAOCAQEAa7l7+wnaKDd14lpagZLS yTBqsCJ+FKL7uNZiIbjYFm1KyjBLKMl6zY2sQlKBcpXvoYCFfiSlCwO13tiOkRYd A/54MWI3cD48JQONtZ+GjstsjHXLdikmrJyKuZz/hYxxs8J5LOKP6xlTmnQeYjlQ py9vo5Si+L9cw+3yV6L5OEmYUgqeZSiX7EavhwYJUIMC456H7yGeRTRl+hgS4Ea+ VhAYDbCa+QDrGeilmd68TSM49SOJRwuxAaWZnJ3qfwHprUiK6CdD0fx2rcgDLX8p FIz8jxdSo08vw3wqlxYIoqUNqK7SFPZo/LLxGx0mFx2ktuhu038IGdTEt7AeymcT AA== -----END CERTIFICATE-----Generated at Wed Jan 21 21:09:17 2026 by rpki-client