This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3135372e3131392e3139322e302f32332d3233203d3e203337393633.roa File: 3135372e3131392e3139322e302f32332d3233203d3e203337393633.roa (raw, json) Hash identifier: d85GdIxTHF9Rw1pywiDP/VQLaUyACze09vZCzp1zdMw= Subject key identifier: 13:02:A9:C4:0E:2A:2D:CB:AA:EA:71:C9:75:87:10:11:97:06:5D:6A Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 042A482C052359DE16252279BA3BFED0A5BA98BF Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3135372e3131392e3139322e302f32332d3233203d3e203337393633.roa Signing time: Tue 20 Jan 2026 07:00:30 +0000 ROA not before: Tue 20 Jan 2026 06:55:30 +0000 ROA not after: Tue 19 Jan 2027 07:00:30 +0000 asID: 37963 IP address blocks: 157.119.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 21:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:2a:48:2c:05:23:59:de:16:25:22:79:ba:3b:fe:d0:a5:ba:98:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Jan 20 06:55:30 2026 GMT Not After : Jan 19 07:00:30 2027 GMT Subject: CN=1302A9C40E2A2DCBAAEA71C97587101197065D6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:49:35:82:d7:bd:ba:92:8d:f9:27:8e:40: 61:b1:b6:a7:36:08:4f:6d:98:92:b3:81:a5:7c:66: 92:0d:bc:72:e1:2c:60:84:46:2c:b4:d0:1b:ce:93: 17:f1:02:aa:6c:4d:cf:9e:ff:e7:9b:c4:12:72:73: 5a:99:dc:28:09:b2:75:77:18:6c:6b:86:1b:de:5e: ab:3a:09:c6:e5:c6:d2:36:3d:65:b5:b1:6f:e6:f9: 7e:5c:db:f4:c5:c8:bc:05:ba:1e:f9:0e:ac:7c:11: 34:83:e8:6f:4d:e9:77:63:69:2e:33:28:e5:bc:21: 75:9e:8b:7c:f2:2b:e4:89:56:70:1d:c8:fb:a4:e3: 82:38:6b:c9:3b:ca:19:f4:6f:0e:f9:2a:3e:23:e7: 0c:4f:aa:75:4c:5d:96:35:f0:eb:4e:48:db:15:1d: 7c:7a:0a:44:e3:4a:18:0f:eb:65:c4:50:31:70:28: 74:d7:4b:60:9c:1e:09:48:65:1f:79:cc:82:95:b8: 49:d8:8f:39:73:90:14:8b:e8:40:64:84:6a:a9:ea: 28:5b:53:2d:17:50:ee:dc:e5:a1:f9:99:62:51:18: 54:20:b1:2f:56:86:a0:5d:4f:39:c4:42:ed:85:59: fb:05:d5:36:e4:68:93:01:ae:0a:b7:0b:68:bd:27: f8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:02:A9:C4:0E:2A:2D:CB:AA:EA:71:C9:75:87:10:11:97:06:5D:6A X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3135372e3131392e3139322e302f32332d3233203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.119.192.0/23 Signature Algorithm: sha256WithRSAEncryption 49:5f:54:d1:53:9f:25:e7:5e:94:97:ed:fa:5e:ce:5a:43:64: 0c:ea:12:6b:14:39:a0:9b:ba:08:82:35:5b:e9:af:9d:10:99: 36:eb:67:43:4a:cf:19:23:8b:aa:1a:82:e0:d0:4c:3a:3d:66: 9e:12:4a:23:13:27:40:5b:ff:22:85:a6:74:c7:ed:a1:0d:6c: f4:7d:5c:bd:3d:bf:71:6c:0b:7f:e7:8f:de:25:66:12:5f:a2: c2:31:e0:15:b9:34:f9:1d:da:9a:f5:57:93:e3:bc:a2:47:7c: e2:cb:08:5b:ec:19:65:58:fc:6f:8e:d5:a0:7c:46:05:f3:fd: c4:66:ec:89:29:cb:0c:4b:15:04:19:51:15:65:1e:c8:8f:92: 0b:c0:8c:26:2e:be:fb:7b:e9:75:76:57:d2:a1:a6:db:2a:d7: 2d:cd:45:ab:ca:6d:80:3e:f9:16:84:9f:f9:92:13:e4:13:c1: 03:c3:81:6a:d7:8a:57:b5:82:5e:4d:33:68:8f:b7:39:97:93: bc:ac:e9:06:f3:73:9a:6d:03:b5:47:c5:5b:f1:25:04:42:04: c5:38:c7:47:0e:92:99:0a:89:dc:fc:49:0f:4e:42:c1:cd:48: 2c:6f:86:52:8f:3f:7f:23:35:a2:b0:50:5f:9b:31:42:e4:6e: 46:4e:0c:4f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUBCpILAUjWd4WJSJ5ujv+0KW6mL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjAxMjAwNjU1MzBaFw0yNzAxMTkwNzAwMzBaMDMxMTAvBgNV BAMTKDEzMDJBOUM0MEUyQTJEQ0JBQUVBNzFDOTc1ODcxMDExOTcwNjVENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCudEk1gte9upKN+SeOQGGxtqc2 CE9tmJKzgaV8ZpINvHLhLGCERiy00BvOkxfxAqpsTc+e/+ebxBJyc1qZ3CgJsnV3 GGxrhhveXqs6CcblxtI2PWW1sW/m+X5c2/TFyLwFuh75Dqx8ETSD6G9N6XdjaS4z KOW8IXWei3zyK+SJVnAdyPuk44I4a8k7yhn0bw75Kj4j5wxPqnVMXZY18OtOSNsV HXx6CkTjShgP62XEUDFwKHTXS2CcHglIZR95zIKVuEnYjzlzkBSL6EBkhGqp6ihb Uy0XUO7c5aH5mWJRGFQgsS9WhqBdTznEQu2FWfsF1TbkaJMBrgq3C2i9J/iTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUEwKpxA4qLcuq6nHJdYcQEZcGXWowHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU4ODc2NDQwOTA2MzAxNDUvMC8zMTM1MzcyZTMx MzEzOTJlMzEzOTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzNzM5MzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ13wDANBgkqhkiG9w0BAQsFAAOCAQEASV9U0VOfJedelJft+l7O WkNkDOoSaxQ5oJu6CII1W+mvnRCZNutnQ0rPGSOLqhqC4NBMOj1mnhJKIxMnQFv/ IoWmdMftoQ1s9H1cvT2/cWwLf+eP3iVmEl+iwjHgFbk0+R3amvVXk+O8okd84ssI W+wZZVj8b47VoHxGBfP9xGbsiSnLDEsVBBlRFWUeyI+SC8CMJi6++3vpdXZX0qGm 2yrXLc1Fq8ptgD75FoSf+ZIT5BPBA8OBateKV7WCXk0zaI+3OZeTvKzpBvNzmm0D tUfFW/ElBEIExTjHRw6SmQqJ3PxJD05Cwc1ILG+GUo8/fyM1orBQX5sxQuRuRk4M Tw== -----END CERTIFICATE-----Generated at Wed Jan 21 21:09:06 2026 by rpki-client