This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3139362e302f32342d3332203d3e20313432313332.roa File: 3131342e32382e3139362e302f32342d3332203d3e20313432313332.roa (raw, json) Hash identifier: ef87RfIBS984QSXHSEtNyaU7jPboz+fCnEV2HC74zE0= Subject key identifier: BA:FE:29:6D:A0:98:93:BD:26:8A:07:95:CB:23:92:5E:D0:7D:C8:1C Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Certificate serial: 7B524C26B7867655AD0B36C54DED0BE96A2D770F Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3139362e302f32342d3332203d3e20313432313332.roa Signing time: Tue 20 Jan 2026 02:27:15 +0000 ROA not before: Tue 20 Jan 2026 02:22:15 +0000 ROA not after: Tue 19 Jan 2027 02:27:15 +0000 asID: 142132 IP address blocks: 114.28.196.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 03:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:52:4c:26:b7:86:76:55:ad:0b:36:c5:4d:ed:0b:e9:6a:2d:77:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Validity Not Before: Jan 20 02:22:15 2026 GMT Not After : Jan 19 02:27:15 2027 GMT Subject: CN=BAFE296DA09893BD268A0795CB23925ED07DC81C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:e4:7c:8c:7d:54:38:4f:94:31:a1:68:cd: 18:bf:5d:da:88:0d:65:1c:65:99:25:e7:40:2d:c2: 42:82:29:fa:26:78:bb:09:10:d7:66:44:f2:9b:a6: fd:cf:07:b5:09:38:c3:b0:f1:fa:f6:e3:bb:f5:84: 53:19:70:bd:f0:9b:8b:18:8e:dd:24:fc:e5:6e:d4: f0:7a:2a:30:a7:77:ac:45:c5:bd:47:43:aa:dc:e7: 0c:d9:b3:28:41:b5:91:06:4a:92:46:fb:11:d0:31: eb:c0:56:7e:88:af:92:4b:b8:ec:b3:d7:63:db:08: fc:80:63:f1:7c:0a:b7:2d:88:8a:74:9a:1a:46:eb: e4:f0:f7:b5:b9:bc:47:71:28:07:49:ba:3d:c1:11: b4:ff:d8:72:46:71:ed:c0:ed:a7:b3:aa:a7:7d:ac: dc:13:9e:9d:98:24:38:2c:a8:53:90:7f:f7:de:20: e6:2d:3b:ba:e3:e7:cb:31:95:3a:85:0f:85:79:a1: 40:a2:c1:94:68:ee:57:7d:09:4d:83:32:2f:64:1a: aa:a0:95:0c:ca:6d:1b:29:0f:27:e5:c6:fd:d9:c4: ad:32:c8:4b:8d:0e:8a:ed:cc:57:f5:a5:b4:a5:7d: 0a:6e:87:6b:9c:2f:f3:bd:fe:42:e9:be:fb:2d:3a: 94:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FE:29:6D:A0:98:93:BD:26:8A:07:95:CB:23:92:5E:D0:7D:C8:1C X509v3 Authority Key Identifier: keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3139362e302f32342d3332203d3e20313432313332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.28.196.0/24 Signature Algorithm: sha256WithRSAEncryption 93:19:ab:21:20:9d:c8:12:71:dd:3b:90:50:35:f5:5f:25:0a: 0b:20:81:a9:a4:c2:96:9f:d9:89:d5:3a:39:70:7d:aa:79:c5: e0:ef:f0:9d:09:f4:b3:66:6c:ee:69:65:81:09:95:ff:53:32: 55:c9:ef:65:3f:f8:c0:74:65:05:25:b7:5d:24:37:dc:8a:64: 6c:8b:46:cc:2a:eb:ab:0a:1e:7b:e9:41:f3:a8:d9:70:93:0f: d7:55:47:e3:43:19:62:99:b1:67:5a:fd:ac:9a:b0:fe:11:06: 66:2c:da:6f:5f:42:b9:42:3e:7e:32:c3:67:d7:83:b7:93:1a: 73:96:2f:0e:35:27:b3:10:cb:43:af:f2:4d:ef:4c:37:37:cd: 9b:0c:0f:55:70:71:34:2f:fc:3d:d2:b7:02:e1:35:26:94:f6: c2:6b:31:1d:eb:6e:32:4e:d6:b1:5b:83:00:09:03:a4:3e:38: 61:50:fa:22:76:53:1c:3f:b8:bd:bd:49:1e:ba:db:15:5e:f6: 2d:d7:cf:43:ab:7d:fb:7b:2b:b1:f5:4d:17:13:84:f3:72:2b: 28:b5:95:33:7b:f6:c4:1b:e1:41:6d:2b:ff:8e:17:d5:64:a0: 81:be:26:a8:41:f7:27:90:c5:b0:70:31:7e:b8:dc:d9:8c:db: 3b:24:1a:2c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUe1JMJreGdlWtCzbFTe0L6Wotdw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5 OUVBQkQxMzAeFw0yNjAxMjAwMjIyMTVaFw0yNzAxMTkwMjI3MTVaMDMxMTAvBgNV BAMTKEJBRkUyOTZEQTA5ODkzQkQyNjhBMDc5NUNCMjM5MjVFRDA3REM4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHyOR8jH1UOE+UMaFozRi/XdqI DWUcZZkl50AtwkKCKfomeLsJENdmRPKbpv3PB7UJOMOw8fr247v1hFMZcL3wm4sY jt0k/OVu1PB6KjCnd6xFxb1HQ6rc5wzZsyhBtZEGSpJG+xHQMevAVn6Ir5JLuOyz 12PbCPyAY/F8CrctiIp0mhpG6+Tw97W5vEdxKAdJuj3BEbT/2HJGce3A7aezqqd9 rNwTnp2YJDgsqFOQf/feIOYtO7rj58sxlTqFD4V5oUCiwZRo7ld9CU2DMi9kGqqg lQzKbRspDyflxv3ZxK0yyEuNDortzFf1pbSlfQpuh2ucL/O9/kLpvvstOpRbAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUuv4pbaCYk70migeVyyOSXtB9yBwwHwYDVR0j BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ0NTgxMTUvMC8zMTMxMzQyZTMy MzgyZTMxMzkzNjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzQzMjMxMzMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHIcxDANBgkqhkiG9w0BAQsFAAOCAQEAkxmrISCdyBJx3TuQUDX1 XyUKCyCBqaTClp/ZidU6OXB9qnnF4O/wnQn0s2Zs7mllgQmV/1MyVcnvZT/4wHRl BSW3XSQ33IpkbItGzCrrqwoee+lB86jZcJMP11VH40MZYpmxZ1r9rJqw/hEGZiza b19CuUI+fjLDZ9eDt5Mac5YvDjUnsxDLQ6/yTe9MNzfNmwwPVXBxNC/8PdK3AuE1 JpT2wmsxHetuMk7WsVuDAAkDpD44YVD6InZTHD+4vb1JHrrbFV72LdfPQ6t9+3sr sfVNFxOE83IrKLWVM3v2xBvhQW0r/44X1WSggb4mqEH3J5DFsHAxfrjc2YzbOyQa LA== -----END CERTIFICATE-----Generated at Tue Jan 20 17:45:48 2026 by rpki-client