This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230302e302f32342d3332203d3e20313432313332.roa File: 3131342e32382e3230302e302f32342d3332203d3e20313432313332.roa (raw, json) Hash identifier: KoUMh3x7T0xKHM2eTaNWMg9CRDqOMsaVTZmwqsXvI1E= Subject key identifier: B8:B9:1E:CE:AB:F5:30:FF:C6:50:BC:15:05:0C:CB:27:B6:02:49:5B Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Certificate serial: 488640CE985BDB3FBDE5FF37DB57DA625A048187 Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230302e302f32342d3332203d3e20313432313332.roa Signing time: Tue 20 Jan 2026 02:27:15 +0000 ROA not before: Tue 20 Jan 2026 02:22:15 +0000 ROA not after: Tue 19 Jan 2027 02:27:15 +0000 asID: 142132 IP address blocks: 114.28.200.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 03:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:86:40:ce:98:5b:db:3f:bd:e5:ff:37:db:57:da:62:5a:04:81:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Validity Not Before: Jan 20 02:22:15 2026 GMT Not After : Jan 19 02:27:15 2027 GMT Subject: CN=B8B91ECEABF530FFC650BC15050CCB27B602495B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:2e:d0:7a:7f:1a:cd:5c:a3:7d:a7:bb:9e: b1:72:4f:b7:94:ca:36:df:3f:aa:e8:de:c3:a5:05: d3:e7:50:6e:a1:36:5b:93:2a:96:a4:eb:75:fe:ce: 95:de:ae:d9:03:9d:98:c4:db:0f:db:c6:bc:30:3a: f1:d6:c6:9d:23:be:1c:ba:9d:e8:3c:e5:a0:cb:9b: da:8b:da:bc:b8:67:4f:a1:24:12:97:bd:57:50:9e: 43:54:7b:a2:dd:42:21:f6:75:01:64:03:43:82:e5: af:f8:4f:49:63:cc:25:92:d9:8c:68:1b:64:80:a7: 7e:ef:56:6f:39:6f:04:ea:c8:48:03:c2:8b:3c:dd: dd:19:de:e2:c8:02:e8:a7:91:69:1b:56:22:08:13: bd:21:23:a6:a8:6e:99:66:52:7c:69:16:0c:7b:6f: df:c1:0a:5b:0e:77:95:9d:b1:fc:e1:a2:bb:fd:ab: 9d:b2:bd:a4:ca:77:06:bb:d6:41:3c:c4:1c:84:32: 00:f2:66:bb:45:9e:eb:c4:fd:85:0b:d4:e3:0c:57: 8f:54:a0:a4:84:0d:00:79:3c:35:62:cc:a5:64:52: 80:72:11:84:49:99:e7:7c:3e:76:64:50:44:fe:35: 46:57:14:f7:d9:ce:61:b3:9a:64:fe:0c:ae:f6:a9: c8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B9:1E:CE:AB:F5:30:FF:C6:50:BC:15:05:0C:CB:27:B6:02:49:5B X509v3 Authority Key Identifier: keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230302e302f32342d3332203d3e20313432313332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.28.200.0/24 Signature Algorithm: sha256WithRSAEncryption 98:f8:46:ad:47:a9:7c:9b:35:1d:5d:5c:24:3b:41:2d:10:5c: 90:ce:f1:eb:9f:14:d9:5e:1c:87:6a:79:c1:11:f8:19:bd:99: b7:3e:b9:30:69:02:a8:ad:7c:99:9c:87:1c:31:3f:71:e2:8e: 01:ef:2e:97:bd:83:c8:4b:ec:12:0f:d0:81:91:47:5a:71:76: 33:9d:7a:64:9a:56:0c:64:48:ec:d9:6d:2f:41:b8:c2:74:a0: 58:3d:14:18:53:7e:d3:e7:93:f5:20:7c:c7:44:8b:a0:31:ea: ee:d7:7f:87:e3:28:6b:cb:d7:5f:31:13:94:67:d8:a9:f7:f8: 60:af:e8:60:8b:da:7a:f6:49:85:cd:eb:8a:18:7d:63:1b:2d: 4e:60:47:fb:44:9e:bc:ad:c3:a3:d9:c9:50:00:38:1b:58:75: bc:b0:f9:ac:b2:49:cc:6d:7c:f5:96:fe:21:36:7e:3b:62:a1: 42:8f:52:1c:36:9e:3b:76:4c:df:58:fc:82:10:0d:a5:58:9a: 81:f9:1f:fc:73:d7:71:f3:bc:e8:66:84:15:71:39:9e:53:a9: 54:1a:35:f9:e1:b2:9a:fd:52:29:ed:88:5e:7f:a1:c8:09:e9: 6e:8d:5f:4f:fc:03:77:27:fb:ca:c3:64:ac:a1:58:0f:eb:d6: cf:a4:3d:f4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUSIZAzphb2z+95f8321faYloEgYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5 OUVBQkQxMzAeFw0yNjAxMjAwMjIyMTVaFw0yNzAxMTkwMjI3MTVaMDMxMTAvBgNV BAMTKEI4QjkxRUNFQUJGNTMwRkZDNjUwQkMxNTA1MENDQjI3QjYwMjQ5NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCubS7Qen8azVyjfae7nrFyT7eU yjbfP6ro3sOlBdPnUG6hNluTKpak63X+zpXertkDnZjE2w/bxrwwOvHWxp0jvhy6 neg85aDLm9qL2ry4Z0+hJBKXvVdQnkNUe6LdQiH2dQFkA0OC5a/4T0ljzCWS2Yxo G2SAp37vVm85bwTqyEgDwos83d0Z3uLIAuinkWkbViIIE70hI6aobplmUnxpFgx7 b9/BClsOd5Wdsfzhorv9q52yvaTKdwa71kE8xByEMgDyZrtFnuvE/YUL1OMMV49U oKSEDQB5PDVizKVkUoByEYRJmed8PnZkUET+NUZXFPfZzmGzmmT+DK72qcjLAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUuLkezqv1MP/GULwVBQzLJ7YCSVswHwYDVR0j BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ0NTgxMTUvMC8zMTMxMzQyZTMy MzgyZTMyMzAzMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzQzMjMxMzMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHIcyDANBgkqhkiG9w0BAQsFAAOCAQEAmPhGrUepfJs1HV1cJDtB LRBckM7x658U2V4ch2p5wRH4Gb2Ztz65MGkCqK18mZyHHDE/ceKOAe8ul72DyEvs Eg/QgZFHWnF2M516ZJpWDGRI7NltL0G4wnSgWD0UGFN+0+eT9SB8x0SLoDHq7td/ h+Moa8vXXzETlGfYqff4YK/oYIvaevZJhc3rihh9YxstTmBH+0SevK3Do9nJUAA4 G1h1vLD5rLJJzG189Zb+ITZ+O2KhQo9SHDaeO3ZM31j8ghANpViagfkf/HPXcfO8 6GaEFXE5nlOpVBo1+eGymv1SKe2IXn+hyAnpbo1fT/wDdyf7ysNkrKFYD+vWz6Q9 9A== -----END CERTIFICATE-----Generated at Tue Jan 20 17:43:14 2026 by rpki-client