This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230312e302f32342d3332203d3e203234343133.roa File: 3131342e32382e3230312e302f32342d3332203d3e203234343133.roa (raw, json) Hash identifier: T+41u58iCYzK76IPm4ejlJflAVxjyPBBRAIJkVbfGE4= Subject key identifier: 66:FA:A5:BE:93:C2:90:E1:19:F2:F5:BE:7B:8C:F2:65:6B:D5:4D:E7 Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Certificate serial: 05C6E7B6E20DD8B0A89DF5FD54FC9A8D35E27F87 Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230312e302f32342d3332203d3e203234343133.roa Signing time: Tue 20 Jan 2026 02:27:16 +0000 ROA not before: Tue 20 Jan 2026 02:22:16 +0000 ROA not after: Tue 19 Jan 2027 02:27:16 +0000 asID: 24413 IP address blocks: 114.28.201.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 03:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c6:e7:b6:e2:0d:d8:b0:a8:9d:f5:fd:54:fc:9a:8d:35:e2:7f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Validity Not Before: Jan 20 02:22:16 2026 GMT Not After : Jan 19 02:27:16 2027 GMT Subject: CN=66FAA5BE93C290E119F2F5BE7B8CF2656BD54DE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:d7:39:42:a7:9c:12:da:b6:88:ea:09:e3: fe:e0:23:90:b6:22:74:59:a5:96:39:eb:44:3d:ea: ea:c8:c5:99:5b:33:37:32:c7:c5:9a:ce:40:89:a3: c3:37:4a:3b:ac:7e:0f:de:f7:2f:47:26:b8:d5:51: d7:4e:ac:30:eb:62:2d:bb:89:d6:14:49:88:17:f5: 30:8f:ec:22:c0:12:4f:0a:a7:99:cd:2a:ad:da:69: 71:84:53:d4:b9:40:c0:0b:15:9e:a0:53:28:8d:7f: b1:67:fa:06:f8:e4:c3:a7:15:72:76:ac:37:f8:7d: bf:61:21:b8:fc:52:70:0f:49:83:6e:6e:d1:48:a4: 2f:05:09:b8:85:0b:7e:2c:24:28:dd:20:d7:1e:b0: 8b:c5:5b:5a:70:6b:7e:53:26:bc:b6:18:fc:16:91: b3:6c:4a:16:6d:72:f6:fb:e4:58:58:1b:62:78:ed: 3d:74:68:02:2a:18:f1:ba:4f:4e:34:90:37:da:eb: f5:e9:ed:8b:36:a3:4d:5d:e2:6a:55:ea:5a:5a:22: c0:f8:d7:50:21:3e:5f:92:1f:00:00:50:ed:ca:d6: 7b:ad:32:0a:92:f1:c2:b8:49:b6:d0:1e:ba:3d:95: b2:28:a4:0a:d6:61:00:d9:9f:8b:b2:8b:9d:2f:98: b3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FA:A5:BE:93:C2:90:E1:19:F2:F5:BE:7B:8C:F2:65:6B:D5:4D:E7 X509v3 Authority Key Identifier: keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230312e302f32342d3332203d3e203234343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.28.201.0/24 Signature Algorithm: sha256WithRSAEncryption df:21:15:ff:5e:52:10:fb:12:48:64:be:a5:0e:69:79:5d:1e: 78:3b:68:5a:94:9b:88:55:ec:2f:7f:07:80:52:62:5b:9a:b5: f2:71:e1:93:a9:7c:06:95:ec:fc:96:ff:32:2d:9c:bf:7f:6a: 08:e2:86:ff:e9:9e:02:1d:30:a8:f0:8f:a2:65:d9:bb:e6:4f: 80:33:9d:80:7c:87:ba:43:58:93:1d:f5:4c:22:eb:79:83:0b: 91:67:7d:22:31:9d:44:cb:e4:f2:bf:4e:92:f3:8c:58:4e:b0: e8:50:4b:fd:b7:6a:e0:d1:3c:94:ad:3d:b7:42:e5:a2:34:ab: af:df:8d:d3:c7:37:f9:46:a8:dd:f8:e9:45:67:e1:9d:76:6f: 8c:97:d0:f1:b4:1b:56:a8:75:6c:33:79:aa:37:e9:30:81:5b: 3d:0d:67:9c:45:3d:34:23:57:4a:e8:a1:dc:64:2a:c7:bb:5f: ed:f9:95:ba:01:20:8b:b1:d6:0c:39:a2:25:b7:0a:dc:b6:55: a9:37:18:1e:aa:c7:b5:fd:35:a8:7d:a8:79:b9:31:22:06:f5: 52:8d:5d:7d:7a:39:a1:89:eb:cf:dc:11:f9:7f:90:9a:cd:c8: e1:ac:5f:e8:8b:02:6f:9b:55:bd:80:70:80:4a:ad:32:d7:38: 87:a2:76:54 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUBcbntuIN2LConfX9VPyajTXif4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5 OUVBQkQxMzAeFw0yNjAxMjAwMjIyMTZaFw0yNzAxMTkwMjI3MTZaMDMxMTAvBgNV BAMTKDY2RkFBNUJFOTNDMjkwRTExOUYyRjVCRTdCOENGMjY1NkJENTRERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6tc5QqecEtq2iOoJ4/7gI5C2 InRZpZY560Q96urIxZlbMzcyx8WazkCJo8M3Sjusfg/e9y9HJrjVUddOrDDrYi27 idYUSYgX9TCP7CLAEk8Kp5nNKq3aaXGEU9S5QMALFZ6gUyiNf7Fn+gb45MOnFXJ2 rDf4fb9hIbj8UnAPSYNubtFIpC8FCbiFC34sJCjdINcesIvFW1pwa35TJry2GPwW kbNsShZtcvb75FhYG2J47T10aAIqGPG6T040kDfa6/Xp7Ys2o01d4mpV6lpaIsD4 11AhPl+SHwAAUO3K1nutMgqS8cK4SbbQHro9lbIopArWYQDZn4uyi50vmLOnAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUZvqlvpPCkOEZ8vW+e4zyZWvVTecwHwYDVR0j BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDQ1ODExNS8wLzMxMzEzNDJlMzIz ODJlMzIzMDMxMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNDM0MzEzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHIcyTANBgkqhkiG9w0BAQsFAAOCAQEA3yEV/15SEPsSSGS+pQ5peV0e eDtoWpSbiFXsL38HgFJiW5q18nHhk6l8BpXs/Jb/Mi2cv39qCOKG/+meAh0wqPCP omXZu+ZPgDOdgHyHukNYkx31TCLreYMLkWd9IjGdRMvk8r9OkvOMWE6w6FBL/bdq 4NE8lK09t0LlojSrr9+N08c3+Uao3fjpRWfhnXZvjJfQ8bQbVqh1bDN5qjfpMIFb PQ1nnEU9NCNXSuih3GQqx7tf7fmVugEgi7HWDDmiJbcK3LZVqTcYHqrHtf01qH2o ebkxIgb1Uo1dfXo5oYnrz9wR+X+Qms3I4axf6IsCb5tVvYBwgEqtMtc4h6J2VA== -----END CERTIFICATE-----Generated at Tue Jan 20 14:42:10 2026 by rpki-client