This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230322e302f32342d3332203d3e20313432313332.roa
File: 3131342e32382e3230322e302f32342d3332203d3e20313432313332.roa (raw, json)
Hash identifier: ++F4eXcz0vDMIbqar2KgOOZoXvVwUpAd2Xzif+khECA=
Subject key identifier: B0:A1:33:A6:58:8A:17:43:07:D5:48:52:09:A5:2D:44:1A:81:03:38
Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial: 0D46BF816CF5D44B35A807C2E280B27E85A12932
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230322e302f32342d3332203d3e20313432313332.roa
Signing time: Tue 20 Jan 2026 02:27:15 +0000
ROA not before: Tue 20 Jan 2026 02:22:15 +0000
ROA not after: Tue 19 Jan 2027 02:27:15 +0000
asID: 142132
IP address blocks: 114.28.202.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 03:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:46:bf:81:6c:f5:d4:4b:35:a8:07:c2:e2:80:b2:7e:85:a1:29:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Validity
Not Before: Jan 20 02:22:15 2026 GMT
Not After : Jan 19 02:27:15 2027 GMT
Subject: CN=B0A133A6588A174307D5485209A52D441A810338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:15:75:93:ff:38:4e:59:11:26:38:4f:72:
ed:10:52:61:58:df:a4:fd:66:a0:6f:b6:74:a5:cd:
e6:55:3d:23:8c:21:b2:97:10:fa:31:79:f7:cb:47:
fa:28:db:b3:bd:84:50:81:d9:8e:b7:25:d3:5d:00:
46:ea:ac:5d:4b:53:35:9f:27:03:3c:e4:5b:32:a6:
9b:eb:84:41:73:8e:02:6a:07:b1:1c:bb:be:9b:50:
4b:b1:70:71:56:5f:99:20:a6:f2:73:0c:27:c9:69:
63:a3:17:7c:6a:16:de:04:bf:b0:a1:1c:57:82:a6:
1c:40:f5:fd:ad:86:cf:f6:e8:90:15:cf:f1:73:a1:
85:e4:21:80:d4:47:b8:26:24:21:85:84:4a:57:6b:
c7:6c:71:e4:46:25:ba:ad:3d:30:23:29:cf:2a:22:
b7:9a:5d:64:9c:c6:11:4a:f5:75:f8:06:2c:28:c9:
55:a5:41:52:4a:df:f4:67:bb:d7:c0:b5:9f:35:f8:
71:cf:32:1f:60:22:51:44:27:6d:76:95:6c:45:d1:
eb:3f:f6:0c:72:60:b6:64:df:ca:a9:81:47:c7:c8:
e4:b5:4d:62:35:3f:6e:d2:c2:f8:27:75:27:61:d3:
be:5e:ee:1f:0a:c6:de:8b:92:54:09:f8:76:71:92:
94:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A1:33:A6:58:8A:17:43:07:D5:48:52:09:A5:2D:44:1A:81:03:38
X509v3 Authority Key Identifier:
keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230322e302f32342d3332203d3e20313432313332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.28.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ad:89:3a:d4:d2:f2:9a:24:43:be:58:9f:b4:97:d3:65:dc:
9e:61:42:51:66:5a:bc:5c:c2:e8:17:ac:9b:33:e5:b7:6d:61:
cd:94:03:83:68:ec:32:18:64:ba:13:3b:2a:52:ca:12:e9:a2:
bf:70:7c:c5:a8:8d:c7:55:8b:50:79:10:71:06:f9:57:d9:9c:
ec:dd:e0:59:32:f7:d8:31:49:5c:3d:99:4e:33:de:1e:60:6d:
19:60:57:a4:23:7b:95:36:76:e0:11:ff:fa:82:5a:fd:90:f3:
43:f5:2a:16:23:c1:c0:07:e2:42:70:2a:36:f2:80:63:17:54:
d6:fd:80:11:8d:66:99:0a:60:d9:e8:0b:e0:3a:57:96:ce:e7:
61:95:39:ac:3d:18:1d:20:21:db:27:1b:83:dc:ee:78:99:30:
ae:23:84:82:ad:6c:c5:de:de:7c:d2:75:3b:87:41:5b:2f:13:
3c:c1:30:75:49:70:fd:30:65:ec:2f:b9:4a:8a:0b:51:d1:27:
c1:94:42:d8:c1:f0:9b:78:80:b7:14:b8:d5:ef:05:21:ad:61:
99:9f:58:fe:78:f6:85:81:1a:3a:2d:20:5f:9a:5d:0c:a2:b7:
84:53:06:f3:79:e3:0a:f4:a9:39:f1:aa:98:c0:d7:a8:be:74:
ef:84:78:d5
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUDUa/gWz11Es1qAfC4oCyfoWhKTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5
OUVBQkQxMzAeFw0yNjAxMjAwMjIyMTVaFw0yNzAxMTkwMjI3MTVaMDMxMTAvBgNV
BAMTKEIwQTEzM0E2NTg4QTE3NDMwN0Q1NDg1MjA5QTUyRDQ0MUE4MTAzMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzThV1k/84TlkRJjhPcu0QUmFY
36T9ZqBvtnSlzeZVPSOMIbKXEPoxeffLR/oo27O9hFCB2Y63JdNdAEbqrF1LUzWf
JwM85FsyppvrhEFzjgJqB7Ecu76bUEuxcHFWX5kgpvJzDCfJaWOjF3xqFt4Ev7Ch
HFeCphxA9f2ths/26JAVz/FzoYXkIYDUR7gmJCGFhEpXa8dsceRGJbqtPTAjKc8q
IreaXWScxhFK9XX4BiwoyVWlQVJK3/Rnu9fAtZ81+HHPMh9gIlFEJ212lWxF0es/
9gxyYLZk38qpgUfHyOS1TWI1P27SwvgndSdh075e7h8Kxt6LklQJ+HZxkpQLAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUsKEzpliKF0MH1UhSCaUtRBqBAzgwHwYDVR0j
BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE
NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ0NTgxMTUvMC8zMTMxMzQyZTMy
MzgyZTMyMzAzMjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzQzMjMxMzMzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAHIcyjANBgkqhkiG9w0BAQsFAAOCAQEApK2JOtTS8pokQ75Yn7SX
02XcnmFCUWZavFzC6BesmzPlt21hzZQDg2jsMhhkuhM7KlLKEumiv3B8xaiNx1WL
UHkQcQb5V9mc7N3gWTL32DFJXD2ZTjPeHmBtGWBXpCN7lTZ24BH/+oJa/ZDzQ/Uq
FiPBwAfiQnAqNvKAYxdU1v2AEY1mmQpg2egL4DpXls7nYZU5rD0YHSAh2ycbg9zu
eJkwriOEgq1sxd7efNJ1O4dBWy8TPMEwdUlw/TBl7C+5SooLUdEnwZRC2MHwm3iA
txS41e8FIa1hmZ9Y/nj2hYEaOi0gX5pdDKK3hFMG83njCvSpOfGqmMDXqL5074R4
1Q==
-----END CERTIFICATE-----
Generated at Tue Jan 20 17:45:48 2026 by rpki-client