This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230332e302f32342d3332203d3e20313432313332.roa
File: 3131342e32382e3230332e302f32342d3332203d3e20313432313332.roa (raw, json)
Hash identifier: lmOz7XF67mZFYt9Fg1hnHf7PdUt79IvByv1PNklOqpk=
Subject key identifier: 91:CE:F5:EF:96:5E:B0:1B:E2:2C:54:7F:7E:62:D8:0D:34:C6:83:1F
Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial: 379232F319CB9B401067207F958E78A62E8E9CF0
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230332e302f32342d3332203d3e20313432313332.roa
Signing time: Tue 20 Jan 2026 02:27:15 +0000
ROA not before: Tue 20 Jan 2026 02:22:15 +0000
ROA not after: Tue 19 Jan 2027 02:27:15 +0000
asID: 142132
IP address blocks: 114.28.203.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 03:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:92:32:f3:19:cb:9b:40:10:67:20:7f:95:8e:78:a6:2e:8e:9c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Validity
Not Before: Jan 20 02:22:15 2026 GMT
Not After : Jan 19 02:27:15 2027 GMT
Subject: CN=91CEF5EF965EB01BE22C547F7E62D80D34C6831F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:26:64:67:27:09:a4:5d:b7:55:ee:a7:1c:
c9:b0:fe:4f:5e:ea:9c:46:d5:9d:df:fe:86:91:26:
23:18:dd:2a:de:39:7e:8b:e6:a9:35:77:eb:f1:b7:
d1:b8:40:9f:26:90:1c:09:67:81:26:e1:2c:85:50:
ca:0e:f3:23:84:5c:a4:d5:a7:e8:56:bb:4f:c9:27:
62:ab:3a:a6:15:69:36:36:66:86:df:80:d2:36:12:
1c:89:13:35:ef:f5:5e:23:df:12:ff:f7:7a:2a:91:
a3:12:d1:35:17:ab:e7:5a:ae:32:e1:f0:b5:48:d0:
f3:a8:21:e1:58:39:fd:c4:c7:f1:ae:e9:f0:f5:cd:
68:37:16:32:d6:42:aa:29:a4:9d:9f:10:8d:a9:be:
fe:14:07:28:ab:6c:84:8f:9d:1a:98:cb:b7:a4:ef:
0c:e5:f6:e6:ef:a4:70:ba:01:e3:10:f8:cc:eb:9b:
06:e4:71:99:59:8b:8d:60:c3:71:7c:74:b5:dc:dc:
74:a1:39:02:50:6a:de:18:0a:b1:a8:48:de:7b:90:
1b:8f:7d:b0:42:01:68:d9:47:18:e1:78:01:da:2d:
1e:35:1d:2c:3f:9d:00:06:28:aa:29:4a:d5:da:28:
24:a1:b6:a4:94:18:79:a7:55:a4:98:5e:02:c6:f8:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CE:F5:EF:96:5E:B0:1B:E2:2C:54:7F:7E:62:D8:0D:34:C6:83:1F
X509v3 Authority Key Identifier:
keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230332e302f32342d3332203d3e20313432313332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.28.203.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:7c:25:bf:d4:f4:40:19:d1:a3:15:fa:42:24:cb:3f:90:99:
ce:2c:45:34:ef:a7:4a:a9:a0:af:30:63:98:22:46:d5:7f:c8:
f1:80:76:f3:18:de:e6:f4:f8:f7:82:e1:f5:e9:db:a3:be:08:
56:a2:80:b5:4b:0d:66:66:99:f0:c3:85:05:1e:99:91:ba:34:
30:c7:01:ef:57:d5:ef:ef:3b:20:53:35:d9:51:0b:1d:28:2b:
13:fc:c6:83:4e:68:31:79:84:94:04:cc:ee:90:1a:f9:54:32:
df:50:02:a0:e3:ce:23:8f:95:97:ff:39:5b:0e:9f:3e:d5:da:
fe:3b:6d:a9:0d:fe:bb:5e:25:6e:0b:b1:e4:43:19:90:3c:e4:
62:6d:15:fc:50:fd:05:ed:68:ef:92:2e:56:5c:b7:69:92:83:
d7:4c:63:2f:13:3e:a2:62:47:11:d5:7f:6a:df:a5:a8:20:84:
42:9d:0c:04:14:01:22:90:03:66:ff:de:c0:3c:10:81:b5:cc:
95:88:2b:60:a8:7e:c5:af:fd:da:6f:04:82:79:ca:0c:70:9f:
c1:12:2e:e9:dc:36:ce:df:29:f5:89:0a:46:01:23:fb:c9:66:
a8:f8:87:20:a3:e7:09:48:b8:15:2c:bc:42:93:5c:ea:b8:67:
8c:7f:64:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 17:43:14 2026 by rpki-client