This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230362e302f32342d3332203d3e20313432313332.roa File: 3131342e32382e3230362e302f32342d3332203d3e20313432313332.roa (raw, json) Hash identifier: OOMgyN+taKLE9Jufup9msTZIEUPYWoe3DJI4eo5lgNM= Subject key identifier: 35:F5:A5:5A:E0:8D:D9:A1:6A:20:FB:5B:14:D2:39:B1:01:0C:02:32 Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Certificate serial: 104C4E1F2EEA8A7305DCFC26802A55686DE5ED9A Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230362e302f32342d3332203d3e20313432313332.roa Signing time: Tue 20 Jan 2026 02:27:16 +0000 ROA not before: Tue 20 Jan 2026 02:22:16 +0000 ROA not after: Tue 19 Jan 2027 02:27:16 +0000 asID: 142132 IP address blocks: 114.28.206.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 03:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:4c:4e:1f:2e:ea:8a:73:05:dc:fc:26:80:2a:55:68:6d:e5:ed:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Validity Not Before: Jan 20 02:22:16 2026 GMT Not After : Jan 19 02:27:16 2027 GMT Subject: CN=35F5A55AE08DD9A16A20FB5B14D239B1010C0232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ac:d0:1b:75:6c:38:0e:16:34:96:36:14:e1: b3:33:16:ef:a8:8d:9e:50:34:00:34:1d:63:8a:7d: ab:db:60:8d:f5:fc:59:8d:3c:26:28:e9:cb:c2:bc: 1b:3c:bf:5d:54:b0:3c:a5:0d:53:ee:39:07:7f:80: d3:41:0f:0a:26:3c:ab:78:e5:22:01:a8:d0:c6:de: bc:12:eb:9a:2a:05:57:a8:15:24:31:8f:22:f8:52: 34:be:23:49:e4:f5:5d:ce:2d:c8:70:38:5c:7b:90: ee:96:b5:d4:8e:d4:47:36:09:8f:20:c7:20:3b:c1: d2:27:bc:64:b7:68:dc:c6:44:d6:3c:e3:ed:a9:6e: 56:0c:45:6d:9e:81:4e:27:89:7b:90:bf:ce:8e:7e: 99:fd:68:3b:4a:f9:c9:28:de:64:4d:e3:1a:ac:bb: a4:bb:ae:c4:b5:5b:93:2f:a0:bc:e6:c2:c2:51:a4: 99:bb:6e:03:da:bb:45:7e:ec:80:4f:d1:7c:fa:cd: 47:d8:d7:06:d2:b1:3e:4f:f9:65:d4:48:fa:31:0d: f0:1b:c1:16:66:81:00:d4:10:43:b0:f7:00:3a:6b: 99:1a:27:ac:5d:fc:68:d4:9d:d0:d3:c4:51:1d:3c: f3:6a:ac:c3:d7:18:9f:78:db:36:6b:f2:1a:3f:52: fc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F5:A5:5A:E0:8D:D9:A1:6A:20:FB:5B:14:D2:39:B1:01:0C:02:32 X509v3 Authority Key Identifier: keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230362e302f32342d3332203d3e20313432313332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.28.206.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:56:e7:f5:8a:39:a2:67:2f:ba:4b:1b:11:f3:79:0a:f1:b0: f5:8e:c1:32:3a:69:1a:3f:fa:75:c2:da:aa:58:28:98:17:37: aa:e0:9a:ce:76:d9:e0:f1:dc:b4:db:bf:5a:08:78:0d:98:24: 59:b0:aa:4b:f4:74:70:73:9d:bd:26:71:19:07:71:ad:d5:4d: d8:52:91:bd:58:ff:73:c7:d8:3e:9f:74:b7:e7:d0:48:dc:1c: ab:87:ab:1f:b5:6a:d4:9b:ff:02:89:82:a0:1d:4a:8d:da:b1: 70:ca:0d:0b:15:57:58:c0:5b:8d:13:7c:d0:ca:1a:23:9b:94: 91:4e:a4:02:d3:b1:69:cf:6a:0f:5b:a8:e0:09:c8:c8:b6:5a: 7d:5d:d4:44:72:3c:27:8e:b2:f7:30:8d:13:30:fe:cb:cf:26: 71:f6:80:50:86:98:95:03:a2:8e:d6:b7:02:c1:90:77:c7:01: f0:04:a4:99:37:d9:fe:a2:4c:c3:fe:f8:d8:a6:13:22:90:67: 2f:5f:0b:1d:d3:7d:c8:76:0d:47:16:af:0a:15:f1:87:1b:ff: 0e:a8:1b:cc:c3:39:24:e3:95:29:49:2b:05:2d:3a:c8:cf:74: 1b:fe:aa:56:e1:e9:dc:0e:83:f7:5d:d1:80:a8:10:f5:90:56: e9:d1:95:a8 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEExOHy7qinMF3PwmgCpVaG3l7ZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5 OUVBQkQxMzAeFw0yNjAxMjAwMjIyMTZaFw0yNzAxMTkwMjI3MTZaMDMxMTAvBgNV BAMTKDM1RjVBNTVBRTA4REQ5QTE2QTIwRkI1QjE0RDIzOUIxMDEwQzAyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrNAbdWw4DhY0ljYU4bMzFu+o jZ5QNAA0HWOKfavbYI31/FmNPCYo6cvCvBs8v11UsDylDVPuOQd/gNNBDwomPKt4 5SIBqNDG3rwS65oqBVeoFSQxjyL4UjS+I0nk9V3OLchwOFx7kO6WtdSO1Ec2CY8g xyA7wdInvGS3aNzGRNY84+2pblYMRW2egU4niXuQv86Ofpn9aDtK+cko3mRN4xqs u6S7rsS1W5MvoLzmwsJRpJm7bgPau0V+7IBP0Xz6zUfY1wbSsT5P+WXUSPoxDfAb wRZmgQDUEEOw9wA6a5kaJ6xd/GjUndDTxFEdPPNqrMPXGJ942zZr8ho/UvyDAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUNfWlWuCN2aFqIPtbFNI5sQEMAjIwHwYDVR0j BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ0NTgxMTUvMC8zMTMxMzQyZTMy MzgyZTMyMzAzNjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzQzMjMxMzMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHIczjANBgkqhkiG9w0BAQsFAAOCAQEASlbn9Yo5omcvuksbEfN5 CvGw9Y7BMjppGj/6dcLaqlgomBc3quCaznbZ4PHctNu/Wgh4DZgkWbCqS/R0cHOd vSZxGQdxrdVN2FKRvVj/c8fYPp90t+fQSNwcq4erH7Vq1Jv/AomCoB1KjdqxcMoN CxVXWMBbjRN80MoaI5uUkU6kAtOxac9qD1uo4AnIyLZafV3URHI8J46y9zCNEzD+ y88mcfaAUIaYlQOijta3AsGQd8cB8ASkmTfZ/qJMw/742KYTIpBnL18LHdN9yHYN RxavChXxhxv/DqgbzMM5JOOVKUkrBS06yM90G/6qVuHp3A6D913RgKgQ9ZBW6dGV qA== -----END CERTIFICATE-----Generated at Tue Jan 20 17:44:12 2026 by rpki-client