This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3231302e302f32342d3332203d3e20313432313332.roa File: 3131342e32382e3231302e302f32342d3332203d3e20313432313332.roa (raw, json) Hash identifier: kcB5KEzrviuIH4p+bHU8yS/NA/6bEV2Jl8jlw4HQwRE= Subject key identifier: 95:2D:C5:D4:97:6B:40:D3:30:3E:98:F1:CD:37:3E:D6:97:FD:03:7F Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Certificate serial: 572408BE825D438600935A08D353BE5A7E404D5E Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3231302e302f32342d3332203d3e20313432313332.roa Signing time: Tue 20 Jan 2026 02:27:14 +0000 ROA not before: Tue 20 Jan 2026 02:22:14 +0000 ROA not after: Tue 19 Jan 2027 02:27:14 +0000 asID: 142132 IP address blocks: 114.28.210.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 03:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:24:08:be:82:5d:43:86:00:93:5a:08:d3:53:be:5a:7e:40:4d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Validity Not Before: Jan 20 02:22:14 2026 GMT Not After : Jan 19 02:27:14 2027 GMT Subject: CN=952DC5D4976B40D3303E98F1CD373ED697FD037F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:67:1e:9d:d1:fd:87:98:d7:ef:7d:4d:58: 94:2c:f1:04:c7:fe:88:2f:43:48:df:2e:10:85:4d: 22:67:e3:6a:2f:03:e4:fc:44:b8:4d:44:45:75:18: 11:18:52:2f:fa:1a:f7:94:35:bf:54:4b:f0:13:23: 4f:de:5b:1e:fc:ac:9b:5a:cb:1b:0d:40:ef:7c:48: 80:f5:1a:89:da:f4:28:eb:3f:34:db:89:ff:3e:ef: 9d:5f:74:03:0e:3d:b2:1b:7a:4a:82:48:e3:cd:d1: 1b:27:e3:b3:a3:f1:10:31:80:b2:e8:0c:da:05:c9: 06:ca:ba:e4:71:8b:91:a0:aa:28:e8:c9:c0:84:47: 80:d6:5b:ec:9b:3e:34:75:86:30:36:36:f9:8a:03: 3b:ce:52:a8:79:a2:11:61:cf:cd:d4:99:86:9d:6e: db:6c:e7:fe:b9:5e:54:de:f5:15:6b:44:bd:6c:b0: fb:dd:f6:03:7c:ba:d1:71:38:94:87:ee:96:80:06: 23:c4:89:1a:34:a0:a7:01:17:44:77:80:26:99:66: 48:09:93:81:39:f0:50:8a:0b:2b:d4:a8:4e:5f:47: bc:db:f0:cd:c3:0a:9a:20:e6:12:46:3a:a2:04:8f: f8:97:d2:7e:ee:21:aa:e8:d1:0e:f6:eb:5d:01:19: 33:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2D:C5:D4:97:6B:40:D3:30:3E:98:F1:CD:37:3E:D6:97:FD:03:7F X509v3 Authority Key Identifier: keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3231302e302f32342d3332203d3e20313432313332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.28.210.0/24 Signature Algorithm: sha256WithRSAEncryption 19:eb:66:0b:39:14:9d:44:fc:df:e0:a9:f1:79:42:63:14:a2: 70:04:bc:fa:70:07:c6:97:53:b9:95:e3:16:63:7a:22:e8:14: dc:1b:94:6b:dd:53:7e:5a:04:94:10:85:64:a9:d4:a1:27:a3: f2:80:c7:13:ef:76:47:63:af:0e:17:ea:0d:21:8c:f1:20:95: c4:ac:c2:87:4e:47:cc:1c:31:b4:c3:74:be:e3:65:ab:e3:e3: 62:eb:aa:1e:43:91:bf:96:f8:29:2c:2d:17:a3:fa:7d:b4:96: 30:c2:1a:e1:9c:0b:21:2f:81:94:8d:39:15:47:be:d1:3d:20: a1:0b:ea:2e:ee:9f:27:a5:26:73:cb:64:ee:69:ac:01:bb:8d: e3:a7:cc:2d:6c:81:df:57:78:86:8c:86:c4:88:02:54:22:cf: 52:25:eb:0e:d6:07:52:40:36:a6:7d:c5:80:c5:ad:b0:06:14: c9:ab:df:d8:b5:f6:30:31:99:aa:f6:45:f3:b2:01:65:2c:5e: f9:bf:66:d0:e2:53:ce:10:8c:17:7e:c0:fd:9f:17:f6:e2:d5: 00:fc:bc:8a:7f:d1:3d:8b:d2:9d:42:d2:3d:20:6f:86:ed:12: 4e:ad:4c:9f:54:43:7a:21:f1:64:7b:11:54:cc:23:c3:e9:e3: d2:cf:cb:bc -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUVyQIvoJdQ4YAk1oI01O+Wn5ATV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5 OUVBQkQxMzAeFw0yNjAxMjAwMjIyMTRaFw0yNzAxMTkwMjI3MTRaMDMxMTAvBgNV BAMTKDk1MkRDNUQ0OTc2QjQwRDMzMDNFOThGMUNEMzczRUQ2OTdGRDAzN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qGcendH9h5jX731NWJQs8QTH /ogvQ0jfLhCFTSJn42ovA+T8RLhNREV1GBEYUi/6GveUNb9US/ATI0/eWx78rJta yxsNQO98SID1Gona9CjrPzTbif8+751fdAMOPbIbekqCSOPN0Rsn47Oj8RAxgLLo DNoFyQbKuuRxi5GgqijoycCER4DWW+ybPjR1hjA2NvmKAzvOUqh5ohFhz83UmYad btts5/65XlTe9RVrRL1ssPvd9gN8utFxOJSH7paABiPEiRo0oKcBF0R3gCaZZkgJ k4E58FCKCyvUqE5fR7zb8M3DCpog5hJGOqIEj/iX0n7uIaro0Q72610BGTNJAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUlS3F1JdrQNMwPpjxzTc+1pf9A38wHwYDVR0j BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ0NTgxMTUvMC8zMTMxMzQyZTMy MzgyZTMyMzEzMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzQzMjMxMzMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHIc0jANBgkqhkiG9w0BAQsFAAOCAQEAGetmCzkUnUT83+Cp8XlC YxSicAS8+nAHxpdTuZXjFmN6IugU3BuUa91TfloElBCFZKnUoSej8oDHE+92R2Ov DhfqDSGM8SCVxKzCh05HzBwxtMN0vuNlq+PjYuuqHkORv5b4KSwtF6P6fbSWMMIa 4ZwLIS+BlI05FUe+0T0goQvqLu6fJ6Umc8tk7mmsAbuN46fMLWyB31d4hoyGxIgC VCLPUiXrDtYHUkA2pn3FgMWtsAYUyavf2LX2MDGZqvZF87IBZSxe+b9m0OJTzhCM F37A/Z8X9uLVAPy8in/RPYvSnULSPSBvhu0STq1Mn1RDeiHxZHsRVMwjw+nj0s/L vA== -----END CERTIFICATE-----Generated at Tue Jan 20 17:44:26 2026 by rpki-client