This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3231312e302f32342d3332203d3e20313432313332.roa File: 3131342e32382e3231312e302f32342d3332203d3e20313432313332.roa (raw, json) Hash identifier: Z/xkyG0JC1+gLdTamMDhL+jAoNrfwYUkNp0wWniMB5U= Subject key identifier: 4F:C1:B0:F4:00:5C:0D:89:B3:E4:7B:B7:74:0E:7D:65:25:E0:FF:C5 Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Certificate serial: 0909E5D700861CDCF4B1207BCFE0719AE285136B Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3231312e302f32342d3332203d3e20313432313332.roa Signing time: Tue 20 Jan 2026 02:27:14 +0000 ROA not before: Tue 20 Jan 2026 02:22:14 +0000 ROA not after: Tue 19 Jan 2027 02:27:14 +0000 asID: 142132 IP address blocks: 114.28.211.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 03:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:09:e5:d7:00:86:1c:dc:f4:b1:20:7b:cf:e0:71:9a:e2:85:13:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Validity Not Before: Jan 20 02:22:14 2026 GMT Not After : Jan 19 02:27:14 2027 GMT Subject: CN=4FC1B0F4005C0D89B3E47BB7740E7D6525E0FFC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:db:24:27:fe:2f:90:35:88:68:07:1f:fd: 58:d0:7c:fe:69:3d:6d:42:e1:1d:66:00:0d:69:d4: 7e:d8:24:26:fb:da:80:b8:b4:1e:4a:2e:5f:34:cc: a3:42:f0:f0:4d:e0:69:5c:11:ce:86:71:2e:fa:08: 1d:33:77:68:a2:4c:62:09:93:66:15:dc:fe:1a:c7: 13:93:17:5c:64:a3:44:cc:70:89:40:f6:3c:3e:c8: 34:b4:66:8b:d6:4a:c5:36:4a:ca:78:69:30:71:65: 88:1e:bc:e9:b0:1c:f4:e1:ac:69:3e:5f:50:93:3d: ae:62:a6:88:29:77:44:d3:2b:79:ef:43:33:d6:f1: e2:47:a6:53:1a:35:20:e0:9e:cb:10:a2:60:4e:13: 1c:d2:40:95:c5:48:04:e7:4b:2f:91:b0:70:6b:73: 9d:fe:e3:87:5c:cd:3e:07:43:e6:ca:4a:7e:46:ab: 0e:de:a2:8a:60:7e:e1:8b:8c:7f:88:10:bb:4c:6a: 85:b4:17:ab:e9:d0:c0:09:c6:fa:bd:cc:73:3b:32: d9:e8:6c:8f:ec:06:81:d6:79:92:e1:ca:cf:b1:f6: ba:2a:d7:3b:de:98:b0:79:15:95:19:83:7a:a1:fc: 50:72:33:c8:9a:86:2f:a8:f5:fd:25:89:17:6b:3b: 48:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C1:B0:F4:00:5C:0D:89:B3:E4:7B:B7:74:0E:7D:65:25:E0:FF:C5 X509v3 Authority Key Identifier: keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3231312e302f32342d3332203d3e20313432313332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.28.211.0/24 Signature Algorithm: sha256WithRSAEncryption d3:56:1e:66:48:48:02:98:7b:95:19:23:f3:9a:89:1c:65:b1: e7:08:6c:0c:de:d7:d1:a0:bd:a4:b1:51:39:2c:96:93:f7:9d: a8:63:99:47:d5:d8:55:b2:26:ee:bb:7e:2e:73:e8:58:e9:38: 3f:c8:72:e6:9f:07:a5:4d:08:c0:3a:ca:b4:f2:90:70:fb:14: 4d:04:b0:6b:88:75:d7:0a:32:44:3d:dd:3b:7b:e4:8f:2e:24: 8f:27:ea:b7:bf:d4:18:a3:e6:71:d8:a5:23:31:4b:aa:fb:88: 77:96:3a:61:74:09:f3:da:27:63:3a:7d:ad:1a:55:dc:24:f8: bd:f4:08:4c:ff:71:45:81:a6:57:b0:41:37:0a:fd:ab:99:f4: 4e:a1:0e:8b:55:7f:39:7b:df:b8:eb:02:1b:11:bd:f5:40:60: d5:d9:68:e8:c0:9b:dd:1d:0c:0a:71:3b:d2:85:43:33:fc:69: 9e:72:de:d7:fc:6e:2c:5c:42:6a:9b:38:1b:25:03:a3:94:06: 40:b0:6b:32:85:12:f9:6b:84:fe:df:2d:0c:0c:ed:9f:92:be: 0a:82:84:74:ce:ce:8a:b0:08:1e:79:7b:be:4e:40:8e:de:e8: 6d:29:4e:ef:34:53:28:8f:0c:b9:5f:f8:df:f5:10:74:2b:e6: b1:c0:e1:8c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCQnl1wCGHNz0sSB7z+BxmuKFE2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5 OUVBQkQxMzAeFw0yNjAxMjAwMjIyMTRaFw0yNzAxMTkwMjI3MTRaMDMxMTAvBgNV BAMTKDRGQzFCMEY0MDA1QzBEODlCM0U0N0JCNzc0MEU3RDY1MjVFMEZGQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GtskJ/4vkDWIaAcf/VjQfP5p PW1C4R1mAA1p1H7YJCb72oC4tB5KLl80zKNC8PBN4GlcEc6GcS76CB0zd2iiTGIJ k2YV3P4axxOTF1xko0TMcIlA9jw+yDS0ZovWSsU2Ssp4aTBxZYgevOmwHPThrGk+ X1CTPa5ipogpd0TTK3nvQzPW8eJHplMaNSDgnssQomBOExzSQJXFSATnSy+RsHBr c53+44dczT4HQ+bKSn5Gqw7eoopgfuGLjH+IELtMaoW0F6vp0MAJxvq9zHM7Mtno bI/sBoHWeZLhys+x9roq1zvemLB5FZUZg3qh/FByM8iahi+o9f0liRdrO0iLAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUT8Gw9ABcDYmz5Hu3dA59ZSXg/8UwHwYDVR0j BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ0NTgxMTUvMC8zMTMxMzQyZTMy MzgyZTMyMzEzMTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzQzMjMxMzMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHIc0zANBgkqhkiG9w0BAQsFAAOCAQEA01YeZkhIAph7lRkj85qJ HGWx5whsDN7X0aC9pLFROSyWk/edqGOZR9XYVbIm7rt+LnPoWOk4P8hy5p8HpU0I wDrKtPKQcPsUTQSwa4h11woyRD3dO3vkjy4kjyfqt7/UGKPmcdilIzFLqvuId5Y6 YXQJ89onYzp9rRpV3CT4vfQITP9xRYGmV7BBNwr9q5n0TqEOi1V/OXvfuOsCGxG9 9UBg1dlo6MCb3R0MCnE70oVDM/xpnnLe1/xuLFxCaps4GyUDo5QGQLBrMoUS+WuE /t8tDAztn5K+CoKEdM7OirAIHnl7vk5Ajt7obSlO7zRTKI8MuV/43/UQdCvmscDh jA== -----END CERTIFICATE-----Generated at Tue Jan 20 17:44:26 2026 by rpki-client