This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3231322e302f32322d3332203d3e20313432313332.roa File: 3131342e32382e3231322e302f32322d3332203d3e20313432313332.roa (raw, json) Hash identifier: XGxNEm5us6lhwbaJ/X6PHd3/NRtm8m6VZh7mAoDsHPg= Subject key identifier: 4E:AF:75:D4:F1:65:C8:10:E1:E8:C6:15:D5:4C:B9:CF:BE:65:8F:DE Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Certificate serial: 5C11C0A16E37B620BF2C8E8427B9D78498E7095C Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3231322e302f32322d3332203d3e20313432313332.roa Signing time: Tue 20 Jan 2026 02:27:16 +0000 ROA not before: Tue 20 Jan 2026 02:22:16 +0000 ROA not after: Tue 19 Jan 2027 02:27:16 +0000 asID: 142132 IP address blocks: 114.28.212.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 03:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:11:c0:a1:6e:37:b6:20:bf:2c:8e:84:27:b9:d7:84:98:e7:09:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Validity Not Before: Jan 20 02:22:16 2026 GMT Not After : Jan 19 02:27:16 2027 GMT Subject: CN=4EAF75D4F165C810E1E8C615D54CB9CFBE658FDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:03:27:26:7c:db:27:c5:bb:cd:25:c2:a5: ef:5d:f1:f9:ca:c9:c5:8f:22:4b:59:2f:2c:84:08: 8b:a4:eb:6e:fb:06:7c:80:a9:ff:e3:e1:51:4a:3f: b4:66:79:86:fa:61:74:02:80:9c:35:f0:b7:6f:e4: d0:1c:af:ed:29:16:04:20:6a:40:76:47:00:5c:59: 6e:2a:75:83:28:c6:49:34:27:c6:89:d8:53:70:43: b7:2b:ac:f4:71:2d:55:0f:06:b7:b9:44:98:c2:38: cd:51:25:c4:bb:b5:59:2b:a3:90:09:a3:80:70:36: f2:85:66:b0:f6:62:bc:a5:0e:76:56:78:cb:71:ac: db:c8:a7:56:75:3e:fa:9e:16:80:f8:eb:f2:53:1c: 77:51:82:5f:a8:0e:0e:22:58:20:e0:3f:ce:6a:e9: ac:1f:36:1e:5a:49:cb:1a:ea:46:0b:fb:36:dc:33: af:a0:ea:0b:55:90:2f:e4:81:a7:50:8c:9b:64:71: aa:9f:8d:2e:e9:c4:8b:08:2e:c5:b4:f7:75:e6:e8: 39:ba:b0:65:3a:71:c9:7d:01:e4:85:ca:20:ec:c4: d4:60:38:ef:e9:05:0c:24:61:09:5f:ab:55:a1:33: bd:e4:04:1b:05:86:ac:1f:6d:3c:07:19:32:3d:db: 76:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:AF:75:D4:F1:65:C8:10:E1:E8:C6:15:D5:4C:B9:CF:BE:65:8F:DE X509v3 Authority Key Identifier: keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3231322e302f32322d3332203d3e20313432313332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.28.212.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:59:79:14:e6:96:42:a0:aa:e1:13:17:be:c3:58:d0:db:44: 06:83:a7:16:fd:af:a4:d8:cc:08:5c:06:5f:fc:1e:e3:04:9b: ca:6d:43:45:20:88:0e:28:c4:9b:ee:65:0c:d9:1e:1a:48:8f: 4e:4e:8a:53:9e:73:10:5c:02:1e:eb:fa:a0:a7:5d:53:8e:7d: b0:f5:cd:4a:30:bb:f1:c1:68:55:2d:86:3d:48:8f:df:94:16: 0c:e5:1c:8d:8c:dd:a5:bc:7f:25:65:c7:f6:1e:13:de:a9:68: 9f:8b:79:af:62:42:97:6d:ef:33:2a:b1:58:c5:fd:fa:42:69: 16:7e:c3:3d:84:fc:0f:a4:64:c4:1e:a9:08:7a:d6:ae:50:49: ef:4e:f5:7b:11:0e:b8:17:a8:d2:8a:9a:d5:64:73:ec:dc:fd: de:e7:47:98:c3:ca:18:16:60:a6:f2:b5:07:8c:30:f0:5a:bf: 32:34:3b:02:2b:a6:08:f6:51:13:8c:09:6f:11:0c:06:d7:3e: 0f:b8:e2:ef:da:cd:f4:34:d5:ab:51:81:cf:4f:73:84:92:c2: 50:86:40:dd:4d:12:b6:ce:36:9a:ea:75:a2:66:e0:98:a6:68: 1b:b6:07:92:95:ea:56:0b:9b:4a:34:31:c2:cb:88:78:81:a3: e7:15:57:fb -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUXBHAoW43tiC/LI6EJ7nXhJjnCVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5 OUVBQkQxMzAeFw0yNjAxMjAwMjIyMTZaFw0yNzAxMTkwMjI3MTZaMDMxMTAvBgNV BAMTKDRFQUY3NUQ0RjE2NUM4MTBFMUU4QzYxNUQ1NENCOUNGQkU2NThGREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqigMnJnzbJ8W7zSXCpe9d8fnK ycWPIktZLyyECIuk6277BnyAqf/j4VFKP7RmeYb6YXQCgJw18Ldv5NAcr+0pFgQg akB2RwBcWW4qdYMoxkk0J8aJ2FNwQ7crrPRxLVUPBre5RJjCOM1RJcS7tVkro5AJ o4BwNvKFZrD2YrylDnZWeMtxrNvIp1Z1PvqeFoD46/JTHHdRgl+oDg4iWCDgP85q 6awfNh5aScsa6kYL+zbcM6+g6gtVkC/kgadQjJtkcaqfjS7pxIsILsW093Xm6Dm6 sGU6ccl9AeSFyiDsxNRgOO/pBQwkYQlfq1WhM73kBBsFhqwfbTwHGTI923ZlAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUTq911PFlyBDh6MYV1Uy5z75lj94wHwYDVR0j BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ0NTgxMTUvMC8zMTMxMzQyZTMy MzgyZTMyMzEzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzQzMjMxMzMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnIc1DANBgkqhkiG9w0BAQsFAAOCAQEAjVl5FOaWQqCq4RMXvsNY 0NtEBoOnFv2vpNjMCFwGX/we4wSbym1DRSCIDijEm+5lDNkeGkiPTk6KU55zEFwC Huv6oKddU459sPXNSjC78cFoVS2GPUiP35QWDOUcjYzdpbx/JWXH9h4T3qlon4t5 r2JCl23vMyqxWMX9+kJpFn7DPYT8D6RkxB6pCHrWrlBJ7071exEOuBeo0oqa1WRz 7Nz93udHmMPKGBZgpvK1B4ww8Fq/MjQ7AiumCPZRE4wJbxEMBtc+D7ji79rN9DTV q1GBz09zhJLCUIZA3U0Sts42mup1ombgmKZoG7YHkpXqVgubSjQxwsuIeIGj5xVX +w== -----END CERTIFICATE-----Generated at Tue Jan 20 17:45:33 2026 by rpki-client