This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3231382e302f32332d3332203d3e20313432313332.roa File: 3131342e32382e3231382e302f32332d3332203d3e20313432313332.roa (raw, json) Hash identifier: +g1YUM+Kb/L41rx7sn5qFaA1FI5yomH6v5SIGVNOiu8= Subject key identifier: 48:AD:D1:2E:E1:ED:F7:E0:A7:64:68:86:C3:82:53:47:BA:06:A2:66 Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Certificate serial: 7A6EFA2FA79CF96968B4130C7C21468C7AEC9C9E Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3231382e302f32332d3332203d3e20313432313332.roa Signing time: Tue 20 Jan 2026 02:27:15 +0000 ROA not before: Tue 20 Jan 2026 02:22:15 +0000 ROA not after: Tue 19 Jan 2027 02:27:15 +0000 asID: 142132 IP address blocks: 114.28.218.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 03:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:6e:fa:2f:a7:9c:f9:69:68:b4:13:0c:7c:21:46:8c:7a:ec:9c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Validity Not Before: Jan 20 02:22:15 2026 GMT Not After : Jan 19 02:27:15 2027 GMT Subject: CN=48ADD12EE1EDF7E0A7646886C3825347BA06A266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:fd:0e:4d:a3:b9:59:8b:8e:bc:ba:80:c0: 0c:79:ad:d2:72:49:cc:59:45:a4:41:5e:6c:e3:7f: f0:69:cf:6e:f5:c0:f8:74:3b:89:59:bc:07:31:fc: d2:1e:6f:1b:9f:8c:43:ca:c6:57:e3:16:59:14:3a: c6:0f:41:c1:a5:39:47:14:a8:0d:38:eb:f8:37:b8: 2f:5d:47:06:3a:61:0d:d7:5d:ce:cd:b3:fe:eb:81: cc:47:6e:c0:27:15:b4:3f:32:0a:fd:e6:bf:a1:02: 6a:6d:6c:7d:fb:6a:9f:03:d3:fc:54:df:7c:15:e3: 88:fc:1e:68:a9:4c:28:1f:83:f0:67:ee:ed:58:24: 74:c6:2f:75:a6:16:50:d8:76:6d:aa:1a:75:2d:c1: cb:66:57:b6:3a:c2:bc:86:fe:80:dd:bc:62:e9:7d: 7d:d2:eb:2f:7e:0a:aa:29:02:2c:89:66:76:15:13: 0b:db:85:f1:8a:a1:ac:04:84:5f:f6:c0:4e:5a:7f: 47:6c:91:2a:cf:1c:70:b8:6b:f2:6f:38:b4:d3:c2: e3:80:c4:31:b1:6a:96:33:a4:e4:8a:08:f8:90:e2: 25:6d:b0:30:64:73:b1:96:8b:d8:83:df:60:b5:19: 5b:05:bb:d4:d4:61:c4:43:50:f5:97:83:b8:14:2c: 0e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AD:D1:2E:E1:ED:F7:E0:A7:64:68:86:C3:82:53:47:BA:06:A2:66 X509v3 Authority Key Identifier: keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3231382e302f32332d3332203d3e20313432313332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.28.218.0/23 Signature Algorithm: sha256WithRSAEncryption 71:88:3e:ec:d5:81:01:5e:36:80:ef:65:12:0d:df:af:00:34: 77:36:94:07:31:70:e1:af:5f:72:b0:1f:db:26:f5:7b:4a:82: 99:9b:b2:cd:8f:0c:b2:4c:1a:35:be:74:7e:ee:08:47:cd:c2: 2c:45:02:17:64:cc:53:4d:ad:c4:97:78:a7:ed:2e:a2:8a:7a: 21:09:ca:71:85:45:ed:7a:00:b4:ef:73:08:7d:ce:97:37:c7: 26:09:46:3c:15:a4:88:de:7f:3b:6b:69:23:ca:63:87:9f:be: d6:ac:42:43:b2:5c:5f:ec:66:e7:a2:3f:a1:57:38:ee:89:a8: 3e:20:bd:c4:52:88:c6:69:c7:f7:a0:32:75:f3:c8:d8:fa:43: 10:73:4f:66:b1:37:a5:25:2a:b4:83:35:dd:03:90:f8:71:bc: 35:ef:b8:1b:01:6e:49:d7:c4:3b:b8:15:68:83:f1:f6:04:04: e4:8b:f6:ce:c9:51:8a:85:36:80:84:9c:b8:1b:54:0a:26:4a: 04:51:c8:8b:22:6f:26:de:15:f6:7b:4c:e8:fe:e2:c1:9a:ea: f9:ed:6e:82:7a:d6:13:ca:17:d3:e6:60:b8:94:65:48:74:25: 71:0f:e6:56:7f:20:4d:08:18:86:68:84:2a:92:a6:a6:80:65: 91:24:8e:78 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUem76L6ec+WlotBMMfCFGjHrsnJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5 OUVBQkQxMzAeFw0yNjAxMjAwMjIyMTVaFw0yNzAxMTkwMjI3MTVaMDMxMTAvBgNV BAMTKDQ4QUREMTJFRTFFREY3RTBBNzY0Njg4NkMzODI1MzQ3QkEwNkEyNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7CP0OTaO5WYuOvLqAwAx5rdJy ScxZRaRBXmzjf/Bpz271wPh0O4lZvAcx/NIebxufjEPKxlfjFlkUOsYPQcGlOUcU qA046/g3uC9dRwY6YQ3XXc7Ns/7rgcxHbsAnFbQ/Mgr95r+hAmptbH37ap8D0/xU 33wV44j8HmipTCgfg/Bn7u1YJHTGL3WmFlDYdm2qGnUtwctmV7Y6wryG/oDdvGLp fX3S6y9+CqopAiyJZnYVEwvbhfGKoawEhF/2wE5af0dskSrPHHC4a/JvOLTTwuOA xDGxapYzpOSKCPiQ4iVtsDBkc7GWi9iD32C1GVsFu9TUYcRDUPWXg7gULA6vAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUSK3RLuHt9+CnZGiGw4JTR7oGomYwHwYDVR0j BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ0NTgxMTUvMC8zMTMxMzQyZTMy MzgyZTMyMzEzODJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDMxMzQzMjMxMzMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAXIc2jANBgkqhkiG9w0BAQsFAAOCAQEAcYg+7NWBAV42gO9lEg3f rwA0dzaUBzFw4a9fcrAf2yb1e0qCmZuyzY8MskwaNb50fu4IR83CLEUCF2TMU02t xJd4p+0uoop6IQnKcYVF7XoAtO9zCH3OlzfHJglGPBWkiN5/O2tpI8pjh5++1qxC Q7JcX+xm56I/oVc47omoPiC9xFKIxmnH96AydfPI2PpDEHNPZrE3pSUqtIM13QOQ +HG8Ne+4GwFuSdfEO7gVaIPx9gQE5Iv2zslRioU2gIScuBtUCiZKBFHIiyJvJt4V 9ntM6P7iwZrq+e1ugnrWE8oX0+ZguJRlSHQlcQ/mVn8gTQgYhmiEKpKmpoBlkSSO eA== -----END CERTIFICATE-----Generated at Tue Jan 20 17:44:26 2026 by rpki-client