This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3232382e302f32342d3332203d3e20313432313332.roa
File: 3131342e32382e3232382e302f32342d3332203d3e20313432313332.roa (raw, json)
Hash identifier: s/SisevRVU86JGsRoRcFya7/V16ExazFvQp7yZZGXFg=
Subject key identifier: 76:5E:39:2B:67:0E:0F:DA:82:6D:85:13:0D:09:BE:CD:72:2D:4D:5B
Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial: 55132DD06FA51A6F13C165460E93A4B851E6D0B8
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3232382e302f32342d3332203d3e20313432313332.roa
Signing time: Tue 20 Jan 2026 02:27:15 +0000
ROA not before: Tue 20 Jan 2026 02:22:15 +0000
ROA not after: Tue 19 Jan 2027 02:27:15 +0000
asID: 142132
IP address blocks: 114.28.228.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 03:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:13:2d:d0:6f:a5:1a:6f:13:c1:65:46:0e:93:a4:b8:51:e6:d0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Validity
Not Before: Jan 20 02:22:15 2026 GMT
Not After : Jan 19 02:27:15 2027 GMT
Subject: CN=765E392B670E0FDA826D85130D09BECD722D4D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:15:4d:56:6e:a4:13:83:9c:ec:49:b2:90:
d0:19:3c:f3:d3:1d:5f:9c:e0:b6:5c:6b:d6:fa:d7:
35:5c:94:d0:27:41:79:de:35:0b:43:2a:e9:fc:2c:
18:79:37:ff:82:0c:4c:ed:5f:6d:ae:2d:41:7e:8b:
3d:96:54:9e:ec:c8:cf:cb:22:4a:51:5d:9a:05:57:
65:f2:1f:af:75:5a:9c:43:0d:8e:d6:8b:10:e7:5b:
5c:fd:d5:2b:d2:f7:4f:82:4f:e7:c1:ba:b0:85:81:
ba:41:1a:fd:10:a1:b2:7b:ec:5b:00:21:83:9e:c3:
09:28:3b:f3:82:16:e4:88:1d:01:5f:b1:d6:ed:a5:
01:4a:c3:05:cd:75:29:69:9a:b8:af:7e:5c:bf:a0:
f4:4d:5a:49:50:d4:1a:5b:e9:27:9e:78:47:8b:d4:
52:82:88:6d:b5:f2:f7:cd:41:11:8d:08:35:10:10:
25:ab:94:93:62:90:ce:12:b2:41:47:5f:3d:e5:db:
12:ac:b2:4d:82:f2:cf:73:8b:0b:0e:51:2d:58:97:
8e:89:9a:90:8b:91:ca:f1:cd:ff:da:36:48:e7:52:
f3:c0:65:a2:4a:18:1f:31:7a:52:e5:59:3c:54:4d:
67:1c:56:55:dc:87:fa:f4:c3:e5:67:35:1e:73:27:
09:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5E:39:2B:67:0E:0F:DA:82:6D:85:13:0D:09:BE:CD:72:2D:4D:5B
X509v3 Authority Key Identifier:
keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3232382e302f32342d3332203d3e20313432313332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.28.228.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:ae:3e:fc:c1:a3:d2:bf:1a:c4:9a:39:69:42:33:76:0d:fd:
5c:43:01:7c:74:5d:5b:a3:4c:09:9c:d8:7b:b1:ab:77:41:4f:
2e:94:f7:cb:3d:b5:df:c1:f1:11:ba:ef:16:88:8a:f9:1d:13:
f4:1a:09:41:ed:ab:a8:10:ee:7d:51:ac:92:f5:f8:d7:b4:6a:
01:b3:2e:37:21:9d:e9:9e:cf:c1:cb:5b:d6:6c:53:ae:ec:4b:
c7:0b:3a:da:8d:22:77:49:f2:8d:76:25:20:fe:f5:49:da:89:
20:38:95:e7:5d:fd:f3:ef:41:e9:ee:81:f7:d6:a9:ea:7f:67:
eb:53:14:7d:c3:95:67:97:7f:c1:64:b6:30:40:69:ee:e3:e9:
2a:ca:74:ac:66:be:4a:8b:df:e3:8f:68:92:66:c9:4d:36:4f:
6c:d1:33:1b:e8:c3:c4:ec:9a:93:87:69:46:76:cb:30:82:cf:
86:1c:84:ee:58:6a:06:59:ff:25:a0:9a:40:49:d0:c9:85:74:
c9:2d:76:7d:a5:68:ac:3b:12:a8:c0:ce:b3:4e:15:a3:72:98:
71:8b:d5:3c:81:db:f5:4f:c4:bf:14:88:c6:5f:01:57:a0:3c:
31:94:dc:27:b9:ce:24:19:5f:f4:a7:24:76:8d:2c:d6:d2:3c:
d3:ed:d0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 17:44:37 2026 by rpki-client