This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3232382e302f32342d3332203d3e203234343133.roa File: 3131342e32382e3232382e302f32342d3332203d3e203234343133.roa (raw, json) Hash identifier: f4AgU3ZlrzH+ps94K9mySuSKxV14hW6EoppyzbilA9Y= Subject key identifier: 9E:D9:18:95:5B:4A:CB:3C:51:0E:70:01:55:86:07:A5:92:2E:0E:8D Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Certificate serial: 0C26946A357077795AA8D20626076AE37A4D34CE Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3232382e302f32342d3332203d3e203234343133.roa Signing time: Tue 20 Jan 2026 02:27:15 +0000 ROA not before: Tue 20 Jan 2026 02:22:15 +0000 ROA not after: Tue 19 Jan 2027 02:27:15 +0000 asID: 24413 IP address blocks: 114.28.228.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 03:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:26:94:6a:35:70:77:79:5a:a8:d2:06:26:07:6a:e3:7a:4d:34:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Validity Not Before: Jan 20 02:22:15 2026 GMT Not After : Jan 19 02:27:15 2027 GMT Subject: CN=9ED918955B4ACB3C510E7001558607A5922E0E8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:5a:91:e1:92:3f:18:37:19:6f:a4:a8:78: 72:3d:3b:c4:18:54:f7:a5:20:72:3e:67:46:2d:d6: ca:98:75:73:06:3d:7d:f2:eb:d9:3f:7d:79:6e:1b: d5:84:33:a4:f4:4f:76:ba:34:13:5c:ac:2e:d3:cc: af:91:bb:3d:8e:b4:46:a3:ee:10:69:c6:3a:51:30: 08:83:2b:e1:a6:66:c5:09:8e:5f:58:29:a5:ef:28: 75:b4:94:1a:b5:d7:f1:db:13:e6:5e:74:09:ad:25: e0:62:57:3b:ff:91:cf:0e:7a:d4:56:45:99:e2:2f: 0a:92:34:d9:f4:83:75:5b:23:e1:ea:9e:c5:9f:4e: eb:28:60:6d:d0:4a:5b:3f:90:a3:a3:f0:3c:66:8c: db:ac:02:f1:54:5b:76:8f:83:0e:1c:64:c7:43:ba: ed:46:9d:7b:07:f0:5a:f3:b6:6f:c4:97:a2:13:3b: 8c:2b:bf:71:b2:d3:91:a6:fe:1d:73:b9:7a:7f:94: 1a:69:e9:b9:29:f1:7b:0d:e6:14:cc:5b:9a:ee:e6: b8:da:c1:9e:1a:e5:43:8c:cf:3b:8b:ed:c4:f4:b5: 53:d1:9e:b8:80:3c:44:c0:af:a4:21:0e:b4:1f:1c: c3:ca:aa:d1:e8:9d:16:71:a0:f9:d7:7c:56:21:2f: a1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D9:18:95:5B:4A:CB:3C:51:0E:70:01:55:86:07:A5:92:2E:0E:8D X509v3 Authority Key Identifier: keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3232382e302f32342d3332203d3e203234343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.28.228.0/24 Signature Algorithm: sha256WithRSAEncryption b9:4f:ae:dc:b9:50:c9:97:e0:38:8a:b5:d9:d3:28:c8:c0:be: e1:f5:07:2b:a6:64:96:e6:d7:36:67:00:ae:ed:73:f9:4e:63: 40:74:be:b9:54:7e:64:ab:3b:a1:7d:59:bd:25:34:f9:76:13: a1:40:3b:4a:0a:30:d4:ef:c5:06:72:ce:ea:fe:89:c7:7a:b0: a3:d6:12:79:51:b5:88:ef:b0:5c:5c:89:21:88:88:7c:5b:f0: dd:09:45:bc:d9:cf:39:bd:56:06:83:a1:98:47:e5:d0:c5:1b: 61:4d:49:1e:29:75:68:51:26:5f:65:60:36:f2:12:24:6f:df: 8d:05:84:9b:46:ab:b6:ef:e7:13:74:ca:cf:a6:ae:e8:45:33: 6c:05:00:36:16:27:43:f8:2c:f8:dd:ee:75:d3:38:a7:b9:30: f2:f8:f0:94:10:f6:ba:35:0e:e2:e3:aa:59:15:23:3c:e2:12: f4:00:d5:e5:87:48:85:c1:fa:b6:d0:eb:d4:b6:04:16:4b:5d: 41:a4:a9:8b:ff:5a:de:93:d2:08:38:bb:6b:cf:76:bd:e4:6a: e3:11:d2:a7:83:cb:a8:10:1b:e0:ad:c0:51:9d:ca:f1:9e:e1: 05:6f:8f:c6:af:77:1a:36:21:bb:f4:1b:5c:e5:5a:55:ff:ec: 9a:31:ec:40 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUDCaUajVwd3laqNIGJgdq43pNNM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5 OUVBQkQxMzAeFw0yNjAxMjAwMjIyMTVaFw0yNzAxMTkwMjI3MTVaMDMxMTAvBgNV BAMTKDlFRDkxODk1NUI0QUNCM0M1MTBFNzAwMTU1ODYwN0E1OTIyRTBFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeSlqR4ZI/GDcZb6SoeHI9O8QY VPelIHI+Z0Yt1sqYdXMGPX3y69k/fXluG9WEM6T0T3a6NBNcrC7TzK+Ruz2OtEaj 7hBpxjpRMAiDK+GmZsUJjl9YKaXvKHW0lBq11/HbE+ZedAmtJeBiVzv/kc8OetRW RZniLwqSNNn0g3VbI+HqnsWfTusoYG3QSls/kKOj8DxmjNusAvFUW3aPgw4cZMdD uu1GnXsH8Frztm/El6ITO4wrv3Gy05Gm/h1zuXp/lBpp6bkp8XsN5hTMW5ru5rja wZ4a5UOMzzuL7cT0tVPRnriAPETAr6QhDrQfHMPKqtHonRZxoPnXfFYhL6FfAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUntkYlVtKyzxRDnABVYYHpZIuDo0wHwYDVR0j BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDQ1ODExNS8wLzMxMzEzNDJlMzIz ODJlMzIzMjM4MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNDM0MzEzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHIc5DANBgkqhkiG9w0BAQsFAAOCAQEAuU+u3LlQyZfgOIq12dMoyMC+ 4fUHK6ZklubXNmcAru1z+U5jQHS+uVR+ZKs7oX1ZvSU0+XYToUA7Sgow1O/FBnLO 6v6Jx3qwo9YSeVG1iO+wXFyJIYiIfFvw3QlFvNnPOb1WBoOhmEfl0MUbYU1JHil1 aFEmX2VgNvISJG/fjQWEm0artu/nE3TKz6au6EUzbAUANhYnQ/gs+N3uddM4p7kw 8vjwlBD2ujUO4uOqWRUjPOIS9ADV5YdIhcH6ttDr1LYEFktdQaSpi/9a3pPSCDi7 a892veRq4xHSp4PLqBAb4K3AUZ3K8Z7hBW+Pxq93GjYhu/QbXOVaVf/smjHsQA== -----END CERTIFICATE-----Generated at Tue Jan 20 14:42:10 2026 by rpki-client