This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3233322e302f32342d3332203d3e203234343133.roa
File: 3131342e32382e3233322e302f32342d3332203d3e203234343133.roa (raw, json)
Hash identifier: +kQwnCXMTXVaY8zjzAAJlTR4jU34MVmx01E5/Q2bKOM=
Subject key identifier: 14:E5:7B:72:F7:BB:0F:38:71:4A:F7:77:34:88:8B:28:B8:E4:0A:7F
Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial: 09B26725A0C726B22FCB3E71CEDFCB7F332AF8A1
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3233322e302f32342d3332203d3e203234343133.roa
Signing time: Tue 20 Jan 2026 02:27:14 +0000
ROA not before: Tue 20 Jan 2026 02:22:14 +0000
ROA not after: Tue 19 Jan 2027 02:27:14 +0000
asID: 24413
IP address blocks: 114.28.232.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 03:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b2:67:25:a0:c7:26:b2:2f:cb:3e:71:ce:df:cb:7f:33:2a:f8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Validity
Not Before: Jan 20 02:22:14 2026 GMT
Not After : Jan 19 02:27:14 2027 GMT
Subject: CN=14E57B72F7BB0F38714AF77734888B28B8E40A7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4b:bf:1a:b0:65:97:67:77:f3:a9:50:a8:b8:
19:62:7e:0f:af:29:ac:dd:bd:75:54:d9:3d:cd:de:
b0:53:ed:25:03:98:70:57:a6:67:cc:10:8b:89:6a:
de:94:f6:0b:9a:b1:1c:17:d3:3f:89:e0:c6:d6:dc:
0f:88:e7:00:72:4c:99:6e:d7:5a:65:db:42:71:57:
14:1d:77:2f:d5:62:d2:96:8f:c5:12:09:9f:23:14:
85:9a:d6:37:9e:37:97:5f:cd:ae:70:dd:35:8a:fd:
2a:de:d0:da:41:bf:44:d2:01:6a:63:c4:42:07:6c:
81:9b:6e:0e:b8:e4:3b:a8:23:cd:2d:38:71:d3:fe:
d7:7a:f8:64:5f:6d:2d:bb:a0:af:91:9a:0b:b2:8a:
4f:fb:aa:a7:74:80:7d:19:73:5b:9c:5e:d2:61:dc:
e8:da:d5:3c:36:b7:8d:db:7a:b9:57:83:49:c2:0d:
9e:66:ae:d9:28:bb:c6:83:6d:cd:25:d9:0b:5f:60:
51:4a:b9:04:bb:e5:41:56:05:ee:20:40:b6:ae:7a:
fa:aa:dd:10:4b:b6:57:9a:df:50:ac:a7:c8:6a:62:
8e:9c:36:d7:68:d9:df:7a:13:cc:72:0b:70:55:1d:
55:85:47:18:cf:23:01:13:55:ed:e1:55:6e:50:19:
a8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E5:7B:72:F7:BB:0F:38:71:4A:F7:77:34:88:8B:28:B8:E4:0A:7F
X509v3 Authority Key Identifier:
keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3233322e302f32342d3332203d3e203234343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.28.232.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:6f:88:3d:90:ae:6d:7f:15:52:d1:ca:4c:d0:46:54:52:51:
d5:9a:ec:fa:11:a3:4a:f1:ea:46:47:f3:0e:5c:f9:3c:44:99:
50:3a:d9:f7:3c:4f:65:cb:9c:a1:bf:93:48:29:c2:c3:a1:12:
79:50:a3:28:32:fe:ab:22:ff:2b:a3:e9:e7:66:d7:57:5d:f9:
14:3c:df:ce:4f:14:5f:2d:fa:26:ee:c8:31:99:9f:1c:82:b5:
b5:7b:10:7c:71:da:9a:bb:e9:22:10:83:e8:b0:1e:20:cc:37:
68:2e:ba:92:2b:e1:d9:2e:4c:b5:a7:6c:57:e7:02:64:22:22:
6b:5b:7f:6c:5e:a4:3c:3b:b2:8b:d2:51:bc:b6:a7:22:7d:28:
48:61:30:b5:42:35:a5:73:bd:85:28:94:f5:c1:6e:2d:6c:9f:
79:d5:f9:76:9f:80:67:09:81:d7:a8:5f:fc:01:0b:b7:ea:9a:
96:f5:2c:96:99:50:fc:21:00:43:df:77:01:45:78:ed:0c:92:
41:eb:c8:5b:48:ed:22:e9:86:da:8a:7c:72:ff:f8:59:4a:3e:
a3:d5:9d:96:f5:4e:d8:2c:1a:0d:b9:c2:74:e3:88:3a:60:f5:
3e:07:0d:34:c7:b5:79:80:f9:3e:74:ec:8d:9e:3d:6d:34:ba:
04:81:24:64
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUCbJnJaDHJrIvyz5xzt/LfzMq+KEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5
OUVBQkQxMzAeFw0yNjAxMjAwMjIyMTRaFw0yNzAxMTkwMjI3MTRaMDMxMTAvBgNV
BAMTKDE0RTU3QjcyRjdCQjBGMzg3MTRBRjc3NzM0ODg4QjI4QjhFNDBBN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmS78asGWXZ3fzqVCouBlifg+v
KazdvXVU2T3N3rBT7SUDmHBXpmfMEIuJat6U9guasRwX0z+J4MbW3A+I5wByTJlu
11pl20JxVxQddy/VYtKWj8USCZ8jFIWa1jeeN5dfza5w3TWK/Sre0NpBv0TSAWpj
xEIHbIGbbg645DuoI80tOHHT/td6+GRfbS27oK+Rmguyik/7qqd0gH0Zc1ucXtJh
3Oja1Tw2t43berlXg0nCDZ5mrtkou8aDbc0l2QtfYFFKuQS75UFWBe4gQLauevqq
3RBLtlea31Csp8hqYo6cNtdo2d96E8xyC3BVHVWFRxjPIwETVe3hVW5QGahZAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUFOV7cve7DzhxSvd3NIiLKLjkCn8wHwYDVR0j
BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE
NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDQ1ODExNS8wLzMxMzEzNDJlMzIz
ODJlMzIzMzMyMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNDM0MzEzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHIc6DANBgkqhkiG9w0BAQsFAAOCAQEAym+IPZCubX8VUtHKTNBGVFJR
1Zrs+hGjSvHqRkfzDlz5PESZUDrZ9zxPZcucob+TSCnCw6ESeVCjKDL+qyL/K6Pp
52bXV135FDzfzk8UXy36Ju7IMZmfHIK1tXsQfHHamrvpIhCD6LAeIMw3aC66kivh
2S5MtadsV+cCZCIia1t/bF6kPDuyi9JRvLanIn0oSGEwtUI1pXO9hSiU9cFuLWyf
edX5dp+AZwmB16hf/AELt+qalvUslplQ/CEAQ993AUV47QySQevIW0jtIumG2op8
cv/4WUo+o9WdlvVO2CwaDbnCdOOIOmD1PgcNNMe1eYD5PnTsjZ49bTS6BIEkZA==
-----END CERTIFICATE-----
Generated at Tue Jan 20 14:42:11 2026 by rpki-client