This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3233382e302f32342d3332203d3e20313432313332.roa File: 3131342e32382e3233382e302f32342d3332203d3e20313432313332.roa (raw, json) Hash identifier: 2OQ0ik/Toe+3G1bEd2wm/rEQJVWUEipkii0YBu0mm3c= Subject key identifier: 25:A4:7B:BE:99:75:64:D3:68:B5:27:11:CA:20:88:0A:EE:8F:87:6E Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Certificate serial: 2D20B4E73B57026078FE477954A4219943B7D8E3 Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3233382e302f32342d3332203d3e20313432313332.roa Signing time: Tue 20 Jan 2026 02:27:14 +0000 ROA not before: Tue 20 Jan 2026 02:22:14 +0000 ROA not after: Tue 19 Jan 2027 02:27:14 +0000 asID: 142132 IP address blocks: 114.28.238.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 03:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:20:b4:e7:3b:57:02:60:78:fe:47:79:54:a4:21:99:43:b7:d8:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Validity Not Before: Jan 20 02:22:14 2026 GMT Not After : Jan 19 02:27:14 2027 GMT Subject: CN=25A47BBE997564D368B52711CA20880AEE8F876E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d6:62:1b:cf:66:8c:ee:ae:27:f4:48:e9:01: 15:d2:86:25:3d:5e:dd:b2:ec:6b:71:7f:f7:eb:c9: 07:66:ae:89:a1:14:04:00:77:d0:df:9e:dc:86:02: 6b:43:cb:f2:eb:2e:10:c7:ba:c7:3f:46:8f:18:9b: 2c:3f:76:d6:3a:a2:f9:98:24:9e:19:07:a9:a4:6a: 0a:3f:81:33:79:9a:4c:f6:06:1b:f7:99:84:55:01: ae:da:a7:d7:15:58:01:88:ba:c0:97:4b:c5:22:3f: cf:9e:43:3e:e0:4e:b1:08:4b:eb:09:51:43:b9:12: b6:0c:cc:86:7b:18:2b:68:78:d1:22:a4:f0:4a:6e: 2d:34:ec:6c:6d:dd:20:05:aa:e5:1d:7f:cc:5f:5a: fa:5b:81:17:e8:5a:d3:76:95:61:d8:f3:cc:af:37: 52:9a:ff:dc:16:e8:bf:ff:bf:8e:95:f0:bb:c9:96: 39:74:71:3c:83:2a:60:c4:8a:11:83:0c:ee:3e:80: cd:c3:19:77:7d:d3:c5:0a:ef:0b:13:58:89:12:37: cc:65:6b:28:f3:d5:9d:2a:9b:56:b5:62:6a:66:51: 3b:20:e5:70:d0:c5:77:1d:5d:cb:11:a2:1a:38:08: 69:4f:20:ce:79:96:1e:36:e0:c1:53:7c:6c:22:76: a2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A4:7B:BE:99:75:64:D3:68:B5:27:11:CA:20:88:0A:EE:8F:87:6E X509v3 Authority Key Identifier: keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3233382e302f32342d3332203d3e20313432313332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.28.238.0/24 Signature Algorithm: sha256WithRSAEncryption ae:c4:90:7b:59:31:cb:b7:83:2f:36:b4:56:4d:6a:9e:21:97: fb:8d:5b:09:de:6c:7f:96:68:be:a9:ab:52:15:e3:cf:c1:e0: 9a:1a:7e:5e:4d:dd:ad:03:b5:07:8f:8c:fd:5f:b5:f9:bb:5c: 20:43:9c:4c:06:01:06:02:d0:64:47:a5:5e:a2:50:f2:fc:4d: c6:f8:c4:8f:34:32:0c:87:d8:72:5f:0c:60:e0:da:3f:8e:a1: a9:e0:95:bd:02:94:6f:c7:c7:6d:86:41:bd:92:f8:7b:18:13: ee:89:76:ed:9b:bc:09:54:40:bd:8f:41:98:65:f2:88:38:0b: ea:91:8a:96:d9:fa:84:ec:07:41:df:90:9e:fd:70:a0:d9:6e: af:53:03:74:a9:07:bb:60:cc:24:a0:9c:32:a1:24:e7:34:fc: f3:16:43:aa:64:0b:a5:05:ea:03:05:5e:51:97:3f:b7:60:ec: 06:d2:89:35:73:54:f6:21:1b:0d:de:f7:0e:6c:27:24:ac:1a: 76:9a:04:2d:91:55:b1:e2:e7:fd:c5:df:f6:83:e9:6d:c2:a5: 80:ec:2d:31:8b:aa:bb:11:38:fe:41:e1:bf:fd:6d:44:82:fb: e8:be:75:de:95:63:21:b4:0f:a3:5c:3e:38:e1:52:42:fc:b2: 14:22:a3:e0 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIULSC05ztXAmB4/kd5VKQhmUO32OMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5 OUVBQkQxMzAeFw0yNjAxMjAwMjIyMTRaFw0yNzAxMTkwMjI3MTRaMDMxMTAvBgNV BAMTKDI1QTQ3QkJFOTk3NTY0RDM2OEI1MjcxMUNBMjA4ODBBRUU4Rjg3NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU1mIbz2aM7q4n9EjpARXShiU9 Xt2y7Gtxf/fryQdmromhFAQAd9DfntyGAmtDy/LrLhDHusc/Ro8Ymyw/dtY6ovmY JJ4ZB6mkago/gTN5mkz2Bhv3mYRVAa7ap9cVWAGIusCXS8UiP8+eQz7gTrEIS+sJ UUO5ErYMzIZ7GCtoeNEipPBKbi007Gxt3SAFquUdf8xfWvpbgRfoWtN2lWHY88yv N1Ka/9wW6L//v46V8LvJljl0cTyDKmDEihGDDO4+gM3DGXd908UK7wsTWIkSN8xl ayjz1Z0qm1a1YmpmUTsg5XDQxXcdXcsRoho4CGlPIM55lh424MFTfGwidqJhAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUJaR7vpl1ZNNotScRyiCICu6Ph24wHwYDVR0j BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ0NTgxMTUvMC8zMTMxMzQyZTMy MzgyZTMyMzMzODJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzQzMjMxMzMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHIc7jANBgkqhkiG9w0BAQsFAAOCAQEArsSQe1kxy7eDLza0Vk1q niGX+41bCd5sf5ZovqmrUhXjz8Hgmhp+Xk3drQO1B4+M/V+1+btcIEOcTAYBBgLQ ZEelXqJQ8vxNxvjEjzQyDIfYcl8MYODaP46hqeCVvQKUb8fHbYZBvZL4exgT7ol2 7Zu8CVRAvY9BmGXyiDgL6pGKltn6hOwHQd+Qnv1woNlur1MDdKkHu2DMJKCcMqEk 5zT88xZDqmQLpQXqAwVeUZc/t2DsBtKJNXNU9iEbDd73DmwnJKwadpoELZFVseLn /cXf9oPpbcKlgOwtMYuquxE4/kHhv/1tRIL76L513pVjIbQPo1w+OOFSQvyyFCKj 4A== -----END CERTIFICATE-----Generated at Tue Jan 20 17:44:12 2026 by rpki-client