This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3233382e302f32342d3332203d3e203234343133.roa
File: 3131342e32382e3233382e302f32342d3332203d3e203234343133.roa (raw, json)
Hash identifier: /gZVrLGZZgk4a8lnRmUqy5BhfMpW41g7NB57w68TDOI=
Subject key identifier: 70:0A:83:FB:88:66:5B:C0:85:74:CB:E1:0D:51:35:F9:76:DF:A0:B9
Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial: 4CBAAE304FEE0927C913AA5469C58A349969DD0A
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3233382e302f32342d3332203d3e203234343133.roa
Signing time: Tue 20 Jan 2026 02:27:13 +0000
ROA not before: Tue 20 Jan 2026 02:22:13 +0000
ROA not after: Tue 19 Jan 2027 02:27:13 +0000
asID: 24413
IP address blocks: 114.28.238.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 03:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ba:ae:30:4f:ee:09:27:c9:13:aa:54:69:c5:8a:34:99:69:dd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Validity
Not Before: Jan 20 02:22:13 2026 GMT
Not After : Jan 19 02:27:13 2027 GMT
Subject: CN=700A83FB88665BC08574CBE10D5135F976DFA0B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:49:5f:6b:b3:95:2c:ff:47:1a:31:fe:f2:e1:
11:c7:80:16:e3:ba:dc:e7:55:cc:95:a8:96:b6:c5:
e7:31:c1:7d:c0:e3:c2:d0:de:6b:a3:c2:d9:81:fc:
46:9b:ff:f1:d2:62:89:6b:d7:03:7f:58:6a:ad:39:
95:e9:20:89:70:f5:2e:72:26:fe:90:b4:13:fd:ee:
3b:a6:4b:20:dc:9d:36:63:bc:5e:f6:0b:c8:81:4d:
bf:96:cb:69:e9:6b:f8:1a:f3:5c:02:59:3d:02:47:
46:25:08:55:da:74:f6:80:49:44:66:29:db:05:46:
f9:5c:fd:51:02:6e:93:eb:9e:12:fe:25:73:57:2a:
ec:4a:ff:6f:3f:e0:d0:a6:45:35:57:a3:9d:c5:5c:
25:8c:6d:a5:e3:de:a9:d8:4c:7b:00:02:e4:a2:8e:
0f:65:7d:0c:ba:20:c0:bd:73:d5:de:d4:d9:ca:06:
70:83:3a:f4:df:fd:bb:f3:80:a9:4a:ba:e6:07:f1:
d2:fa:db:11:10:8e:ed:5e:10:d7:45:b4:0f:eb:db:
e4:c1:2d:66:e5:32:8c:59:8e:d7:1c:e4:95:95:49:
ae:19:9c:00:ac:03:71:eb:f7:7c:3e:f6:ae:10:06:
33:62:66:3f:cd:7a:a4:72:3b:5d:5d:ee:bc:de:d8:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0A:83:FB:88:66:5B:C0:85:74:CB:E1:0D:51:35:F9:76:DF:A0:B9
X509v3 Authority Key Identifier:
keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3233382e302f32342d3332203d3e203234343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.28.238.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:33:a6:6a:75:69:05:c0:9d:22:c9:06:5b:52:56:ea:35:41:
ba:b1:ed:f6:5d:53:c9:96:b1:b4:b8:58:de:30:18:66:c2:3f:
98:1f:45:3e:a7:63:81:c0:eb:87:57:4d:d5:42:28:d4:9d:e6:
62:7e:d2:bd:e6:4f:45:aa:9c:6c:3c:c4:cc:97:68:6d:d8:b8:
bb:4a:52:2f:ad:e8:3b:3e:2a:7d:b7:6f:be:69:1e:aa:3c:1c:
38:69:b1:41:7b:dc:b3:e9:c4:c0:4b:36:3a:c1:d3:4c:46:b4:
78:30:ae:c8:ac:9d:84:8b:98:b9:1b:c5:3b:c2:2a:5b:eb:52:
cf:e5:86:aa:4a:25:d1:7b:5b:03:86:fb:a1:87:3d:9b:8a:5f:
cf:aa:88:ad:32:2d:93:fd:15:31:f3:4f:2a:04:82:b7:7d:9d:
0b:ae:83:01:f4:61:fb:6b:67:22:d6:76:49:09:dd:97:70:d6:
ec:a5:a3:84:09:68:7f:1d:16:f9:b3:50:1c:a8:1a:5b:97:a1:
a6:62:a2:b2:7b:14:d4:61:ca:9e:e4:a6:87:be:e9:db:07:84:
d2:fb:3b:5f:c8:a8:9a:da:c8:d6:60:0a:92:5d:69:7f:c2:c1:
61:42:b7:93:5b:e4:14:da:99:8d:2b:51:c9:bc:4d:28:ae:11:
38:36:58:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 14:41:26 2026 by rpki-client