This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3235342e302f32342d3332203d3e20313432313332.roa
File: 3131342e32382e3235342e302f32342d3332203d3e20313432313332.roa (raw, json)
Hash identifier: j/kCe1R482npo/DPFk8G2xR7iL8FDpLrSE7yWcUxfOE=
Subject key identifier: 96:49:97:93:2C:DA:F7:E2:F6:BD:03:BE:C9:51:49:FA:46:5C:2B:04
Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial: 325D53869491E6F064E59329003E47C3AFC312F1
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3235342e302f32342d3332203d3e20313432313332.roa
Signing time: Tue 20 Jan 2026 02:27:14 +0000
ROA not before: Tue 20 Jan 2026 02:22:14 +0000
ROA not after: Tue 19 Jan 2027 02:27:14 +0000
asID: 142132
IP address blocks: 114.28.254.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 03:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:5d:53:86:94:91:e6:f0:64:e5:93:29:00:3e:47:c3:af:c3:12:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Validity
Not Before: Jan 20 02:22:14 2026 GMT
Not After : Jan 19 02:27:14 2027 GMT
Subject: CN=964997932CDAF7E2F6BD03BEC95149FA465C2B04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:44:54:0e:43:2e:a3:04:f1:0b:16:c1:ac:
65:09:2f:8b:d0:7a:82:62:ba:f7:37:9d:dd:6d:8b:
90:30:cd:15:a0:3c:1f:6f:7c:f7:f3:70:9d:73:ce:
22:82:7b:d9:1c:95:8f:07:a9:28:b8:47:1a:89:35:
79:c1:26:3d:82:ca:43:27:b9:af:06:5b:68:7f:c7:
89:59:32:43:98:17:0e:9a:72:10:d3:a7:6f:19:3f:
2f:9d:48:73:a9:ef:1c:a7:a2:39:41:3f:ce:c6:69:
c3:75:43:ce:34:b4:b1:22:68:51:fa:2e:2e:ec:f8:
65:6d:61:01:05:31:f2:7c:72:74:2c:9e:e7:b1:0e:
3f:5a:8e:68:1d:2e:75:5b:8b:fa:b1:93:26:1d:29:
56:28:26:e9:38:fa:55:f1:65:15:e2:8e:e8:75:f6:
4b:84:33:58:d2:c6:9c:25:9d:63:e3:de:e8:7c:a8:
b7:43:d3:63:71:b7:c5:a4:24:35:05:a6:91:56:0f:
61:62:67:b8:99:93:82:38:64:e7:4e:1e:ff:51:92:
0b:71:9f:32:6d:63:b8:7f:6d:6f:64:91:0a:d8:a2:
c8:4d:c1:07:fb:1a:14:68:8d:c4:2d:4b:a1:c6:f8:
cb:9e:7c:75:7c:60:3f:80:8d:09:5a:40:ae:da:c8:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:49:97:93:2C:DA:F7:E2:F6:BD:03:BE:C9:51:49:FA:46:5C:2B:04
X509v3 Authority Key Identifier:
keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3235342e302f32342d3332203d3e20313432313332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.28.254.0/24
Signature Algorithm: sha256WithRSAEncryption
96:0a:01:f9:48:30:26:52:e0:6a:97:30:9e:6a:c7:0e:cf:9c:
ad:07:d5:d1:08:98:66:90:07:64:d8:54:8f:c9:fd:1f:2e:af:
a6:f3:57:8c:0a:00:40:9e:12:67:0a:f3:00:33:f8:d8:1d:62:
19:b6:37:a7:2e:d8:4e:45:73:b7:18:f3:b5:3c:7b:f1:1b:46:
5c:ed:2c:53:25:7d:9b:f9:b2:eb:8b:3b:4a:c7:51:76:44:62:
a3:b1:52:11:5c:d7:ee:60:1f:72:dc:2d:ae:b0:1d:d2:f8:9e:
5a:f4:74:28:42:97:e5:03:84:ab:68:68:fb:21:9b:7a:b6:af:
45:7f:42:a2:4f:65:f6:1b:da:fc:89:ac:4f:07:da:c8:d8:d1:
d6:ec:16:99:45:7a:32:e6:51:de:0e:d1:f0:13:57:66:07:28:
7c:3c:cf:f6:50:50:c2:76:ff:e4:52:a2:33:27:4a:45:f3:c0:
d8:fa:4f:8e:d5:c5:e5:b2:dc:3a:27:63:87:79:45:a3:47:93:
19:6f:0f:2b:17:25:8c:dc:49:5e:cc:fc:32:e6:f1:5a:95:f5:
28:16:bc:11:58:2c:51:f0:cd:64:34:d6:4c:0a:44:3c:8d:a2:
c1:fd:ae:a7:7d:3d:63:83:c8:97:c6:3d:3d:68:ef:ff:42:f9:
d8:33:1a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 17:45:33 2026 by rpki-client