This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3137362e302f32342d3234203d3e20313436373632.roa File: 3131342e3131312e3137362e302f32342d3234203d3e20313436373632.roa (raw, json) Hash identifier: VC+9ee95pNmMQJysCZRaAUqZrztwr1iHfxKQUtLwzeU= Subject key identifier: 29:B7:4F:92:1F:9A:21:D0:55:F6:17:7A:2C:0C:45:AE:6B:EE:D4:24 Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Certificate serial: 60F35A4D7B3DCB357FA818108B808A4DD8A82D65 Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3137362e302f32342d3234203d3e20313436373632.roa Signing time: Tue 20 Jan 2026 02:26:08 +0000 ROA not before: Tue 20 Jan 2026 02:21:08 +0000 ROA not after: Tue 19 Jan 2027 02:26:08 +0000 asID: 146762 IP address blocks: 114.111.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f3:5a:4d:7b:3d:cb:35:7f:a8:18:10:8b:80:8a:4d:d8:a8:2d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Validity Not Before: Jan 20 02:21:08 2026 GMT Not After : Jan 19 02:26:08 2027 GMT Subject: CN=29B74F921F9A21D055F6177A2C0C45AE6BEED424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e5:23:6a:43:f9:21:75:6a:6b:98:0a:9a:9f: ab:ec:00:06:94:98:b9:eb:24:74:45:3c:48:16:de: 17:11:f5:78:2e:13:6a:b7:cd:75:92:51:d7:f0:4c: 19:ca:af:36:bb:cc:83:e4:46:f1:4a:8b:c2:0d:15: 6c:3f:04:36:01:1b:f9:0f:fe:ea:e8:0a:80:73:8d: f6:b6:ea:1d:2f:86:9f:1d:24:5c:5f:cc:54:d8:8c: ee:51:97:89:dc:03:cf:5d:a8:6b:90:bb:1a:05:2a: 2b:7f:e4:86:4b:b3:9b:d5:5c:3b:12:d9:d3:5d:31: 3c:2b:40:fe:0b:49:9e:d7:64:01:d7:06:40:3c:e0: 25:3d:b2:39:b4:b8:13:0b:b2:63:12:b3:df:0d:36: 4d:94:c8:4a:39:18:ee:10:17:86:8a:e2:93:d5:29: 0e:96:ca:50:37:f2:d5:45:8e:1e:35:9f:00:91:b6: 23:2f:b2:95:84:51:5b:34:ee:8b:4e:30:67:24:b8: 5c:5c:8d:b3:f0:bd:ee:f3:74:5c:b9:ef:45:c1:a1: d4:66:7a:0c:3c:fb:80:bf:51:2f:2b:45:3c:70:a4: 6a:92:8a:0a:dc:24:71:08:5f:8a:53:99:37:9b:94: bf:be:ac:84:0e:a8:a6:fc:19:5b:b9:a8:44:01:71: f2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B7:4F:92:1F:9A:21:D0:55:F6:17:7A:2C:0C:45:AE:6B:EE:D4:24 X509v3 Authority Key Identifier: keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3137362e302f32342d3234203d3e20313436373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.111.176.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:18:de:1c:ff:cf:3c:2d:e4:4e:55:55:b4:56:dd:f1:a3:0e: ff:eb:ad:8d:31:9b:c0:bc:7d:4b:6d:65:71:1e:49:e2:67:bb: be:47:e5:c0:a1:60:73:bd:a8:09:06:e1:f1:48:6d:e4:c2:d1: 92:85:b8:99:9b:79:fe:ee:14:f1:a4:13:83:ec:c0:db:ab:e8: f6:b9:a9:c0:94:77:85:28:7a:76:d4:41:aa:71:d4:50:e9:c8: 74:15:b2:21:b3:d0:9e:97:35:4b:cb:fe:38:56:40:0d:64:8e: 86:c2:42:96:03:d5:fd:26:91:fe:3e:4a:f6:e2:6c:5f:a6:55: dc:69:5c:e5:51:81:4c:8b:f6:8e:c3:12:c7:e4:e6:d9:64:f8: d8:a1:6e:45:33:1a:35:cc:af:e2:f6:71:8d:9b:19:99:dc:9d: ad:fe:d4:e2:55:42:33:ef:b8:a2:c1:f1:2d:18:de:00:e5:be: d8:f7:d7:72:77:34:ea:71:11:1c:32:f3:1b:ae:4b:2b:fb:c3: 00:e6:2c:9f:c3:33:26:69:aa:ae:aa:e3:d4:a1:4e:a4:2d:09: e0:3e:cb:19:7e:56:a2:e7:52:29:eb:41:68:32:0a:ea:9b:19: 1d:cc:18:26:e6:b9:97:04:9f:65:a0:d5:c9:63:bf:e5:ea:95: 84:03:21:10 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUYPNaTXs9yzV/qBgQi4CKTdioLWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3 REEyOTExRDAeFw0yNjAxMjAwMjIxMDhaFw0yNzAxMTkwMjI2MDhaMDMxMTAvBgNV BAMTKDI5Qjc0RjkyMUY5QTIxRDA1NUY2MTc3QTJDMEM0NUFFNkJFRUQ0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe5SNqQ/khdWprmAqan6vsAAaU mLnrJHRFPEgW3hcR9XguE2q3zXWSUdfwTBnKrza7zIPkRvFKi8INFWw/BDYBG/kP /uroCoBzjfa26h0vhp8dJFxfzFTYjO5Rl4ncA89dqGuQuxoFKit/5IZLs5vVXDsS 2dNdMTwrQP4LSZ7XZAHXBkA84CU9sjm0uBMLsmMSs98NNk2UyEo5GO4QF4aK4pPV KQ6WylA38tVFjh41nwCRtiMvspWEUVs07otOMGckuFxcjbPwve7zdFy570XBodRm egw8+4C/US8rRTxwpGqSigrcJHEIX4pTmTeblL++rIQOqKb8GVu5qEQBcfK5AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUKbdPkh+aIdBV9hd6LAxFrmvu1CQwHwYDVR0j BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MzI0MDM1LzAvMzEzMTM0MmUz MTMxMzEyZTMxMzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzYz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHJvsDANBgkqhkiG9w0BAQsFAAOCAQEAehjeHP/PPC3kTlVV tFbd8aMO/+utjTGbwLx9S21lcR5J4me7vkflwKFgc72oCQbh8Uht5MLRkoW4mZt5 /u4U8aQTg+zA26vo9rmpwJR3hSh6dtRBqnHUUOnIdBWyIbPQnpc1S8v+OFZADWSO hsJClgPV/SaR/j5K9uJsX6ZV3Glc5VGBTIv2jsMSx+Tm2WT42KFuRTMaNcyv4vZx jZsZmdydrf7U4lVCM++4osHxLRjeAOW+2PfXcnc06nERHDLzG65LK/vDAOYsn8Mz Jmmqrqrj1KFOpC0J4D7LGX5WoudSKetBaDIK6psZHcwYJua5lwSfZaDVyWO/5eqV hAMhEA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:19 2026 by rpki-client