This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138302e302f32342d3234203d3e20313436373632.roa File: 3131342e3131312e3138302e302f32342d3234203d3e20313436373632.roa (raw, json) Hash identifier: PPgkSPwD1+U5stprn1D0dN8dTyE3ZUS4cSC5pqU8EBA= Subject key identifier: 6C:A1:2A:C0:1E:C1:BE:13:29:A6:99:58:99:9D:C5:FD:64:26:4B:D3 Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Certificate serial: 18C6B0D4C0359A0AABC5206FB20A9E4398E736D3 Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138302e302f32342d3234203d3e20313436373632.roa Signing time: Tue 20 Jan 2026 02:26:07 +0000 ROA not before: Tue 20 Jan 2026 02:21:07 +0000 ROA not after: Tue 19 Jan 2027 02:26:07 +0000 asID: 146762 IP address blocks: 114.111.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c6:b0:d4:c0:35:9a:0a:ab:c5:20:6f:b2:0a:9e:43:98:e7:36:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Validity Not Before: Jan 20 02:21:07 2026 GMT Not After : Jan 19 02:26:07 2027 GMT Subject: CN=6CA12AC01EC1BE1329A69958999DC5FD64264BD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7b:d3:0c:d7:ee:4e:97:0b:bc:51:4d:01:db: 99:1d:f3:3b:45:bc:d9:95:bd:73:dd:15:d1:a4:24: 2a:a7:a4:e4:d1:2e:d2:d1:5d:a5:42:6d:5e:3c:3a: 85:21:d3:0b:16:1e:5c:e4:fe:40:0e:78:ce:88:3d: c0:76:ae:06:9d:80:65:ee:e9:fd:65:d4:3d:65:4b: 0a:b2:54:b7:b8:65:ac:09:b9:f9:a9:aa:4c:a2:be: 85:49:07:77:47:d2:4c:b1:e4:91:27:49:97:9c:e8: 2b:df:8e:c6:50:cc:a7:57:7f:0c:dc:c0:15:cd:24: 4f:cb:f7:d9:d3:5c:3a:5e:d9:b3:b7:03:6a:6c:22: 07:2a:e8:10:65:f1:7b:89:dd:d1:9c:d1:e2:c1:74: a2:a0:fb:2e:30:75:73:99:22:89:48:30:2e:be:d4: 4c:4d:76:57:03:1c:7e:41:84:b0:2b:58:23:c6:5d: 69:7e:53:2a:06:14:e0:aa:f9:d6:4e:f0:ea:17:6e: 2a:bc:f5:49:fc:24:85:9c:e1:17:bf:0b:eb:5e:f0: 96:60:85:1f:e6:e4:22:f5:ac:ea:2e:1a:b4:90:a1: 84:29:41:74:66:de:fa:83:ee:5e:fe:b7:87:c1:ac: 15:c8:86:8a:21:c6:6d:37:b0:0f:e8:74:a8:54:63: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A1:2A:C0:1E:C1:BE:13:29:A6:99:58:99:9D:C5:FD:64:26:4B:D3 X509v3 Authority Key Identifier: keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138302e302f32342d3234203d3e20313436373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.111.180.0/24 Signature Algorithm: sha256WithRSAEncryption ab:7a:27:3f:f2:12:2d:e4:04:87:ca:d0:31:6b:2b:50:e8:06: 38:00:a2:09:0d:53:c0:47:c4:4b:3b:6a:83:42:99:2e:0d:e3: 9d:2b:c6:e2:30:0d:ce:b7:14:30:ce:73:a1:cc:fe:b0:e5:0e: 1f:7c:23:d5:bb:09:8a:e6:cc:7b:37:db:dd:1e:1a:66:d3:f4: 41:35:ef:e4:ff:5b:f4:df:5d:fb:84:ca:e6:45:9a:a0:51:f2: 54:11:65:ce:34:a2:d6:50:e3:ae:1a:9c:e8:88:db:70:97:6b: ef:b1:28:66:3e:32:15:32:ee:04:6b:14:a9:c1:64:42:6b:90: 3c:2e:f3:54:38:85:d3:8b:7f:61:5a:93:22:9f:93:a9:c8:63: db:44:a9:1e:e8:ea:4b:0b:95:45:bc:d0:b7:b2:27:a3:59:41: 6d:4a:14:0f:9f:2c:81:06:86:8f:1d:0f:cb:48:fd:d7:5f:65: 36:a1:a3:4b:f7:e7:51:36:25:93:32:60:d6:e3:68:44:35:ea: f9:b6:b7:ce:e7:cc:ca:45:fc:a5:21:33:b5:af:0a:43:54:e1: 61:50:e4:5e:e2:21:56:2f:de:8f:f6:64:19:75:0e:a2:4c:74: 22:f0:16:3f:5d:88:66:f7:d1:2b:81:35:93:c8:c1:05:70:47: f2:e1:69:a1 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUGMaw1MA1mgqrxSBvsgqeQ5jnNtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3 REEyOTExRDAeFw0yNjAxMjAwMjIxMDdaFw0yNzAxMTkwMjI2MDdaMDMxMTAvBgNV BAMTKDZDQTEyQUMwMUVDMUJFMTMyOUE2OTk1ODk5OURDNUZENjQyNjRCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHe9MM1+5Olwu8UU0B25kd8ztF vNmVvXPdFdGkJCqnpOTRLtLRXaVCbV48OoUh0wsWHlzk/kAOeM6IPcB2rgadgGXu 6f1l1D1lSwqyVLe4ZawJufmpqkyivoVJB3dH0kyx5JEnSZec6CvfjsZQzKdXfwzc wBXNJE/L99nTXDpe2bO3A2psIgcq6BBl8XuJ3dGc0eLBdKKg+y4wdXOZIolIMC6+ 1ExNdlcDHH5BhLArWCPGXWl+UyoGFOCq+dZO8OoXbiq89Un8JIWc4Re/C+te8JZg hR/m5CL1rOouGrSQoYQpQXRm3vqD7l7+t4fBrBXIhoohxm03sA/odKhUY0IFAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUbKEqwB7BvhMppplYmZ3F/WQmS9MwHwYDVR0j BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MzI0MDM1LzAvMzEzMTM0MmUz MTMxMzEyZTMxMzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzYz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHJvtDANBgkqhkiG9w0BAQsFAAOCAQEAq3onP/ISLeQEh8rQ MWsrUOgGOACiCQ1TwEfESztqg0KZLg3jnSvG4jANzrcUMM5zocz+sOUOH3wj1bsJ iubMezfb3R4aZtP0QTXv5P9b9N9d+4TK5kWaoFHyVBFlzjSi1lDjrhqc6IjbcJdr 77EoZj4yFTLuBGsUqcFkQmuQPC7zVDiF04t/YVqTIp+Tqchj20SpHujqSwuVRbzQ t7Ino1lBbUoUD58sgQaGjx0Py0j9119lNqGjS/fnUTYlkzJg1uNoRDXq+ba3zufM ykX8pSEzta8KQ1ThYVDkXuIhVi/ej/ZkGXUOokx0IvAWP12IZvfRK4E1k8jBBXBH 8uFpoQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:19 2026 by rpki-client