This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138322e302f32342d3234203d3e20313436373632.roa File: 3131342e3131312e3138322e302f32342d3234203d3e20313436373632.roa (raw, json) Hash identifier: G3+LeensaDFmePqko03P1I/U70ppCM1tFWwCVpmhfxk= Subject key identifier: C3:3D:71:97:1C:7D:41:1E:A1:33:BF:6F:48:08:2A:6C:04:A9:59:5C Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Certificate serial: 408D9B83D8D5BF10AC61C26D9FA0891ABD1B95E9 Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138322e302f32342d3234203d3e20313436373632.roa Signing time: Tue 20 Jan 2026 02:26:09 +0000 ROA not before: Tue 20 Jan 2026 02:21:09 +0000 ROA not after: Tue 19 Jan 2027 02:26:09 +0000 asID: 146762 IP address blocks: 114.111.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:8d:9b:83:d8:d5:bf:10:ac:61:c2:6d:9f:a0:89:1a:bd:1b:95:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Validity Not Before: Jan 20 02:21:09 2026 GMT Not After : Jan 19 02:26:09 2027 GMT Subject: CN=C33D71971C7D411EA133BF6F48082A6C04A9595C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2d:29:b0:24:0c:b0:25:61:b8:9d:c4:25:02: 33:d8:af:f1:74:6b:b7:17:40:94:b9:df:e5:0b:6e: 21:99:da:33:fc:f1:19:99:9a:46:8e:f3:1c:07:f9: 20:7d:49:72:08:77:b4:60:4b:62:02:32:4c:27:39: 55:8b:ac:25:f9:ae:e8:87:c5:18:10:03:e9:e6:29: 03:a5:c1:ec:59:0a:ab:9f:31:3e:68:79:ac:9a:69: c9:6d:bc:0b:bc:ee:86:89:4f:e5:80:61:a5:ed:c2: 08:2e:87:57:de:80:80:f5:3a:02:0b:24:1a:ee:3a: 40:26:2e:c6:fc:a2:a7:44:39:12:75:e1:2a:7e:52: 26:bc:30:23:62:14:b8:ff:e8:42:87:fb:96:63:52: 64:eb:75:aa:86:8e:6f:5c:b1:05:04:98:24:1d:a3: 5e:09:00:09:ad:b8:f0:ce:49:f6:26:39:03:28:2d: 0a:71:6d:fc:df:1c:4e:f0:9a:c5:67:ed:b1:85:63: 23:2d:96:74:ed:2e:3c:9c:ab:9f:73:2b:22:a8:41: c3:4a:be:0e:f6:c3:da:cb:07:15:4a:75:f5:7d:97: c6:ac:da:6d:c7:59:e3:64:60:68:26:86:36:df:e6: 70:ff:73:d5:27:79:4f:1d:a8:3c:76:e0:d3:0e:0a: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3D:71:97:1C:7D:41:1E:A1:33:BF:6F:48:08:2A:6C:04:A9:59:5C X509v3 Authority Key Identifier: keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138322e302f32342d3234203d3e20313436373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.111.182.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:90:e4:12:21:3a:68:8a:25:3b:3d:9b:66:f5:f8:7d:22:b5: 45:de:53:d2:c4:d5:7f:01:ed:53:dc:06:67:e0:22:1c:4b:b2: 8d:c5:8e:62:f7:ad:b6:09:fa:ef:7b:2e:4d:3a:cc:cd:9c:e7: f4:a6:b4:8e:8a:ce:82:67:28:8c:1c:b7:d8:1e:37:04:2c:a7: 02:d7:dc:c9:69:74:2b:c1:d0:48:01:17:38:22:e1:81:ea:86: 19:63:e6:ff:21:3d:06:24:aa:c9:f3:55:e9:b6:3c:ae:e8:f9: 72:10:c2:ea:39:18:ac:45:6c:4c:34:ac:bd:9b:bb:52:03:1d: ff:27:50:c6:82:b5:29:6e:e8:e9:3a:48:fb:87:91:2d:ce:e3: 9f:9e:f5:84:38:69:cb:f5:28:55:27:b9:aa:5c:5a:a1:5e:ac: eb:b6:74:54:a8:d0:30:a5:22:60:49:2f:b3:ee:81:d2:e4:04: 67:1a:34:02:b8:ef:35:af:e3:5e:68:68:2f:a4:52:e9:7a:7c: 07:47:6b:1c:37:f8:8a:18:a0:85:8b:0b:a4:d9:5d:f3:7b:6d: 09:3a:82:2d:d4:c0:f9:ac:a1:e5:b5:cc:02:e9:74:5a:72:02: 0a:74:d6:c7:e2:ba:71:67:62:d5:9d:bd:7a:f0:9e:1e:b2:a1: 80:b1:2d:92 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUQI2bg9jVvxCsYcJtn6CJGr0blekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3 REEyOTExRDAeFw0yNjAxMjAwMjIxMDlaFw0yNzAxMTkwMjI2MDlaMDMxMTAvBgNV BAMTKEMzM0Q3MTk3MUM3RDQxMUVBMTMzQkY2RjQ4MDgyQTZDMDRBOTU5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClLSmwJAywJWG4ncQlAjPYr/F0 a7cXQJS53+ULbiGZ2jP88RmZmkaO8xwH+SB9SXIId7RgS2ICMkwnOVWLrCX5ruiH xRgQA+nmKQOlwexZCqufMT5oeayaacltvAu87oaJT+WAYaXtwgguh1fegID1OgIL JBruOkAmLsb8oqdEORJ14Sp+Uia8MCNiFLj/6EKH+5ZjUmTrdaqGjm9csQUEmCQd o14JAAmtuPDOSfYmOQMoLQpxbfzfHE7wmsVn7bGFYyMtlnTtLjycq59zKyKoQcNK vg72w9rLBxVKdfV9l8as2m3HWeNkYGgmhjbf5nD/c9UneU8dqDx24NMOCt1FAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUwz1xlxx9QR6hM79vSAgqbASpWVwwHwYDVR0j BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MzI0MDM1LzAvMzEzMTM0MmUz MTMxMzEyZTMxMzgzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzYz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHJvtjANBgkqhkiG9w0BAQsFAAOCAQEATJDkEiE6aIolOz2b ZvX4fSK1Rd5T0sTVfwHtU9wGZ+AiHEuyjcWOYvettgn673suTTrMzZzn9Ka0jorO gmcojBy32B43BCynAtfcyWl0K8HQSAEXOCLhgeqGGWPm/yE9BiSqyfNV6bY8ruj5 chDC6jkYrEVsTDSsvZu7UgMd/ydQxoK1KW7o6TpI+4eRLc7jn571hDhpy/UoVSe5 qlxaoV6s67Z0VKjQMKUiYEkvs+6B0uQEZxo0ArjvNa/jXmhoL6RS6Xp8B0drHDf4 ihighYsLpNld83ttCTqCLdTA+ayh5bXMAul0WnICCnTWx+K6cWdi1Z29evCeHrKh gLEtkg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:28 2026 by rpki-client