This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138342e302f32342d3234203d3e20313436373632.roa File: 3131342e3131312e3138342e302f32342d3234203d3e20313436373632.roa (raw, json) Hash identifier: Yd2hPJhMjdqd3tfkS6BhuAHKfqEvDiNjI/wreHyMlDM= Subject key identifier: 6D:EC:7A:B0:02:6B:13:36:1F:40:1A:0E:B8:E5:99:AA:23:62:C1:25 Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Certificate serial: 216ADD7F96C70BAB8CD849E077EF6443BF1412CA Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138342e302f32342d3234203d3e20313436373632.roa Signing time: Tue 20 Jan 2026 02:26:08 +0000 ROA not before: Tue 20 Jan 2026 02:21:08 +0000 ROA not after: Tue 19 Jan 2027 02:26:08 +0000 asID: 146762 IP address blocks: 114.111.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6a:dd:7f:96:c7:0b:ab:8c:d8:49:e0:77:ef:64:43:bf:14:12:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Validity Not Before: Jan 20 02:21:08 2026 GMT Not After : Jan 19 02:26:08 2027 GMT Subject: CN=6DEC7AB0026B13361F401A0EB8E599AA2362C125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:f7:e8:16:91:fe:0a:86:f3:93:38:b9:59: 95:b6:d3:ab:38:e4:ca:b0:ff:f2:dc:c8:91:c6:b0: b2:19:c4:19:cb:60:ee:78:d8:f8:59:58:70:94:b0: 8c:e1:d0:0d:b0:c2:0a:e6:cd:4c:8e:e2:eb:59:66: 09:82:b9:01:b6:23:4e:76:f3:1d:3c:a4:d3:e9:6d: 55:d8:6d:e8:8e:d5:43:94:c7:d4:45:70:11:ad:60: 13:33:23:30:11:1e:78:e5:ac:36:ac:7e:aa:5a:4f: ee:85:4f:dc:cc:47:12:e5:7d:16:64:63:b3:f4:63: 84:87:2a:46:b9:fa:dc:3b:b1:68:3e:ee:89:bf:24: 7f:e1:20:54:80:cf:45:7f:4b:aa:da:93:c5:e9:05: 70:d1:97:1b:26:e0:88:d7:d8:9d:3c:75:50:66:5d: 4f:f0:b7:03:a7:72:14:4c:17:1f:f6:95:64:26:40: 91:98:b0:08:af:6c:1e:bc:47:29:34:64:73:09:b6: 32:21:a3:d9:e6:e1:1b:a8:44:29:a8:fd:98:92:01: 88:5f:00:57:db:0f:25:68:64:86:5b:c2:c8:d7:77: 79:2b:65:9c:4c:2b:3e:fd:44:6e:78:29:a8:67:bf: a9:da:9d:1b:50:e2:a7:10:7f:bb:70:cd:4b:24:a3: 2c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EC:7A:B0:02:6B:13:36:1F:40:1A:0E:B8:E5:99:AA:23:62:C1:25 X509v3 Authority Key Identifier: keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138342e302f32342d3234203d3e20313436373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.111.184.0/24 Signature Algorithm: sha256WithRSAEncryption 39:50:fe:ec:7b:45:a5:ec:0f:76:55:69:c2:4b:e8:33:36:47: fa:3d:2c:ae:7b:ea:a1:d5:38:48:bc:37:ad:0d:ba:16:f7:9b: f7:11:ea:20:b1:11:43:94:ad:6d:26:a3:23:75:e9:b3:c8:c7: bf:4a:82:c5:b6:52:9c:03:2e:78:e3:71:13:a7:e8:33:db:7d: 6b:2d:5d:4e:a3:84:58:16:5b:f7:27:cb:43:7e:3e:c0:ca:af: 04:4d:17:a1:39:84:52:15:a0:4d:ee:f7:ef:30:79:55:7b:d9: 45:e3:26:60:e2:89:c1:8b:d8:e5:f5:21:48:37:98:1a:13:81: 64:9d:e4:6f:83:e0:36:6e:55:2b:00:83:66:01:48:6e:b4:e0: 91:11:f9:a8:f0:76:fa:e5:31:d0:55:28:b0:70:25:94:e8:79: a5:a0:ee:9b:d4:12:65:36:e2:1d:b3:25:78:95:9d:2f:17:92: 78:6d:b0:02:e5:49:56:94:b1:46:25:38:90:91:98:33:5e:96: a0:a6:69:73:d9:26:a1:39:5a:e1:45:44:72:14:50:e9:fd:1b: 56:b9:3c:a1:ad:38:01:dc:9c:d4:c7:5b:9e:ed:c9:cf:e2:84: ab:29:2e:17:fc:a4:1d:01:2c:bf:48:37:74:44:82:86:9b:c0: 36:5a:77:a1 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUIWrdf5bHC6uM2Engd+9kQ78UEsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3 REEyOTExRDAeFw0yNjAxMjAwMjIxMDhaFw0yNzAxMTkwMjI2MDhaMDMxMTAvBgNV BAMTKDZERUM3QUIwMDI2QjEzMzYxRjQwMUEwRUI4RTU5OUFBMjM2MkMxMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCysvfoFpH+Cobzkzi5WZW206s4 5Mqw//LcyJHGsLIZxBnLYO542PhZWHCUsIzh0A2wwgrmzUyO4utZZgmCuQG2I052 8x08pNPpbVXYbeiO1UOUx9RFcBGtYBMzIzARHnjlrDasfqpaT+6FT9zMRxLlfRZk Y7P0Y4SHKka5+tw7sWg+7om/JH/hIFSAz0V/S6rak8XpBXDRlxsm4IjX2J08dVBm XU/wtwOnchRMFx/2lWQmQJGYsAivbB68Ryk0ZHMJtjIho9nm4RuoRCmo/ZiSAYhf AFfbDyVoZIZbwsjXd3krZZxMKz79RG54Kahnv6nanRtQ4qcQf7twzUskoywzAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUbex6sAJrEzYfQBoOuOWZqiNiwSUwHwYDVR0j BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MzI0MDM1LzAvMzEzMTM0MmUz MTMxMzEyZTMxMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzYz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHJvuDANBgkqhkiG9w0BAQsFAAOCAQEAOVD+7HtFpewPdlVp wkvoMzZH+j0srnvqodU4SLw3rQ26Fveb9xHqILERQ5StbSajI3Xps8jHv0qCxbZS nAMueONxE6foM9t9ay1dTqOEWBZb9yfLQ34+wMqvBE0XoTmEUhWgTe737zB5VXvZ ReMmYOKJwYvY5fUhSDeYGhOBZJ3kb4PgNm5VKwCDZgFIbrTgkRH5qPB2+uUx0FUo sHAllOh5paDum9QSZTbiHbMleJWdLxeSeG2wAuVJVpSxRiU4kJGYM16WoKZpc9km oTla4UVEchRQ6f0bVrk8oa04Adyc1Mdbnu3Jz+KEqykuF/ykHQEsv0g3dESChpvA Nlp3oQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:37 2026 by rpki-client