This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138352e302f32342d3234203d3e20313436373632.roa File: 3131342e3131312e3138352e302f32342d3234203d3e20313436373632.roa (raw, json) Hash identifier: DfoNTHHHPPQvz5ij9Tse9a3EdCP3ruj/rqOSevyve2I= Subject key identifier: 88:2C:58:9C:DF:51:F6:0D:5A:B0:E6:3D:F4:0E:44:C1:49:F6:D1:53 Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Certificate serial: 6E687AAACE663BF30C1B533A9CA4D6C04CAC665A Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138352e302f32342d3234203d3e20313436373632.roa Signing time: Tue 20 Jan 2026 02:26:09 +0000 ROA not before: Tue 20 Jan 2026 02:21:09 +0000 ROA not after: Tue 19 Jan 2027 02:26:09 +0000 asID: 146762 IP address blocks: 114.111.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:68:7a:aa:ce:66:3b:f3:0c:1b:53:3a:9c:a4:d6:c0:4c:ac:66:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Validity Not Before: Jan 20 02:21:09 2026 GMT Not After : Jan 19 02:26:09 2027 GMT Subject: CN=882C589CDF51F60D5AB0E63DF40E44C149F6D153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:68:eb:be:f9:cf:eb:34:ff:50:10:1e:66:a4: 90:c2:90:9c:47:4b:a6:86:c3:45:68:55:db:83:57: fa:b4:3c:fd:1c:b1:a6:95:91:c0:f6:bd:9d:48:3e: d8:2a:3a:48:0f:81:24:56:22:f6:87:be:a8:51:8c: f7:15:84:41:0a:ae:d3:ca:98:34:c8:e5:87:2b:25: 1b:c7:c3:dc:ab:70:66:e7:88:5c:da:d8:00:56:04: b1:7a:fa:76:49:76:d2:bb:f3:b9:d8:42:25:41:ac: f5:eb:c1:2e:9e:49:09:06:89:19:c9:9e:cc:c3:13: 80:ec:2f:ac:9a:42:a4:e8:4e:31:8b:33:98:87:ba: c1:e2:c5:54:c2:09:c0:80:2b:88:88:c8:03:e4:ab: 0c:58:bb:2a:d2:2d:de:91:04:b0:42:a8:ae:01:6c: f4:cf:fb:44:7c:1f:be:66:20:79:a6:85:50:cc:81: 2e:a6:f2:8e:3f:12:ce:26:cf:2d:26:91:da:a6:e1: 2d:3a:64:86:49:66:7d:5d:ed:68:f3:39:35:5b:aa: 67:7f:1f:65:c9:26:68:4c:0a:57:b6:05:08:55:ef: 73:c1:8b:24:32:3a:e1:5b:7b:fc:d4:80:96:af:8a: 27:9f:0e:6e:71:8e:27:d0:94:cd:9f:24:83:51:9d: 87:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2C:58:9C:DF:51:F6:0D:5A:B0:E6:3D:F4:0E:44:C1:49:F6:D1:53 X509v3 Authority Key Identifier: keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138352e302f32342d3234203d3e20313436373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.111.185.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:be:a8:35:82:0c:c1:35:9c:0c:05:7f:66:00:88:ab:c3:4d: 9a:2a:6a:05:c0:9f:3c:0a:6f:25:3e:d1:a6:c7:f1:60:81:e4: ca:f9:27:4c:4f:21:88:6f:8f:84:0f:94:79:41:5c:82:30:c2: bf:e4:b1:21:7e:06:e6:a3:f5:23:e7:2b:d6:96:a2:d2:95:d1: 1c:34:42:25:0b:25:b8:71:ad:8a:a2:eb:ea:9f:ba:66:38:3b: 94:12:ab:69:be:cd:ad:38:c4:bb:43:04:ef:9a:45:88:d8:f0: 64:94:01:38:ed:d4:35:a8:02:44:6d:20:01:58:3d:a0:35:bc: 2c:cb:75:da:82:ec:93:1a:49:43:68:57:18:b3:f0:94:2f:26: 88:3b:dd:43:27:c0:ca:9a:93:00:22:9a:69:62:24:e9:92:f8: cd:72:26:0d:aa:f5:23:5d:98:e0:44:12:b3:33:a8:98:30:24: 61:6f:dc:d3:9e:4b:ee:33:b1:0f:f5:82:98:46:7a:ee:5a:9f: 09:db:b0:bd:3c:dc:e3:ae:d6:16:c4:72:ea:3b:9a:96:7c:62: 87:a1:df:20:2d:6f:2b:90:ed:d4:ca:ea:39:aa:58:6a:ab:69: fd:55:2e:71:e6:8d:60:17:20:5c:78:49:40:5d:03:c4:8c:2f: 68:93:ac:ca -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUbmh6qs5mO/MMG1M6nKTWwEysZlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3 REEyOTExRDAeFw0yNjAxMjAwMjIxMDlaFw0yNzAxMTkwMjI2MDlaMDMxMTAvBgNV BAMTKDg4MkM1ODlDREY1MUY2MEQ1QUIwRTYzREY0MEU0NEMxNDlGNkQxNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClaOu++c/rNP9QEB5mpJDCkJxH S6aGw0VoVduDV/q0PP0csaaVkcD2vZ1IPtgqOkgPgSRWIvaHvqhRjPcVhEEKrtPK mDTI5YcrJRvHw9yrcGbniFza2ABWBLF6+nZJdtK787nYQiVBrPXrwS6eSQkGiRnJ nszDE4DsL6yaQqToTjGLM5iHusHixVTCCcCAK4iIyAPkqwxYuyrSLd6RBLBCqK4B bPTP+0R8H75mIHmmhVDMgS6m8o4/Es4mzy0mkdqm4S06ZIZJZn1d7WjzOTVbqmd/ H2XJJmhMCle2BQhV73PBiyQyOuFbe/zUgJaviiefDm5xjifQlM2fJINRnYe/AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUiCxYnN9R9g1asOY99A5EwUn20VMwHwYDVR0j BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MzI0MDM1LzAvMzEzMTM0MmUz MTMxMzEyZTMxMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzYz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHJvuTANBgkqhkiG9w0BAQsFAAOCAQEAXr6oNYIMwTWcDAV/ ZgCIq8NNmipqBcCfPApvJT7RpsfxYIHkyvknTE8hiG+PhA+UeUFcgjDCv+SxIX4G 5qP1I+cr1pai0pXRHDRCJQsluHGtiqLr6p+6Zjg7lBKrab7NrTjEu0ME75pFiNjw ZJQBOO3UNagCRG0gAVg9oDW8LMt12oLskxpJQ2hXGLPwlC8miDvdQyfAypqTACKa aWIk6ZL4zXImDar1I12Y4EQSszOomDAkYW/c055L7jOxD/WCmEZ67lqfCduwvTzc 467WFsRy6jualnxih6HfIC1vK5Dt1MrqOapYaqtp/VUuceaNYBcgXHhJQF0DxIwv aJOsyg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:16 2026 by rpki-client