This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138372e302f32342d3234203d3e20313436373632.roa File: 3131342e3131312e3138372e302f32342d3234203d3e20313436373632.roa (raw, json) Hash identifier: jV0UQMUSzuX46lyxU9Q1TIad3C+g694F7rPF2x053cs= Subject key identifier: 17:FD:E5:A3:B5:AC:F2:64:54:14:CD:67:42:16:93:28:13:7D:24:C1 Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Certificate serial: 1620DDF3657C27723DAF308895638A3CACAF47D2 Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138372e302f32342d3234203d3e20313436373632.roa Signing time: Tue 20 Jan 2026 02:26:09 +0000 ROA not before: Tue 20 Jan 2026 02:21:09 +0000 ROA not after: Tue 19 Jan 2027 02:26:09 +0000 asID: 146762 IP address blocks: 114.111.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:20:dd:f3:65:7c:27:72:3d:af:30:88:95:63:8a:3c:ac:af:47:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Validity Not Before: Jan 20 02:21:09 2026 GMT Not After : Jan 19 02:26:09 2027 GMT Subject: CN=17FDE5A3B5ACF2645414CD6742169328137D24C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f2:99:2e:1c:33:a2:49:fb:47:c4:90:e3:79: 5c:bf:db:2e:13:33:9f:e7:f4:bc:ad:15:fa:05:e7: a1:b7:f0:8b:ba:f7:37:f6:5a:fc:c0:8c:15:65:22: fe:29:5e:dc:1f:58:9c:75:2f:5e:34:bb:4f:9c:11: aa:06:76:1b:f1:b8:43:c0:9b:81:1e:98:eb:59:5f: a3:3a:8c:25:da:e1:14:74:61:3e:a8:44:30:dd:e1: 95:24:84:eb:b9:90:f9:30:24:f0:44:ee:fb:35:ee: c4:36:bc:37:be:70:f1:07:02:9f:54:28:36:30:12: 8c:03:0a:6f:51:aa:ec:e6:6b:e5:32:f8:d6:e7:4a: 71:63:83:bd:ff:9a:9d:9f:a3:b1:e8:4b:ce:bc:9f: 36:16:d9:a1:aa:d4:07:09:42:be:df:b6:5c:c2:6a: 52:d4:96:be:3c:27:da:b8:0f:a7:0c:96:ae:35:d1: 15:2f:9f:55:ca:79:06:0d:15:7e:4e:9a:dd:bd:da: 86:c3:8c:37:4f:ce:c7:fa:d4:78:40:da:f8:19:50: 46:1f:20:6b:16:ba:0c:79:6c:71:c3:a7:a0:80:59: 67:92:a2:0f:8a:81:9e:82:fb:f5:b2:35:fe:c2:3d: 96:aa:38:d5:72:94:96:20:df:71:74:c5:b8:52:aa: a3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FD:E5:A3:B5:AC:F2:64:54:14:CD:67:42:16:93:28:13:7D:24:C1 X509v3 Authority Key Identifier: keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138372e302f32342d3234203d3e20313436373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.111.187.0/24 Signature Algorithm: sha256WithRSAEncryption 89:79:08:db:b9:ea:b1:78:85:3c:59:55:59:ab:77:36:33:cf: 5b:a8:f5:17:68:3a:9d:0c:9a:52:92:05:14:5c:ed:74:99:e4: 7f:dd:c7:f0:05:44:3f:f8:f4:f8:40:10:26:66:7f:79:38:59: 5b:2e:64:46:dc:c6:76:cb:9c:c8:e0:2b:65:86:2b:51:09:81: c2:f0:84:0a:74:01:0b:37:85:0a:69:c6:cb:3d:0e:81:7a:b0: 0c:1e:1a:a2:bf:cc:86:5b:18:93:44:37:98:fd:70:78:4c:f5: 39:c4:ad:cb:30:18:4a:18:73:f7:d0:c6:c2:06:b1:d4:72:26: 9a:d7:2b:5e:a0:b0:2a:4b:7f:79:61:0f:ad:67:6b:22:db:32: 87:66:43:68:e9:8a:c2:bc:39:2b:54:da:a7:8f:7a:3a:50:08: dc:fe:d6:4f:11:e4:38:b4:cc:ae:4f:97:ad:14:d3:5d:f7:bb: e7:b3:00:f9:c7:fa:c7:0c:1e:8b:56:36:5a:5e:c7:75:16:19: f3:eb:4a:f6:53:e2:51:31:75:56:5a:7e:d5:1a:d6:3a:34:10: 27:63:cf:11:5b:a0:7e:cf:cd:09:a0:a5:92:40:fe:4e:7f:22: 61:2a:97:bf:d3:a0:e5:79:79:e5:4b:05:b7:55:38:c3:97:8e: 29:0b:20:11 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUFiDd82V8J3I9rzCIlWOKPKyvR9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3 REEyOTExRDAeFw0yNjAxMjAwMjIxMDlaFw0yNzAxMTkwMjI2MDlaMDMxMTAvBgNV BAMTKDE3RkRFNUEzQjVBQ0YyNjQ1NDE0Q0Q2NzQyMTY5MzI4MTM3RDI0QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk8pkuHDOiSftHxJDjeVy/2y4T M5/n9LytFfoF56G38Iu69zf2WvzAjBVlIv4pXtwfWJx1L140u0+cEaoGdhvxuEPA m4EemOtZX6M6jCXa4RR0YT6oRDDd4ZUkhOu5kPkwJPBE7vs17sQ2vDe+cPEHAp9U KDYwEowDCm9Rquzma+Uy+NbnSnFjg73/mp2fo7HoS868nzYW2aGq1AcJQr7ftlzC alLUlr48J9q4D6cMlq410RUvn1XKeQYNFX5Omt292obDjDdPzsf61HhA2vgZUEYf IGsWugx5bHHDp6CAWWeSog+KgZ6C+/WyNf7CPZaqONVylJYg33F0xbhSqqPtAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUF/3lo7Ws8mRUFM1nQhaTKBN9JMEwHwYDVR0j BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MzI0MDM1LzAvMzEzMTM0MmUz MTMxMzEyZTMxMzgzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzYz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHJvuzANBgkqhkiG9w0BAQsFAAOCAQEAiXkI27nqsXiFPFlV Wat3NjPPW6j1F2g6nQyaUpIFFFztdJnkf93H8AVEP/j0+EAQJmZ/eThZWy5kRtzG dsucyOArZYYrUQmBwvCECnQBCzeFCmnGyz0OgXqwDB4aor/MhlsYk0Q3mP1weEz1 OcStyzAYShhz99DGwgax1HImmtcrXqCwKkt/eWEPrWdrItsyh2ZDaOmKwrw5K1Ta p496OlAI3P7WTxHkOLTMrk+XrRTTXfe757MA+cf6xwwei1Y2Wl7HdRYZ8+tK9lPi UTF1Vlp+1RrWOjQQJ2PPEVugfs/NCaClkkD+Tn8iYSqXv9Og5Xl55UsFt1U4w5eO KQsgEQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:22 2026 by rpki-client