This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138382e302f32342d3234203d3e20313436373632.roa File: 3131342e3131312e3138382e302f32342d3234203d3e20313436373632.roa (raw, json) Hash identifier: d3dxWmoPXxo1nO5RHMRT4MjQS31UKEZUCxDP0qx+gPI= Subject key identifier: 41:DF:77:F4:63:E4:7D:8A:B7:2B:3D:D2:3C:92:A1:B7:51:B1:D4:91 Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Certificate serial: 5E50111FCCACC89E20C20F3A404E92D1B3C98FF1 Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138382e302f32342d3234203d3e20313436373632.roa Signing time: Tue 20 Jan 2026 02:26:08 +0000 ROA not before: Tue 20 Jan 2026 02:21:08 +0000 ROA not after: Tue 19 Jan 2027 02:26:08 +0000 asID: 146762 IP address blocks: 114.111.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:50:11:1f:cc:ac:c8:9e:20:c2:0f:3a:40:4e:92:d1:b3:c9:8f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Validity Not Before: Jan 20 02:21:08 2026 GMT Not After : Jan 19 02:26:08 2027 GMT Subject: CN=41DF77F463E47D8AB72B3DD23C92A1B751B1D491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:05:a3:8b:60:c8:ce:39:e6:5c:2d:df:81: 85:62:11:17:45:5a:a1:37:d1:16:1d:ae:24:86:63: 03:61:65:58:3e:30:ef:61:3f:a0:2e:dc:a8:1c:56: 31:f5:da:29:5c:a1:07:72:5c:e6:95:ca:95:10:79: 90:ce:e9:e8:6f:cf:ac:d7:1e:fd:b6:0f:66:2b:72: 3d:54:e3:73:16:0c:9e:4e:7a:05:ca:10:49:22:aa: 49:13:cf:ab:be:29:d9:6b:f0:f7:19:d8:eb:67:4c: 0f:1f:2c:d3:23:dc:1c:aa:6c:f5:bd:70:9b:59:d8: 06:37:a1:86:28:45:a6:6a:1d:ed:ab:dc:f7:3f:82: 0e:2f:c9:5f:ba:e3:ee:4d:2e:2f:a3:21:ab:06:74: 99:f2:f7:46:b8:cb:7b:7c:5c:97:01:41:83:e7:a3: 9f:69:02:92:4e:2e:6c:f7:39:fe:ba:a8:37:01:b9: a5:88:f6:42:fb:b5:27:26:28:f8:bc:6f:ea:22:57: bb:08:46:9c:62:e8:82:02:d7:4a:87:ee:59:08:04: d4:e6:6d:ae:3c:03:a8:6e:69:91:ba:0d:c6:49:d3: 67:dc:6b:75:e4:44:a0:6a:d4:c0:44:39:08:03:eb: a9:f0:a4:cf:fb:3c:3e:dd:3f:8a:ac:fe:6e:ef:a2: 5f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DF:77:F4:63:E4:7D:8A:B7:2B:3D:D2:3C:92:A1:B7:51:B1:D4:91 X509v3 Authority Key Identifier: keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138382e302f32342d3234203d3e20313436373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.111.188.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:e0:ec:8f:fb:f8:c6:f4:b4:fc:b8:bd:ac:77:fc:b9:76:e8: 82:bd:43:80:e1:62:d5:21:62:ad:49:a0:6e:92:43:13:89:e0: d4:87:86:d0:c9:66:a1:c3:ae:e4:0d:f7:25:24:79:a8:fb:93: 61:7f:b5:fb:00:94:78:bf:c5:14:f4:df:5e:97:8a:40:35:2a: dd:77:3f:e2:92:2f:8a:c3:a4:2f:5a:e6:d9:01:0d:e3:44:82: ac:84:38:8a:99:d8:05:54:1e:62:93:b3:78:bf:ac:52:46:09: 01:13:bf:c9:f6:30:ab:47:5c:94:d6:0b:b8:89:c2:1e:d9:16: 3b:96:32:08:44:f2:99:31:43:9f:2d:0f:5c:01:2d:0e:b2:a3: 6f:0f:76:6c:08:0a:47:69:66:d7:24:ae:5a:db:a3:d3:9b:d9: 09:44:22:fe:f9:9b:a8:21:3b:44:24:44:e4:02:00:0a:7e:ef: 35:0b:c8:52:fa:83:3d:af:f4:2c:34:88:d2:65:2c:8b:ee:7c: b0:69:46:46:94:91:f9:ba:fe:0b:78:4d:5f:39:77:50:40:70: 2d:f3:e6:23:34:c8:6c:25:8a:a5:5f:a9:80:6b:cf:0c:2d:cb: b3:f6:e3:b3:4f:54:f1:9f:16:9a:70:c9:ed:e7:70:5b:24:34: 3d:9a:e5:fa -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUXlARH8ysyJ4gwg86QE6S0bPJj/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3 REEyOTExRDAeFw0yNjAxMjAwMjIxMDhaFw0yNzAxMTkwMjI2MDhaMDMxMTAvBgNV BAMTKDQxREY3N0Y0NjNFNDdEOEFCNzJCM0REMjNDOTJBMUI3NTFCMUQ0OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlwWji2DIzjnmXC3fgYViERdF WqE30RYdriSGYwNhZVg+MO9hP6Au3KgcVjH12ilcoQdyXOaVypUQeZDO6ehvz6zX Hv22D2Yrcj1U43MWDJ5OegXKEEkiqkkTz6u+Kdlr8PcZ2OtnTA8fLNMj3ByqbPW9 cJtZ2AY3oYYoRaZqHe2r3Pc/gg4vyV+64+5NLi+jIasGdJny90a4y3t8XJcBQYPn o59pApJOLmz3Of66qDcBuaWI9kL7tScmKPi8b+oiV7sIRpxi6IIC10qH7lkIBNTm ba48A6huaZG6DcZJ02fca3XkRKBq1MBEOQgD66nwpM/7PD7dP4qs/m7vol8rAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUQd939GPkfYq3Kz3SPJKht1Gx1JEwHwYDVR0j BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MzI0MDM1LzAvMzEzMTM0MmUz MTMxMzEyZTMxMzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzYz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHJvvDANBgkqhkiG9w0BAQsFAAOCAQEAauDsj/v4xvS0/Li9 rHf8uXbogr1DgOFi1SFirUmgbpJDE4ng1IeG0MlmocOu5A33JSR5qPuTYX+1+wCU eL/FFPTfXpeKQDUq3Xc/4pIvisOkL1rm2QEN40SCrIQ4ipnYBVQeYpOzeL+sUkYJ ARO/yfYwq0dclNYLuInCHtkWO5YyCETymTFDny0PXAEtDrKjbw92bAgKR2lm1ySu Wtuj05vZCUQi/vmbqCE7RCRE5AIACn7vNQvIUvqDPa/0LDSI0mUsi+58sGlGRpSR +br+C3hNXzl3UEBwLfPmIzTIbCWKpV+pgGvPDC3Ls/bjs09U8Z8WmnDJ7edwWyQ0 PZrl+g== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:14 2026 by rpki-client