This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138392e302f32342d3234203d3e20313436373632.roa File: 3131342e3131312e3138392e302f32342d3234203d3e20313436373632.roa (raw, json) Hash identifier: UN7Qnirh/2XzM0qJ+K46LJtDxxzQ/o9T5wdOdPQYwgw= Subject key identifier: 47:87:77:4A:5D:60:DD:41:64:56:3E:A5:BD:68:94:45:BF:CA:A3:1E Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Certificate serial: 29FD9B7243704665936B695F2FFC24F140FD821D Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138392e302f32342d3234203d3e20313436373632.roa Signing time: Tue 20 Jan 2026 02:26:09 +0000 ROA not before: Tue 20 Jan 2026 02:21:09 +0000 ROA not after: Tue 19 Jan 2027 02:26:09 +0000 asID: 146762 IP address blocks: 114.111.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fd:9b:72:43:70:46:65:93:6b:69:5f:2f:fc:24:f1:40:fd:82:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Validity Not Before: Jan 20 02:21:09 2026 GMT Not After : Jan 19 02:26:09 2027 GMT Subject: CN=4787774A5D60DD4164563EA5BD689445BFCAA31E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:f0:22:97:ec:3f:ad:a6:69:71:c7:59:a6: 74:da:b7:ae:fe:b1:d4:c2:27:49:a3:82:b9:ec:97: 11:08:db:b0:46:52:9e:5e:14:2d:9b:a8:0c:57:b5: e9:6d:53:a5:ef:94:c6:68:61:c0:18:46:09:90:b3: 98:6e:79:13:0b:39:ff:e1:09:82:91:4a:9e:38:67: ef:69:33:a4:68:07:87:b5:0e:f5:a3:5b:fc:00:6d: 2e:37:70:71:1e:5e:2a:15:f7:37:27:db:08:be:1f: 3e:52:32:fc:c9:7b:ee:79:ed:49:c0:b0:b6:67:a7: 0e:d0:e9:23:cd:81:d2:1e:bf:7e:f1:26:45:f7:30: db:92:df:b2:4b:28:8b:05:66:73:90:0d:23:a9:2f: 0f:0b:5b:e0:36:5c:40:65:27:e8:73:d3:51:c6:49: b5:88:c3:ed:3d:9d:57:57:bb:20:7e:03:6f:42:4f: 9b:4e:e5:0a:d7:9c:18:b0:b0:0f:23:90:c0:90:9a: 10:d4:a1:a0:ce:eb:f9:62:90:f0:87:91:6a:cb:3d: 40:42:f3:20:5a:f3:7a:55:f3:11:80:4a:86:b0:55: e9:d8:a6:a3:19:57:ae:2a:56:78:28:ba:3b:98:63: ae:c5:4b:1c:0e:e2:1c:61:6a:ad:21:93:1f:4a:ea: f0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:87:77:4A:5D:60:DD:41:64:56:3E:A5:BD:68:94:45:BF:CA:A3:1E X509v3 Authority Key Identifier: keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138392e302f32342d3234203d3e20313436373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.111.189.0/24 Signature Algorithm: sha256WithRSAEncryption 29:3d:74:4e:5c:cd:12:96:2b:83:50:48:fb:da:a2:e3:14:26: 1e:a6:85:c3:be:87:ec:4b:af:c9:89:c1:d5:d2:db:44:99:26: 55:47:14:74:a2:74:f5:cb:79:8e:3f:db:eb:da:9e:7b:93:ed: ad:6a:ff:6f:fc:b8:30:bb:32:cd:fa:58:c4:24:b1:c0:05:a9: c2:04:c7:2a:ee:5f:25:f1:66:c2:1a:f6:0e:ec:f2:e6:72:ee: 42:cf:1a:e0:3f:ac:e9:99:a7:f3:3e:8e:f1:18:97:3d:a2:00: 32:46:8b:00:fd:6f:d6:51:ee:62:c3:36:43:71:ff:bd:42:5e: bc:3c:6f:ee:31:92:c1:02:8b:2b:10:b0:0a:63:02:5a:d5:5d: be:e7:31:82:03:99:8c:68:f0:9c:7d:8b:70:f7:d7:b7:d7:f7: 94:cf:d0:48:fa:f6:5c:dd:e3:3b:1d:4a:7e:1a:ba:95:26:04: 2d:6e:ed:86:dc:9f:0e:4c:0b:4e:45:1d:2f:a1:c7:35:40:53: 6f:38:f9:17:55:48:e6:71:1f:8e:9f:71:68:c7:47:b7:0a:da: 6c:dc:f4:ee:ed:28:b8:c9:23:ec:ab:89:c4:03:dc:fd:91:04: 17:0f:0f:61:5c:2d:4b:3c:ac:1d:e7:fb:67:1e:50:32:f5:3f: 09:70:0b:76 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUKf2bckNwRmWTa2lfL/wk8UD9gh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3 REEyOTExRDAeFw0yNjAxMjAwMjIxMDlaFw0yNzAxMTkwMjI2MDlaMDMxMTAvBgNV BAMTKDQ3ODc3NzRBNUQ2MERENDE2NDU2M0VBNUJENjg5NDQ1QkZDQUEzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwYfAil+w/raZpccdZpnTat67+ sdTCJ0mjgrnslxEI27BGUp5eFC2bqAxXteltU6XvlMZoYcAYRgmQs5hueRMLOf/h CYKRSp44Z+9pM6RoB4e1DvWjW/wAbS43cHEeXioV9zcn2wi+Hz5SMvzJe+557UnA sLZnpw7Q6SPNgdIev37xJkX3MNuS37JLKIsFZnOQDSOpLw8LW+A2XEBlJ+hz01HG SbWIw+09nVdXuyB+A29CT5tO5QrXnBiwsA8jkMCQmhDUoaDO6/likPCHkWrLPUBC 8yBa83pV8xGASoawVenYpqMZV64qVngoujuYY67FSxwO4hxhaq0hkx9K6vDLAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUR4d3Sl1g3UFkVj6lvWiURb/Kox4wHwYDVR0j BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MzI0MDM1LzAvMzEzMTM0MmUz MTMxMzEyZTMxMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzYz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHJvvTANBgkqhkiG9w0BAQsFAAOCAQEAKT10TlzNEpYrg1BI +9qi4xQmHqaFw76H7EuvyYnB1dLbRJkmVUcUdKJ09ct5jj/b69qee5PtrWr/b/y4 MLsyzfpYxCSxwAWpwgTHKu5fJfFmwhr2Duzy5nLuQs8a4D+s6Zmn8z6O8RiXPaIA MkaLAP1v1lHuYsM2Q3H/vUJevDxv7jGSwQKLKxCwCmMCWtVdvucxggOZjGjwnH2L cPfXt9f3lM/QSPr2XN3jOx1Kfhq6lSYELW7thtyfDkwLTkUdL6HHNUBTbzj5F1VI 5nEfjp9xaMdHtwrabNz07u0ouMkj7KuJxAPc/ZEEFw8PYVwtSzysHef7Zx5QMvU/ CXALdg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:05 2026 by rpki-client