This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3139302e302f32342d3234203d3e20313436373632.roa File: 3131342e3131312e3139302e302f32342d3234203d3e20313436373632.roa (raw, json) Hash identifier: C7VfQ5RZhf5OnAeKfKA9NgZGlrBddmIBCn4gvV8/SvE= Subject key identifier: 38:CD:38:E0:F2:4F:39:F3:B7:57:E7:2A:18:8F:52:DC:E4:02:3F:56 Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Certificate serial: 6E468125335F8B1776431ED1A11D601073920529 Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3139302e302f32342d3234203d3e20313436373632.roa Signing time: Tue 20 Jan 2026 02:26:08 +0000 ROA not before: Tue 20 Jan 2026 02:21:08 +0000 ROA not after: Tue 19 Jan 2027 02:26:08 +0000 asID: 146762 IP address blocks: 114.111.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:46:81:25:33:5f:8b:17:76:43:1e:d1:a1:1d:60:10:73:92:05:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Validity Not Before: Jan 20 02:21:08 2026 GMT Not After : Jan 19 02:26:08 2027 GMT Subject: CN=38CD38E0F24F39F3B757E72A188F52DCE4023F56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:77:0b:f1:38:bf:27:3d:26:9a:8b:0d:b5:1a: 08:a8:a9:7f:14:4c:91:5d:a7:89:54:7a:ea:05:7c: 4f:0d:96:76:94:34:81:bb:78:55:27:c9:05:29:2f: 5a:98:9d:ee:47:2e:c1:7f:c1:e0:eb:a2:18:ae:8a: e0:9f:8a:94:4b:73:e8:75:58:ae:b3:67:f1:8e:61: 2c:5a:75:8c:ed:4b:48:22:c0:c7:12:bf:d1:89:d5: 95:c4:a6:9e:4d:bf:a0:b7:83:5d:f5:77:fb:69:fc: 7f:03:fb:a8:09:ac:dc:6a:69:83:98:cb:e9:e2:32: 25:b8:4f:0e:a8:06:67:df:9e:9f:07:e2:ed:c5:6d: e5:d0:40:70:11:94:f8:dd:d1:97:70:86:85:ed:90: 44:0b:63:9e:75:77:8e:76:f2:09:c2:39:3e:f2:60: 78:f5:ea:ec:54:b7:ec:3e:76:c1:67:03:cb:28:e1: 4e:78:50:da:39:1b:47:7b:0c:da:0a:8d:da:cf:8e: c0:46:c7:8e:75:9a:e7:30:40:7d:a0:c0:0f:30:a6: 9e:35:24:62:57:e8:27:5c:f9:8f:be:b1:19:cf:72: 27:53:09:70:d2:78:e2:a3:a2:76:1b:17:00:77:c4: 10:9b:fe:db:d5:a2:42:a6:5a:61:51:a5:8e:63:8c: 76:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CD:38:E0:F2:4F:39:F3:B7:57:E7:2A:18:8F:52:DC:E4:02:3F:56 X509v3 Authority Key Identifier: keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3139302e302f32342d3234203d3e20313436373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.111.190.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:fa:43:e6:95:d0:7e:68:bc:a2:67:ff:6f:62:0d:44:0d:1c: f2:e3:fb:07:61:9c:52:94:31:1e:8c:50:ac:00:d4:09:85:56: ea:29:bb:20:a8:9f:7a:f4:40:af:b1:fd:d0:3b:bb:4d:0f:f2: eb:b9:54:df:07:f6:23:be:2f:11:6a:50:54:2b:47:6f:e8:f1: 6f:1f:c0:01:94:6d:d5:65:b1:72:91:95:57:af:28:66:92:90: e9:da:d4:77:e6:d4:16:93:36:ad:39:4b:b2:6e:f1:58:ff:20: b5:51:c5:04:7d:7f:71:04:a0:93:62:67:0c:bd:1a:f5:c7:d9: 1f:db:af:74:f2:1e:2a:8a:d1:52:5d:77:0a:a3:3c:e3:d9:0e: e0:fd:ea:4d:7b:91:2c:30:48:cd:a9:07:48:22:2e:25:57:86: 48:ba:a1:00:23:e4:04:e0:c0:83:64:a9:ce:d9:37:83:96:7d: 36:32:ec:43:46:f7:42:c1:cc:48:eb:62:65:09:6a:0c:81:99: a2:3b:51:62:cd:c0:7d:dd:48:0d:04:e4:a8:54:04:c8:75:a2: e3:33:ce:82:c0:f0:a5:6d:96:fc:f9:23:11:31:d3:55:10:48: a8:a3:6b:15:1e:7b:0c:85:af:c8:c1:9b:69:9e:a9:4f:88:05: f2:2c:fa:39 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUbkaBJTNfixd2Qx7RoR1gEHOSBSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3 REEyOTExRDAeFw0yNjAxMjAwMjIxMDhaFw0yNzAxMTkwMjI2MDhaMDMxMTAvBgNV BAMTKDM4Q0QzOEUwRjI0RjM5RjNCNzU3RTcyQTE4OEY1MkRDRTQwMjNGNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChdwvxOL8nPSaaiw21GgioqX8U TJFdp4lUeuoFfE8NlnaUNIG7eFUnyQUpL1qYne5HLsF/weDrohiuiuCfipRLc+h1 WK6zZ/GOYSxadYztS0giwMcSv9GJ1ZXEpp5Nv6C3g131d/tp/H8D+6gJrNxqaYOY y+niMiW4Tw6oBmffnp8H4u3FbeXQQHARlPjd0ZdwhoXtkEQLY551d4528gnCOT7y YHj16uxUt+w+dsFnA8so4U54UNo5G0d7DNoKjdrPjsBGx451mucwQH2gwA8wpp41 JGJX6Cdc+Y++sRnPcidTCXDSeOKjonYbFwB3xBCb/tvVokKmWmFRpY5jjHYHAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUOM044PJPOfO3V+cqGI9S3OQCP1YwHwYDVR0j BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MzI0MDM1LzAvMzEzMTM0MmUz MTMxMzEyZTMxMzkzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzYz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHJvvjANBgkqhkiG9w0BAQsFAAOCAQEAS/pD5pXQfmi8omf/ b2INRA0c8uP7B2GcUpQxHoxQrADUCYVW6im7IKifevRAr7H90Du7TQ/y67lU3wf2 I74vEWpQVCtHb+jxbx/AAZRt1WWxcpGVV68oZpKQ6drUd+bUFpM2rTlLsm7xWP8g tVHFBH1/cQSgk2JnDL0a9cfZH9uvdPIeKorRUl13CqM849kO4P3qTXuRLDBIzakH SCIuJVeGSLqhACPkBODAg2Spztk3g5Z9NjLsQ0b3QsHMSOtiZQlqDIGZojtRYs3A fd1IDQTkqFQEyHWi4zPOgsDwpW2W/PkjETHTVRBIqKNrFR57DIWvyMGbaZ6pT4gF 8iz6OQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:39 2026 by rpki-client