This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3263/BFAo8UMMdAHw05sAmLS3e-R1IGo.roa
File: BFAo8UMMdAHw05sAmLS3e-R1IGo.roa (raw, json)
Hash identifier: 5JDcSOsMVr1mBDun+3JfFcgXcT2gwteiHYIcyS0y9OA=
Subject key identifier: 04:50:28:F1:43:0C:74:01:F0:D3:9B:00:98:B4:B7:7B:E4:75:20:6A
Certificate issuer: /CN=A261858370BA6D3979593B509BE5FEB89FF69ABE
Certificate serial: 0E42
Authority key identifier: A2:61:85:83:70:BA:6D:39:79:59:3B:50:9B:E5:FE:B8:9F:F6:9A:BE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/omGFg3C6bTl5WTtQm-X-uJ_2mr4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/BFAo8UMMdAHw05sAmLS3e-R1IGo.roa
Signing time: Sat 07 Feb 2026 20:27:19 +0000
ROA not before: Sat 07 Feb 2026 20:27:19 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 137753
IP address blocks: 1.118.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/omGFg3C6bTl5WTtQm-X-uJ_2mr4.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/omGFg3C6bTl5WTtQm-X-uJ_2mr4.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/omGFg3C6bTl5WTtQm-X-uJ_2mr4.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Feb 2026 10:57:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3650 (0xe42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A261858370BA6D3979593B509BE5FEB89FF69ABE
Validity
Not Before: Feb 7 20:27:19 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=045028F1430C7401F0D39B0098B4B77BE475206A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:b1:5f:34:fe:40:1a:06:f8:9c:3e:99:a7:
c5:4c:30:b8:d9:28:f7:ad:1d:13:ed:8f:f2:7f:04:
c6:7b:61:d7:e0:f9:9a:62:f7:5d:a1:b2:a6:07:92:
06:74:b1:96:8a:c7:71:0b:97:95:8f:6f:aa:51:39:
ce:bf:62:8c:f3:f1:c0:bf:9a:77:d2:a5:c1:2b:5d:
89:4a:2d:2b:46:72:3a:c9:d9:fc:a8:db:1b:14:c9:
a1:73:66:6a:ff:95:6a:74:f8:70:ff:0b:08:42:10:
1e:8b:f8:6a:f0:06:18:f9:db:53:09:a9:34:be:eb:
9b:06:fe:2c:fb:5f:6f:5a:18:c0:8b:5c:14:5c:5d:
f1:c6:64:de:32:27:37:18:a4:a6:b9:56:5e:6d:37:
ac:11:d5:3d:4e:88:40:81:9c:06:72:97:28:cb:14:
91:4b:41:51:c6:77:25:a3:2e:91:9e:40:83:b4:8d:
20:8b:41:19:24:5a:f0:db:42:cf:37:1e:36:a5:98:
f4:f0:31:ed:89:8f:78:97:07:db:4d:62:84:62:3b:
96:ac:fe:21:27:72:4c:50:ff:4a:be:21:c2:c2:ed:
e8:96:9e:61:58:fd:85:6d:b4:3a:62:6f:89:f2:7a:
68:d8:7d:3f:a9:b3:0e:6f:53:fe:f2:0e:19:30:a8:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:50:28:F1:43:0C:74:01:F0:D3:9B:00:98:B4:B7:7B:E4:75:20:6A
X509v3 Authority Key Identifier:
keyid:A2:61:85:83:70:BA:6D:39:79:59:3B:50:9B:E5:FE:B8:9F:F6:9A:BE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/omGFg3C6bTl5WTtQm-X-uJ_2mr4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/omGFg3C6bTl5WTtQm-X-uJ_2mr4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/BFAo8UMMdAHw05sAmLS3e-R1IGo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.118.36.0/24
Signature Algorithm: sha256WithRSAEncryption
21:0c:6b:53:af:82:ec:e1:dc:13:f9:3b:23:26:51:36:78:a3:
05:50:a6:aa:ec:12:1f:9d:7e:e0:df:8c:1b:00:f6:c0:ca:d5:
dd:85:62:73:9d:15:7d:68:83:5e:c3:b1:49:c4:1a:bb:20:38:
4c:2f:0e:97:03:40:35:d8:4e:87:8e:36:01:f2:28:0c:23:a9:
7c:cf:08:fc:0a:39:31:12:3c:1a:56:ac:5e:7b:6b:8d:26:4b:
50:11:94:52:8e:02:58:2c:81:00:b3:d8:f7:9d:ab:f2:d4:ee:
54:eb:e6:41:60:78:dc:f2:13:34:5e:b2:3b:62:10:86:9b:24:
ce:a3:42:0a:75:22:a8:10:08:2c:14:e9:50:92:14:46:09:b4:
90:8a:4f:be:5b:4b:0f:75:49:9a:b8:35:2b:17:7a:c9:96:a0:
b1:07:ed:f0:cb:8c:2c:f5:89:e3:9c:13:e3:69:b0:e6:e7:1a:
05:f2:cd:e0:59:e7:eb:6e:09:ce:d8:f9:24:fb:f0:7d:d8:05:
e1:3b:94:7b:e2:75:84:f0:e6:5a:a7:40:0a:cf:a3:5d:e5:18:
08:c7:86:18:c5:08:cf:50:61:3c:92:68:75:40:01:03:0a:b2:
1e:64:2a:32:af:b3:8a:cf:fc:02:5f:a4:92:b5:67:01:1f:cc:
16:b6:01:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 10:20:45 2026 by rpki-client