This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3263/Jk1GyYjlsUEBgRMpk7D-EkTG0Ww.roa
File: Jk1GyYjlsUEBgRMpk7D-EkTG0Ww.roa (raw, json)
Hash identifier: gN7PO2DPP9MYjLf0cU+nc9h33X+/BPNF9QVC3Txc5lk=
Subject key identifier: 26:4D:46:C9:88:E5:B1:41:01:81:13:29:93:B0:FE:12:44:C6:D1:6C
Certificate issuer: /CN=A261858370BA6D3979593B509BE5FEB89FF69ABE
Certificate serial: 0E41
Authority key identifier: A2:61:85:83:70:BA:6D:39:79:59:3B:50:9B:E5:FE:B8:9F:F6:9A:BE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/omGFg3C6bTl5WTtQm-X-uJ_2mr4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/Jk1GyYjlsUEBgRMpk7D-EkTG0Ww.roa
Signing time: Sat 07 Feb 2026 20:27:19 +0000
ROA not before: Sat 07 Feb 2026 20:27:19 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 14618
IP address blocks: 1.118.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/omGFg3C6bTl5WTtQm-X-uJ_2mr4.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/omGFg3C6bTl5WTtQm-X-uJ_2mr4.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/omGFg3C6bTl5WTtQm-X-uJ_2mr4.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Feb 2026 10:57:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3649 (0xe41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A261858370BA6D3979593B509BE5FEB89FF69ABE
Validity
Not Before: Feb 7 20:27:19 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=264D46C988E5B1410181132993B0FE1244C6D16C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:84:f7:fc:e0:b9:52:25:e2:5f:f7:b8:c8:83:
46:e6:9d:ae:93:7f:bf:1d:2d:ce:63:6f:57:a3:77:
d7:c1:58:58:94:f9:db:06:4d:79:d1:76:b6:32:8b:
12:55:4f:3d:fd:e7:44:f2:d8:89:33:f9:30:89:3f:
51:20:e7:ba:6c:da:d5:df:8d:e6:94:77:da:ef:e2:
65:06:32:8a:9f:99:7f:d5:38:f2:5a:7e:17:d9:6d:
eb:f7:e1:13:52:00:5a:27:68:77:79:ae:9d:bb:fb:
26:70:f3:db:6b:9d:5c:8d:19:d5:6f:e1:2f:36:6a:
9b:d1:66:e7:ac:80:23:6e:32:4c:f4:3c:9a:dd:9e:
0b:21:d6:d4:df:46:80:18:fa:1f:12:75:55:6c:1b:
04:0a:17:9d:d7:35:bb:83:07:bf:c3:d9:91:59:fa:
4c:b2:0e:11:c9:2f:0f:37:3f:6f:28:1c:cf:df:6b:
e6:be:3d:4f:02:0c:96:9d:97:d6:00:1f:43:1c:8b:
fa:ea:ef:30:a6:01:e0:64:d9:fc:8b:a7:6b:ea:12:
71:c4:b5:97:85:4a:cc:c6:e6:1c:ee:64:91:08:8d:
b6:6e:81:32:05:74:d1:e8:67:a3:e2:65:bd:77:e0:
9d:35:7d:7e:e7:8a:de:b4:f6:03:01:02:06:0c:23:
ee:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4D:46:C9:88:E5:B1:41:01:81:13:29:93:B0:FE:12:44:C6:D1:6C
X509v3 Authority Key Identifier:
keyid:A2:61:85:83:70:BA:6D:39:79:59:3B:50:9B:E5:FE:B8:9F:F6:9A:BE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/omGFg3C6bTl5WTtQm-X-uJ_2mr4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/omGFg3C6bTl5WTtQm-X-uJ_2mr4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/Jk1GyYjlsUEBgRMpk7D-EkTG0Ww.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.118.3.0/24
Signature Algorithm: sha256WithRSAEncryption
45:e2:4e:ea:b5:0a:cb:99:d1:5f:a6:7e:89:b5:9c:c7:34:da:
bd:cc:9f:94:ce:af:f5:09:c9:7b:9a:f3:4a:8f:ef:6c:a8:7f:
fa:50:ce:53:fc:a8:05:26:63:aa:5e:a6:1d:e8:fd:c4:1c:df:
66:d8:71:9b:6c:af:22:a3:8d:79:48:9c:11:ef:42:cd:a4:64:
c1:6a:0b:02:bd:c8:bd:cc:f1:49:5d:76:53:2b:d8:e5:0c:02:
a4:cb:83:59:67:a7:c6:25:b5:e2:9a:82:f4:0b:a6:6b:39:5e:
9e:b3:4c:2e:c1:3d:05:52:4d:d9:1a:b7:29:42:a7:9e:00:b4:
4a:d8:f6:a9:9e:db:b8:dc:7f:d2:2c:b0:4e:da:c5:95:b8:d9:
eb:6d:da:f5:47:da:81:35:1b:fd:de:89:96:ff:83:9d:78:fc:
bc:33:2c:b6:b4:ea:e5:dc:3b:3f:9a:a1:8b:ae:d2:c8:79:1f:
0c:07:0d:39:0b:22:af:76:88:4e:35:00:d3:dd:fb:e3:e8:a6:
b7:14:0c:3d:88:90:fe:ed:d5:8b:d7:03:9a:ad:7d:37:77:ce:
1f:87:09:8a:8e:3a:ca:4e:b4:0d:4f:b1:47:69:71:50:0a:0f:
0a:32:de:d8:26:ad:52:d3:21:d8:aa:32:a6:90:d4:ac:98:da:
3c:84:a0:0b
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICDkEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTI2
MTg1ODM3MEJBNkQzOTc5NTkzQjUwOUJFNUZFQjg5RkY2OUFCRTAeFw0yNjAyMDcy
MDI3MTlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDI2NEQ0NkM5ODhFNUIx
NDEwMTgxMTMyOTkzQjBGRTEyNDRDNkQxNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDehPf84LlSJeJf97jIg0bmna6Tf78dLc5jb1ejd9fBWFiU+dsG
TXnRdrYyixJVTz3950Ty2Ikz+TCJP1Eg57ps2tXfjeaUd9rv4mUGMoqfmX/VOPJa
fhfZbev34RNSAFonaHd5rp27+yZw89trnVyNGdVv4S82apvRZuesgCNuMkz0PJrd
ngsh1tTfRoAY+h8SdVVsGwQKF53XNbuDB7/D2ZFZ+kyyDhHJLw83P28oHM/fa+a+
PU8CDJadl9YAH0Mci/rq7zCmAeBk2fyLp2vqEnHEtZeFSszG5hzuZJEIjbZugTIF
dNHoZ6PiZb134J01fX7nit609gMBAgYMI+4TAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUJk1GyYjlsUEBgRMpk7D+EkTG0WwwHwYDVR0jBBgwFoAUomGFg3C6bTl5WTtQ
m+X+uJ/2mr4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2
My9vbUdGZzNDNmJUbDVXVHRRbS1YLXVKXzJtcjQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL29tR0ZnM0M2YlRsNVdUdFFtLVgtdUpfMm1yNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjMvSmsxR3lZamxzVUVC
Z1JNcGs3RC1Fa1RHMFd3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAAF2AzANBgkqhkiG9w0BAQsFAAOCAQEAReJO6rUKy5nRX6Z+ibWcxzTavcyf
lM6v9QnJe5rzSo/vbKh/+lDOU/yoBSZjql6mHej9xBzfZthxm2yvIqONeUicEe9C
zaRkwWoLAr3IvczxSV12UyvY5QwCpMuDWWenxiW14pqC9AumazlenrNMLsE9BVJN
2Rq3KUKnngC0Stj2qZ7buNx/0iywTtrFlbjZ623a9UfagTUb/d6Jlv+DnXj8vDMs
trTq5dw7P5qhi67SyHkfDAcNOQsir3aITjUA09374+imtxQMPYiQ/u3Vi9cDmq19
N3fOH4cJio46yk60DU+xR2lxUAoPCjLe2CatUtMh2KoyppDUrJjaPISgCw==
-----END CERTIFICATE-----
Generated at Mon Feb 16 10:21:17 2026 by rpki-client