This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/-BD1ScZ1qtVml1mtGMCl0VXuWnQ.roa File: -BD1ScZ1qtVml1mtGMCl0VXuWnQ.roa (raw, json) Hash identifier: Y4RnHF0olQOkJZCOgplKy6V5W3l+yjTdRv7vuxuxt/Y= Subject key identifier: F8:10:F5:49:C6:75:AA:D5:66:97:59:AD:18:C0:A5:D1:55:EE:5A:74 Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Certificate serial: 2313 Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/-BD1ScZ1qtVml1mtGMCl0VXuWnQ.roa Signing time: Mon 26 Jan 2026 06:52:30 +0000 ROA not before: Mon 26 Jan 2026 06:52:30 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 132369 IP address blocks: 103.196.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Feb 2026 19:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8979 (0x2313) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Validity Not Before: Jan 26 06:52:30 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F810F549C675AAD5669759AD18C0A5D155EE5A74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e9:0b:4b:d1:eb:62:f4:db:e4:24:28:69:21: 11:12:5a:bc:61:1a:ff:b1:27:dc:5a:56:bb:36:d2: d9:8c:cb:73:c7:be:25:10:63:1a:c0:f9:ea:97:6e: ca:d4:cc:2f:37:3d:b4:77:04:83:45:d4:cd:b1:9b: be:e4:78:c2:05:6d:98:58:1b:41:d9:60:70:7b:a5: 20:c9:ad:88:e8:c0:b8:41:ed:41:82:0f:8c:f6:10: 17:fc:f2:29:fc:4f:5a:e3:31:44:cf:2d:08:77:b2: c2:d2:c7:a3:bc:e0:54:7a:aa:89:5d:0b:17:6c:a2: 17:18:7a:f5:fb:1c:b0:71:08:1b:99:a0:41:3c:94: ec:d7:0e:a2:6c:11:3a:af:38:b1:c9:d9:5b:d4:6a: fe:19:2d:9c:dc:0a:af:95:b5:4a:81:71:f0:39:85: a1:70:86:34:00:12:2c:91:b2:85:f7:09:09:b5:34: b4:4e:01:39:ab:1d:90:30:3d:db:c5:31:39:2a:ba: 4e:d6:a4:a6:b5:db:49:b4:d7:01:90:7f:8f:54:24: dd:c0:fb:51:c3:5b:55:83:09:33:07:94:ba:c2:8a: 90:b0:83:8a:31:ce:5f:d3:15:8a:81:47:de:29:bf: 17:df:63:be:1a:16:c0:a2:3a:03:fe:19:96:4c:63: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:10:F5:49:C6:75:AA:D5:66:97:59:AD:18:C0:A5:D1:55:EE:5A:74 X509v3 Authority Key Identifier: keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/-BD1ScZ1qtVml1mtGMCl0VXuWnQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.196.204.0/22 Signature Algorithm: sha256WithRSAEncryption 13:74:65:22:af:a6:d4:14:b9:59:2e:4c:ad:16:85:72:6d:ce: 16:18:dd:c7:6e:b3:3e:e0:aa:33:57:f9:83:17:ff:3c:e5:99: 12:99:55:61:2b:2b:17:6c:40:c7:04:0e:46:1c:bf:75:5f:96: 4b:68:52:ea:ce:9d:e2:86:6b:bc:f5:6a:87:13:0f:a0:2b:38: 7a:7c:c2:17:13:a4:76:97:55:0e:f7:cc:f3:01:14:c2:1d:35: f7:db:51:c0:d6:78:c5:8b:b8:a7:d4:a0:39:4e:6d:d4:81:23: 1a:30:e8:b8:f5:62:f1:7e:84:7c:75:09:69:bb:e3:bf:41:03: 87:da:b3:1f:5f:38:87:d6:8b:78:27:85:1e:8c:ee:60:ab:24: 99:8e:f7:f8:35:be:31:38:fa:31:f8:ee:58:89:2e:a6:4f:9b: 20:ab:2f:27:29:c2:b0:fa:62:86:37:b6:7f:48:cb:08:09:fd: 0b:55:58:56:ba:21:00:3c:ec:10:db:1b:2c:78:47:e3:83:32: 2a:93:33:23:2d:34:63:d9:af:74:9b:22:5a:4c:fc:1e:fa:76: f1:2a:eb:11:4e:44:3c:95:79:12:f3:a9:87:ed:6c:f2:93:08: a9:84:dc:77:88:39:8e:a6:60:fc:ad:d4:f4:f5:13:47:41:d6: 14:ea:1f:03 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIxMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FC QThCNDI1MjMyQkU1ODk2ODM5NkRFMzJBOEVCNUEwNUVFQTY1ODAeFw0yNjAxMjYw NjUyMzBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEY4MTBGNTQ5QzY3NUFB RDU2Njk3NTlBRDE4QzBBNUQxNTVFRTVBNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCf6QtL0eti9NvkJChpIRESWrxhGv+xJ9xaVrs20tmMy3PHviUQ YxrA+eqXbsrUzC83PbR3BINF1M2xm77keMIFbZhYG0HZYHB7pSDJrYjowLhB7UGC D4z2EBf88in8T1rjMUTPLQh3ssLSx6O84FR6qoldCxdsohcYevX7HLBxCBuZoEE8 lOzXDqJsETqvOLHJ2VvUav4ZLZzcCq+VtUqBcfA5haFwhjQAEiyRsoX3CQm1NLRO ATmrHZAwPdvFMTkquk7WpKa120m01wGQf49UJN3A+1HDW1WDCTMHlLrCipCwg4ox zl/TFYqBR94pvxffY74aFsCiOgP+GZZMY205AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU+BD1ScZ1qtVml1mtGMCl0VXuWnQwHwYDVR0jBBgwFoAUOrqLQlIyvliWg5be MqjrWgXuplgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 NS9PcnFMUWxJeXZsaVdnNWJlTXFqcldnWHVwbGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09ycUxRbEl5dmxpV2c1YmVNcWpyV2dYdXBsZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEzNzUvLUJEMVNjWjFxdFZt bDFtdEdNQ2wwVlh1V25RLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfEzDANBgkqhkiG9w0BAQsFAAOCAQEAE3RlIq+m1BS5WS5MrRaFcm3OFhjd x26zPuCqM1f5gxf/POWZEplVYSsrF2xAxwQORhy/dV+WS2hS6s6d4oZrvPVqhxMP oCs4enzCFxOkdpdVDvfM8wEUwh0199tRwNZ4xYu4p9SgOU5t1IEjGjDouPVi8X6E fHUJabvjv0EDh9qzH184h9aLeCeFHozuYKskmY73+DW+MTj6MfjuWIkupk+bIKsv JynCsPpihje2f0jLCAn9C1VYVrohADzsENsbLHhH44MyKpMzIy00Y9mvdJsiWkz8 Hvp28SrrEU5EPJV5EvOph+1s8pMIqYTcd4g5jqZg/K3U9PUTR0HWFOofAw== -----END CERTIFICATE-----Generated at Thu Feb 12 18:42:57 2026 by rpki-client