This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/3XFAM1LR8bXrQO9-4KxTBRR6oUM.roa File: 3XFAM1LR8bXrQO9-4KxTBRR6oUM.roa (raw, json) Hash identifier: p3HTFnAwoQUplrWD0lDFeQnn6TtUf3uSH5E930q9wmY= Subject key identifier: DD:71:40:33:52:D1:F1:B5:EB:40:EF:7E:E0:AC:53:05:14:7A:A1:43 Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Certificate serial: 230F Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/3XFAM1LR8bXrQO9-4KxTBRR6oUM.roa Signing time: Mon 26 Jan 2026 06:52:29 +0000 ROA not before: Mon 26 Jan 2026 06:52:29 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 31972 IP address blocks: 210.16.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Feb 2026 19:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8975 (0x230f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Validity Not Before: Jan 26 06:52:29 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DD71403352D1F1B5EB40EF7EE0AC5305147AA143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b0:cc:1c:46:c9:e3:6a:9c:43:8a:cd:56:f5: 45:b4:37:e8:19:d1:da:51:39:df:9c:18:c0:61:04: 73:69:95:da:63:a4:7a:0c:5f:77:51:3c:24:99:d6: d5:9e:2d:7d:ff:24:d3:f9:66:6c:46:cd:58:36:75: 90:82:18:5d:c8:df:46:61:74:9e:4b:66:a5:99:c5: 31:2d:09:06:36:f2:3d:83:f6:80:89:d3:4d:a1:0f: fd:f4:bd:78:60:62:9a:f5:a5:09:b5:d3:d0:71:fe: a0:57:1d:33:d6:e0:98:f0:c6:de:86:b9:fe:e1:6c: 3a:6f:b9:e0:17:1a:97:61:b6:8b:96:bb:c9:c2:5d: 0b:41:08:af:ff:fa:95:ec:1c:1d:0d:c8:ac:da:9a: e9:ef:0d:2b:a3:f4:5c:38:97:7f:cf:7d:99:42:1d: d5:6a:f2:cd:83:a4:ed:f2:8e:16:df:d8:6e:62:3a: 60:8e:54:49:85:b3:d1:79:6b:a1:54:2c:97:eb:35: 25:ce:58:0b:db:bd:9c:5a:d1:b4:26:b3:92:da:2b: 09:a8:a5:80:05:fc:d1:32:39:54:fe:4f:16:10:d4: 03:ec:bd:b8:7d:c9:2c:ba:36:e9:ac:e9:7a:09:60: d2:56:79:a4:e7:65:9a:68:65:cd:bc:64:36:e7:8f: 3b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:71:40:33:52:D1:F1:B5:EB:40:EF:7E:E0:AC:53:05:14:7A:A1:43 X509v3 Authority Key Identifier: keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/3XFAM1LR8bXrQO9-4KxTBRR6oUM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.16.104.0/22 Signature Algorithm: sha256WithRSAEncryption 17:e0:2f:67:89:4d:d7:63:85:0a:78:63:47:68:82:d7:11:d7: 1d:79:d5:90:94:60:63:2c:44:fe:95:e1:8a:61:51:bd:09:87: d7:97:2d:eb:41:be:7a:c7:7a:b6:64:ea:7a:85:7e:d7:b1:19: 2c:9f:2b:6e:c4:c6:c1:02:9e:dc:e3:a0:c7:d0:4a:b0:6e:1f: ce:12:32:64:9c:a0:63:66:40:a5:35:0c:8b:45:f3:d2:0d:66: 98:40:02:15:06:41:a2:e7:80:6f:17:9e:90:c5:67:92:aa:8d: c3:c9:8c:2f:eb:89:29:6d:f5:80:30:90:59:c9:d8:3b:0d:88: 8d:fa:b6:fb:d8:4a:34:1b:4e:fb:7a:c8:7f:69:df:6a:63:bb: 07:aa:e5:c4:5f:b0:8f:b2:e1:20:c4:69:e5:df:de:fb:8e:ec: f4:df:f6:23:3e:fa:a2:e5:d2:48:f0:96:bd:7d:a9:3f:c3:34: b2:9a:75:8f:22:19:ea:d1:43:1c:69:82:4b:3b:e0:a0:b3:34: a8:36:63:27:ac:09:54:bc:0d:8c:cd:cf:6b:ed:eb:bb:63:e6: 87:39:20:11:3b:4c:4b:15:3a:8b:9a:75:0c:f6:69:00:d9:a2: 3f:85:d6:66:e4:ab:42:05:2e:88:53:ca:da:66:de:6d:2d:4e: f3:4e:eb:18 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FC QThCNDI1MjMyQkU1ODk2ODM5NkRFMzJBOEVCNUEwNUVFQTY1ODAeFw0yNjAxMjYw NjUyMjlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERENzE0MDMzNTJEMUYx QjVFQjQwRUY3RUUwQUM1MzA1MTQ3QUExNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjsMwcRsnjapxDis1W9UW0N+gZ0dpROd+cGMBhBHNpldpjpHoM X3dRPCSZ1tWeLX3/JNP5ZmxGzVg2dZCCGF3I30ZhdJ5LZqWZxTEtCQY28j2D9oCJ 002hD/30vXhgYpr1pQm109Bx/qBXHTPW4Jjwxt6Guf7hbDpvueAXGpdhtouWu8nC XQtBCK//+pXsHB0NyKzamunvDSuj9Fw4l3/PfZlCHdVq8s2DpO3yjhbf2G5iOmCO VEmFs9F5a6FULJfrNSXOWAvbvZxa0bQms5LaKwmopYAF/NEyOVT+TxYQ1APsvbh9 ySy6Nums6XoJYNJWeaTnZZpoZc28ZDbnjzt9AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU3XFAM1LR8bXrQO9+4KxTBRR6oUMwHwYDVR0jBBgwFoAUOrqLQlIyvliWg5be MqjrWgXuplgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 NS9PcnFMUWxJeXZsaVdnNWJlTXFqcldnWHVwbGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09ycUxRbEl5dmxpV2c1YmVNcWpyV2dYdXBsZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEzNzUvM1hGQU0xTFI4Ylhy UU85LTRLeFRCUlI2b1VNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtIQaDANBgkqhkiG9w0BAQsFAAOCAQEAF+AvZ4lN12OFCnhjR2iC1xHXHXnV kJRgYyxE/pXhimFRvQmH15ct60G+esd6tmTqeoV+17EZLJ8rbsTGwQKe3OOgx9BK sG4fzhIyZJygY2ZApTUMi0Xz0g1mmEACFQZBoueAbxeekMVnkqqNw8mML+uJKW31 gDCQWcnYOw2Ijfq2+9hKNBtO+3rIf2nfamO7B6rlxF+wj7LhIMRp5d/e+47s9N/2 Iz76ouXSSPCWvX2pP8M0spp1jyIZ6tFDHGmCSzvgoLM0qDZjJ6wJVLwNjM3Pa+3r u2PmhzkgETtMSxU6i5p1DPZpANmiP4XWZuSrQgUuiFPK2mbebS1O807rGA== -----END CERTIFICATE-----Generated at Thu Feb 12 18:37:52 2026 by rpki-client