This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/5gBAgORrLJ1HOd2UJI9VuTgWXLw.roa File: 5gBAgORrLJ1HOd2UJI9VuTgWXLw.roa (raw, json) Hash identifier: BzXsg9YDlLmZBk4wjszn8ron+o/kdkRGz8/J4E7WxpE= Subject key identifier: E6:00:40:80:E4:6B:2C:9D:47:39:DD:94:24:8F:55:B9:38:16:5C:BC Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Certificate serial: 230E Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/5gBAgORrLJ1HOd2UJI9VuTgWXLw.roa Signing time: Mon 26 Jan 2026 06:52:29 +0000 ROA not before: Mon 26 Jan 2026 06:52:29 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 132369 IP address blocks: 103.56.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Feb 2026 19:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8974 (0x230e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Validity Not Before: Jan 26 06:52:29 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=E6004080E46B2C9D4739DD94248F55B938165CBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:98:e1:62:5e:89:77:42:ee:9d:30:05:a3:5d: 0a:b6:f9:cb:95:af:1c:32:4c:47:4c:bb:7a:1d:ff: bb:95:c7:a8:b6:5c:80:2f:8f:4d:ce:1d:12:b0:65: 48:c8:c2:3e:68:9e:08:66:fb:92:8b:e2:ce:e4:5b: 3a:9a:49:4c:16:df:68:c2:3c:e1:4b:53:66:89:09: 8d:e7:9d:bb:73:e4:f8:75:c1:c8:1f:83:7e:c7:46: 31:ef:34:51:3f:a3:97:a9:39:83:51:53:a5:5d:c5: 8e:c5:65:a5:2d:9e:8e:f5:2e:29:ca:22:4d:c8:1e: 41:ff:c1:93:85:d0:61:a3:86:fc:e1:0a:d7:a5:50: f3:03:93:3a:85:16:27:e9:99:5d:cf:dd:65:77:78: da:64:3d:3f:8f:c9:05:d7:02:cb:d6:0a:ea:d9:81: a6:51:1a:54:b0:1a:e7:eb:9e:b5:e6:bf:ac:dd:14: f2:5c:22:58:ff:bd:9f:5e:71:9f:2f:e7:75:e2:ca: 97:2d:3f:d8:37:a4:5e:e6:5b:1a:2e:98:cd:b5:1e: 1d:de:a3:7f:cc:37:a5:a3:88:83:d1:ef:f1:f3:c4: 71:86:3a:9c:ff:be:09:ef:44:44:c0:bf:37:7f:a0: 7f:68:3c:4d:0e:f6:37:97:20:21:3c:c9:59:b7:e3: 8a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:00:40:80:E4:6B:2C:9D:47:39:DD:94:24:8F:55:B9:38:16:5C:BC X509v3 Authority Key Identifier: keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/5gBAgORrLJ1HOd2UJI9VuTgWXLw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.56.8.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:5f:de:e7:6d:24:01:be:d9:12:1d:db:75:8f:d6:83:1f:52: 43:5c:b0:b3:ac:8c:60:bb:d1:20:82:00:95:fb:bc:7f:e1:10: 43:35:e8:92:67:6f:97:bb:eb:51:f8:2a:ce:81:c2:14:49:92: 66:55:58:db:4f:0d:4d:ac:55:df:ca:b2:21:09:27:16:2b:f2: f2:85:5c:1d:90:db:8a:b9:24:de:a6:ed:43:15:d9:80:2c:25: f9:c8:53:fc:09:ea:79:83:b9:6c:70:02:1a:53:49:49:0c:76: cc:72:ca:6e:ff:04:a2:a5:59:2b:7d:74:c3:71:ca:8b:0c:db: 11:36:b5:df:72:71:5f:f8:c5:c2:fd:3e:09:36:13:4e:6e:45: 48:5e:66:44:ce:48:bb:fd:f2:26:2d:e4:62:e4:62:22:8b:46: 7a:9e:49:f8:29:a5:29:35:41:0c:6e:1d:99:a5:d3:32:2f:00: 4f:f2:e6:91:03:3c:77:7a:a9:79:4a:9c:ad:04:0b:94:7c:09: 82:00:19:78:36:07:c3:9c:8a:40:ef:4b:1a:ce:c6:3d:88:a3: 35:b5:1d:67:13:f7:7e:6b:40:c6:2c:12:55:92:6b:1d:0c:44: 6c:bd:3e:c2:05:24:4d:0f:dc:d7:83:32:85:30:53:98:e9:fd: af:7a:c7:45 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIw4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FC QThCNDI1MjMyQkU1ODk2ODM5NkRFMzJBOEVCNUEwNUVFQTY1ODAeFw0yNjAxMjYw NjUyMjlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEU2MDA0MDgwRTQ2QjJD OUQ0NzM5REQ5NDI0OEY1NUI5MzgxNjVDQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3mOFiXol3Qu6dMAWjXQq2+cuVrxwyTEdMu3od/7uVx6i2XIAv j03OHRKwZUjIwj5onghm+5KL4s7kWzqaSUwW32jCPOFLU2aJCY3nnbtz5Ph1wcgf g37HRjHvNFE/o5epOYNRU6VdxY7FZaUtno71LinKIk3IHkH/wZOF0GGjhvzhCtel UPMDkzqFFifpmV3P3WV3eNpkPT+PyQXXAsvWCurZgaZRGlSwGufrnrXmv6zdFPJc Ilj/vZ9ecZ8v53XiypctP9g3pF7mWxoumM21Hh3eo3/MN6WjiIPR7/HzxHGGOpz/ vgnvRETAvzd/oH9oPE0O9jeXICE8yVm344oxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU5gBAgORrLJ1HOd2UJI9VuTgWXLwwHwYDVR0jBBgwFoAUOrqLQlIyvliWg5be MqjrWgXuplgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 NS9PcnFMUWxJeXZsaVdnNWJlTXFqcldnWHVwbGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09ycUxRbEl5dmxpV2c1YmVNcWpyV2dYdXBsZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEzNzUvNWdCQWdPUnJMSjFI T2QyVUpJOVZ1VGdXWEx3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmc4CDANBgkqhkiG9w0BAQsFAAOCAQEATl/e520kAb7ZEh3bdY/Wgx9SQ1yw s6yMYLvRIIIAlfu8f+EQQzXokmdvl7vrUfgqzoHCFEmSZlVY208NTaxV38qyIQkn Fivy8oVcHZDbirkk3qbtQxXZgCwl+chT/AnqeYO5bHACGlNJSQx2zHLKbv8EoqVZ K310w3HKiwzbETa133JxX/jFwv0+CTYTTm5FSF5mRM5Iu/3yJi3kYuRiIotGep5J +CmlKTVBDG4dmaXTMi8AT/LmkQM8d3qpeUqcrQQLlHwJggAZeDYHw5yKQO9LGs7G PYijNbUdZxP3fmtAxiwSVZJrHQxEbL0+wgUkTQ/c14MyhTBTmOn9r3rHRQ== -----END CERTIFICATE-----Generated at Thu Feb 12 18:39:27 2026 by rpki-client