This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/Koq88Hkeq0z1orOFOt3sXUP1i7s.roa File: Koq88Hkeq0z1orOFOt3sXUP1i7s.roa (raw, json) Hash identifier: cUkd0p+vM60SjplpcTha44ZE3PZE50mAlZ76hhRNkkw= Subject key identifier: 2A:8A:BC:F0:79:1E:AB:4C:F5:A2:B3:85:3A:DD:EC:5D:43:F5:8B:BB Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Certificate serial: 2310 Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/Koq88Hkeq0z1orOFOt3sXUP1i7s.roa Signing time: Mon 26 Jan 2026 06:52:29 +0000 ROA not before: Mon 26 Jan 2026 06:52:29 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 31972 IP address blocks: 45.115.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Feb 2026 19:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8976 (0x2310) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Validity Not Before: Jan 26 06:52:29 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2A8ABCF0791EAB4CF5A2B3853ADDEC5D43F58BBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:17:19:f9:f3:c1:37:4f:0c:54:98:37:ba:43: d6:47:60:36:84:53:03:56:35:9f:2b:47:de:fa:31: 27:cc:35:a2:db:b7:88:8c:48:9b:13:dc:b9:89:66: ff:cc:c5:bc:e4:a1:ee:d0:d9:e6:6b:91:cf:e3:96: 93:c3:9b:e8:64:13:78:76:7d:8f:14:ff:d8:8f:7e: be:d7:2e:8b:ca:f0:49:d2:7b:a1:81:ff:d6:02:06: ea:e4:af:2e:4e:e1:c8:7f:e2:43:ad:d1:0e:b5:c8: af:6f:61:a7:1d:a1:57:df:bd:ad:11:23:c0:fa:4e: 67:b5:f6:5a:39:ee:35:18:64:e5:39:6a:e2:52:09: fa:a7:97:02:2f:b3:4f:e1:c6:d7:0e:2c:a4:e4:d8: 4f:e7:77:1b:7c:76:54:c7:d9:b3:47:72:70:b3:b2: b7:2f:91:17:7a:3b:35:af:19:9c:d6:c5:d2:14:33: aa:c0:c3:74:2f:7c:b8:5f:42:5a:40:8c:04:2f:bf: e7:b3:06:13:de:14:c7:6b:31:f1:f4:c3:88:8c:7e: 5e:cc:61:c7:41:02:68:46:53:3c:c7:4f:32:bf:83: 56:b1:21:5b:d0:48:08:85:fd:0e:13:de:8c:5d:ed: 2b:94:5a:da:3f:31:00:c0:2f:11:c1:14:4a:d5:32: ef:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8A:BC:F0:79:1E:AB:4C:F5:A2:B3:85:3A:DD:EC:5D:43:F5:8B:BB X509v3 Authority Key Identifier: keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/Koq88Hkeq0z1orOFOt3sXUP1i7s.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.115.228.0/22 Signature Algorithm: sha256WithRSAEncryption 83:1e:41:8f:e5:aa:b8:08:a9:e1:b6:c6:a0:13:d5:33:00:cb: 02:94:89:9a:d6:cc:0d:09:d2:d8:b5:35:ea:42:5d:01:20:30: 91:fb:1a:fa:19:bb:9b:65:e3:0d:1c:1c:f1:6f:ea:0a:55:dc: f0:4c:15:c0:07:ba:ed:3f:76:35:da:4b:a9:83:21:c4:93:69: 2e:ff:2c:ab:bb:b5:a4:da:1b:bc:77:88:38:f9:3c:5f:74:4c: ca:70:61:59:a6:fb:f7:f8:88:4f:a8:17:50:7a:5a:c3:9c:16: 2d:b4:a7:1f:07:fe:3b:e7:51:7c:fa:2f:17:e4:fb:0d:f3:06: 3c:82:3a:b0:5f:35:c6:df:c7:7d:c7:c9:20:29:ff:1e:e6:65: 7f:c8:2e:1c:1f:fd:01:01:88:c7:8f:9e:8e:e1:6d:33:1a:e0: fc:1d:87:b0:a8:84:89:c6:fd:a1:a8:0b:4a:ba:02:9f:32:ff: bd:56:b7:5a:bf:62:1d:eb:f9:08:a1:f3:0e:76:2b:b9:f3:a0: 4f:60:9d:52:a2:28:cc:96:fd:05:90:b2:46:22:ec:16:b9:51: 17:50:a0:00:f8:dd:30:7d:34:5e:a4:7f:7f:bc:19:71:1d:90: a6:a0:e1:8d:df:90:bf:e1:86:d5:42:05:84:88:57:58:b4:55: 24:24:73:c5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FC QThCNDI1MjMyQkU1ODk2ODM5NkRFMzJBOEVCNUEwNUVFQTY1ODAeFw0yNjAxMjYw NjUyMjlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDJBOEFCQ0YwNzkxRUFC NENGNUEyQjM4NTNBRERFQzVENDNGNThCQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+Fxn588E3TwxUmDe6Q9ZHYDaEUwNWNZ8rR976MSfMNaLbt4iM SJsT3LmJZv/Mxbzkoe7Q2eZrkc/jlpPDm+hkE3h2fY8U/9iPfr7XLovK8EnSe6GB /9YCBurkry5O4ch/4kOt0Q61yK9vYacdoVffva0RI8D6Tme19lo57jUYZOU5auJS CfqnlwIvs0/hxtcOLKTk2E/ndxt8dlTH2bNHcnCzsrcvkRd6OzWvGZzWxdIUM6rA w3QvfLhfQlpAjAQvv+ezBhPeFMdrMfH0w4iMfl7MYcdBAmhGUzzHTzK/g1axIVvQ SAiF/Q4T3oxd7SuUWto/MQDALxHBFErVMu81AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUKoq88Hkeq0z1orOFOt3sXUP1i7swHwYDVR0jBBgwFoAUOrqLQlIyvliWg5be MqjrWgXuplgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 NS9PcnFMUWxJeXZsaVdnNWJlTXFqcldnWHVwbGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09ycUxRbEl5dmxpV2c1YmVNcWpyV2dYdXBsZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEzNzUvS29xODhIa2VxMHox b3JPRk90M3NYVVAxaTdzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi1z5DANBgkqhkiG9w0BAQsFAAOCAQEAgx5Bj+WquAip4bbGoBPVMwDLApSJ mtbMDQnS2LU16kJdASAwkfsa+hm7m2XjDRwc8W/qClXc8EwVwAe67T92NdpLqYMh xJNpLv8sq7u1pNobvHeIOPk8X3RMynBhWab79/iIT6gXUHpaw5wWLbSnHwf+O+dR fPovF+T7DfMGPII6sF81xt/HfcfJICn/HuZlf8guHB/9AQGIx4+ejuFtMxrg/B2H sKiEicb9oagLSroCnzL/vVa3Wr9iHev5CKHzDnYrufOgT2CdUqIozJb9BZCyRiLs FrlRF1CgAPjdMH00XqR/f7wZcR2QpqDhjd+Qv+GG1UIFhIhXWLRVJCRzxQ== -----END CERTIFICATE-----Generated at Thu Feb 12 18:42:57 2026 by rpki-client