This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/NS8ld6_e8jjTJ5NSmZlXmrsytmg.roa File: NS8ld6_e8jjTJ5NSmZlXmrsytmg.roa (raw, json) Hash identifier: ue62yQ5UfjmW3GmSVVDJ5m+vcixMEBmN2imHAbo0koI= Subject key identifier: 35:2F:25:77:AF:DE:F2:38:D3:27:93:52:99:99:57:9A:BB:32:B6:68 Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Certificate serial: 2311 Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/NS8ld6_e8jjTJ5NSmZlXmrsytmg.roa Signing time: Mon 26 Jan 2026 06:52:30 +0000 ROA not before: Mon 26 Jan 2026 06:52:30 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 31972 IP address blocks: 103.196.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Feb 2026 19:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8977 (0x2311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Validity Not Before: Jan 26 06:52:30 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=352F2577AFDEF238D32793529999579ABB32B668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9d:72:22:1a:92:fc:a2:d4:68:fa:e8:07:86: e9:60:7c:40:9d:03:8c:43:00:ed:2b:3d:37:a1:0f: a5:1f:95:1a:ff:61:b1:b3:79:3a:93:b7:e9:05:8d: 4e:59:d1:3e:2d:77:11:55:28:c2:95:7b:f2:86:fd: 6e:c7:ef:0b:6d:3f:3d:cf:80:90:a3:4f:37:92:bf: b8:39:9f:83:1f:f7:30:50:9b:4c:76:84:6b:af:31: 51:29:cd:dd:c8:02:4a:a7:a3:88:06:c7:48:74:97: ae:53:e2:c8:36:95:2e:37:11:4f:08:1d:61:de:14: 27:56:9f:81:74:ea:15:a3:70:4a:2c:9a:82:87:46: 3e:2a:85:60:4b:37:f7:20:c9:3e:70:bb:0f:7e:ec: 62:70:14:f1:cf:00:8f:36:98:51:a1:d6:aa:7e:6d: 95:ee:b5:e5:69:4f:4e:59:f0:65:26:16:d2:92:a1: 50:b8:e7:58:5b:5f:c4:69:f7:94:fd:62:f9:19:fe: fe:49:d7:94:8c:63:5d:fd:92:7b:d5:66:47:bf:a7: 73:54:44:4c:bb:1b:27:5a:79:6d:28:36:14:93:5f: 5d:34:8a:43:c7:ee:c6:89:39:c0:a4:b1:39:40:d7: 4c:a2:51:33:28:f1:85:72:98:cd:21:0e:12:e4:3c: 99:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2F:25:77:AF:DE:F2:38:D3:27:93:52:99:99:57:9A:BB:32:B6:68 X509v3 Authority Key Identifier: keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/NS8ld6_e8jjTJ5NSmZlXmrsytmg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.196.204.0/22 Signature Algorithm: sha256WithRSAEncryption af:df:51:7b:3d:8d:55:11:de:96:b8:69:ec:96:36:4a:46:5d: 3f:1f:a1:a6:59:7c:53:79:3c:6e:95:53:17:72:ff:1f:38:30: 7c:1c:f3:73:01:10:01:bc:eb:2a:18:f0:14:b1:d4:a7:7e:2b: a6:95:6c:5b:61:6e:30:60:d1:99:86:d3:2c:f8:03:6b:dc:09: 99:44:98:2d:5d:e1:b5:95:00:a4:ce:b4:c5:66:d5:fb:23:24: 65:0f:b7:40:44:3c:e9:e4:6e:46:ec:bb:54:2f:3a:84:48:eb: e2:85:b6:a0:92:a8:dd:95:1b:f4:4e:96:36:e4:5f:5b:6e:7f: 60:c0:d5:3b:b4:2c:ab:ca:d2:a7:8e:1f:82:6c:6d:2d:11:10: 8a:30:45:c4:99:ce:a1:36:d2:0a:df:03:21:3c:fc:1d:bf:35: 7d:52:64:21:fc:c1:21:cd:a5:a4:94:6e:da:03:f0:80:87:0c: 5e:14:54:2e:a5:fe:fb:fe:3a:61:96:e2:0e:70:fa:9f:ba:50: 8b:ee:1c:98:82:68:7a:c0:58:a3:57:06:e4:ec:5b:c5:e6:0d: 16:57:7e:32:08:ef:bf:41:19:35:63:74:a0:8c:33:6d:2e:ed: 65:d6:ee:f9:98:bb:b4:91:c2:ad:d7:27:71:20:ff:b8:5b:da: 4a:2c:d2:27 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIxEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FC QThCNDI1MjMyQkU1ODk2ODM5NkRFMzJBOEVCNUEwNUVFQTY1ODAeFw0yNjAxMjYw NjUyMzBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDM1MkYyNTc3QUZERUYy MzhEMzI3OTM1Mjk5OTk1NzlBQkIzMkI2NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVnXIiGpL8otRo+ugHhulgfECdA4xDAO0rPTehD6UflRr/YbGz eTqTt+kFjU5Z0T4tdxFVKMKVe/KG/W7H7wttPz3PgJCjTzeSv7g5n4Mf9zBQm0x2 hGuvMVEpzd3IAkqno4gGx0h0l65T4sg2lS43EU8IHWHeFCdWn4F06hWjcEosmoKH Rj4qhWBLN/cgyT5wuw9+7GJwFPHPAI82mFGh1qp+bZXuteVpT05Z8GUmFtKSoVC4 51hbX8Rp95T9YvkZ/v5J15SMY139knvVZke/p3NUREy7GydaeW0oNhSTX100ikPH 7saJOcCksTlA10yiUTMo8YVymM0hDhLkPJm7AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUNS8ld6/e8jjTJ5NSmZlXmrsytmgwHwYDVR0jBBgwFoAUOrqLQlIyvliWg5be MqjrWgXuplgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 NS9PcnFMUWxJeXZsaVdnNWJlTXFqcldnWHVwbGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09ycUxRbEl5dmxpV2c1YmVNcWpyV2dYdXBsZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEzNzUvTlM4bGQ2X2U4ampU SjVOU21abFhtcnN5dG1nLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfEzDANBgkqhkiG9w0BAQsFAAOCAQEAr99Rez2NVRHelrhp7JY2SkZdPx+h pll8U3k8bpVTF3L/HzgwfBzzcwEQAbzrKhjwFLHUp34rppVsW2FuMGDRmYbTLPgD a9wJmUSYLV3htZUApM60xWbV+yMkZQ+3QEQ86eRuRuy7VC86hEjr4oW2oJKo3ZUb 9E6WNuRfW25/YMDVO7Qsq8rSp44fgmxtLREQijBFxJnOoTbSCt8DITz8Hb81fVJk IfzBIc2lpJRu2gPwgIcMXhRULqX++/46YZbiDnD6n7pQi+4cmIJoesBYo1cG5Oxb xeYNFld+Mgjvv0EZNWN0oIwzbS7tZdbu+Zi7tJHCrdcncSD/uFvaSizSJw== -----END CERTIFICATE-----Generated at Thu Feb 12 18:39:27 2026 by rpki-client