This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/NeXIOaCZIioOy7ziawSIyD4woWg.roa File: NeXIOaCZIioOy7ziawSIyD4woWg.roa (raw, json) Hash identifier: ZqTBe0guzD9KLaSCWJGTcCkPLsZkZYyc2ZL6bz7lxFE= Subject key identifier: 35:E5:C8:39:A0:99:22:2A:0E:CB:BC:E2:6B:04:88:C8:3E:30:A1:68 Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Certificate serial: 230D Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/NeXIOaCZIioOy7ziawSIyD4woWg.roa Signing time: Mon 26 Jan 2026 06:52:29 +0000 ROA not before: Mon 26 Jan 2026 06:52:29 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 132369 IP address blocks: 210.16.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Feb 2026 19:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8973 (0x230d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Validity Not Before: Jan 26 06:52:29 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=35E5C839A099222A0ECBBCE26B0488C83E30A168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:c6:b9:91:9f:cb:e6:80:55:8f:1b:1a:54: 8b:bc:b1:ae:23:69:36:db:5a:9e:4f:f4:32:04:e8: ef:6d:34:45:30:56:5e:06:a4:72:f3:6a:4e:65:9b: a0:bf:e1:af:6f:83:27:f7:0d:f5:64:91:d3:99:98: a7:5f:37:4f:7b:2f:c1:79:01:22:44:c6:33:fa:b6: 76:7f:72:dc:78:be:66:0a:1a:a1:42:2d:71:0f:94: 91:ce:6e:ad:ab:68:95:90:6b:e3:be:3c:38:ed:f6: 50:b7:90:bf:15:3c:09:e0:a3:8a:bd:0e:89:8b:44: 78:5a:da:88:75:4a:0b:50:68:5e:6b:81:b9:46:67: 41:ee:62:bb:d3:97:fc:c5:18:bd:31:ee:22:76:b7: 1b:83:9a:dd:d8:e8:d6:32:8e:26:b4:d9:6f:c7:ee: cd:0d:f9:52:2f:be:1b:56:71:81:ff:92:3e:4e:30: 0b:8c:1c:23:8d:15:33:0b:54:5c:d1:fb:db:2b:ff: a2:75:e6:95:a2:42:66:e0:8b:41:60:c0:cb:a9:0b: ec:81:87:6e:69:d3:65:50:44:df:fd:de:e8:37:fb: f9:e3:9a:22:b2:70:fc:3d:53:1d:0a:16:9f:fd:ee: fb:7f:d2:8b:b3:1b:99:7f:95:bc:0e:b0:16:61:56: 1d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E5:C8:39:A0:99:22:2A:0E:CB:BC:E2:6B:04:88:C8:3E:30:A1:68 X509v3 Authority Key Identifier: keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/NeXIOaCZIioOy7ziawSIyD4woWg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.16.104.0/22 Signature Algorithm: sha256WithRSAEncryption 09:ea:2f:72:39:75:40:bf:15:f1:c3:50:04:c2:28:8d:b5:4e: 9e:04:24:fc:bc:38:9e:68:bc:69:eb:8f:50:e3:e3:f1:5f:8f: 26:65:11:bc:08:ad:3c:fc:ab:cb:34:e1:d7:09:68:7c:9b:2a: 0e:46:ba:87:f2:e8:4e:3b:09:b0:54:e6:a7:8c:5e:3e:cb:86: 0f:12:4c:a5:9f:6a:a5:e5:cf:4f:78:b6:45:42:4a:10:c4:6f: 29:2e:e6:b9:cb:ef:aa:fa:9c:7d:4f:3d:ab:33:cc:b1:36:e9: 3a:6d:71:ea:21:7d:50:2f:4a:fb:4b:b7:9f:ef:5a:89:41:42: e8:f9:77:fc:01:ad:38:a6:5f:7d:3d:df:d3:37:b5:73:34:80: a4:42:e7:6f:9a:10:70:86:62:2e:2d:3f:f9:d7:89:55:8b:2a: d6:ad:66:25:ef:ab:89:f6:f8:01:0f:d1:0e:22:c1:f4:f4:c1: 3f:0f:03:83:2b:41:98:46:47:ec:12:62:69:20:b2:84:2d:cf: 63:71:e5:b6:dc:9b:ee:4a:0d:d7:6a:8e:de:39:af:9c:97:73: 35:aa:fc:5c:de:cb:cf:24:4a:3e:09:e3:4b:20:be:d2:fc:d0: 98:eb:51:4c:91:64:39:cc:75:6f:db:89:8e:8c:f5:c1:f6:a0: 4c:42:77:e6 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIw0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FC QThCNDI1MjMyQkU1ODk2ODM5NkRFMzJBOEVCNUEwNUVFQTY1ODAeFw0yNjAxMjYw NjUyMjlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDM1RTVDODM5QTA5OTIy MkEwRUNCQkNFMjZCMDQ4OEM4M0UzMEExNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1qsa5kZ/L5oBVjxsaVIu8sa4jaTbbWp5P9DIE6O9tNEUwVl4G pHLzak5lm6C/4a9vgyf3DfVkkdOZmKdfN097L8F5ASJExjP6tnZ/ctx4vmYKGqFC LXEPlJHObq2raJWQa+O+PDjt9lC3kL8VPAngo4q9DomLRHha2oh1SgtQaF5rgblG Z0HuYrvTl/zFGL0x7iJ2txuDmt3Y6NYyjia02W/H7s0N+VIvvhtWcYH/kj5OMAuM HCONFTMLVFzR+9sr/6J15pWiQmbgi0FgwMupC+yBh25p02VQRN/93ug3+/njmiKy cPw9Ux0KFp/97vt/0ouzG5l/lbwOsBZhVh0HAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUNeXIOaCZIioOy7ziawSIyD4woWgwHwYDVR0jBBgwFoAUOrqLQlIyvliWg5be MqjrWgXuplgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 NS9PcnFMUWxJeXZsaVdnNWJlTXFqcldnWHVwbGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09ycUxRbEl5dmxpV2c1YmVNcWpyV2dYdXBsZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEzNzUvTmVYSU9hQ1pJaW9P eTd6aWF3U0l5RDR3b1dnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtIQaDANBgkqhkiG9w0BAQsFAAOCAQEACeovcjl1QL8V8cNQBMIojbVOngQk /Lw4nmi8aeuPUOPj8V+PJmURvAitPPyryzTh1wlofJsqDka6h/LoTjsJsFTmp4xe PsuGDxJMpZ9qpeXPT3i2RUJKEMRvKS7mucvvqvqcfU89qzPMsTbpOm1x6iF9UC9K +0u3n+9aiUFC6Pl3/AGtOKZffT3f0ze1czSApELnb5oQcIZiLi0/+deJVYsq1q1m Je+rifb4AQ/RDiLB9PTBPw8DgytBmEZH7BJiaSCyhC3PY3Hlttyb7koN12qO3jmv nJdzNar8XN7LzyRKPgnjSyC+0vzQmOtRTJFkOcx1b9uJjoz1wfagTEJ35g== -----END CERTIFICATE-----Generated at Thu Feb 12 18:39:28 2026 by rpki-client