This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/osUjb5gBSaQor-TU3i_rb5Up6_g.roa File: osUjb5gBSaQor-TU3i_rb5Up6_g.roa (raw, json) Hash identifier: GbQSg+jIionWUDPH2Aacq0jFbjplc9PH4PJqqNZpw3g= Subject key identifier: A2:C5:23:6F:98:01:49:A4:28:AF:E4:D4:DE:2F:EB:6F:95:29:EB:F8 Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Certificate serial: 2308 Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/osUjb5gBSaQor-TU3i_rb5Up6_g.roa Signing time: Mon 26 Jan 2026 06:52:28 +0000 ROA not before: Mon 26 Jan 2026 06:52:28 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 132369 IP address blocks: 45.127.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Feb 2026 19:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8968 (0x2308) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Validity Not Before: Jan 26 06:52:28 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A2C5236F980149A428AFE4D4DE2FEB6F9529EBF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:4e:7d:66:3d:89:00:c9:1a:1d:88:25:97: a6:be:79:c2:56:5c:12:79:f5:b1:dc:77:32:5b:9e: 12:22:74:4d:84:19:35:9e:9e:ff:20:d0:46:29:57: dd:60:60:bb:6e:7d:05:93:4f:bf:b1:fc:48:02:5d: ed:d1:89:4f:d1:b7:1f:10:cd:14:a8:98:8e:8a:3b: 19:d9:00:bc:88:00:66:a6:ee:0a:19:50:4b:5f:16: ca:c3:2a:e5:c5:dd:7f:05:39:41:cc:60:2a:64:07: b6:f6:f3:4b:61:f6:55:12:d1:17:31:5c:3f:fb:c9: 31:3b:e3:bb:70:e7:81:e3:95:72:0f:6e:52:0c:62: ab:64:2b:2e:74:5b:c3:a7:84:23:9b:d3:bc:65:43: 8d:0d:3a:0c:e0:1f:81:01:a9:ac:c2:6f:b6:54:af: 09:76:27:1e:f1:89:8e:be:98:07:b7:f1:43:9b:a6: fb:2c:91:b4:2e:1b:99:e0:ef:71:1f:55:bd:8a:f3: 6c:4a:5d:69:b2:7a:e7:16:db:a4:7d:52:d0:89:26: 3d:e2:b2:e3:47:0b:f3:7f:67:b9:13:25:df:a2:cd: de:5f:04:7f:c5:d7:5f:39:32:dd:3f:1d:b6:a3:6a: 01:b5:80:3d:74:64:47:96:c8:21:8c:4d:cb:78:bc: fa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C5:23:6F:98:01:49:A4:28:AF:E4:D4:DE:2F:EB:6F:95:29:EB:F8 X509v3 Authority Key Identifier: keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/osUjb5gBSaQor-TU3i_rb5Up6_g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.127.216.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:9e:45:ed:2d:63:64:df:11:75:d3:77:a4:46:4e:45:d8:fb: 11:7c:73:f9:bb:86:2c:66:c8:bd:e6:f8:cb:c8:38:6e:a0:c8: f5:01:11:84:28:40:aa:07:1b:5e:91:d3:67:de:94:28:9e:9f: 0c:90:25:06:85:68:53:c3:3d:44:fe:e3:d0:85:a8:73:6c:00: ab:57:ac:b4:94:c0:67:82:10:b1:47:05:ef:5b:7d:03:03:4a: d9:c8:71:ba:d9:2c:ea:f1:3b:44:d1:54:3f:b9:96:d6:cc:7f: 58:18:31:45:d8:d2:b0:b9:17:8b:ff:be:46:9d:88:f8:76:2e: 59:5a:49:f4:5a:d7:d9:31:98:cf:53:e0:a6:81:6e:15:64:ef: d6:c0:e9:52:68:8c:ce:59:cc:53:82:09:77:9c:f2:0a:6b:3e: 92:5b:09:9f:0b:78:ab:25:d8:3b:a9:31:7e:ae:19:64:7a:89: e7:d8:2d:1f:9b:d0:ab:44:e1:20:2f:91:e3:25:bd:32:5c:11: da:dd:64:2f:f5:64:99:6f:ed:71:6b:2b:5f:e9:65:a4:27:e6: 85:e0:7e:55:5b:c9:92:78:6d:5a:4c:8b:a6:7e:b0:ce:25:b5: 12:8c:e1:25:2f:62:c4:1d:1b:0f:89:fc:9f:da:8b:5c:b2:9c: 3c:2d:79:c5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIwgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FC QThCNDI1MjMyQkU1ODk2ODM5NkRFMzJBOEVCNUEwNUVFQTY1ODAeFw0yNjAxMjYw NjUyMjhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEEyQzUyMzZGOTgwMTQ5 QTQyOEFGRTRENERFMkZFQjZGOTUyOUVCRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyuE59Zj2JAMkaHYgll6a+ecJWXBJ59bHcdzJbnhIidE2EGTWe nv8g0EYpV91gYLtufQWTT7+x/EgCXe3RiU/Rtx8QzRSomI6KOxnZALyIAGam7goZ UEtfFsrDKuXF3X8FOUHMYCpkB7b280th9lUS0RcxXD/7yTE747tw54HjlXIPblIM YqtkKy50W8OnhCOb07xlQ40NOgzgH4EBqazCb7ZUrwl2Jx7xiY6+mAe38UObpvss kbQuG5ng73EfVb2K82xKXWmyeucW26R9UtCJJj3isuNHC/N/Z7kTJd+izd5fBH/F 1185Mt0/HbajagG1gD10ZEeWyCGMTct4vPplAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUosUjb5gBSaQor+TU3i/rb5Up6/gwHwYDVR0jBBgwFoAUOrqLQlIyvliWg5be MqjrWgXuplgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 NS9PcnFMUWxJeXZsaVdnNWJlTXFqcldnWHVwbGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09ycUxRbEl5dmxpV2c1YmVNcWpyV2dYdXBsZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEzNzUvb3NVamI1Z0JTYVFv ci1UVTNpX3JiNVVwNl9nLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi1/2DANBgkqhkiG9w0BAQsFAAOCAQEAGp5F7S1jZN8RddN3pEZORdj7EXxz +buGLGbIveb4y8g4bqDI9QERhChAqgcbXpHTZ96UKJ6fDJAlBoVoU8M9RP7j0IWo c2wAq1estJTAZ4IQsUcF71t9AwNK2chxutks6vE7RNFUP7mW1sx/WBgxRdjSsLkX i/++Rp2I+HYuWVpJ9FrX2TGYz1PgpoFuFWTv1sDpUmiMzlnMU4IJd5zyCms+klsJ nwt4qyXYO6kxfq4ZZHqJ59gtH5vQq0ThIC+R4yW9MlwR2t1kL/VkmW/tcWsrX+ll pCfmheB+VVvJknhtWkyLpn6wziW1EozhJS9ixB0bD4n8n9qLXLKcPC15xQ== -----END CERTIFICATE-----Generated at Thu Feb 12 18:38:28 2026 by rpki-client