This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/rOLZuyZPB6j0aMAFjGGcCvT-Xks.roa File: rOLZuyZPB6j0aMAFjGGcCvT-Xks.roa (raw, json) Hash identifier: pvA5LjRYZubqawi/TZBz+Jnw6EaTAjSubqty4ug9Fa4= Subject key identifier: AC:E2:D9:BB:26:4F:07:A8:F4:68:C0:05:8C:61:9C:0A:F4:FE:5E:4B Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Certificate serial: 230B Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/rOLZuyZPB6j0aMAFjGGcCvT-Xks.roa Signing time: Mon 26 Jan 2026 06:52:28 +0000 ROA not before: Mon 26 Jan 2026 06:52:28 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 31972 IP address blocks: 103.207.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Feb 2026 19:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8971 (0x230b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Validity Not Before: Jan 26 06:52:28 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=ACE2D9BB264F07A8F468C0058C619C0AF4FE5E4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:19:a1:df:01:81:e4:b7:32:52:d7:e2:60:67: bc:55:2a:df:86:75:19:4c:53:d5:7b:1f:40:41:ab: 88:a4:ea:38:c4:7e:07:43:8d:28:5a:52:b5:65:0f: bd:2a:2c:1a:95:b7:9a:99:77:a9:e7:0f:8e:cb:1e: 35:a6:bc:e9:09:80:bd:57:1e:95:f9:c7:bb:ed:7c: 92:e6:95:73:8e:a2:c7:83:f6:54:e0:0b:90:2d:db: c3:6c:74:41:ab:12:a6:19:68:1b:00:2f:2b:c3:38: f8:2d:b8:38:ae:aa:59:5f:08:51:16:c3:b2:95:51: a8:09:4c:54:ad:a6:dc:8a:c9:28:97:53:64:b1:b8: 61:bf:50:07:f1:0a:cd:23:39:ee:87:5d:7f:16:2a: 52:1d:41:f9:74:c5:24:c4:eb:36:06:9f:14:cb:46: 9e:2c:48:34:ce:49:c2:05:c4:ed:a4:41:64:6b:63: 21:5d:fb:24:0e:e1:c8:f8:c4:c4:76:49:61:2a:63: f1:14:72:ab:ca:57:15:26:8f:f8:47:78:ab:09:82: f8:5a:05:50:f3:82:6d:69:df:7b:ba:19:96:b4:1a: 50:43:b0:ea:8c:79:49:6e:25:33:f7:c0:47:1d:4b: 09:87:8f:ba:a7:cd:d2:ce:aa:a7:35:89:29:69:fb: d7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E2:D9:BB:26:4F:07:A8:F4:68:C0:05:8C:61:9C:0A:F4:FE:5E:4B X509v3 Authority Key Identifier: keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/rOLZuyZPB6j0aMAFjGGcCvT-Xks.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.207.48.0/22 Signature Algorithm: sha256WithRSAEncryption 09:6b:db:13:32:d7:0c:9a:eb:bf:47:c6:f4:dd:6c:44:04:eb: 06:da:58:21:f8:e9:e8:cf:c3:0f:ea:d1:68:2f:2e:01:ba:02: 85:08:a4:5a:8d:b6:fc:12:d0:48:5b:fb:2a:08:76:48:8c:05: bc:d9:e7:7e:c6:bc:4a:05:21:d1:20:5a:6e:a8:0f:e8:68:79: 4d:88:17:7c:cb:7c:bb:38:13:08:76:c9:38:57:f8:19:6f:a9: db:eb:39:7c:ac:ef:2a:9a:62:a3:5f:4e:0e:82:c6:7a:75:59: 49:79:d4:20:a8:6e:70:a3:ea:2b:d9:d0:a4:40:50:cf:7d:79: 87:18:11:ec:a5:5b:7f:11:04:d5:ac:f0:fc:fb:61:94:bc:5b: 0b:83:9f:4a:3f:f0:29:ed:c9:0e:87:c2:6b:9d:65:2f:31:23: d2:ba:a1:0d:80:eb:8e:a5:ea:bf:51:10:f3:f3:56:c7:66:5a: 31:f7:fe:4b:8a:76:73:f2:27:e1:36:97:a1:c1:b5:9f:c9:45: e9:dd:61:5c:c1:1b:21:02:1b:e4:ba:6a:35:22:8b:6f:ce:3c: d8:17:9d:af:92:bd:be:e4:d2:17:f4:85:5e:f8:87:10:23:93: 64:63:35:ce:29:47:3b:94:11:1b:88:54:33:e1:6c:2e:f3:52: 6f:0b:02:1b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIwswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FC QThCNDI1MjMyQkU1ODk2ODM5NkRFMzJBOEVCNUEwNUVFQTY1ODAeFw0yNjAxMjYw NjUyMjhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEFDRTJEOUJCMjY0RjA3 QThGNDY4QzAwNThDNjE5QzBBRjRGRTVFNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVGaHfAYHktzJS1+JgZ7xVKt+GdRlMU9V7H0BBq4ik6jjEfgdD jShaUrVlD70qLBqVt5qZd6nnD47LHjWmvOkJgL1XHpX5x7vtfJLmlXOOoseD9lTg C5At28NsdEGrEqYZaBsALyvDOPgtuDiuqllfCFEWw7KVUagJTFStptyKySiXU2Sx uGG/UAfxCs0jOe6HXX8WKlIdQfl0xSTE6zYGnxTLRp4sSDTOScIFxO2kQWRrYyFd +yQO4cj4xMR2SWEqY/EUcqvKVxUmj/hHeKsJgvhaBVDzgm1p33u6GZa0GlBDsOqM eUluJTP3wEcdSwmHj7qnzdLOqqc1iSlp+9fLAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUrOLZuyZPB6j0aMAFjGGcCvT+XkswHwYDVR0jBBgwFoAUOrqLQlIyvliWg5be MqjrWgXuplgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 NS9PcnFMUWxJeXZsaVdnNWJlTXFqcldnWHVwbGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09ycUxRbEl5dmxpV2c1YmVNcWpyV2dYdXBsZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEzNzUvck9MWnV5WlBCNmow YU1BRmpHR2NDdlQtWGtzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfPMDANBgkqhkiG9w0BAQsFAAOCAQEACWvbEzLXDJrrv0fG9N1sRATrBtpY Ifjp6M/DD+rRaC8uAboChQikWo22/BLQSFv7Kgh2SIwFvNnnfsa8SgUh0SBabqgP 6Gh5TYgXfMt8uzgTCHbJOFf4GW+p2+s5fKzvKppio19ODoLGenVZSXnUIKhucKPq K9nQpEBQz315hxgR7KVbfxEE1azw/PthlLxbC4OfSj/wKe3JDofCa51lLzEj0rqh DYDrjqXqv1EQ8/NWx2ZaMff+S4p2c/In4TaXocG1n8lF6d1hXMEbIQIb5LpqNSKL b8482Bedr5K9vuTSF/SFXviHECOTZGM1zilHO5QRG4hUM+FsLvNSbwsCGw== -----END CERTIFICATE-----Generated at Thu Feb 12 18:37:53 2026 by rpki-client