This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/xoiU_cNHrC9XYfowMsmLFuzbCUU.roa File: xoiU_cNHrC9XYfowMsmLFuzbCUU.roa (raw, json) Hash identifier: +3jAWysUr7r4XUdqqPf705TWZpvCt2uP+nwWgTNxgcA= Subject key identifier: C6:88:94:FD:C3:47:AC:2F:57:61:FA:30:32:C9:8B:16:EC:DB:09:45 Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Certificate serial: 230C Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/xoiU_cNHrC9XYfowMsmLFuzbCUU.roa Signing time: Mon 26 Jan 2026 06:52:29 +0000 ROA not before: Mon 26 Jan 2026 06:52:29 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 31972 IP address blocks: 103.56.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Feb 2026 19:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8972 (0x230c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Validity Not Before: Jan 26 06:52:29 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C68894FDC347AC2F5761FA3032C98B16ECDB0945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:21:4e:06:d6:04:d5:0b:4a:52:06:cc:44:fa: ae:74:cc:cc:4c:7d:28:1f:4d:12:e0:d1:22:d6:0c: 7f:d3:fc:9e:ac:f9:51:a8:43:f0:53:1d:6a:cc:34: 33:91:dc:8e:f7:83:87:dc:c1:89:f2:3f:aa:fa:55: 9f:7b:b3:ba:7d:46:32:8a:31:9a:88:51:07:85:37: ab:8c:1c:8e:8b:50:ca:e3:c7:dd:30:df:61:aa:aa: e3:85:e2:d0:8d:23:4c:20:c8:b6:a1:c5:69:0f:85: 2d:69:55:ad:70:14:e2:77:a4:11:76:4f:d3:6b:de: 1e:8e:bd:05:ff:e7:da:d3:20:f0:01:8d:23:ca:c6: 60:10:91:5b:35:3d:26:c7:bb:01:89:6c:07:8b:5d: 23:42:33:3f:a9:66:f4:2d:b5:b2:f4:82:0b:b0:51: c5:32:31:73:70:c9:6f:4a:a4:dc:9b:4e:63:c4:9e: 7c:f9:cb:3c:38:45:29:83:17:57:2a:89:f6:c3:e6: df:46:7f:9f:a1:68:45:49:23:4f:b6:f3:d0:c2:91: 6d:8f:c8:5c:72:15:7e:3c:78:eb:87:8e:bb:7b:9b: 84:1f:1c:f4:32:1b:c2:d1:5e:66:55:00:36:0f:de: 75:e8:cc:65:0d:6a:51:32:a8:28:8a:75:70:78:6e: 1f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:88:94:FD:C3:47:AC:2F:57:61:FA:30:32:C9:8B:16:EC:DB:09:45 X509v3 Authority Key Identifier: keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/xoiU_cNHrC9XYfowMsmLFuzbCUU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.56.8.0/22 Signature Algorithm: sha256WithRSAEncryption b0:d8:c0:ed:7c:92:d0:ed:ca:19:17:dd:c5:a5:4d:ff:5d:35: 15:26:9e:af:3d:12:b8:95:6c:e9:50:d7:dc:57:e3:c3:20:63: fd:53:1d:0d:f7:69:93:6b:af:6b:b7:c2:27:e1:45:bc:d4:d4: 45:1a:51:3e:c1:79:17:e5:69:9c:dc:85:9c:d2:68:83:af:a6: 04:fc:18:12:ef:f8:46:e2:ba:29:09:b5:51:9d:c2:68:31:06: 58:83:e2:62:6d:52:bd:5e:ba:5c:0f:dd:e7:89:d6:51:ba:7d: ff:e6:75:41:16:25:86:43:90:e4:f4:e8:c4:ca:07:f0:d6:c3: 33:0a:8d:51:43:82:04:ee:0d:6e:c9:5c:2e:8e:07:40:64:6f: f0:03:51:1f:eb:8a:dd:30:73:05:c8:af:48:ca:c3:eb:38:69: 68:01:81:c5:35:8e:7b:99:ab:eb:8e:f9:ee:74:2d:24:65:d9: 7e:46:8c:e1:8a:08:12:c7:4b:2f:54:4c:0d:a7:8e:90:b2:c4: 0b:9e:b4:f5:64:a2:23:9d:07:b1:da:1f:da:b9:f1:46:f0:90: 91:b0:3c:ba:30:ae:0a:d4:39:1a:26:b3:14:c3:86:4e:f1:f0: ce:48:ca:dc:c0:9a:c9:26:8c:1b:a8:20:02:ac:b6:81:c9:b0: 16:a8:4d:1b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIwwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FC QThCNDI1MjMyQkU1ODk2ODM5NkRFMzJBOEVCNUEwNUVFQTY1ODAeFw0yNjAxMjYw NjUyMjlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEM2ODg5NEZEQzM0N0FD MkY1NzYxRkEzMDMyQzk4QjE2RUNEQjA5NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoIU4G1gTVC0pSBsxE+q50zMxMfSgfTRLg0SLWDH/T/J6s+VGo Q/BTHWrMNDOR3I73g4fcwYnyP6r6VZ97s7p9RjKKMZqIUQeFN6uMHI6LUMrjx90w 32GqquOF4tCNI0wgyLahxWkPhS1pVa1wFOJ3pBF2T9Nr3h6OvQX/59rTIPABjSPK xmAQkVs1PSbHuwGJbAeLXSNCMz+pZvQttbL0gguwUcUyMXNwyW9KpNybTmPEnnz5 yzw4RSmDF1cqifbD5t9Gf5+haEVJI0+289DCkW2PyFxyFX48eOuHjrt7m4QfHPQy G8LRXmZVADYP3nXozGUNalEyqCiKdXB4bh/7AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUxoiU/cNHrC9XYfowMsmLFuzbCUUwHwYDVR0jBBgwFoAUOrqLQlIyvliWg5be MqjrWgXuplgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 NS9PcnFMUWxJeXZsaVdnNWJlTXFqcldnWHVwbGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09ycUxRbEl5dmxpV2c1YmVNcWpyV2dYdXBsZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEzNzUveG9pVV9jTkhyQzlY WWZvd01zbUxGdXpiQ1VVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmc4CDANBgkqhkiG9w0BAQsFAAOCAQEAsNjA7XyS0O3KGRfdxaVN/101FSae rz0SuJVs6VDX3FfjwyBj/VMdDfdpk2uva7fCJ+FFvNTURRpRPsF5F+VpnNyFnNJo g6+mBPwYEu/4RuK6KQm1UZ3CaDEGWIPiYm1SvV66XA/d54nWUbp9/+Z1QRYlhkOQ 5PToxMoH8NbDMwqNUUOCBO4NbslcLo4HQGRv8ANRH+uK3TBzBcivSMrD6zhpaAGB xTWOe5mr64757nQtJGXZfkaM4YoIEsdLL1RMDaeOkLLEC5609WSiI50Hsdof2rnx RvCQkbA8ujCuCtQ5GiazFMOGTvHwzkjK3MCaySaMG6ggAqy2gcmwFqhNGw== -----END CERTIFICATE-----Generated at Thu Feb 12 18:38:28 2026 by rpki-client