This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/zlUos4_Lnxtl0Za76SDtV7roYEg.roa File: zlUos4_Lnxtl0Za76SDtV7roYEg.roa (raw, json) Hash identifier: 3gPFe9nQupimS5NzDb4pfhh3cdXZ3WndW8yV7WyaFm8= Subject key identifier: CE:55:28:B3:8F:CB:9F:1B:65:D1:96:BB:E9:20:ED:57:BA:E8:60:48 Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Certificate serial: 230A Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/zlUos4_Lnxtl0Za76SDtV7roYEg.roa Signing time: Mon 26 Jan 2026 06:52:28 +0000 ROA not before: Mon 26 Jan 2026 06:52:28 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 132369 IP address blocks: 45.115.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Feb 2026 19:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8970 (0x230a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Validity Not Before: Jan 26 06:52:28 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=CE5528B38FCB9F1B65D196BBE920ED57BAE86048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:f8:be:f0:fe:6d:e4:8a:36:49:4c:b3:40: 3b:80:1c:f2:81:6f:f3:2f:72:85:8d:f6:66:ad:46: 5e:9c:a5:07:d7:25:f4:55:c9:4c:5f:f4:e4:44:ca: 54:bc:ff:86:02:33:d6:1e:01:96:c4:2e:77:80:1d: 3b:66:b8:a1:46:29:0b:bc:c4:d8:66:fc:aa:58:43: a4:0e:ed:5a:95:93:8f:55:89:a4:fd:8b:03:a8:f1: ac:03:3e:45:9b:4f:0a:67:e4:17:c9:40:26:2e:f3: 28:ab:6a:3a:1c:f4:a5:ff:43:a2:c1:5e:11:e1:1d: c0:e8:bc:68:33:b5:35:39:ed:41:53:13:de:99:78: d5:55:7f:48:26:3e:33:23:1d:45:ac:9d:2f:54:de: 61:a8:23:59:80:a2:d1:a8:0d:a6:f7:6e:0a:d5:d7: 2f:ac:f2:ae:81:32:e1:e2:61:93:40:11:ab:fd:4c: 7f:0b:4b:fd:ba:a6:56:d7:ab:ac:e1:2a:60:ad:dd: bd:0b:d4:a7:12:9a:f2:23:1a:2e:c0:82:33:bf:2f: 3c:53:c4:44:f5:8f:6c:28:aa:9f:e2:cc:57:55:2d: 33:22:26:4c:00:4a:ca:bb:39:56:cb:a1:8c:a6:99: 3c:18:f8:31:2e:57:aa:db:d6:fb:2e:a7:ad:ad:f0: 22:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:55:28:B3:8F:CB:9F:1B:65:D1:96:BB:E9:20:ED:57:BA:E8:60:48 X509v3 Authority Key Identifier: keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/zlUos4_Lnxtl0Za76SDtV7roYEg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.115.228.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:4c:f4:45:b1:44:43:41:32:3b:eb:15:b8:59:55:dd:93:c9: c8:db:5e:a3:9b:03:66:3b:78:b4:23:24:8d:c6:59:ba:7f:42: 71:99:32:0b:5d:d5:91:66:07:bc:dc:69:91:f2:5b:f2:77:06: 7d:c0:22:9d:b1:b0:0e:41:d9:17:85:13:ff:8b:f3:e9:5e:26: 53:1d:14:be:25:2c:07:8e:77:99:25:67:69:cc:d9:c2:fe:36: ba:69:0e:26:91:a7:14:b6:ff:b5:e3:7d:a4:8e:8d:d0:08:af: 25:c6:51:9c:b0:33:83:5e:0d:24:df:f8:8a:c6:cf:29:e8:09: 43:f0:c3:23:0f:72:8c:b0:6d:7d:62:29:bc:b9:1a:38:b7:f3: f5:46:0c:ec:f3:6e:63:9c:5f:27:2c:d9:a2:78:00:9d:e3:85: 4d:58:2f:23:37:d1:b8:92:88:c8:e3:33:47:a2:98:ad:d3:c3: ec:63:e7:f5:2f:63:07:75:40:b5:02:66:f3:36:e8:df:2f:b3: 70:3f:70:91:71:1a:5e:01:e3:9a:f3:84:41:4e:5d:16:de:78: 1b:b1:ca:63:ed:02:3b:9d:20:f2:41:9b:45:85:cf:2f:ae:59: 7e:05:93:33:60:89:b8:fa:43:7c:56:98:5e:6f:53:d9:09:48: d0:91:c1:bc -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIwowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FC QThCNDI1MjMyQkU1ODk2ODM5NkRFMzJBOEVCNUEwNUVFQTY1ODAeFw0yNjAxMjYw NjUyMjhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKENFNTUyOEIzOEZDQjlG MUI2NUQxOTZCQkU5MjBFRDU3QkFFODYwNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWEPi+8P5t5Io2SUyzQDuAHPKBb/MvcoWN9matRl6cpQfXJfRV yUxf9OREylS8/4YCM9YeAZbELneAHTtmuKFGKQu8xNhm/KpYQ6QO7VqVk49ViaT9 iwOo8awDPkWbTwpn5BfJQCYu8yirajoc9KX/Q6LBXhHhHcDovGgztTU57UFTE96Z eNVVf0gmPjMjHUWsnS9U3mGoI1mAotGoDab3bgrV1y+s8q6BMuHiYZNAEav9TH8L S/26plbXq6zhKmCt3b0L1KcSmvIjGi7AgjO/LzxTxET1j2woqp/izFdVLTMiJkwA Ssq7OVbLoYymmTwY+DEuV6rb1vsup62t8CLvAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUzlUos4/Lnxtl0Za76SDtV7roYEgwHwYDVR0jBBgwFoAUOrqLQlIyvliWg5be MqjrWgXuplgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 NS9PcnFMUWxJeXZsaVdnNWJlTXFqcldnWHVwbGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09ycUxRbEl5dmxpV2c1YmVNcWpyV2dYdXBsZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEzNzUvemxVb3M0X0xueHRs MFphNzZTRHRWN3JvWUVnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi1z5DANBgkqhkiG9w0BAQsFAAOCAQEAGkz0RbFEQ0EyO+sVuFlV3ZPJyNte o5sDZjt4tCMkjcZZun9CcZkyC13VkWYHvNxpkfJb8ncGfcAinbGwDkHZF4UT/4vz 6V4mUx0UviUsB453mSVnaczZwv42umkOJpGnFLb/teN9pI6N0AivJcZRnLAzg14N JN/4isbPKegJQ/DDIw9yjLBtfWIpvLkaOLfz9UYM7PNuY5xfJyzZongAneOFTVgv IzfRuJKIyOMzR6KYrdPD7GPn9S9jB3VAtQJm8zbo3y+zcD9wkXEaXgHjmvOEQU5d Ft54G7HKY+0CO50g8kGbRYXPL65ZfgWTM2CJuPpDfFaYXm9T2QlI0JHBvA== -----END CERTIFICATE-----Generated at Thu Feb 12 18:38:26 2026 by rpki-client