This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/PcUYfYLItU6EnT96LtHS2aUi5_k.roa File: PcUYfYLItU6EnT96LtHS2aUi5_k.roa (raw, json) Hash identifier: 6kvXVQwYSTXXh/xjWmV+CLOQSK9HCDoMYkhjOHKub2M= Subject key identifier: 3D:C5:18:7D:82:C8:B5:4E:84:9D:3F:7A:2E:D1:D2:D9:A5:22:E7:F9 Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Certificate serial: 230C Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/PcUYfYLItU6EnT96LtHS2aUi5_k.roa Signing time: Mon 26 Jan 2026 06:53:13 +0000 ROA not before: Mon 26 Jan 2026 06:53:13 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63679 IP address blocks: 103.208.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 22:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8972 (0x230c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Validity Not Before: Jan 26 06:53:13 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=3DC5187D82C8B54E849D3F7A2ED1D2D9A522E7F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:02:7d:bb:35:24:d4:86:3d:83:44:5d:4b: b6:65:a1:7b:82:2b:1d:52:b1:0e:b5:38:8e:d8:16: 56:48:70:26:de:4b:ce:ed:8d:29:08:00:e9:23:0e: d7:86:db:16:64:0e:b6:41:58:f6:75:c9:4d:c2:94: ca:07:70:49:3f:b9:7f:a8:6a:8c:fb:70:ee:da:82: 62:4c:f7:15:a4:8d:f5:41:ed:47:15:04:f0:35:1b: 20:8b:0a:40:9c:08:1a:ce:72:83:ea:ee:cd:9a:48: e2:59:ff:56:2c:4a:57:ab:20:bf:bf:f0:a4:7b:7f: 02:ee:b3:1c:82:4a:af:d9:76:6b:00:1a:b3:76:d7: 9b:fa:43:a1:9a:5b:4f:93:8d:c7:dc:cc:ff:91:e0: 23:a7:0f:61:a0:a1:60:4a:49:b3:a0:92:11:eb:2f: 62:49:c4:3e:f4:b8:18:aa:e3:a9:5a:3f:3d:5d:98: 52:cd:40:f4:b9:2b:4f:22:d1:1f:4e:28:f5:ad:3d: 1d:05:75:78:83:19:04:15:20:12:79:01:09:ca:73: 1a:d0:f4:ac:4d:8f:7a:71:e9:bf:ba:08:4e:22:e7: f7:95:e5:b7:a0:5a:fd:cc:04:e5:80:56:d8:53:26: a7:bf:fa:fc:d9:db:19:80:a4:48:fe:e4:71:02:b4: 5a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C5:18:7D:82:C8:B5:4E:84:9D:3F:7A:2E:D1:D2:D9:A5:22:E7:F9 X509v3 Authority Key Identifier: keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/PcUYfYLItU6EnT96LtHS2aUi5_k.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.208.48.0/22 Signature Algorithm: sha256WithRSAEncryption 66:3b:1b:28:c1:5c:0f:18:70:ae:41:da:3d:4e:38:f6:cb:a6: 69:c0:cc:4a:7e:3c:68:36:7e:16:87:b6:2d:12:e1:7f:64:62: b1:ee:b3:9b:d1:dd:38:86:95:9a:21:bd:73:5a:99:d9:af:02: 0a:3e:2b:68:88:56:4e:d9:ec:1a:dc:23:a8:9e:f7:f7:4a:19: b3:80:76:7a:5a:4e:73:fb:91:9c:8d:0f:b9:d7:dc:73:12:86: d0:0b:da:90:aa:aa:28:18:81:cc:c4:bf:17:4c:70:ac:de:6b: 62:46:95:c7:a1:c9:3c:ca:2e:3a:15:ec:fb:93:a3:40:e9:ed: e5:81:e0:74:32:a3:e4:27:b8:b2:01:5f:77:e5:ff:d6:fa:0c: 7d:f9:45:1b:63:a2:2d:36:0e:59:45:c8:a4:5c:87:48:ea:a9: ed:e2:45:54:5a:85:fa:46:fe:16:22:50:07:98:08:a8:d2:98: 8c:13:46:3b:bc:b7:cf:77:3f:9c:77:fc:41:7e:be:e0:ba:98: ac:ec:b0:0e:7b:cc:f8:f2:46:62:9d:4b:e1:6c:09:c9:39:7b: 81:e4:93:9c:82:a1:4c:37:dc:98:25:ef:dc:d4:0c:d2:18:fd: 10:c4:8b:4d:f4:09:7d:87:be:c4:0a:b7:25:9b:a0:c1:94:b8: 6d:72:42:1c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIwwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEMx RkI1NTNGRjIzMzEyQ0Q5QzI1REUxREE3MjA0OEYwNjQ4M0M1QTAeFw0yNjAxMjYw NjUzMTNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDNEQzUxODdEODJDOEI1 NEU4NDlEM0Y3QTJFRDFEMkQ5QTUyMkU3RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIVgJ9uzUk1IY9g0RdS7ZloXuCKx1SsQ61OI7YFlZIcCbeS87t jSkIAOkjDteG2xZkDrZBWPZ1yU3ClMoHcEk/uX+oaoz7cO7agmJM9xWkjfVB7UcV BPA1GyCLCkCcCBrOcoPq7s2aSOJZ/1YsSlerIL+/8KR7fwLusxyCSq/ZdmsAGrN2 15v6Q6GaW0+TjcfczP+R4COnD2GgoWBKSbOgkhHrL2JJxD70uBiq46laPz1dmFLN QPS5K08i0R9OKPWtPR0FdXiDGQQVIBJ5AQnKcxrQ9KxNj3px6b+6CE4i5/eV5beg Wv3MBOWAVthTJqe/+vzZ2xmApEj+5HECtFqnAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUPcUYfYLItU6EnT96LtHS2aUi5/kwHwYDVR0jBBgwFoAUTB+1U/8jMSzZwl3h 2nIEjwZIPFowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTYz MC9UQi0xVV84ak1Telp3bDNoMm5JRWp3WklQRm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RCLTFVXzhqTVN6WndsM2gybklFandaSVBGby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2MzAvUGNVWWZZTEl0VTZF blQ5Nkx0SFMyYVVpNV9rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfQMDANBgkqhkiG9w0BAQsFAAOCAQEAZjsbKMFcDxhwrkHaPU449sumacDM Sn48aDZ+Foe2LRLhf2Rise6zm9HdOIaVmiG9c1qZ2a8CCj4raIhWTtnsGtwjqJ73 90oZs4B2elpOc/uRnI0PudfccxKG0AvakKqqKBiBzMS/F0xwrN5rYkaVx6HJPMou OhXs+5OjQOnt5YHgdDKj5Ce4sgFfd+X/1voMfflFG2OiLTYOWUXIpFyHSOqp7eJF VFqF+kb+FiJQB5gIqNKYjBNGO7y3z3c/nHf8QX6+4LqYrOywDnvM+PJGYp1L4WwJ yTl7geSTnIKhTDfcmCXv3NQM0hj9EMSLTfQJfYe+xAq3JZugwZS4bXJCHA== -----END CERTIFICATE-----Generated at Mon Jan 26 21:09:11 2026 by rpki-client