This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2072/3j42yToVfyNaLjcRCoEuQc27Vgk.roa File: 3j42yToVfyNaLjcRCoEuQc27Vgk.roa (raw, json) Hash identifier: 0yAxF3sUfIMtxe/5UTWnkJ7bovYrSnqpLeQekvhXAj0= Subject key identifier: DE:3E:36:C9:3A:15:7F:23:5A:2E:37:11:0A:81:2E:41:CD:BB:56:09 Certificate issuer: /CN=BCF4017A6E2915F26147D419E5F7A7D164D04984 Certificate serial: 230A Authority key identifier: BC:F4:01:7A:6E:29:15:F2:61:47:D4:19:E5:F7:A7:D1:64:D0:49:84 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vPQBem4pFfJhR9QZ5fen0WTQSYQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/3j42yToVfyNaLjcRCoEuQc27Vgk.roa Signing time: Mon 26 Jan 2026 06:54:56 +0000 ROA not before: Mon 26 Jan 2026 06:54:56 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 133199 IP address blocks: 103.67.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/vPQBem4pFfJhR9QZ5fen0WTQSYQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/vPQBem4pFfJhR9QZ5fen0WTQSYQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vPQBem4pFfJhR9QZ5fen0WTQSYQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 08:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8970 (0x230a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCF4017A6E2915F26147D419E5F7A7D164D04984 Validity Not Before: Jan 26 06:54:56 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=DE3E36C93A157F235A2E37110A812E41CDBB5609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:77:ef:54:12:4e:13:f6:ff:b9:84:d1:54:6c: cf:d5:a6:74:db:b8:bd:f3:22:3b:3c:0c:db:1e:b1: 2c:ca:96:43:0b:32:b3:b2:64:c6:5b:03:62:6c:e5: b3:f0:2d:37:38:06:78:47:a6:70:86:07:ed:6b:80: dc:8a:ad:a2:ad:08:8d:25:a7:ac:93:63:2f:97:1c: 01:c2:eb:1b:33:32:4f:b5:11:60:e8:6d:fd:e1:91: 5e:24:ea:56:f5:47:8b:27:00:e1:f5:a0:db:d8:bf: 0c:56:29:d2:d3:74:7a:b2:22:de:fb:fc:4a:d1:c8: cb:ec:81:54:55:30:96:0f:97:a8:a0:5d:c3:ac:a3: 2c:27:9e:73:50:20:52:b6:2f:92:74:ad:a9:83:b2: e4:1c:24:8a:f4:84:30:b4:be:82:25:88:93:71:65: bd:01:db:89:d9:2a:f2:32:48:19:9c:df:53:96:86: 98:8d:d2:dc:bb:04:50:fb:0e:81:c2:51:25:29:ae: fd:6f:6f:69:87:8c:82:d7:a9:e4:31:c7:ce:35:2a: 39:cf:44:a5:5a:7b:e1:04:1d:4a:2f:0d:d1:0d:fd: 49:f8:f0:ba:7f:e5:b1:af:20:d5:15:12:ad:8f:f7: 42:cd:8e:54:53:75:57:d3:78:9d:f6:4f:22:19:88: ed:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3E:36:C9:3A:15:7F:23:5A:2E:37:11:0A:81:2E:41:CD:BB:56:09 X509v3 Authority Key Identifier: keyid:BC:F4:01:7A:6E:29:15:F2:61:47:D4:19:E5:F7:A7:D1:64:D0:49:84 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/vPQBem4pFfJhR9QZ5fen0WTQSYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vPQBem4pFfJhR9QZ5fen0WTQSYQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/3j42yToVfyNaLjcRCoEuQc27Vgk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.67.173.0/24 Signature Algorithm: sha256WithRSAEncryption 41:d0:1a:b4:74:3b:f1:de:6c:e9:e8:2b:c4:38:7e:24:f3:7a: ee:a1:14:49:74:90:76:a8:7e:38:83:f6:42:7e:dd:a2:39:99: 97:72:69:93:65:42:11:6e:d3:38:e0:1a:fa:23:6f:75:c7:6f: fb:2b:6d:87:4e:53:13:66:05:26:9b:85:b1:be:a7:86:54:46: 65:0e:a7:4f:f5:fa:57:d4:b5:68:c8:ec:9e:c9:27:0f:5d:55: fb:19:58:3d:53:14:77:1e:d3:6e:02:89:6b:a6:61:5a:0a:ea: a0:02:ed:d7:b6:dc:ad:f7:57:87:7c:19:20:04:1f:b1:55:dc: ad:91:54:ba:78:a1:1f:6a:ad:8d:e1:ed:76:19:48:7b:24:19: 22:b2:97:b3:94:b4:38:18:51:67:5d:62:02:ff:33:65:1a:d5: b0:4f:b7:e0:05:6e:70:14:eb:2d:5e:11:94:2b:7d:d3:e1:7f: 0d:51:25:24:1c:d3:8a:3a:fe:91:a1:1d:fc:49:aa:00:33:0c: 87:f6:2b:89:f4:a2:01:81:54:77:d2:39:d3:73:73:3b:b4:c4: b6:a4:02:4a:b7:90:64:da:59:d8:1a:cc:01:d9:53:12:87:e7: 78:6a:09:70:39:0d:4b:0e:06:af:90:8a:b2:1a:f5:3f:76:a0: 51:20:f9:70 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIwowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkNG NDAxN0E2RTI5MTVGMjYxNDdENDE5RTVGN0E3RDE2NEQwNDk4NDAeFw0yNjAxMjYw NjU0NTZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKERFM0UzNkM5M0ExNTdG MjM1QTJFMzcxMTBBODEyRTQxQ0RCQjU2MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUd+9UEk4T9v+5hNFUbM/VpnTbuL3zIjs8DNsesSzKlkMLMrOy ZMZbA2Js5bPwLTc4BnhHpnCGB+1rgNyKraKtCI0lp6yTYy+XHAHC6xszMk+1EWDo bf3hkV4k6lb1R4snAOH1oNvYvwxWKdLTdHqyIt77/ErRyMvsgVRVMJYPl6igXcOs oywnnnNQIFK2L5J0ramDsuQcJIr0hDC0voIliJNxZb0B24nZKvIySBmc31OWhpiN 0ty7BFD7DoHCUSUprv1vb2mHjILXqeQxx841KjnPRKVae+EEHUovDdEN/Un48Lp/ 5bGvINUVEq2P90LNjlRTdVfTeJ32TyIZiO27AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU3j42yToVfyNaLjcRCoEuQc27VgkwHwYDVR0jBBgwFoAUvPQBem4pFfJhR9QZ 5fen0WTQSYQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjA3 Mi92UFFCZW00cEZmSmhSOVFaNWZlbjBXVFFTWVEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3ZQUUJlbTRwRmZKaFI5UVo1ZmVuMFdUUVNZUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIwNzIvM2o0MnlUb1ZmeU5h TGpjUkNvRXVRYzI3VmdrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdDrTANBgkqhkiG9w0BAQsFAAOCAQEAQdAatHQ78d5s6egrxDh+JPN67qEU SXSQdqh+OIP2Qn7dojmZl3Jpk2VCEW7TOOAa+iNvdcdv+ytth05TE2YFJpuFsb6n hlRGZQ6nT/X6V9S1aMjsnsknD11V+xlYPVMUdx7TbgKJa6ZhWgrqoALt17bcrfdX h3wZIAQfsVXcrZFUunihH2qtjeHtdhlIeyQZIrKXs5S0OBhRZ11iAv8zZRrVsE+3 4AVucBTrLV4RlCt90+F/DVElJBzTijr+kaEd/EmqADMMh/YrifSiAYFUd9I503Nz O7TEtqQCSreQZNpZ2BrMAdlTEofneGoJcDkNSw4Gr5CKshr1P3agUSD5cA== -----END CERTIFICATE-----Generated at Wed Feb 4 06:58:05 2026 by rpki-client