This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/Hej6-QkA0-Bc3AMZshH55XxLv5g.roa File: Hej6-QkA0-Bc3AMZshH55XxLv5g.roa (raw, json) Hash identifier: toY3udwdmFT7/lG+ovmT8LUgSdJFIVPtqGAure8mJls= Subject key identifier: 1D:E8:FA:F9:09:00:D3:E0:5C:DC:03:19:B2:11:F9:E5:7C:4B:BF:98 Certificate issuer: /CN=FB653B26775041687D362D4CEF768E58F99EC075 Certificate serial: 0EE6 Authority key identifier: FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/Hej6-QkA0-Bc3AMZshH55XxLv5g.roa Signing time: Mon 26 Jan 2026 06:53:49 +0000 ROA not before: Mon 26 Jan 2026 06:53:49 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 137443 IP address blocks: 103.97.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 20:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3814 (0xee6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB653B26775041687D362D4CEF768E58F99EC075 Validity Not Before: Jan 26 06:53:49 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=1DE8FAF90900D3E05CDC0319B211F9E57C4BBF98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:96:4a:a7:c1:cb:8b:46:38:ef:4b:c9:98: 08:8b:39:fb:44:c2:3c:75:3c:5f:2f:ea:ac:bc:a6: 5a:70:f4:a2:94:f7:13:16:fd:f9:a6:a9:f8:38:06: 0a:e2:f0:89:da:cc:87:6c:7a:6a:72:fc:4a:51:15: ce:86:c5:68:b7:17:cc:fc:c2:e7:2b:72:60:b7:bf: 63:77:20:57:84:b9:9e:d8:90:2a:e4:16:c1:4e:64: 89:9e:21:ce:b7:be:33:3d:2a:5f:9c:5e:21:a7:db: 98:9d:f3:85:f7:70:90:45:38:ac:47:19:80:08:42: a2:1a:b6:9f:5a:a6:fd:45:aa:45:26:81:52:54:f5: 55:8d:62:b2:7f:f5:9c:94:b4:55:10:72:79:c6:b8: d5:2f:e6:15:36:3e:00:3d:9f:e0:81:a0:8f:db:4b: 28:ac:d3:98:f9:7f:1b:12:d7:d7:7e:7e:a6:d6:6f: d3:69:f7:a7:ba:17:57:b8:6a:16:0c:9f:27:d4:da: 43:ba:76:11:fb:24:16:59:9b:02:90:3e:a3:4b:77: 63:f6:6a:57:ab:7d:fc:da:ee:a7:fc:27:94:b9:bd: 99:ad:fe:3a:1d:f3:af:b7:8a:f8:9e:a4:92:fa:42: a2:dc:47:e6:14:8c:af:cd:be:b3:fd:39:26:76:77: 01:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E8:FA:F9:09:00:D3:E0:5C:DC:03:19:B2:11:F9:E5:7C:4B:BF:98 X509v3 Authority Key Identifier: keyid:FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/Hej6-QkA0-Bc3AMZshH55XxLv5g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.97.59.0/24 Signature Algorithm: sha256WithRSAEncryption e8:e7:1b:78:91:fd:64:78:5a:f3:31:1e:b5:e0:6a:b7:6f:d5: 92:c2:79:29:4e:49:64:a5:c9:ef:f2:36:33:b1:46:74:79:83: d6:22:10:f7:bb:db:0b:d1:2d:4f:fe:1d:b0:97:10:49:6a:c2: 26:5f:ad:54:a7:e5:9d:57:8b:f2:5d:49:0f:da:8f:86:58:f4: 36:14:3f:1d:41:9e:35:16:ef:b4:36:03:a3:15:31:2e:d5:12: 1c:4f:61:ee:17:c1:c8:d6:13:c1:25:47:9b:4f:63:d6:84:0a: 71:a9:2b:6f:c5:dd:c7:f7:5a:70:be:e7:fa:34:3e:4a:8c:9f: 76:da:3b:aa:01:09:5f:6a:6c:5b:53:b1:67:80:e1:0e:7b:82: 96:d4:78:ad:9a:7e:ed:93:86:1e:09:bb:fd:39:e5:da:53:79: 3e:ef:54:6a:0d:4b:0e:7d:e1:21:9b:33:31:f8:61:7c:88:25: 50:c2:cd:67:98:0e:06:9b:11:85:6a:15:d7:8e:fa:84:1e:7b: 8a:1c:f2:70:a4:9d:f5:17:ae:8a:fe:a6:80:1a:92:cb:83:2a: e9:8c:40:30:b8:f9:b9:4e:98:7e:0f:82:0a:08:f4:33:8e:4d: 4f:77:c1:33:09:22:d1:c0:de:e6:1c:d5:cc:84:4e:df:61:2d: f6:7f:09:14 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDuYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkI2 NTNCMjY3NzUwNDE2ODdEMzYyRDRDRUY3NjhFNThGOTlFQzA3NTAeFw0yNjAxMjYw NjUzNDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDFERThGQUY5MDkwMEQz RTA1Q0RDMDMxOUIyMTFGOUU1N0M0QkJGOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8fZZKp8HLi0Y470vJmAiLOftEwjx1PF8v6qy8plpw9KKU9xMW /fmmqfg4Bgri8InazIdsempy/EpRFc6GxWi3F8z8wucrcmC3v2N3IFeEuZ7YkCrk FsFOZImeIc63vjM9Kl+cXiGn25id84X3cJBFOKxHGYAIQqIatp9apv1FqkUmgVJU 9VWNYrJ/9ZyUtFUQcnnGuNUv5hU2PgA9n+CBoI/bSyis05j5fxsS19d+fqbWb9Np 96e6F1e4ahYMnyfU2kO6dhH7JBZZmwKQPqNLd2P2alerffza7qf8J5S5vZmt/jod 86+3iviepJL6QqLcR+YUjK/NvrP9OSZ2dwEDAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUHej6+QkA0+Bc3AMZshH55XxLv5gwHwYDVR0jBBgwFoAU+2U7JndQQWh9Ni1M 73aOWPmewHUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUz Ny8tMlU3Sm5kUVFXaDlOaTFNNzNhT1dQbWV3SFUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy0yVTdKbmRRUVdoOU5pMU03M2FPV1BtZXdIVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MzcvSGVqNi1Ra0EwLUJj M0FNWnNoSDU1WHhMdjVnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdhOzANBgkqhkiG9w0BAQsFAAOCAQEA6OcbeJH9ZHha8zEeteBqt2/VksJ5 KU5JZKXJ7/I2M7FGdHmD1iIQ97vbC9EtT/4dsJcQSWrCJl+tVKflnVeL8l1JD9qP hlj0NhQ/HUGeNRbvtDYDoxUxLtUSHE9h7hfByNYTwSVHm09j1oQKcakrb8Xdx/da cL7n+jQ+Soyfdto7qgEJX2psW1OxZ4DhDnuCltR4rZp+7ZOGHgm7/Tnl2lN5Pu9U ag1LDn3hIZszMfhhfIglUMLNZ5gOBpsRhWoV1476hB57ihzycKSd9Reuiv6mgBqS y4Mq6YxAMLj5uU6Yfg+CCgj0M45NT3fBMwki0cDe5hzVzIRO32Et9n8JFA== -----END CERTIFICATE-----Generated at Wed Feb 4 20:16:01 2026 by rpki-client