This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/J74ldNmvqRxQIMTZx3mbHDpgnIU.roa File: J74ldNmvqRxQIMTZx3mbHDpgnIU.roa (raw, json) Hash identifier: z9qRtGRNFpYYP5bZ63rGud5OxSDPD32UJ7z2JXOgqb4= Subject key identifier: 27:BE:25:74:D9:AF:A9:1C:50:20:C4:D9:C7:79:9B:1C:3A:60:9C:85 Certificate issuer: /CN=FB653B26775041687D362D4CEF768E58F99EC075 Certificate serial: 0EE2 Authority key identifier: FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/J74ldNmvqRxQIMTZx3mbHDpgnIU.roa Signing time: Mon 26 Jan 2026 06:53:48 +0000 ROA not before: Mon 26 Jan 2026 06:53:48 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 137443 IP address blocks: 103.97.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 20:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3810 (0xee2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB653B26775041687D362D4CEF768E58F99EC075 Validity Not Before: Jan 26 06:53:48 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=27BE2574D9AFA91C5020C4D9C7799B1C3A609C85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d4:fe:43:ce:d9:fe:ab:21:d6:c7:bc:7c:06: d6:fc:e0:ab:8a:0b:95:57:c2:b4:c8:17:87:c6:33: 12:c5:d2:fc:79:d9:89:ca:30:de:86:3d:ff:da:85: 45:f1:3e:d0:c4:65:3e:74:1d:cb:df:cc:db:23:54: c0:38:69:0c:64:10:8f:12:99:38:dd:17:fd:6f:6e: 2f:40:8f:2c:1e:40:b7:0c:27:7b:4b:2f:d3:c3:c9: e7:74:6c:ec:42:0c:3d:8d:10:4c:77:96:e7:1f:99: e8:35:c9:eb:63:46:46:6c:e6:c1:fa:11:8d:a2:d6: f0:6a:31:65:4b:2e:b9:d9:a8:81:b1:fe:55:f2:24: bc:dd:dd:eb:a0:df:08:13:96:ac:cc:ea:13:7d:d5: 50:33:5c:8f:25:7b:6f:5d:94:9f:0e:2e:90:17:f8: 73:96:13:7f:0f:94:f2:e2:30:ef:a9:cf:40:20:2c: 74:db:09:0b:0b:91:4e:c8:4c:cf:34:86:d0:b4:79: a9:f1:8e:2e:35:17:b8:1f:61:8f:d3:92:84:ee:0b: 92:8e:55:f0:a6:1b:86:f4:2b:77:9f:52:5d:d6:9c: bd:cf:fb:ed:ca:1c:e6:ba:4c:72:12:17:42:65:ca: 20:94:92:33:83:0d:76:bc:27:b6:c1:ab:2e:83:53: ba:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BE:25:74:D9:AF:A9:1C:50:20:C4:D9:C7:79:9B:1C:3A:60:9C:85 X509v3 Authority Key Identifier: keyid:FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/J74ldNmvqRxQIMTZx3mbHDpgnIU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.97.56.0/24 Signature Algorithm: sha256WithRSAEncryption 09:3d:33:ed:2f:01:7f:bd:84:4b:bb:c2:d1:fb:46:5d:2d:f0: f4:87:c9:fd:6d:92:90:69:4f:b8:bc:d4:32:de:eb:b7:1e:42: c3:49:68:af:3d:d2:f8:dc:16:99:3c:12:22:bb:eb:6d:4b:03: 1d:1e:65:c1:06:1c:9a:45:0f:5f:40:94:19:ec:41:8e:80:e1: f8:8f:f6:4f:e9:a5:25:23:22:0b:99:60:a5:bb:06:b6:44:d2: 5f:17:13:42:da:aa:a8:dc:05:2f:40:e8:06:4d:39:e2:d8:89: f8:c1:e4:29:eb:bd:e8:61:31:2c:a2:a6:e1:3e:7d:53:f1:1d: 24:49:e3:e4:ca:2a:fb:af:32:10:01:00:6f:1f:f7:04:94:59: 03:21:d4:6f:ca:aa:8e:95:42:57:55:e0:76:70:1c:33:59:79: 0e:54:47:c8:17:8f:91:54:0b:a2:e9:ea:ae:f0:d2:b3:9d:4f: 71:9f:73:15:c3:fc:f4:1c:35:95:7e:7b:f9:5e:c9:b7:b5:e3: 35:4f:7b:bc:ff:7e:34:ad:0f:05:48:77:8e:72:1d:04:e4:27: 95:4e:91:4d:aa:7b:32:d7:89:3d:c5:df:99:32:11:98:78:6b: 78:73:62:fb:28:11:3c:a5:29:c3:17:97:8e:c7:38:45:75:0a: c3:fe:d3:80 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDuIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkI2 NTNCMjY3NzUwNDE2ODdEMzYyRDRDRUY3NjhFNThGOTlFQzA3NTAeFw0yNjAxMjYw NjUzNDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDI3QkUyNTc0RDlBRkE5 MUM1MDIwQzREOUM3Nzk5QjFDM0E2MDlDODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDl1P5Dztn+qyHWx7x8Btb84KuKC5VXwrTIF4fGMxLF0vx52YnK MN6GPf/ahUXxPtDEZT50HcvfzNsjVMA4aQxkEI8SmTjdF/1vbi9AjyweQLcMJ3tL L9PDyed0bOxCDD2NEEx3lucfmeg1yetjRkZs5sH6EY2i1vBqMWVLLrnZqIGx/lXy JLzd3eug3wgTlqzM6hN91VAzXI8le29dlJ8OLpAX+HOWE38PlPLiMO+pz0AgLHTb CQsLkU7ITM80htC0eanxji41F7gfYY/TkoTuC5KOVfCmG4b0K3efUl3WnL3P++3K HOa6THISF0JlyiCUkjODDXa8J7bBqy6DU7rrAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUJ74ldNmvqRxQIMTZx3mbHDpgnIUwHwYDVR0jBBgwFoAU+2U7JndQQWh9Ni1M 73aOWPmewHUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUz Ny8tMlU3Sm5kUVFXaDlOaTFNNzNhT1dQbWV3SFUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy0yVTdKbmRRUVdoOU5pMU03M2FPV1BtZXdIVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MzcvSjc0bGRObXZxUnhR SU1UWngzbWJIRHBnbklVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdhODANBgkqhkiG9w0BAQsFAAOCAQEACT0z7S8Bf72ES7vC0ftGXS3w9IfJ /W2SkGlPuLzUMt7rtx5Cw0lorz3S+NwWmTwSIrvrbUsDHR5lwQYcmkUPX0CUGexB joDh+I/2T+mlJSMiC5lgpbsGtkTSXxcTQtqqqNwFL0DoBk054tiJ+MHkKeu96GEx LKKm4T59U/EdJEnj5Moq+68yEAEAbx/3BJRZAyHUb8qqjpVCV1XgdnAcM1l5DlRH yBePkVQLounqrvDSs51PcZ9zFcP89Bw1lX57+V7Jt7XjNU97vP9+NK0PBUh3jnId BOQnlU6RTap7MteJPcXfmTIRmHhreHNi+ygRPKUpwxeXjsc4RXUKw/7TgA== -----END CERTIFICATE-----Generated at Wed Feb 4 20:16:01 2026 by rpki-client