This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/oLL6KeWw16knhlj2YO0Nxb-9ygY.roa File: oLL6KeWw16knhlj2YO0Nxb-9ygY.roa (raw, json) Hash identifier: cAaBcqqgpqfxa+HfGQPjp+t0dxXxkD03jamgoC/gJ3g= Subject key identifier: A0:B2:FA:29:E5:B0:D7:A9:27:86:58:F6:60:ED:0D:C5:BF:BD:CA:06 Certificate issuer: /CN=FB653B26775041687D362D4CEF768E58F99EC075 Certificate serial: 0EE1 Authority key identifier: FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/oLL6KeWw16knhlj2YO0Nxb-9ygY.roa Signing time: Mon 26 Jan 2026 06:53:48 +0000 ROA not before: Mon 26 Jan 2026 06:53:48 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 137443 IP address blocks: 103.97.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 20:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3809 (0xee1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB653B26775041687D362D4CEF768E58F99EC075 Validity Not Before: Jan 26 06:53:48 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A0B2FA29E5B0D7A9278658F660ED0DC5BFBDCA06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:71:c2:46:f1:c7:bc:0b:4b:28:2b:55:83: 90:a0:85:27:8e:50:58:15:de:3c:cb:54:08:3b:8b: 75:0c:5c:7a:b5:1d:77:33:99:6e:e4:89:96:5d:c8: de:f8:64:c0:6e:ba:9e:02:a2:16:ae:23:97:6f:c8: 47:9e:62:70:15:37:62:74:c8:0a:c7:2c:58:50:eb: c0:58:0b:84:8f:cd:e8:09:8e:48:a9:03:8c:1f:8d: 94:c7:a8:9e:27:63:a3:0e:e8:18:8c:2c:66:1e:a2: 96:ac:fd:54:14:5c:40:de:15:7e:20:4f:8a:34:01: 1d:65:cc:0c:be:8c:c3:78:de:b2:67:3c:55:19:5a: 90:cb:29:0f:97:5b:0d:b7:d9:8c:8b:d2:10:22:35: fe:63:24:ca:da:4a:39:57:dc:fc:73:5b:0e:e1:02: a7:9d:88:1a:e6:99:5a:b9:72:c2:4b:26:9e:30:2d: 7a:92:c7:e9:a2:3f:3e:69:89:6c:ef:11:75:63:49: e8:9a:ad:da:8f:84:44:c2:8e:fe:04:da:c1:46:b5: d3:5e:a5:d2:a4:a1:d4:b8:fc:2c:21:ee:e8:2f:9c: 69:5f:d7:e0:2d:cb:89:e9:bc:fb:4d:97:e7:b4:b8: ba:c2:61:27:76:2f:6e:a6:3a:47:3a:fb:c7:b8:7f: e7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B2:FA:29:E5:B0:D7:A9:27:86:58:F6:60:ED:0D:C5:BF:BD:CA:06 X509v3 Authority Key Identifier: keyid:FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/oLL6KeWw16knhlj2YO0Nxb-9ygY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.97.57.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:1b:cd:6d:53:71:29:b2:5d:15:3f:3a:58:2a:33:43:7c:67: 98:ef:59:7d:46:a0:84:a6:47:9b:40:b2:c3:69:a2:92:1f:15: 84:4c:b5:33:6b:6e:1f:c2:8c:16:3d:91:e0:af:4e:3a:c9:68: a4:1e:ba:08:74:02:0b:73:b4:de:d9:fb:0a:34:16:c7:e1:f9: d5:23:5b:8a:7d:6e:2a:f3:8e:c7:de:f5:0d:6a:45:c2:9e:84: c6:54:75:0a:e8:07:6d:dc:6c:27:0b:ec:e0:cc:fd:1d:34:d4: 72:de:2d:ec:c6:e9:64:cf:cb:12:cd:e5:ff:74:d8:d8:f1:44: a0:9f:77:55:b1:04:0b:50:c0:9f:ed:c8:59:14:59:74:60:03: 83:8c:0b:df:7f:1a:be:6c:38:d1:65:86:d8:03:41:ae:b8:20: 7c:f5:3c:e1:3d:bd:3f:cc:f6:49:69:0c:95:ef:02:e6:1b:fd: 26:3b:70:c9:ce:20:88:ca:51:a4:ef:7a:f5:d7:1b:78:20:48: fb:8d:b9:0c:59:9a:17:4b:14:00:21:b0:c1:ad:df:a7:2b:a5: 50:f8:44:9c:28:d2:c5:1e:63:ed:ef:e9:3a:06:0a:7d:44:63: f5:88:e1:60:86:9e:4e:41:88:12:d9:f3:f8:67:ea:31:56:29: ec:66:5b:d5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDuEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkI2 NTNCMjY3NzUwNDE2ODdEMzYyRDRDRUY3NjhFNThGOTlFQzA3NTAeFw0yNjAxMjYw NjUzNDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEEwQjJGQTI5RTVCMEQ3 QTkyNzg2NThGNjYwRUQwREM1QkZCRENBMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMzHHCRvHHvAtLKCtVg5CghSeOUFgV3jzLVAg7i3UMXHq1HXcz mW7kiZZdyN74ZMBuup4CohauI5dvyEeeYnAVN2J0yArHLFhQ68BYC4SPzegJjkip A4wfjZTHqJ4nY6MO6BiMLGYeopas/VQUXEDeFX4gT4o0AR1lzAy+jMN43rJnPFUZ WpDLKQ+XWw232YyL0hAiNf5jJMraSjlX3PxzWw7hAqediBrmmVq5csJLJp4wLXqS x+miPz5piWzvEXVjSeiardqPhETCjv4E2sFGtdNepdKkodS4/Cwh7ugvnGlf1+At y4npvPtNl+e0uLrCYSd2L26mOkc6+8e4f+eJAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUoLL6KeWw16knhlj2YO0Nxb+9ygYwHwYDVR0jBBgwFoAU+2U7JndQQWh9Ni1M 73aOWPmewHUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUz Ny8tMlU3Sm5kUVFXaDlOaTFNNzNhT1dQbWV3SFUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy0yVTdKbmRRUVdoOU5pMU03M2FPV1BtZXdIVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1Mzcvb0xMNktlV3cxNmtu aGxqMllPME54Yi05eWdZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdhOTANBgkqhkiG9w0BAQsFAAOCAQEAHRvNbVNxKbJdFT86WCozQ3xnmO9Z fUaghKZHm0Cyw2mikh8VhEy1M2tuH8KMFj2R4K9OOslopB66CHQCC3O03tn7CjQW x+H51SNbin1uKvOOx971DWpFwp6ExlR1CugHbdxsJwvs4Mz9HTTUct4t7MbpZM/L Es3l/3TY2PFEoJ93VbEEC1DAn+3IWRRZdGADg4wL338avmw40WWG2ANBrrggfPU8 4T29P8z2SWkMle8C5hv9Jjtwyc4giMpRpO969dcbeCBI+425DFmaF0sUACGwwa3f pyulUPhEnCjSxR5j7e/pOgYKfURj9YjhYIaeTkGIEtnz+GfqMVYp7GZb1Q== -----END CERTIFICATE-----Generated at Wed Feb 4 20:15:50 2026 by rpki-client