This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/1M0BLSoNeqI4OMI0zdKS7L9LNOQ.roa File: 1M0BLSoNeqI4OMI0zdKS7L9LNOQ.roa (raw, json) Hash identifier: 58In5oIeE0dDGLxJxohdnRNtKzhESwJ1d0u6tbQoAvA= Subject key identifier: D4:CD:01:2D:2A:0D:7A:A2:38:38:C2:34:CD:D2:92:EC:BF:4B:34:E4 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 05E3 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/1M0BLSoNeqI4OMI0zdKS7L9LNOQ.roa Signing time: Tue 13 Jan 2026 07:21:11 +0000 ROA not before: Tue 13 Jan 2026 07:21:11 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 40065 IP address blocks: 103.118.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 06:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1507 (0x5e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Jan 13 07:21:11 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=D4CD012D2A0D7AA23838C234CDD292ECBF4B34E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:31:3d:5b:9f:a5:50:61:63:9f:f4:4f:07: bb:ae:f3:9c:9a:b0:93:05:c7:78:61:97:ba:95:64: 82:b9:4f:16:16:c4:b8:8d:6f:3e:8b:07:ec:e0:49: d0:27:11:3c:06:3a:ba:63:1c:81:91:4f:a6:fb:79: 5b:6f:d9:9c:ee:e5:51:7d:20:7f:7e:52:13:9c:9e: 29:3c:60:f3:75:93:14:b4:ae:9e:ea:67:3a:ca:cf: 91:8c:22:3a:a6:21:14:91:f8:10:f1:61:d3:27:fd: db:92:34:40:c0:69:22:fc:e9:5f:2a:ef:ff:ee:44: dc:a8:39:07:71:8d:e5:a6:a7:8d:e9:ba:d0:52:f0: 54:38:3b:90:67:c2:d1:b4:37:87:50:2e:fc:7d:e0: a8:f9:b3:a6:29:12:6a:2a:2a:00:3b:86:e9:21:fc: bf:32:a0:bc:41:36:f8:2d:80:43:a6:5c:34:09:1e: d0:01:46:56:37:9b:35:f6:58:91:8e:ec:73:68:d6: c0:0d:9e:50:ce:0e:d2:ae:37:9e:85:6a:ad:43:c0: 8e:4f:44:37:86:f2:de:11:bc:c2:cf:52:43:95:e0: 72:c1:45:ed:82:af:7b:ab:bf:9a:e9:be:7e:c4:f2: d7:76:4e:16:2e:3e:6a:5a:a6:93:dc:9a:6f:74:29: b6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CD:01:2D:2A:0D:7A:A2:38:38:C2:34:CD:D2:92:EC:BF:4B:34:E4 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/1M0BLSoNeqI4OMI0zdKS7L9LNOQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.248.0/22 Signature Algorithm: sha256WithRSAEncryption b5:1d:3a:8d:ff:27:75:50:00:58:47:7c:45:02:de:ff:e2:d3: 3a:98:9c:7f:14:58:87:db:30:cd:bf:ff:a2:38:7f:ad:91:84: 4e:fa:9a:6d:29:5c:4e:15:80:3d:9c:38:c8:92:b8:c5:02:ab: cb:73:f4:40:e3:7e:3c:62:86:d7:fd:06:58:19:98:e9:78:ec: e7:97:44:24:7c:6d:78:43:66:8e:97:df:6f:c8:03:62:9e:9b: e6:75:a0:b4:36:d7:f6:0d:28:0d:ca:c8:27:86:7d:0a:62:a6: bb:62:4c:ac:cf:1a:ae:e6:f2:e2:17:1e:ec:6c:c1:b8:bb:9d: 17:40:12:f9:9f:c1:50:d3:1a:61:9f:3d:45:42:2c:7b:12:5d: ec:c0:45:c2:50:5c:2b:bd:35:c6:49:5e:e7:0d:33:f9:aa:53: a8:cd:3e:c0:3f:15:fe:00:d3:e6:10:a2:14:a3:b1:af:2d:a8: 45:45:71:14:e5:48:58:fc:b3:c7:4c:b9:ad:a9:f5:6f:05:a3: 3c:7c:47:c0:b8:8d:6d:aa:0c:60:d5:d9:14:4c:92:83:28:e6: 48:1a:4a:1f:9a:8a:43:6a:2b:d5:36:7d:90:78:9d:4b:56:db: 74:2c:19:7a:5e:26:75:00:d5:c6:05:46:60:e7:4e:7a:4e:e3: 3b:61:99:91 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBeMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzlF RTg1MkZFMTM4Q0RFREM1QjQyRDExQTM0Mjk1RDEwOUFENDkyNTAeFw0yNjAxMTMw NzIxMTFaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEQ0Q0QwMTJEMkEwRDdB QTIzODM4QzIzNENERDI5MkVDQkY0QjM0RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClXjE9W5+lUGFjn/RPB7uu85yasJMFx3hhl7qVZIK5TxYWxLiN bz6LB+zgSdAnETwGOrpjHIGRT6b7eVtv2Zzu5VF9IH9+UhOcnik8YPN1kxS0rp7q ZzrKz5GMIjqmIRSR+BDxYdMn/duSNEDAaSL86V8q7//uRNyoOQdxjeWmp43putBS 8FQ4O5BnwtG0N4dQLvx94Kj5s6YpEmoqKgA7hukh/L8yoLxBNvgtgEOmXDQJHtAB RlY3mzX2WJGO7HNo1sANnlDODtKuN56Faq1DwI5PRDeG8t4RvMLPUkOV4HLBRe2C r3urv5rpvn7E8td2ThYuPmpappPcmm90KbZjAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU1M0BLSoNeqI4OMI0zdKS7L9LNOQwHwYDVR0jBBgwFoAUOe6FL+E4ze3FtC0R o0KV0QmtSSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcx Ni9PZTZGTC1FNHplM0Z0QzBSbzBLVjBRbXRTU1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MTYvMU0wQkxTb05lcUk0 T01JMHpkS1M3TDlMTk9RLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmd2+DANBgkqhkiG9w0BAQsFAAOCAQEAtR06jf8ndVAAWEd8RQLe/+LTOpic fxRYh9swzb//ojh/rZGETvqabSlcThWAPZw4yJK4xQKry3P0QON+PGKG1/0GWBmY 6Xjs55dEJHxteENmjpffb8gDYp6b5nWgtDbX9g0oDcrIJ4Z9CmKmu2JMrM8aruby 4hce7GzBuLudF0AS+Z/BUNMaYZ89RUIsexJd7MBFwlBcK701xkle5w0z+apTqM0+ wD8V/gDT5hCiFKOxry2oRUVxFOVIWPyzx0y5ran1bwWjPHxHwLiNbaoMYNXZFEyS gyjmSBpKH5qKQ2or1TZ9kHidS1bbdCwZel4mdQDVxgVGYOdOek7jO2GZkQ== -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:40 2026 by rpki-client