This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/1YcymCeU9MOtyen1DWc6ZQIUAGs.roa File: 1YcymCeU9MOtyen1DWc6ZQIUAGs.roa (raw, json) Hash identifier: LgUMKSfZNXk/XZ25u3df63JMsLwWKHEG+U6xvFLCAmw= Subject key identifier: D5:87:32:98:27:94:F4:C3:AD:C9:E9:F5:0D:67:3A:65:02:14:00:6B Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 05FD Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/1YcymCeU9MOtyen1DWc6ZQIUAGs.roa Signing time: Sun 18 Jan 2026 04:59:45 +0000 ROA not before: Sun 18 Jan 2026 04:59:45 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 134176 IP address blocks: 103.118.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 06:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1533 (0x5fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Jan 18 04:59:45 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=D58732982794F4C3ADC9E9F50D673A650214006B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:17:54:c7:6d:5e:e8:52:9f:5b:3d:0a:2b:d1: 72:cc:24:89:49:16:d4:3d:d6:94:04:dc:13:6c:ce: ff:1f:a8:68:f9:b2:fb:3d:30:4f:d8:47:63:df:2e: 1a:09:10:b8:67:4d:a7:9f:c5:8e:96:98:09:99:e4: 86:fd:ac:0e:2e:d7:b7:fd:45:c3:d4:f8:2b:31:7e: 6c:66:73:28:31:a1:b1:ef:7d:92:0b:cf:c8:dd:a5: 53:bd:83:28:b5:a2:7a:3e:9b:eb:eb:ab:27:9e:d6: c2:ca:37:62:01:1b:38:da:be:78:d4:78:ef:c8:39: fd:54:ec:7b:ca:a8:23:0a:1c:39:44:f9:48:f7:69: a9:f0:4b:1f:d2:73:e4:89:de:c0:64:d0:4d:94:b2: 91:a1:c9:89:16:6b:94:a2:68:c9:d7:e7:f1:a5:5d: 6c:bc:7c:cd:d5:a5:47:6b:b5:30:66:20:bb:9f:41: b2:78:d7:e1:cf:78:1e:3c:a5:ba:d1:b1:ab:d5:41: bd:c0:b9:dc:81:45:b9:3d:6f:ab:21:90:00:1b:f0: a1:ee:2a:01:12:6d:bf:ed:e1:ad:86:62:ce:12:1c: 85:7b:9b:48:f8:aa:38:1a:30:5d:b7:b7:1d:e3:72: ee:6a:f7:52:30:14:e3:97:6c:66:f6:37:33:66:3b: 58:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:87:32:98:27:94:F4:C3:AD:C9:E9:F5:0D:67:3A:65:02:14:00:6B X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/1YcymCeU9MOtyen1DWc6ZQIUAGs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.255.0/24 Signature Algorithm: sha256WithRSAEncryption 65:75:49:43:60:d7:96:6e:09:19:e4:be:55:dd:d9:04:95:8a: 2d:aa:26:91:8b:5b:97:28:e8:cc:1c:54:a7:e8:d8:8b:a2:67: c5:d2:55:c8:f4:a1:7d:af:98:69:46:70:38:62:30:95:cd:6d: 87:4f:c3:31:c0:b2:62:0f:e6:3e:ef:0a:10:d2:98:82:89:38: 65:4a:26:ca:e4:4b:8c:a0:eb:da:ab:cf:c1:ab:e9:ef:96:20: f5:8f:a5:54:4b:f5:0d:49:c5:0c:2b:86:63:8f:a4:4c:97:a9: 9a:bd:ab:28:ee:a0:59:98:98:42:da:17:c2:1f:dd:0a:03:95: f9:81:af:9e:ed:e2:f3:92:87:bb:47:78:4d:d7:bd:16:fa:6d: 84:f7:fc:9d:58:64:f7:74:df:04:68:98:91:1b:5b:10:51:07: 48:09:74:bf:25:bd:44:86:1d:2f:f0:14:3f:4a:f4:ce:3c:3a: 57:81:4d:51:fd:8d:ba:27:1b:57:22:d9:da:c8:4b:92:04:fb: 55:09:8a:66:87:5c:96:a1:4c:6c:dd:e9:da:8c:8a:73:e8:d7: 07:16:77:f9:e2:1a:8c:82:8a:4d:e3:f4:1f:d0:8e:28:55:32: 2e:66:d4:d3:b5:01:f1:0b:f6:4d:83:35:28:6d:46:7d:17:38: 8a:bc:fa:fb -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzlF RTg1MkZFMTM4Q0RFREM1QjQyRDExQTM0Mjk1RDEwOUFENDkyNTAeFw0yNjAxMTgw NDU5NDVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEQ1ODczMjk4Mjc5NEY0 QzNBREM5RTlGNTBENjczQTY1MDIxNDAwNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD6F1THbV7oUp9bPQor0XLMJIlJFtQ91pQE3BNszv8fqGj5svs9 ME/YR2PfLhoJELhnTaefxY6WmAmZ5Ib9rA4u17f9RcPU+CsxfmxmcygxobHvfZIL z8jdpVO9gyi1ono+m+vrqyee1sLKN2IBGzjavnjUeO/IOf1U7HvKqCMKHDlE+Uj3 aanwSx/Sc+SJ3sBk0E2UspGhyYkWa5SiaMnX5/GlXWy8fM3VpUdrtTBmILufQbJ4 1+HPeB48pbrRsavVQb3AudyBRbk9b6shkAAb8KHuKgESbb/t4a2GYs4SHIV7m0j4 qjgaMF23tx3jcu5q91IwFOOXbGb2NzNmO1hdAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU1YcymCeU9MOtyen1DWc6ZQIUAGswHwYDVR0jBBgwFoAUOe6FL+E4ze3FtC0R o0KV0QmtSSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcx Ni9PZTZGTC1FNHplM0Z0QzBSbzBLVjBRbXRTU1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MTYvMVljeW1DZVU5TU90 eWVuMURXYzZaUUlVQUdzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGd2/zANBgkqhkiG9w0BAQsFAAOCAQEAZXVJQ2DXlm4JGeS+Vd3ZBJWKLaom kYtblyjozBxUp+jYi6JnxdJVyPShfa+YaUZwOGIwlc1th0/DMcCyYg/mPu8KENKY gok4ZUomyuRLjKDr2qvPwavp75Yg9Y+lVEv1DUnFDCuGY4+kTJepmr2rKO6gWZiY QtoXwh/dCgOV+YGvnu3i85KHu0d4Tde9FvpthPf8nVhk93TfBGiYkRtbEFEHSAl0 vyW9RIYdL/AUP0r0zjw6V4FNUf2NuicbVyLZ2shLkgT7VQmKZodclqFMbN3p2oyK c+jXBxZ3+eIajIKKTeP0H9COKFUyLmbU07UB8Qv2TYM1KG1GfRc4irz6+w== -----END CERTIFICATE-----Generated at Wed Jan 21 04:03:41 2026 by rpki-client