This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2894/LoqKDma7rOkFTUEfBS5cEawzYHo.roa File: LoqKDma7rOkFTUEfBS5cEawzYHo.roa (raw, json) Hash identifier: 7oV/1TLUV6TOj2FUtB4kWUwj5/N00zWdxsIGnqN/XYs= Subject key identifier: 2E:8A:8A:0E:66:BB:AC:E9:05:4D:41:1F:05:2E:5C:11:AC:33:60:7A Certificate issuer: /CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8 Certificate serial: 1B3C Authority key identifier: 83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/LoqKDma7rOkFTUEfBS5cEawzYHo.roa Signing time: Sun 04 Jan 2026 03:51:49 +0000 ROA not before: Sun 04 Jan 2026 03:51:49 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 146834 IP address blocks: 103.139.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6972 (0x1b3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8 Validity Not Before: Jan 4 03:51:49 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2E8A8A0E66BBACE9054D411F052E5C11AC33607A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1e:15:07:d1:85:8f:a8:7a:8b:f1:7a:3b:74: 39:af:6f:f3:8d:65:e3:f1:80:ec:27:a8:60:36:45: 36:e8:1f:4e:61:e6:95:a9:cc:7f:54:ee:0a:87:92: 61:e4:78:00:21:fb:e8:94:c8:4e:17:0a:6c:4e:65: 30:d5:6b:80:04:d8:6c:79:c4:23:79:66:56:6d:4f: cd:80:15:82:9e:95:b6:a3:61:f2:6d:bf:19:3b:6f: f0:f3:54:44:17:7f:50:f3:d4:54:b5:b9:bf:55:16: 84:fa:3b:99:14:55:95:8d:32:48:f9:6c:ab:d1:9f: 91:45:09:11:52:94:f1:83:35:8e:47:73:a6:68:88: e2:8d:e1:13:ee:d7:f4:3b:dc:9b:f2:e8:9f:7a:a9: 93:2f:9f:ba:a2:30:1f:3d:0a:4a:2c:6a:29:2f:62: 0e:af:b8:da:2b:48:3f:d1:e0:f3:81:fd:48:bc:f5: 0a:99:dd:68:0a:be:62:58:27:26:45:f3:d8:d6:f7: a4:de:95:8b:5a:68:08:9a:64:a9:77:94:b6:e7:02: 04:db:7b:7e:86:1d:bf:1c:9b:9e:06:94:a9:44:77: 04:ef:6a:ef:48:92:d0:41:bf:8c:26:17:7f:74:61: bf:67:af:a5:81:07:a2:c6:9d:f0:0b:8c:5a:f0:a9: 53:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8A:8A:0E:66:BB:AC:E9:05:4D:41:1F:05:2E:5C:11:AC:33:60:7A X509v3 Authority Key Identifier: keyid:83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/LoqKDma7rOkFTUEfBS5cEawzYHo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.139.137.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:fc:90:ac:ac:5a:c8:5e:47:8f:25:07:d0:0b:6b:52:30:52: b4:9b:3a:35:3c:47:c0:3e:9d:f9:bd:41:a0:cf:c9:8c:10:95: f7:36:8f:a3:53:8e:6d:d9:7a:14:71:c3:fc:7d:98:74:fc:a6: fe:aa:2a:f4:54:5b:95:91:bd:63:b6:15:ad:b6:69:73:fb:21: 7d:e6:7b:10:78:38:c9:4b:d2:39:41:d9:91:7d:61:0b:af:25: 63:4a:5c:90:18:16:cc:cd:96:f4:06:0e:14:1d:f7:3b:4a:ef: 5e:8c:5d:6e:39:a9:f4:68:03:7f:61:7a:07:ac:fd:2c:80:1a: 11:22:d1:ed:88:74:80:44:ee:00:6d:61:b4:9e:34:c7:4d:91: a9:70:34:48:43:4b:4b:be:ed:98:78:05:d7:f9:2d:0c:84:9e: 7a:8c:a3:7b:50:ed:2e:14:e3:24:d7:0f:2e:be:92:b6:22:18: 8f:71:d1:9e:6c:ea:b3:c6:be:37:51:88:39:af:fc:4c:2f:89: 7b:ed:e5:fa:ed:ca:1c:32:5a:f6:ad:d5:fb:11:8b:d7:db:44: 25:f6:de:3e:e8:b9:0f:dd:7a:ca:6d:ef:98:84:ac:47:a8:5b: 2b:22:78:42:4e:03:73:8e:d0:d5:4a:20:40:fd:74:46:77:42: e7:78:d5:9e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGzwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODM5 RjU1N0I5RjlGMkY2Q0RENzVBRkI0QUJBOEEyQTc5NkM2MTBFODAeFw0yNjAxMDQw MzUxNDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDJFOEE4QTBFNjZCQkFD RTkwNTRENDExRjA1MkU1QzExQUMzMzYwN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdHhUH0YWPqHqL8Xo7dDmvb/ONZePxgOwnqGA2RTboH05h5pWp zH9U7gqHkmHkeAAh++iUyE4XCmxOZTDVa4AE2Gx5xCN5ZlZtT82AFYKelbajYfJt vxk7b/DzVEQXf1Dz1FS1ub9VFoT6O5kUVZWNMkj5bKvRn5FFCRFSlPGDNY5Hc6Zo iOKN4RPu1/Q73Jvy6J96qZMvn7qiMB89CkosaikvYg6vuNorSD/R4POB/Ui89QqZ 3WgKvmJYJyZF89jW96TelYtaaAiaZKl3lLbnAgTbe36GHb8cm54GlKlEdwTvau9I ktBBv4wmF390Yb9nr6WBB6LGnfALjFrwqVPtAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQULoqKDma7rOkFTUEfBS5cEawzYHowHwYDVR0jBBgwFoAUg59Ve5+fL2zdda+0 q6iip5bGEOgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5 NC9nNTlWZTUtZkwyemRkYS0wcTZpaXA1YkdFT2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2c1OVZlNS1mTDJ6ZGRhLTBxNmlpcDViR0VPZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTQvTG9xS0RtYTdyT2tG VFVFZkJTNWNFYXd6WUhvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGeLiTANBgkqhkiG9w0BAQsFAAOCAQEAfvyQrKxayF5HjyUH0AtrUjBStJs6 NTxHwD6d+b1BoM/JjBCV9zaPo1OObdl6FHHD/H2YdPym/qoq9FRblZG9Y7YVrbZp c/shfeZ7EHg4yUvSOUHZkX1hC68lY0pckBgWzM2W9AYOFB33O0rvXoxdbjmp9GgD f2F6B6z9LIAaESLR7Yh0gETuAG1htJ40x02RqXA0SENLS77tmHgF1/ktDISeeoyj e1DtLhTjJNcPLr6StiIYj3HRnmzqs8a+N1GIOa/8TC+Je+3l+u3KHDJa9q3V+xGL 19tEJfbePui5D916ym3vmISsR6hbKyJ4Qk4Dc47Q1UogQP10RndC53jVng== -----END CERTIFICATE-----Generated at Mon Jan 19 15:28:02 2026 by rpki-client