This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/XjnkTCYh9VdR_Xk0Xe1-EzFZTz0.roa File: XjnkTCYh9VdR_Xk0Xe1-EzFZTz0.roa (raw, json) Hash identifier: W4MNnkItw/vrSH+nZLb643tafOtuDUAKXKnyu0fh4II= Subject key identifier: 5E:39:E4:4C:26:21:F5:57:51:FD:79:34:5D:ED:7E:13:31:59:4F:3D Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1CEB Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/XjnkTCYh9VdR_Xk0Xe1-EzFZTz0.roa Signing time: Fri 09 Jan 2026 13:29:54 +0000 ROA not before: Fri 09 Jan 2026 13:29:54 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9304 IP address blocks: 180.223.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 11:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7403 (0x1ceb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jan 9 13:29:54 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=5E39E44C2621F55751FD79345DED7E1331594F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:43:ac:e4:a2:ac:4d:d2:3e:4b:7d:2e:b9:e2: d4:e1:09:21:4d:d2:13:c9:f3:54:5b:ba:8b:44:bc: 52:fe:30:95:72:94:9e:2b:28:6b:18:e3:70:97:3c: 27:d8:ac:4d:95:bb:a3:70:de:fd:fa:b7:ad:e9:2c: 08:c5:bd:96:f6:be:63:d0:27:46:ac:b3:57:a9:50: 0d:e6:5e:ca:e6:76:6f:a4:87:fb:44:eb:d8:0d:07: fc:82:2c:a1:4d:7d:4d:eb:bb:d5:ef:a4:72:9a:27: 84:28:47:7c:16:27:57:be:d7:00:e1:e8:03:fb:81: bb:7a:1b:4b:b0:7b:29:ec:93:36:bc:70:29:ce:d6: ad:77:b7:f6:d4:34:69:02:3e:c8:c4:ba:fa:6c:e3: 3c:07:8f:e3:6b:18:11:63:e0:7e:ce:7d:44:b4:24: 48:4a:f6:8d:68:4e:9e:97:fd:4c:b5:36:60:13:93: e4:13:a5:6c:69:68:18:ac:7c:c3:fa:3d:4e:e2:ba: 6b:38:09:0b:30:6c:b2:90:3b:16:61:15:c9:a1:a0: ad:4e:37:fd:24:19:1e:3a:09:b3:f3:59:d9:ce:11: 50:56:a4:e4:a5:08:f5:4f:5c:a5:1f:5c:13:be:35: 0f:54:66:6c:b4:03:cd:88:0f:a3:ff:5b:48:b4:c4: 70:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:39:E4:4C:26:21:F5:57:51:FD:79:34:5D:ED:7E:13:31:59:4F:3D X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/XjnkTCYh9VdR_Xk0Xe1-EzFZTz0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.128.0/18 Signature Algorithm: sha256WithRSAEncryption b7:51:4f:ba:13:04:84:71:d6:c8:8f:7b:8d:45:a6:1a:81:9b: 3f:e1:3b:51:08:c2:20:ed:66:a7:f3:66:0e:5b:12:ee:03:53: 98:62:44:3e:80:3b:68:fd:a1:ee:1e:86:98:93:2a:cc:d5:97: 0a:df:d0:44:80:fc:81:0e:e3:86:ce:ad:08:58:ec:54:c0:81: 4c:68:6b:a1:69:40:dd:a7:ef:8c:24:8c:f0:68:81:7f:ea:c8: bd:b3:f4:1f:69:c7:b0:15:e5:54:5a:72:d7:54:ef:af:7e:cb: 81:0e:b7:a6:a7:dd:0d:2a:09:88:22:21:cd:9a:e2:d8:d7:c0: 52:ed:ff:8f:a7:9e:2d:58:96:87:f6:5b:8a:c4:5f:96:38:74: e6:7d:a9:ff:0f:1b:34:42:62:7d:49:5f:28:2d:5b:88:79:c1: 07:8c:d4:14:9c:13:32:f8:2f:fc:07:1c:4f:c6:c0:2e:bf:37: 93:37:4b:36:5d:8e:82:70:86:5a:38:41:67:ad:97:bb:dd:e9: 2b:0d:43:52:18:5d:6f:48:b2:02:1e:1b:a2:a9:cf:fe:e6:b3: 36:18:a5:64:57:2d:93:de:9e:d9:37:30:b0:3c:33:bd:49:18: 23:59:ed:e6:2d:73:bd:5d:30:b6:0b:ca:93:8e:a6:3d:a0:36: d6:5a:8c:dd -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNjAxMDkx MzI5NTRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDVFMzlFNDRDMjYyMUY1 NTc1MUZENzkzNDVERUQ3RTEzMzE1OTRGM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzQ6zkoqxN0j5LfS654tThCSFN0hPJ81RbuotEvFL+MJVylJ4r KGsY43CXPCfYrE2Vu6Nw3v36t63pLAjFvZb2vmPQJ0ass1epUA3mXsrmdm+kh/tE 69gNB/yCLKFNfU3ru9XvpHKaJ4QoR3wWJ1e+1wDh6AP7gbt6G0uweynskza8cCnO 1q13t/bUNGkCPsjEuvps4zwHj+NrGBFj4H7OfUS0JEhK9o1oTp6X/Uy1NmATk+QT pWxpaBisfMP6PU7iums4CQswbLKQOxZhFcmhoK1ON/0kGR46CbPzWdnOEVBWpOSl CPVPXKUfXBO+NQ9UZmy0A82ID6P/W0i0xHD3AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUXjnkTCYh9VdR/Xk0Xe1+EzFZTz0wHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvWGpua1RDWWg5VmRS X1hrMFhlMS1FekZaVHowLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBrTfgDANBgkqhkiG9w0BAQsFAAOCAQEAt1FPuhMEhHHWyI97jUWmGoGbP+E7 UQjCIO1mp/NmDlsS7gNTmGJEPoA7aP2h7h6GmJMqzNWXCt/QRID8gQ7jhs6tCFjs VMCBTGhroWlA3afvjCSM8GiBf+rIvbP0H2nHsBXlVFpy11Tvr37LgQ63pqfdDSoJ iCIhzZri2NfAUu3/j6eeLViWh/ZbisRfljh05n2p/w8bNEJifUlfKC1biHnBB4zU FJwTMvgv/AccT8bALr83kzdLNl2OgnCGWjhBZ62Xu93pKw1DUhhdb0iyAh4boqnP /uazNhilZFctk96e2TcwsDwzvUkYI1nt5i1zvV0wtgvKk46mPaA21lqM3Q== -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:31 2026 by rpki-client