This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/ma_BImS7Gd539T6vxyIgywSZvxM.roa File: ma_BImS7Gd539T6vxyIgywSZvxM.roa (raw, json) Hash identifier: 9YSl50nWvlGRa+R0UDkmroXztPfloR+fmxJVsNVIZSs= Subject key identifier: 99:AF:C1:22:64:BB:19:DE:77:F5:3E:AF:C7:22:20:CB:04:99:BF:13 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1CEC Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/ma_BImS7Gd539T6vxyIgywSZvxM.roa Signing time: Fri 09 Jan 2026 13:29:54 +0000 ROA not before: Fri 09 Jan 2026 13:29:54 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9304 IP address blocks: 180.223.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 11:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7404 (0x1cec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jan 9 13:29:54 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=99AFC12264BB19DE77F53EAFC72220CB0499BF13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:39:1d:7f:ce:5c:25:76:f1:64:15:cd:83:5e: 8f:a3:7f:e8:64:c4:6b:0a:2e:87:78:7a:42:4c:d4: 04:60:80:ee:0c:04:47:90:4c:13:4a:4c:56:4b:bd: 8c:8b:57:57:9c:8b:f2:a1:c5:e3:9f:88:c4:45:94: 68:e8:1d:62:b6:f2:91:09:b6:b2:5a:59:28:60:bb: 4f:40:1d:a8:7a:9f:9d:9d:fc:03:7b:48:3b:ad:96: bd:91:68:a9:5f:9f:7d:b1:2a:d7:bd:3b:e1:3d:22: fd:7d:98:0d:58:55:65:df:aa:8b:06:04:ed:09:5a: e4:3e:57:ab:82:be:40:da:99:36:8b:fa:8c:48:98: d3:92:14:b4:42:7e:eb:86:db:ec:d5:d0:eb:79:5c: 2e:42:b0:94:61:96:52:bf:d0:8f:5d:01:88:44:33: 8e:e5:e1:9b:dc:91:37:d1:71:e2:e5:46:54:85:5b: d7:57:0f:2d:95:74:c7:6c:ee:7d:ac:1a:4e:97:bf: 8e:33:3e:d9:6e:51:e7:96:dc:e8:38:13:91:c6:3e: 5c:cc:7c:51:05:d8:5e:cb:6b:ac:cc:71:53:8c:36: 7a:31:30:ac:fc:a2:48:3b:8c:32:d1:6f:d5:64:1b: 7f:f3:2b:4d:eb:7e:24:c8:2e:f0:48:ac:60:8f:3b: 77:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AF:C1:22:64:BB:19:DE:77:F5:3E:AF:C7:22:20:CB:04:99:BF:13 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/ma_BImS7Gd539T6vxyIgywSZvxM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.0.0/18 Signature Algorithm: sha256WithRSAEncryption 7b:9d:4c:ae:d5:81:e2:8c:e7:16:ef:15:ff:0f:82:3d:bd:25: c9:8f:0d:71:fc:c8:3e:78:d4:ea:0d:d2:51:36:09:e2:1c:06: 82:c2:0e:1e:47:cf:ab:8d:8b:1d:e8:af:17:b9:59:49:a0:02: 40:45:09:0d:5b:15:a0:b5:64:5d:89:3d:7c:99:2a:3f:68:b0: 47:07:98:5a:b9:26:40:5c:60:64:22:48:96:fd:72:33:6c:26: 60:47:cb:07:74:d8:c4:40:b8:84:e9:1f:aa:c1:96:aa:4e:8c: b1:0d:f7:cb:d5:77:aa:8f:12:96:24:71:bb:f9:48:1c:e5:70: bc:e4:42:29:7d:3b:8c:e0:e8:22:01:b6:33:fc:ff:f3:84:d8: 98:6e:54:a9:5a:ae:1d:ba:77:e2:b8:2a:e8:00:21:35:c4:5e: 2c:1b:db:65:f2:10:0f:03:cf:91:88:34:6e:43:00:ae:62:ef: 6d:6f:32:77:10:78:69:55:76:02:d7:7f:72:42:11:0d:b5:be: a7:47:25:89:25:39:74:01:e4:ef:3a:8a:d5:99:ec:49:d1:f7: 56:84:ea:8a:5f:2b:1c:fb:a4:a0:db:af:fc:61:24:28:ef:c8: 61:d3:91:18:a8:fe:94:75:ce:cf:50:03:d6:8f:b9:f8:46:be: 7b:cf:b7:85 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNjAxMDkx MzI5NTRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDk5QUZDMTIyNjRCQjE5 REU3N0Y1M0VBRkM3MjIyMENCMDQ5OUJGMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUOR1/zlwldvFkFc2DXo+jf+hkxGsKLod4ekJM1ARggO4MBEeQ TBNKTFZLvYyLV1eci/KhxeOfiMRFlGjoHWK28pEJtrJaWShgu09AHah6n52d/AN7 SDutlr2RaKlfn32xKte9O+E9Iv19mA1YVWXfqosGBO0JWuQ+V6uCvkDamTaL+oxI mNOSFLRCfuuG2+zV0Ot5XC5CsJRhllK/0I9dAYhEM47l4ZvckTfRceLlRlSFW9dX Dy2VdMds7n2sGk6Xv44zPtluUeeW3Og4E5HGPlzMfFEF2F7La6zMcVOMNnoxMKz8 okg7jDLRb9VkG3/zK03rfiTILvBIrGCPO3d/AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUma/BImS7Gd539T6vxyIgywSZvxMwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvbWFfQkltUzdHZDUz OVQ2dnh5SWd5d1NadnhNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBrTfADANBgkqhkiG9w0BAQsFAAOCAQEAe51MrtWB4oznFu8V/w+CPb0lyY8N cfzIPnjU6g3SUTYJ4hwGgsIOHkfPq42LHeivF7lZSaACQEUJDVsVoLVkXYk9fJkq P2iwRweYWrkmQFxgZCJIlv1yM2wmYEfLB3TYxEC4hOkfqsGWqk6MsQ33y9V3qo8S liRxu/lIHOVwvORCKX07jODoIgG2M/z/84TYmG5UqVquHbp34rgq6AAhNcReLBvb ZfIQDwPPkYg0bkMArmLvbW8ydxB4aVV2Atd/ckIRDbW+p0cliSU5dAHk7zqK1Zns SdH3VoTqil8rHPukoNuv/GEkKO/IYdORGKj+lHXOz1AD1o+5+Ea+e8+3hQ== -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:45 2026 by rpki-client