This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3205/bc4SKFevryRZCH39jk5GKpZm1x4.roa File: bc4SKFevryRZCH39jk5GKpZm1x4.roa (raw, json) Hash identifier: 7e5KDq+7aeiZdMU6+aKGjIP0e/feYe8aTgRtS+Y9Db0= Subject key identifier: 6D:CE:12:28:57:AF:AF:24:59:08:7D:FD:8E:4E:46:2A:96:66:D7:1E Certificate issuer: /CN=581041F42679F5E17F19C37E490A7794863B2BEB Certificate serial: 1207 Authority key identifier: 58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/bc4SKFevryRZCH39jk5GKpZm1x4.roa Signing time: Mon 26 Jan 2026 06:54:06 +0000 ROA not before: Mon 26 Jan 2026 06:54:06 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 4812 IP address blocks: 103.96.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 17:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4615 (0x1207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581041F42679F5E17F19C37E490A7794863B2BEB Validity Not Before: Jan 26 06:54:06 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=6DCE122857AFAF2459087DFD8E4E462A9666D71E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:8b:b0:34:96:18:8e:18:f6:c8:7e:06:d7: f6:48:7d:d5:39:fa:55:99:76:d6:31:bd:ea:44:36: 1d:b1:b6:0f:8a:ca:32:bc:cd:22:05:d2:35:26:a4: f6:13:3c:f5:04:e1:e6:7b:96:b4:80:69:23:a7:24: 89:97:8c:a1:22:0f:d8:be:96:40:1d:a3:47:b5:7d: ff:d8:7b:85:ad:ff:d9:d2:07:ed:e9:d7:09:81:9f: 8e:d7:b8:a8:cf:42:fa:6d:86:02:72:f3:66:72:76: d0:dc:ba:15:d9:83:6e:a3:b4:bb:8f:ba:bc:03:cc: e1:87:27:18:02:0d:d5:55:9c:4e:9b:9e:aa:a3:75: fe:fe:72:d3:01:be:44:87:65:44:11:65:bd:54:81: 21:1d:c5:1b:60:3d:18:69:a0:9a:6d:43:14:1c:9b: 47:c8:bd:cb:a9:37:f0:77:17:ec:dc:ab:1a:76:fb: 05:56:51:4c:4a:2e:bb:70:61:b8:00:25:21:3e:f5: 82:f1:d1:b4:d3:55:c7:99:c8:de:64:44:66:24:c1: a5:85:e0:71:a9:7e:da:5d:b1:33:31:f9:1c:01:37: bc:08:c1:09:16:c8:d0:11:18:ff:4d:d6:cc:72:d0: 9b:d9:f2:92:db:69:61:7b:32:6b:a8:0f:d1:67:0c: 6e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CE:12:28:57:AF:AF:24:59:08:7D:FD:8E:4E:46:2A:96:66:D7:1E X509v3 Authority Key Identifier: keyid:58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/bc4SKFevryRZCH39jk5GKpZm1x4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.96.224.0/24 Signature Algorithm: sha256WithRSAEncryption 04:d5:71:94:1a:d2:3c:6b:81:29:05:52:0c:a0:bf:0f:87:37: fd:06:11:aa:7e:cc:bb:98:f4:94:f3:27:f1:89:d7:c5:4a:96: 07:89:78:3f:10:1e:8f:52:ea:9b:f4:5c:14:73:a0:5f:ed:5c: 44:e4:9e:ae:4b:09:4a:c2:0b:40:2d:a1:fd:d6:51:65:ee:24: b5:38:d3:17:03:21:02:6b:f1:99:dd:35:95:b9:04:df:6e:6e: 36:89:54:00:6a:5f:b2:34:dc:c3:d5:d2:46:4d:1a:a1:bb:46: a8:62:0a:48:51:a7:9e:62:a5:3f:24:57:64:a1:84:50:c1:ed: 86:b1:0e:06:ee:56:22:53:8f:8f:a6:6b:03:e6:43:84:52:15: d1:19:66:7b:91:65:d2:dd:a8:74:19:4e:ff:24:f9:3d:e5:ba: 4c:93:f1:73:41:aa:19:50:fc:07:d3:18:44:00:ac:50:90:ce: 45:56:67:bf:a4:dd:0e:6c:44:e6:59:38:b7:1d:de:40:67:c1: 58:6e:4c:dc:e2:b6:f5:46:bd:d1:5e:57:8a:36:c9:a5:7c:33: 28:7e:a4:c7:83:c9:33:bb:b0:b5:f2:69:17:ad:f6:88:41:41: 40:7b:18:a5:e8:1f:ef:80:51:dd:9c:ec:d9:a5:ce:8c:94:dc: e7:96:7e:9e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEgcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTgx MDQxRjQyNjc5RjVFMTdGMTlDMzdFNDkwQTc3OTQ4NjNCMkJFQjAeFw0yNjAxMjYw NjU0MDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDZEQ0UxMjI4NTdBRkFG MjQ1OTA4N0RGRDhFNEU0NjJBOTY2NkQ3MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJjYuwNJYYjhj2yH4G1/ZIfdU5+lWZdtYxvepENh2xtg+KyjK8 zSIF0jUmpPYTPPUE4eZ7lrSAaSOnJImXjKEiD9i+lkAdo0e1ff/Ye4Wt/9nSB+3p 1wmBn47XuKjPQvpthgJy82ZydtDcuhXZg26jtLuPurwDzOGHJxgCDdVVnE6bnqqj df7+ctMBvkSHZUQRZb1UgSEdxRtgPRhpoJptQxQcm0fIvcupN/B3F+zcqxp2+wVW UUxKLrtwYbgAJSE+9YLx0bTTVceZyN5kRGYkwaWF4HGpftpdsTMx+RwBN7wIwQkW yNARGP9N1sxy0JvZ8pLbaWF7MmuoD9FnDG7pAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUbc4SKFevryRZCH39jk5GKpZm1x4wHwYDVR0jBBgwFoAUWBBB9CZ59eF/GcN+ SQp3lIY7K+swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIw NS9XQkJCOUNaNTllRl9HY04tU1FwM2xJWTdLLXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1dCQkI5Q1o1OWVGX0djTi1TUXAzbElZN0stcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMDUvYmM0U0tGZXZyeVJa Q0gzOWprNUdLcFptMXg0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdg4DANBgkqhkiG9w0BAQsFAAOCAQEABNVxlBrSPGuBKQVSDKC/D4c3/QYR qn7Mu5j0lPMn8YnXxUqWB4l4PxAej1Lqm/RcFHOgX+1cROSerksJSsILQC2h/dZR Ze4ktTjTFwMhAmvxmd01lbkE325uNolUAGpfsjTcw9XSRk0aobtGqGIKSFGnnmKl PyRXZKGEUMHthrEOBu5WIlOPj6ZrA+ZDhFIV0Rlme5Fl0t2odBlO/yT5PeW6TJPx c0GqGVD8B9MYRACsUJDORVZnv6TdDmxE5lk4tx3eQGfBWG5M3OK29Ua90V5XijbJ pXwzKH6kx4PJM7uwtfJpF632iEFBQHsYpegf74BR3Zzs2aXOjJTc55Z+ng== -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:26 2026 by rpki-client