This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3205/fGOGz97ahYnyIdNjVQHgbWQmwds.roa File: fGOGz97ahYnyIdNjVQHgbWQmwds.roa (raw, json) Hash identifier: d21PBj+MX2GfoCWzNO0H23lXW5hN49lG3sxhGVYBSkI= Subject key identifier: 7C:63:86:CF:DE:DA:85:89:F2:21:D3:63:55:01:E0:6D:64:26:C1:DB Certificate issuer: /CN=581041F42679F5E17F19C37E490A7794863B2BEB Certificate serial: 1208 Authority key identifier: 58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/fGOGz97ahYnyIdNjVQHgbWQmwds.roa Signing time: Mon 26 Jan 2026 06:54:07 +0000 ROA not before: Mon 26 Jan 2026 06:54:07 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 4812 IP address blocks: 103.96.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 17:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4616 (0x1208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581041F42679F5E17F19C37E490A7794863B2BEB Validity Not Before: Jan 26 06:54:07 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7C6386CFDEDA8589F221D3635501E06D6426C1DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:8e:e3:b8:92:a4:c7:07:a6:79:2c:71:20: 61:a4:c4:00:8b:20:95:90:25:27:74:9c:90:e6:7f: f7:3f:78:9c:c9:6a:3a:97:1d:a8:07:7a:47:93:3a: 2f:39:27:5f:e5:d3:d1:d9:60:ed:99:d3:90:bc:80: 06:d9:1e:8b:f5:c4:7a:6b:52:47:a1:cb:04:af:41: 2b:c1:ea:3d:35:64:9d:b1:4f:c8:c1:ec:5e:d3:f6: 6d:aa:7d:b6:d6:57:f8:e2:96:95:74:36:40:ca:08: aa:3d:8f:84:45:62:15:1a:04:ac:8c:0c:42:22:82: a3:2e:38:2d:7e:53:fb:e3:02:a7:08:0a:90:bc:87: 36:0e:8f:39:45:45:56:4d:9d:55:c6:4a:75:a5:70: 3a:29:9d:5b:f4:74:de:68:14:40:98:21:6d:58:e8: 10:00:a3:bb:5e:59:40:fd:95:1f:60:d9:05:90:46: 8a:3a:6d:f1:fb:83:ee:a6:1b:6d:31:fc:58:11:ce: 2c:7c:9f:cb:25:b2:41:5d:f5:c9:5d:6a:35:0f:ff: 3b:f8:a9:3e:3b:b3:92:14:17:7f:80:6f:fe:0e:4e: fa:81:62:2d:8c:21:e5:5b:7e:20:52:fe:f1:85:e2: 58:4f:6c:c1:d1:7a:0f:36:b6:76:72:c2:f4:54:62: 6a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:63:86:CF:DE:DA:85:89:F2:21:D3:63:55:01:E0:6D:64:26:C1:DB X509v3 Authority Key Identifier: keyid:58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/fGOGz97ahYnyIdNjVQHgbWQmwds.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.96.224.0/23 Signature Algorithm: sha256WithRSAEncryption 44:8e:db:0e:b3:40:3a:72:11:c5:63:0a:07:35:c4:a9:f0:f7: 5a:5d:fb:6e:6f:87:11:20:4b:42:6b:d8:5c:30:a3:ab:8b:d9: dd:68:d1:cf:3b:87:e6:c7:a2:2e:ee:91:11:0d:7d:c6:c0:0b: ab:07:98:f8:3c:44:7e:26:b1:54:18:03:ad:da:43:9f:f0:d7: 4e:2a:e5:5f:a7:e8:33:97:98:f8:8a:76:28:77:be:0a:fc:c2: b3:9e:93:68:1a:5c:a0:e3:db:e1:2c:43:ad:45:67:c0:be:8e: 26:4b:7e:eb:a3:7d:eb:25:64:ca:b5:aa:2e:0b:33:62:15:98: 0b:c9:8a:fa:d5:9c:28:24:12:de:83:d3:86:b2:ae:f1:3f:e3: d7:09:04:d7:79:8d:52:bc:6d:47:ee:6c:2d:1e:57:8c:a0:bb: a1:53:f6:c0:b5:dd:07:ae:07:8d:13:07:b3:af:c7:59:35:5b: d7:f5:4d:71:44:08:2e:86:a5:44:e6:20:e6:c1:cc:71:fb:20: 50:f4:7b:2f:58:a9:e6:f6:20:fd:e0:27:82:ba:3f:b8:ae:c9: 44:5e:24:a3:f2:c0:5e:b9:b3:f0:c0:ad:ac:d6:8b:11:1a:f0: 6a:42:52:50:fc:f8:71:d8:c5:0e:be:a2:81:86:aa:c6:88:72: 60:24:af:b2 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEggwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTgx MDQxRjQyNjc5RjVFMTdGMTlDMzdFNDkwQTc3OTQ4NjNCMkJFQjAeFw0yNjAxMjYw NjU0MDdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDdDNjM4NkNGREVEQTg1 ODlGMjIxRDM2MzU1MDFFMDZENjQyNkMxREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxeI7juJKkxwemeSxxIGGkxACLIJWQJSd0nJDmf/c/eJzJajqX HagHekeTOi85J1/l09HZYO2Z05C8gAbZHov1xHprUkehywSvQSvB6j01ZJ2xT8jB 7F7T9m2qfbbWV/jilpV0NkDKCKo9j4RFYhUaBKyMDEIigqMuOC1+U/vjAqcICpC8 hzYOjzlFRVZNnVXGSnWlcDopnVv0dN5oFECYIW1Y6BAAo7teWUD9lR9g2QWQRoo6 bfH7g+6mG20x/FgRzix8n8slskFd9cldajUP/zv4qT47s5IUF3+Ab/4OTvqBYi2M IeVbfiBS/vGF4lhPbMHReg82tnZywvRUYmr1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUfGOGz97ahYnyIdNjVQHgbWQmwdswHwYDVR0jBBgwFoAUWBBB9CZ59eF/GcN+ SQp3lIY7K+swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIw NS9XQkJCOUNaNTllRl9HY04tU1FwM2xJWTdLLXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1dCQkI5Q1o1OWVGX0djTi1TUXAzbElZN0stcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMDUvZkdPR3o5N2FoWW55 SWROalZRSGdiV1Ftd2RzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWdg4DANBgkqhkiG9w0BAQsFAAOCAQEARI7bDrNAOnIRxWMKBzXEqfD3Wl37 bm+HESBLQmvYXDCjq4vZ3WjRzzuH5seiLu6REQ19xsALqweY+DxEfiaxVBgDrdpD n/DXTirlX6foM5eY+Ip2KHe+CvzCs56TaBpcoOPb4SxDrUVnwL6OJkt+66N96yVk yrWqLgszYhWYC8mK+tWcKCQS3oPThrKu8T/j1wkE13mNUrxtR+5sLR5XjKC7oVP2 wLXdB64HjRMHs6/HWTVb1/VNcUQILoalROYg5sHMcfsgUPR7L1ip5vYg/eAngro/ uK7JRF4ko/LAXrmz8MCtrNaLERrwakJSUPz4cdjFDr6igYaqxohyYCSvsg== -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:12 2026 by rpki-client