This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/3MKzLGOz3QmJsUndF8T6ajoTyZo.roa File: 3MKzLGOz3QmJsUndF8T6ajoTyZo.roa (raw, json) Hash identifier: 4L896dvdD7gisLHXlUGakF+hzI7CPBXQcnhbqjLHgUg= Subject key identifier: DC:C2:B3:2C:63:B3:DD:09:89:B1:49:DD:17:C4:FA:6A:3A:13:C9:9A Certificate issuer: /CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D Certificate serial: 0700 Authority key identifier: B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/3MKzLGOz3QmJsUndF8T6ajoTyZo.roa Signing time: Wed 31 Dec 2025 02:04:33 +0000 ROA not before: Wed 31 Dec 2025 02:04:33 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 398704 IP address blocks: 112.73.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1792 (0x700) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D Validity Not Before: Dec 31 02:04:33 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DCC2B32C63B3DD0989B149DD17C4FA6A3A13C99A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:39:43:44:56:c4:af:69:85:7c:7e:06:7b:22: 99:b9:a2:ec:03:f0:03:4d:10:13:d0:b6:9e:94:05: 43:57:76:3e:df:d6:36:b8:80:24:bc:96:25:4a:d6: 09:a5:3f:d7:6a:19:d6:39:c8:0a:d0:12:42:3b:0a: 7c:4c:46:57:d3:96:fb:da:a3:74:c9:c9:fa:7b:53: ec:84:df:9b:a8:40:0d:29:63:ea:1b:f6:c5:c4:89: c9:4c:2b:83:e5:cb:df:db:21:0a:4c:63:fa:13:70: ca:9d:be:98:17:b8:fa:10:b8:22:55:c7:9e:fb:da: 88:b5:d3:bd:ad:f5:80:bf:78:30:5b:9d:ad:7b:0a: 67:b1:1e:73:02:18:cb:86:84:cc:fa:cc:5f:9b:2d: e3:43:c8:25:13:b8:43:03:82:ea:ef:33:fb:ca:32: 2c:a3:39:10:f3:cb:c1:4e:f3:b7:82:8b:e1:a4:f2: be:af:27:25:a1:40:02:16:e4:76:60:64:71:09:04: 21:23:c2:c8:55:c6:9c:cd:c0:9f:80:89:c1:93:ad: 08:d3:76:5b:df:62:6f:b5:72:cb:f9:8f:18:d2:eb: 0e:c8:72:ac:41:b4:45:1d:a1:2f:95:18:61:6b:0a: c8:09:1d:c9:32:af:c5:34:2f:29:a5:84:94:e5:10: 00:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C2:B3:2C:63:B3:DD:09:89:B1:49:DD:17:C4:FA:6A:3A:13:C9:9A X509v3 Authority Key Identifier: keyid:B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/3MKzLGOz3QmJsUndF8T6ajoTyZo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.73.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5b:1d:3f:ab:8d:b9:69:34:7f:41:7d:80:56:fb:00:61:05:3d: 05:30:8f:03:73:23:b1:1f:68:b3:7c:17:60:66:a6:3b:14:15: f2:6d:42:e3:5e:aa:c5:89:50:f3:0f:f2:c1:9b:e0:8f:e2:1b: a2:fe:2e:a9:da:33:0c:65:40:7d:6f:04:29:e2:45:85:5e:6e: 6b:86:66:ce:eb:7c:b8:76:9b:a5:9b:23:aa:b5:7e:ca:08:35: b0:07:85:07:c5:11:ea:5c:3d:d3:de:4c:81:c3:9f:a3:80:9e: 87:6a:e3:50:1a:75:55:f9:e9:2a:d9:c5:6e:94:7f:fa:6c:c2: f7:5c:29:09:b9:f2:a8:ff:7a:c8:3f:40:f9:ea:c6:b5:e0:46: 14:9f:75:77:5e:1d:bd:36:bc:e4:1a:78:fb:8d:50:30:9b:c4: 56:49:ce:03:2e:44:e3:fd:a1:88:55:89:c3:8f:12:ba:ed:44: 52:22:6b:ad:71:ac:34:02:09:b6:ed:4c:d8:11:46:36:d3:29: a8:d3:57:e4:c0:4a:ed:e7:de:3d:38:1b:dc:23:84:5f:03:03: 80:fd:10:dd:b7:b5:5d:5f:2f:7a:67:f8:80:54:26:81:17:77: 38:1b:32:2b:03:97:82:8f:6f:91:7a:f5:1d:29:2a:fd:34:0d: f2:ce:9d:58 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjcw RjlBQ0JGMTAwMTQ2QjVBNkM3RTREMENFMkNGREZGQjE3ODAwRDAeFw0yNTEyMzEw MjA0MzNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERDQzJCMzJDNjNCM0RE MDk4OUIxNDlERDE3QzRGQTZBM0ExM0M5OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrOUNEVsSvaYV8fgZ7Ipm5ouwD8ANNEBPQtp6UBUNXdj7f1ja4 gCS8liVK1gmlP9dqGdY5yArQEkI7CnxMRlfTlvvao3TJyfp7U+yE35uoQA0pY+ob 9sXEiclMK4Ply9/bIQpMY/oTcMqdvpgXuPoQuCJVx5772oi1072t9YC/eDBbna17 CmexHnMCGMuGhMz6zF+bLeNDyCUTuEMDgurvM/vKMiyjORDzy8FO87eCi+Gk8r6v JyWhQAIW5HZgZHEJBCEjwshVxpzNwJ+AicGTrQjTdlvfYm+1csv5jxjS6w7IcqxB tEUdoS+VGGFrCsgJHckyr8U0LymlhJTlEAAfAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU3MKzLGOz3QmJsUndF8T6ajoTyZowHwYDVR0jBBgwFoAUtw+ay/EAFGtabH5N DOLP3/sXgA0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 NS90dy1heV9FQUZHdGFiSDVORE9MUDNfc1hnQTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3R3LWF5X0VBRkd0YWJINU5ET0xQM19zWGdBMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDUvM01LekxHT3ozUW1K c1VuZEY4VDZham9UeVpvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAHBJMA0GCSqGSIb3DQEBCwUAA4IBAQBbHT+rjblpNH9BfYBW+wBhBT0FMI8D cyOxH2izfBdgZqY7FBXybULjXqrFiVDzD/LBm+CP4hui/i6p2jMMZUB9bwQp4kWF Xm5rhmbO63y4dpulmyOqtX7KCDWwB4UHxRHqXD3T3kyBw5+jgJ6HauNQGnVV+ekq 2cVulH/6bML3XCkJufKo/3rIP0D56sa14EYUn3V3Xh29NrzkGnj7jVAwm8RWSc4D LkTj/aGIVYnDjxK67URSImutcaw0Agm27UzYEUY20ymo01fkwErt5949OBvcI4Rf AwOA/RDdt7VdXy96Z/iAVCaBF3c4GzIrA5eCj2+RevUdKSr9NA3yzp1Y -----END CERTIFICATE-----Generated at Mon Jan 19 15:11:40 2026 by rpki-client