This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/MF6XO1h5tWyAEoasS2UP8bCpZIE.roa File: MF6XO1h5tWyAEoasS2UP8bCpZIE.roa (raw, json) Hash identifier: KGjqOIiGrk5B0gayHXAIuw7MZZLoMtK6K+t0VnpthfQ= Subject key identifier: 30:5E:97:3B:58:79:B5:6C:80:12:86:AC:4B:65:0F:F1:B0:A9:64:81 Certificate issuer: /CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D Certificate serial: 0703 Authority key identifier: B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/MF6XO1h5tWyAEoasS2UP8bCpZIE.roa Signing time: Wed 31 Dec 2025 02:04:34 +0000 ROA not before: Wed 31 Dec 2025 02:04:34 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9304 IP address blocks: 112.73.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 09:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1795 (0x703) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D Validity Not Before: Dec 31 02:04:34 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=305E973B5879B56C801286AC4B650FF1B0A96481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:fe:54:8c:30:e0:6b:c3:78:ac:7b:e4:ad: 15:b8:68:4f:d2:a1:31:c8:f4:38:f0:ca:bc:84:ee: 97:6b:fb:19:bd:ff:bb:58:fd:98:b2:d6:5e:fd:97: d6:b1:9a:2e:00:aa:4b:ee:6f:2f:13:d4:19:19:bc: 85:de:45:a8:32:0b:e3:aa:ed:db:e9:d5:04:34:43: 4e:c0:15:12:94:5b:56:16:f6:21:52:41:05:74:61: 5a:aa:43:7b:66:c1:30:3d:73:8c:d8:d7:d4:a9:8b: 9f:f5:a7:f2:1d:bc:ae:b6:4a:85:b8:2f:51:cb:b1: 60:be:be:16:67:39:18:4a:34:00:3e:16:e0:96:6a: b4:55:82:f3:f4:df:23:c7:58:7b:08:3e:ae:c0:51: 63:e0:70:64:b5:6a:b6:eb:c6:ec:39:4d:a7:83:37: a3:f1:aa:82:59:47:17:3b:6c:c9:13:7c:76:a2:bb: 5b:e4:86:46:79:84:8c:e0:0d:bd:63:1b:bd:81:28: 8a:fb:08:e8:54:24:4e:e2:37:12:17:d1:b7:8d:a5: aa:67:83:9f:da:3b:b8:06:e9:9f:1e:fb:d5:e3:66: bf:bb:61:da:85:73:ed:e7:20:93:4e:08:63:01:17: de:6f:26:29:36:fa:13:63:f1:96:de:d0:3f:aa:20: b9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5E:97:3B:58:79:B5:6C:80:12:86:AC:4B:65:0F:F1:B0:A9:64:81 X509v3 Authority Key Identifier: keyid:B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/MF6XO1h5tWyAEoasS2UP8bCpZIE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.73.0.0/16 Signature Algorithm: sha256WithRSAEncryption 86:94:30:e9:0c:c1:58:e3:9e:e6:44:e0:b6:2f:c8:cf:3e:03: 09:20:ac:94:54:45:19:f8:7b:62:23:a7:7e:96:40:71:06:c3: 14:a4:d1:25:9a:f4:51:81:24:e2:2e:ca:6e:98:49:2c:63:48: 46:14:a3:d3:7c:c0:31:c4:a3:00:c9:85:40:70:cb:e3:2f:ec: 3f:80:5a:16:7b:d1:f3:6e:ac:cf:74:c5:48:0f:8b:2e:53:4e: b1:c9:99:c4:19:9f:69:29:a2:48:e5:10:b7:ba:b2:e7:26:f0: f7:1d:34:b4:9f:4f:c0:a6:1e:b7:78:5b:09:79:84:88:3d:98: 03:29:7f:05:dc:41:a6:37:42:21:36:10:69:57:61:c9:a1:39: 43:aa:69:91:26:96:79:8d:3d:da:d4:31:3e:64:d0:8a:1d:fc: c2:fd:a3:fc:c6:b1:9e:49:01:25:40:60:43:a1:61:4b:f3:86: 46:a6:92:7f:21:35:10:45:c1:02:2a:f8:6d:2f:a5:bb:48:98: c0:3f:00:c8:19:d4:77:68:78:a0:1e:c2:73:e5:e2:1f:61:01: 18:28:4c:2e:f2:a7:a5:22:b1:0f:84:a5:68:18:ab:05:4b:f2: bc:a3:ca:3f:b3:53:24:08:3e:c1:14:b2:cf:a9:ed:77:4c:7e: 70:cf:f0:54 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICBwMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjcw RjlBQ0JGMTAwMTQ2QjVBNkM3RTREMENFMkNGREZGQjE3ODAwRDAeFw0yNTEyMzEw MjA0MzRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDMwNUU5NzNCNTg3OUI1 NkM4MDEyODZBQzRCNjUwRkYxQjBBOTY0ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEJ/5UjDDga8N4rHvkrRW4aE/SoTHI9DjwyryE7pdr+xm9/7tY /Ziy1l79l9axmi4Aqkvuby8T1BkZvIXeRagyC+Oq7dvp1QQ0Q07AFRKUW1YW9iFS QQV0YVqqQ3tmwTA9c4zY19Spi5/1p/IdvK62SoW4L1HLsWC+vhZnORhKNAA+FuCW arRVgvP03yPHWHsIPq7AUWPgcGS1arbrxuw5TaeDN6PxqoJZRxc7bMkTfHaiu1vk hkZ5hIzgDb1jG72BKIr7COhUJE7iNxIX0beNpapng5/aO7gG6Z8e+9XjZr+7YdqF c+3nIJNOCGMBF95vJik2+hNj8Zbe0D+qILnhAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUMF6XO1h5tWyAEoasS2UP8bCpZIEwHwYDVR0jBBgwFoAUtw+ay/EAFGtabH5N DOLP3/sXgA0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 NS90dy1heV9FQUZHdGFiSDVORE9MUDNfc1hnQTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3R3LWF5X0VBRkd0YWJINU5ET0xQM19zWGdBMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDUvTUY2WE8xaDV0V3lB RW9hc1MyVVA4YkNwWklFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAHBJMA0GCSqGSIb3DQEBCwUAA4IBAQCGlDDpDMFY457mROC2L8jPPgMJIKyU VEUZ+HtiI6d+lkBxBsMUpNElmvRRgSTiLspumEksY0hGFKPTfMAxxKMAyYVAcMvj L+w/gFoWe9HzbqzPdMVID4suU06xyZnEGZ9pKaJI5RC3urLnJvD3HTS0n0/Aph63 eFsJeYSIPZgDKX8F3EGmN0IhNhBpV2HJoTlDqmmRJpZ5jT3a1DE+ZNCKHfzC/aP8 xrGeSQElQGBDoWFL84ZGppJ/ITUQRcECKvhtL6W7SJjAPwDIGdR3aHigHsJz5eIf YQEYKEwu8qelIrEPhKVoGKsFS/K8o8o/s1MkCD7BFLLPqe13TH5wz/BU -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:34 2026 by rpki-client