This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/xLHVFN7qgJxmVLccIkF7b6UCWvM.roa File: xLHVFN7qgJxmVLccIkF7b6UCWvM.roa (raw, json) Hash identifier: 0y2VZNE8QE1kcUhFGsB7s+y1CW28fjzlrS/rQsX8m2Y= Subject key identifier: C4:B1:D5:14:DE:EA:80:9C:66:54:B7:1C:22:41:7B:6F:A5:02:5A:F3 Certificate issuer: /CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D Certificate serial: 06FF Authority key identifier: B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/xLHVFN7qgJxmVLccIkF7b6UCWvM.roa Signing time: Wed 31 Dec 2025 02:04:33 +0000 ROA not before: Wed 31 Dec 2025 02:04:33 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9318 IP address blocks: 112.73.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1791 (0x6ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D Validity Not Before: Dec 31 02:04:33 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C4B1D514DEEA809C6654B71C22417B6FA5025AF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:29:47:81:06:d4:9e:9d:e8:af:53:e0:7c: d7:de:66:b8:c9:63:1f:05:e8:c6:a6:0b:82:35:45: 7c:5b:9c:7d:7b:cc:4d:a6:2c:fc:2d:b8:63:16:10: 9e:8a:85:e3:f5:f0:74:1c:79:df:5a:01:cc:2c:42: e8:8c:10:8d:8c:d3:3d:20:70:18:d4:9f:41:e3:d1: cf:89:9c:c2:57:00:0a:43:63:87:2a:e3:e5:ee:b7: 11:33:d2:1f:b1:fa:47:3e:16:4f:96:db:2e:a7:4c: e1:ce:d6:ef:4a:b2:1b:72:70:fb:5a:3d:f2:b8:d0: f0:07:81:38:51:66:7e:0d:0a:9b:0f:f2:fc:48:45: 41:fc:1f:2b:5d:7b:b4:51:f2:b4:86:96:4c:10:64: 13:4e:7a:d6:c1:da:c1:f4:1c:53:c3:b1:1b:b3:3b: d9:55:cb:1b:56:6c:c4:48:0c:84:49:b7:44:91:aa: 4c:9d:2d:be:91:42:cb:a1:39:ca:a2:1c:bf:d5:4f: 66:da:34:2a:b6:2b:fd:2d:d4:56:02:74:33:33:ab: ce:b7:b2:4a:ce:38:c3:15:dc:5a:b6:58:97:9e:05: 29:ff:56:f9:9e:fc:0b:01:97:68:23:cb:14:34:51: d4:bf:7b:3c:71:43:91:cd:18:db:c7:86:db:86:ad: e3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B1:D5:14:DE:EA:80:9C:66:54:B7:1C:22:41:7B:6F:A5:02:5A:F3 X509v3 Authority Key Identifier: keyid:B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/xLHVFN7qgJxmVLccIkF7b6UCWvM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.73.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0c:8b:1c:a4:66:b6:cc:b4:d9:66:88:67:5d:2e:28:2f:38:6e: 59:00:c0:76:11:4c:21:52:ca:8a:5a:20:21:42:f7:89:8c:c1: af:dc:0b:07:63:29:74:ed:39:a6:8d:ed:d5:41:f8:ca:67:8c: 91:ab:33:f5:23:f0:03:6e:52:98:29:8b:dd:e0:92:75:5d:16: 22:9a:6e:3f:0f:ae:15:4a:ba:6f:70:6a:2f:b5:44:9a:bd:d5: 90:d0:3e:7c:ac:da:31:90:f1:ae:dc:2a:40:93:57:a8:db:43: 81:dd:97:b6:da:70:00:2f:5c:5b:08:df:8c:21:b4:b9:4c:cd: 8a:f6:94:b6:0a:1f:10:e5:cd:08:2e:83:6a:98:eb:af:19:1b: 93:58:ee:a7:55:45:a9:d0:0e:2a:26:ff:48:44:74:f5:09:d6: 2a:60:4c:63:ba:47:02:64:ee:d5:be:3e:6e:0c:b2:03:58:a1: 4c:95:ce:f2:ae:cb:16:d0:23:fb:44:31:19:db:42:83:29:0e: e9:24:aa:93:bf:f8:b8:66:db:4a:42:65:32:bc:2f:97:d5:e8: cb:73:70:28:41:13:1f:b7:0b:43:9f:dc:f4:1f:ff:3c:a0:1f: 52:65:ab:c2:29:c3:86:c4:aa:10:59:bc:45:b1:83:98:86:2d: d9:37:9c:3a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjcw RjlBQ0JGMTAwMTQ2QjVBNkM3RTREMENFMkNGREZGQjE3ODAwRDAeFw0yNTEyMzEw MjA0MzNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEM0QjFENTE0REVFQTgw OUM2NjU0QjcxQzIyNDE3QjZGQTUwMjVBRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5PClHgQbUnp3or1PgfNfeZrjJYx8F6MamC4I1RXxbnH17zE2m LPwtuGMWEJ6KheP18HQced9aAcwsQuiMEI2M0z0gcBjUn0Hj0c+JnMJXAApDY4cq 4+XutxEz0h+x+kc+Fk+W2y6nTOHO1u9KshtycPtaPfK40PAHgThRZn4NCpsP8vxI RUH8Hytde7RR8rSGlkwQZBNOetbB2sH0HFPDsRuzO9lVyxtWbMRIDIRJt0SRqkyd Lb6RQsuhOcqiHL/VT2baNCq2K/0t1FYCdDMzq863skrOOMMV3Fq2WJeeBSn/Vvme /AsBl2gjyxQ0UdS/ezxxQ5HNGNvHhtuGrePNAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUxLHVFN7qgJxmVLccIkF7b6UCWvMwHwYDVR0jBBgwFoAUtw+ay/EAFGtabH5N DOLP3/sXgA0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 NS90dy1heV9FQUZHdGFiSDVORE9MUDNfc1hnQTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3R3LWF5X0VBRkd0YWJINU5ET0xQM19zWGdBMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDUveExIVkZON3FnSnht VkxjY0lrRjdiNlVDV3ZNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAHBJMA0GCSqGSIb3DQEBCwUAA4IBAQAMixykZrbMtNlmiGddLigvOG5ZAMB2 EUwhUsqKWiAhQveJjMGv3AsHYyl07Tmmje3VQfjKZ4yRqzP1I/ADblKYKYvd4JJ1 XRYimm4/D64VSrpvcGovtUSavdWQ0D58rNoxkPGu3CpAk1eo20OB3Ze22nAAL1xb CN+MIbS5TM2K9pS2Ch8Q5c0ILoNqmOuvGRuTWO6nVUWp0A4qJv9IRHT1CdYqYExj ukcCZO7Vvj5uDLIDWKFMlc7yrssW0CP7RDEZ20KDKQ7pJKqTv/i4ZttKQmUyvC+X 1ejLc3AoQRMftwtDn9z0H/88oB9SZavCKcOGxKoQWbxFsYOYhi3ZN5w6 -----END CERTIFICATE-----Generated at Mon Jan 19 15:11:42 2026 by rpki-client