This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3396/xZ8xElgv1bgpiJw-nuR7s1iOgBI.roa File: xZ8xElgv1bgpiJw-nuR7s1iOgBI.roa (raw, json) Hash identifier: K+sM/+rrSQS0X4vGh3Ql2cxPFoYrnh28YFqumpJmHEc= Subject key identifier: C5:9F:31:12:58:2F:D5:B8:29:88:9C:3E:9E:E4:7B:B3:58:8E:80:12 Certificate issuer: /CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Certificate serial: 01EB Authority key identifier: B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/xZ8xElgv1bgpiJw-nuR7s1iOgBI.roa Signing time: Fri 02 Jan 2026 08:41:14 +0000 ROA not before: Fri 02 Jan 2026 08:41:14 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 151232 IP address blocks: 202.58.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 20:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Validity Not Before: Jan 2 08:41:14 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C59F3112582FD5B829889C3E9EE47BB3588E8012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:00:a1:1c:73:ff:da:b8:2c:56:1e:32:2f:80: 52:03:98:11:b4:5a:ab:48:88:c2:f0:5c:7a:80:3f: 6d:d7:b8:71:3b:c0:3c:56:55:e3:f3:89:a6:da:6e: c4:ec:82:1d:d0:0d:a3:c1:0b:ad:2f:01:0a:aa:58: c8:2e:d0:4b:aa:1b:29:12:cf:43:18:96:43:d5:ee: 8f:62:02:75:de:b8:cf:3d:c8:a4:32:af:99:1a:32: 61:aa:46:48:2a:3a:18:13:21:65:7b:b9:2e:0d:eb: 1a:68:5a:23:66:c1:d4:82:7f:6c:50:87:c4:75:1f: 95:28:7a:91:80:f5:a8:2a:be:1f:0e:6d:e9:0a:df: 1e:dd:6e:c2:0f:99:e5:61:85:0c:ab:7e:af:4c:05: bc:43:6d:b6:39:c5:e3:9f:36:92:98:14:22:9b:9d: e6:db:46:b1:3d:17:37:3c:07:95:7a:19:4f:8a:7f: 54:9c:01:e3:74:2e:3d:68:dc:1d:be:1b:c5:a7:ea: 74:b1:19:2a:23:a7:3b:87:37:05:dd:09:c4:3c:98: fd:01:ff:4c:8a:de:b2:fc:49:bf:44:e9:0c:1a:04: 4d:1a:8d:a7:7d:29:8e:1f:3f:c5:04:dc:d7:76:85: 64:c2:80:df:69:d5:46:ea:7a:a4:5c:f8:89:37:56: 11:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9F:31:12:58:2F:D5:B8:29:88:9C:3E:9E:E4:7B:B3:58:8E:80:12 X509v3 Authority Key Identifier: keyid:B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/xZ8xElgv1bgpiJw-nuR7s1iOgBI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.58.122.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:69:01:46:02:b2:8f:92:9b:ef:c3:c7:a7:0f:51:6d:3c:26: b7:a0:1b:cc:b3:ae:b3:ec:88:7c:d4:0c:33:8c:4b:f9:e8:2e: b2:bc:af:57:cc:09:fd:8d:75:c5:d0:a3:1e:ec:15:bb:0d:10: a4:e4:82:d5:5f:4b:67:db:0c:37:56:2f:20:fb:fe:43:84:14: 0c:fb:2f:21:31:1d:16:94:10:d2:0c:99:63:08:b7:0f:a4:5f: 47:16:05:a2:81:ed:c1:c0:8d:30:0a:a9:42:f2:6d:29:6b:40: 32:9c:67:9a:f8:65:9e:f1:7c:b6:d9:29:51:7a:3d:df:48:91: 9b:2c:67:b1:29:b3:5a:19:e6:a8:44:a1:b9:dc:a2:ce:0e:c8: 24:0a:a1:41:34:b0:95:d4:48:5c:e0:ce:62:3e:42:29:94:48: 85:b6:86:87:43:9b:14:0a:4c:ba:15:72:61:bd:ae:48:1f:5b: b4:b4:18:42:f2:c6:f1:11:47:b2:8a:a2:09:19:6b:6e:4b:87: e4:78:92:5e:59:63:9b:13:43:7b:9b:f7:dd:35:9f:8f:4f:cb: a5:d9:cf:1d:23:15:a8:a9:fe:3d:d8:45:62:f6:c4:3f:49:32: d9:62:ef:7c:0c:6e:0e:15:a9:cf:7a:59:fb:13:a3:4e:98:e5: 0b:8b:84:ee -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjZD MTBENzI4QTM4MjQzMUJBQzFGMTQ5MzBEMEZDMUUwNzU5NTNBNjAeFw0yNjAxMDIw ODQxMTRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEM1OUYzMTEyNTgyRkQ1 QjgyOTg4OUMzRTlFRTQ3QkIzNTg4RTgwMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+AKEcc//auCxWHjIvgFIDmBG0WqtIiMLwXHqAP23XuHE7wDxW VePziababsTsgh3QDaPBC60vAQqqWMgu0EuqGykSz0MYlkPV7o9iAnXeuM89yKQy r5kaMmGqRkgqOhgTIWV7uS4N6xpoWiNmwdSCf2xQh8R1H5UoepGA9agqvh8ObekK 3x7dbsIPmeVhhQyrfq9MBbxDbbY5xeOfNpKYFCKbnebbRrE9Fzc8B5V6GU+Kf1Sc AeN0Lj1o3B2+G8Wn6nSxGSojpzuHNwXdCcQ8mP0B/0yK3rL8Sb9E6QwaBE0ajad9 KY4fP8UE3Nd2hWTCgN9p1UbqeqRc+Ik3VhHHAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUxZ8xElgv1bgpiJw+nuR7s1iOgBIwHwYDVR0jBBgwFoAUtsENcoo4JDG6wfFJ MND8HgdZU6YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 Ni90c0VOY29vNEpERzZ3ZkZKTU5EOEhnZFpVNlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3RzRU5jb280SkRHNndmRkpNTkQ4SGdkWlU2WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTYveFo4eEVsZ3YxYmdw aUp3LW51UjdzMWlPZ0JJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAco6ejANBgkqhkiG9w0BAQsFAAOCAQEADmkBRgKyj5Kb78PHpw9RbTwmt6Ab zLOus+yIfNQMM4xL+egusryvV8wJ/Y11xdCjHuwVuw0QpOSC1V9LZ9sMN1YvIPv+ Q4QUDPsvITEdFpQQ0gyZYwi3D6RfRxYFooHtwcCNMAqpQvJtKWtAMpxnmvhlnvF8 ttkpUXo930iRmyxnsSmzWhnmqEShudyizg7IJAqhQTSwldRIXODOYj5CKZRIhbaG h0ObFApMuhVyYb2uSB9btLQYQvLG8RFHsoqiCRlrbkuH5HiSXlljmxNDe5v33TWf j0/LpdnPHSMVqKn+PdhFYvbEP0ky2WLvfAxuDhWpz3pZ+xOjTpjlC4uE7g== -----END CERTIFICATE-----Generated at Mon Jan 19 18:25:28 2026 by rpki-client