This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/356/nwZJ_Z76f5nrAbhm-z61UMpWNLE.roa File: nwZJ_Z76f5nrAbhm-z61UMpWNLE.roa (raw, json) Hash identifier: YBEQOFqdadnyvGrPq0MmizNCd9b0uYhx6GQloEdvXrY= Subject key identifier: 9F:06:49:FD:9E:FA:7F:99:EB:01:B8:66:FB:3E:B5:50:CA:56:34:B1 Certificate issuer: /CN=2FE0990E21E6AC42EDF6F97A1187E82EC75D6091 Certificate serial: 03 Authority key identifier: 2F:E0:99:0E:21:E6:AC:42:ED:F6:F9:7A:11:87:E8:2E:C7:5D:60:91 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L-CZDiHmrELt9vl6EYfoLsddYJE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/nwZJ_Z76f5nrAbhm-z61UMpWNLE.roa Signing time: Wed 07 Jan 2026 06:23:50 +0000 ROA not before: Wed 07 Jan 2026 06:23:50 +0000 ROA not after: Thu 07 Jan 2027 03:11:43 +0000 asID: 37963 IP address blocks: 43.227.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/L-CZDiHmrELt9vl6EYfoLsddYJE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/L-CZDiHmrELt9vl6EYfoLsddYJE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L-CZDiHmrELt9vl6EYfoLsddYJE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FE0990E21E6AC42EDF6F97A1187E82EC75D6091 Validity Not Before: Jan 7 06:23:50 2026 GMT Not After : Jan 7 03:11:43 2027 GMT Subject: CN=9F0649FD9EFA7F99EB01B866FB3EB550CA5634B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:00:3a:bd:41:18:71:95:70:a6:12:6a:37:76: 5b:69:04:18:58:c6:93:8e:12:ed:2c:80:d4:83:cd: ad:27:0a:96:42:92:70:fc:2a:dd:39:2f:2d:ec:44: 6c:dc:06:54:ab:92:e0:07:99:12:a1:13:66:97:1f: 16:c1:a7:e4:b0:ee:a6:6b:8f:24:5c:5a:24:b4:1a: a2:54:75:5f:3a:15:8f:7d:db:9b:f4:fc:3e:f7:88: bd:29:70:1d:c8:93:4b:6c:58:17:d9:92:90:9b:56: 7f:0f:fe:6b:5b:ea:0b:fe:84:74:e9:5f:a8:7f:c5: 2d:25:41:bd:4c:9f:86:c0:68:42:ab:40:68:a8:9f: 1b:19:76:51:50:25:a8:85:38:9b:8e:a1:ad:38:b9: 75:43:5d:17:82:f4:16:bf:eb:20:71:86:1b:dd:b0: cf:c9:be:dd:ee:5f:b4:7b:6f:1e:cb:d7:56:f8:70: 0d:99:e8:77:b3:4a:a7:d9:28:7c:74:d3:6a:b3:56: 39:0b:37:cb:e0:4b:85:0d:e2:c0:66:9e:58:4e:87: f4:16:0d:7f:5b:4c:5c:23:1f:ce:3e:27:2c:2f:07: 56:4a:c5:fe:9b:74:32:62:a2:f0:a3:23:42:0d:7d: 8e:18:b2:6d:e4:75:01:9b:28:c5:3b:37:c5:b4:c2: c4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:06:49:FD:9E:FA:7F:99:EB:01:B8:66:FB:3E:B5:50:CA:56:34:B1 X509v3 Authority Key Identifier: keyid:2F:E0:99:0E:21:E6:AC:42:ED:F6:F9:7A:11:87:E8:2E:C7:5D:60:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/L-CZDiHmrELt9vl6EYfoLsddYJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L-CZDiHmrELt9vl6EYfoLsddYJE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/nwZJ_Z76f5nrAbhm-z61UMpWNLE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.188.0/22 Signature Algorithm: sha256WithRSAEncryption b8:0d:52:b8:39:91:25:8e:6e:fa:46:cf:cd:33:ae:ef:db:39: 6f:ac:f3:8d:bb:de:0a:25:ba:8f:7b:90:d6:52:2d:23:bc:aa: a6:aa:f7:ae:aa:1e:ae:9f:10:e5:86:3b:7c:0d:0a:e0:3b:87: ee:32:cd:fe:be:24:72:53:8c:99:0e:da:ac:3e:e6:7d:37:ef: 35:37:35:8a:d6:24:d6:16:35:e8:e3:de:5f:df:c8:11:1f:1b: 51:22:54:e2:20:7d:8c:76:fc:4a:ab:78:80:b4:cf:9c:f4:d8: 56:3b:45:1e:01:e4:36:4e:4f:e2:e0:85:c5:a0:26:d3:a1:1d: 24:ea:f5:d1:52:a3:f0:3c:f8:2d:03:81:4d:3c:64:3b:77:3b: a2:5c:3d:05:37:59:f8:55:4b:87:ec:a2:c5:63:f1:46:de:e9: 13:d6:41:bb:c7:33:8a:84:b1:2d:0d:e8:be:b1:3c:9a:46:75: 30:db:9d:a2:55:15:c6:01:81:71:0e:ea:b4:d8:25:8a:93:a4: c8:bd:a2:e4:fb:f0:f7:73:78:3a:e6:3d:6f:79:26:42:a0:23: a7:d3:af:95:e2:cb:ee:d2:9f:c7:0b:4d:39:52:10:02:fb:74: d6:b6:f2:00:e4:97:f2:03:d1:b1:9e:cb:49:bf:cd:2d:28:0e: d8:4e:fa:ed -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRkUw OTkwRTIxRTZBQzQyRURGNkY5N0ExMTg3RTgyRUM3NUQ2MDkxMB4XDTI2MDEwNzA2 MjM1MFoXDTI3MDEwNzAzMTE0M1owMzExMC8GA1UEAxMoOUYwNjQ5RkQ5RUZBN0Y5 OUVCMDFCODY2RkIzRUI1NTBDQTU2MzRCMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ0AOr1BGHGVcKYSajd2W2kEGFjGk44S7SyA1IPNrScKlkKScPwq 3TkvLexEbNwGVKuS4AeZEqETZpcfFsGn5LDupmuPJFxaJLQaolR1XzoVj33bm/T8 PveIvSlwHciTS2xYF9mSkJtWfw/+a1vqC/6EdOlfqH/FLSVBvUyfhsBoQqtAaKif Gxl2UVAlqIU4m46hrTi5dUNdF4L0Fr/rIHGGG92wz8m+3e5ftHtvHsvXVvhwDZno d7NKp9kofHTTarNWOQs3y+BLhQ3iwGaeWE6H9BYNf1tMXCMfzj4nLC8HVkrF/pt0 MmKi8KMjQg19jhiybeR1AZsoxTs3xbTCxJkCAwEAAaOCAfEwggHtMB0GA1UdDgQW BBSfBkn9nvp/mesBuGb7PrVQylY0sTAfBgNVHSMEGDAWgBQv4JkOIeasQu32+XoR h+gux11gkTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNTYv TC1DWkRpSG1yRUx0OXZsNkVZZm9Mc2RkWUpFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MLUNaRGlIbXJFTHQ5dmw2RVlmb0xzZGRZSkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNTYvbndaSl9aNzZmNW5yQWJo bS16NjFVTXBXTkxFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj LmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AivjvDANBgkqhkiG9w0BAQsFAAOCAQEAuA1SuDmRJY5u+kbPzTOu79s5b6zzjbve CiW6j3uQ1lItI7yqpqr3rqoerp8Q5YY7fA0K4DuH7jLN/r4kclOMmQ7arD7mfTfv NTc1itYk1hY16OPeX9/IER8bUSJU4iB9jHb8Sqt4gLTPnPTYVjtFHgHkNk5P4uCF xaAm06EdJOr10VKj8Dz4LQOBTTxkO3c7olw9BTdZ+FVLh+yixWPxRt7pE9ZBu8cz ioSxLQ3ovrE8mkZ1MNudolUVxgGBcQ7qtNglipOkyL2i5Pvw93N4OuY9b3kmQqAj p9OvleLL7tKfxwtNOVIQAvt01rbyAOSX8gPRsZ7LSb/NLSgO2E767Q== -----END CERTIFICATE-----Generated at Mon Jan 19 15:11:41 2026 by rpki-client