This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/wI6FT84hHj6nd1ygzpQJf6AK8EU.roa File: wI6FT84hHj6nd1ygzpQJf6AK8EU.roa (raw, json) Hash identifier: 1MHw8qO3AocWqSMi+r5SsHVcD4aXXomSvIwZyvPg2r0= Subject key identifier: C0:8E:85:4F:CE:21:1E:3E:A7:77:5C:A0:CE:94:09:7F:A0:0A:F0:45 Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 22CC Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/wI6FT84hHj6nd1ygzpQJf6AK8EU.roa Signing time: Wed 07 Jan 2026 06:08:06 +0000 ROA not before: Wed 07 Jan 2026 06:08:06 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134773 IP address blocks: 103.201.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 11:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8908 (0x22cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Jan 7 06:08:06 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C08E854FCE211E3EA7775CA0CE94097FA00AF045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:28:15:c3:9e:1f:54:71:2a:94:d0:89:38:01: 31:f7:63:69:43:b9:55:75:80:fb:11:70:66:99:5b: bf:0f:84:a4:16:e4:6e:2f:da:ae:f9:17:87:8f:57: fa:66:8f:50:d4:4f:37:f9:cc:85:92:b1:13:8c:30: 13:b2:ac:dc:8d:91:6f:1a:c8:7c:57:82:d4:f4:77: 54:6b:a0:dd:8e:ce:30:19:7e:38:97:f9:74:57:a4: a1:83:5b:cd:e0:2d:bf:21:22:96:7c:ad:86:1f:38: 7d:92:1a:a3:fe:4e:ef:5c:4b:41:6e:47:16:72:ef: 10:76:8c:5b:82:41:27:a8:38:a0:d1:85:dc:d6:2c: 3a:bb:7f:14:9b:ab:8a:52:db:2d:e7:99:72:6d:cb: 29:1a:8c:2a:f4:30:de:0c:28:da:53:24:f0:43:37: 1f:be:c1:26:6d:3d:cb:4c:ba:8d:b2:5e:91:80:b5: a1:0f:66:b0:fe:42:b4:ee:74:8d:18:3f:c0:5a:02: 71:2d:f3:a1:c9:53:8d:fd:21:56:f9:1b:ca:03:e2: d4:4f:82:c1:e2:b9:4d:d4:10:ff:2f:ad:cb:3a:54: e9:9b:48:d1:f4:69:2f:0a:c9:6e:3f:72:1a:33:1a: f6:90:6f:ee:bf:1b:a6:ac:4e:30:71:b0:2c:6f:26: d1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8E:85:4F:CE:21:1E:3E:A7:77:5C:A0:CE:94:09:7F:A0:0A:F0:45 X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/wI6FT84hHj6nd1ygzpQJf6AK8EU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.201.193.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:97:f1:ed:56:21:c2:a5:02:b1:28:bc:80:1b:93:cd:be:a5: 7b:ac:f6:20:89:23:ba:91:a3:99:09:96:00:5d:7d:7e:b3:c9: be:40:64:5e:1a:46:cf:96:0c:ce:d6:4b:c7:37:02:99:d2:f1: a3:dd:bf:2d:d6:b1:b0:bc:9b:8b:65:3d:6d:d7:95:35:34:8c: 80:df:e9:68:c3:be:b7:ba:d2:e1:66:16:49:28:af:f8:fb:b6: 8e:79:67:0f:0e:96:66:1e:5b:a4:ad:ff:14:9c:41:b7:9d:39: 63:d9:49:31:d9:5c:60:06:7f:bb:54:92:07:2e:17:60:36:c7: 30:88:15:bf:46:29:a9:a7:d7:6b:7e:37:0e:d9:f9:c3:f4:07: c9:af:4f:de:ad:0c:f1:ba:ad:33:f4:17:35:22:26:30:22:2f: 08:86:84:95:68:67:f8:dd:12:71:2a:9b:02:5e:d9:e9:96:6c: 65:47:02:42:76:fa:e0:28:1b:b8:64:a0:0b:fc:ac:17:a9:9c: b9:8e:18:6f:67:f4:8d:33:fa:75:57:bb:a8:c7:91:b2:95:37: 67:e3:41:30:ea:e1:12:15:ee:0b:fb:06:b5:ca:5c:58:12:50: 5a:be:53:ac:c2:10:69:12:b5:f8:42:ff:71:9e:fc:8c:b4:19: 6b:88:cc:60 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIswwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNjAxMDcw NjA4MDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEMwOEU4NTRGQ0UyMTFF M0VBNzc3NUNBMENFOTQwOTdGQTAwQUYwNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWKBXDnh9UcSqU0Ik4ATH3Y2lDuVV1gPsRcGaZW78PhKQW5G4v 2q75F4ePV/pmj1DUTzf5zIWSsROMMBOyrNyNkW8ayHxXgtT0d1RroN2OzjAZfjiX +XRXpKGDW83gLb8hIpZ8rYYfOH2SGqP+Tu9cS0FuRxZy7xB2jFuCQSeoOKDRhdzW LDq7fxSbq4pS2y3nmXJtyykajCr0MN4MKNpTJPBDNx++wSZtPctMuo2yXpGAtaEP ZrD+QrTudI0YP8BaAnEt86HJU439IVb5G8oD4tRPgsHiuU3UEP8vrcs6VOmbSNH0 aS8KyW4/chozGvaQb+6/G6asTjBxsCxvJtGnAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUwI6FT84hHj6nd1ygzpQJf6AK8EUwHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxL3dJNkZUODRoSGo2bmQx eWd6cFFKZjZBSzhFVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnycEwDQYJKoZIhvcNAQELBQADggEBAGyX8e1WIcKlArEovIAbk82+pXus9iCJ I7qRo5kJlgBdfX6zyb5AZF4aRs+WDM7WS8c3ApnS8aPdvy3WsbC8m4tlPW3XlTU0 jIDf6WjDvre60uFmFkkor/j7to55Zw8OlmYeW6St/xScQbedOWPZSTHZXGAGf7tU kgcuF2A2xzCIFb9GKamn12t+Nw7Z+cP0B8mvT96tDPG6rTP0FzUiJjAiLwiGhJVo Z/jdEnEqmwJe2emWbGVHAkJ2+uAoG7hkoAv8rBepnLmOGG9n9I0z+nVXu6jHkbKV N2fjQTDq4RIV7gv7BrXKXFgSUFq+U6zCEGkStfhC/3Ge/Iy0GWuIzGA= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:41 2026 by rpki-client