This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/479/jqRpm9JiE0rTpOHGGDbx3TEszO4.roa File: jqRpm9JiE0rTpOHGGDbx3TEszO4.roa (raw, json) Hash identifier: fUSzDqDIpPhopoceHTVJRAtJ3jDg6hbeIkOZQ0Cna1k= Subject key identifier: 8E:A4:69:9B:D2:62:13:4A:D3:A4:E1:C6:18:36:F1:DD:31:2C:CC:EE Certificate issuer: /CN=025E2D794E6FFAE295BACE491100E3D18B9C7141 Certificate serial: 21A4 Authority key identifier: 02:5E:2D:79:4E:6F:FA:E2:95:BA:CE:49:11:00:E3:D1:8B:9C:71:41 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Al4teU5v-uKVus5JEQDj0YuccUE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/jqRpm9JiE0rTpOHGGDbx3TEszO4.roa Signing time: Mon 26 Jan 2026 06:52:53 +0000 ROA not before: Mon 26 Jan 2026 06:52:53 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 38283 IP address blocks: 60.247.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/Al4teU5v-uKVus5JEQDj0YuccUE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/Al4teU5v-uKVus5JEQDj0YuccUE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Al4teU5v-uKVus5JEQDj0YuccUE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 22:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8612 (0x21a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025E2D794E6FFAE295BACE491100E3D18B9C7141 Validity Not Before: Jan 26 06:52:53 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=8EA4699BD262134AD3A4E1C61836F1DD312CCCEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9b:3b:80:8f:1b:e9:89:0c:3e:06:a3:b4:f1: f9:17:7e:47:a0:75:62:f9:38:7e:a4:45:ab:aa:da: ba:a7:16:49:65:48:8f:42:92:42:b1:05:24:82:59: a8:ef:68:83:b7:87:f9:dd:77:2e:7a:da:ee:48:6f: 30:a6:de:91:c4:43:7e:1e:33:55:ed:7a:e7:18:ff: cf:ee:0c:7c:a7:f0:18:9b:82:5b:2d:f9:d9:65:91: c4:2f:5d:9e:25:bb:8f:9b:1e:40:00:ec:85:9d:ec: ce:0f:fd:da:fc:71:59:88:e7:bb:15:b6:74:2b:ca: 22:d6:c5:f8:b5:8b:cf:1f:7b:6a:45:77:09:5a:12: d8:f4:9a:94:91:41:4a:48:2d:89:0d:69:c4:8b:52: 69:d7:4b:98:c3:75:e0:d0:b7:0d:56:a2:36:2a:66: 1d:bb:6d:c8:de:c8:b9:79:ad:82:bf:1f:35:dd:2c: f8:1b:1f:c3:ad:a2:f0:d6:8a:e7:21:7b:f3:75:45: df:29:be:4d:8d:ee:4c:15:d6:da:a7:31:2c:4d:6f: 81:0e:3b:0d:ef:e7:d8:16:4a:12:02:3a:5f:d5:4c: 96:0f:0f:63:c0:98:e5:45:4d:a6:64:ca:1a:d1:50: 60:b7:8c:e8:22:5b:44:a3:e7:f5:38:86:13:fa:f5: 4a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A4:69:9B:D2:62:13:4A:D3:A4:E1:C6:18:36:F1:DD:31:2C:CC:EE X509v3 Authority Key Identifier: keyid:02:5E:2D:79:4E:6F:FA:E2:95:BA:CE:49:11:00:E3:D1:8B:9C:71:41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/Al4teU5v-uKVus5JEQDj0YuccUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Al4teU5v-uKVus5JEQDj0YuccUE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/jqRpm9JiE0rTpOHGGDbx3TEszO4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.247.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4f:1d:be:69:59:b7:09:16:53:4d:55:34:d2:24:2d:87:26:06: f4:64:15:11:cd:5e:ae:f6:4b:e8:32:6b:38:eb:54:c9:76:a3: 8e:18:ba:f0:fc:b7:88:6f:85:25:ed:fb:9f:f0:2f:d2:5c:d2: 46:a3:eb:7a:dd:ea:bb:31:34:8a:ee:95:e9:14:2c:40:68:7d: d0:cb:5d:d9:34:a0:17:fb:a7:e6:66:ea:a1:0b:50:6d:ec:1f: 2f:1f:fc:51:dc:c5:12:ab:aa:be:e0:db:e1:32:f6:85:3a:e9: 17:49:3e:44:5c:43:0e:8c:65:0a:99:15:74:b6:be:9b:58:cf: d9:4e:db:43:86:ea:11:a6:6d:b5:37:d2:89:9c:f4:15:97:98: 1f:84:00:34:c0:bf:fa:5f:29:f0:73:dc:c1:09:f9:e9:da:63: a3:a2:cd:65:5c:3a:b6:e1:bc:84:31:7f:77:18:bc:5c:48:ca: 8d:ad:5e:2e:a7:b2:eb:3d:a5:44:7e:22:fa:1b:09:04:ab:f4: 8e:5e:09:66:59:b1:68:d5:c3:6a:fe:74:18:de:e4:62:cd:ae: ce:15:2a:37:22:38:24:4c:c7:1d:69:d5:8e:92:4d:0b:80:9a: eb:4f:4d:c8:1b:e8:aa:c3:0f:79:b6:1b:fa:e1:ad:14:1d:3a: 03:99:c3:68 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIaQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDI1 RTJENzk0RTZGRkFFMjk1QkFDRTQ5MTEwMEUzRDE4QjlDNzE0MTAeFw0yNjAxMjYw NjUyNTNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDhFQTQ2OTlCRDI2MjEz NEFEM0E0RTFDNjE4MzZGMUREMzEyQ0NDRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzmzuAjxvpiQw+BqO08fkXfkegdWL5OH6kRauq2rqnFkllSI9C kkKxBSSCWajvaIO3h/nddy562u5IbzCm3pHEQ34eM1XteucY/8/uDHyn8Bibglst +dllkcQvXZ4lu4+bHkAA7IWd7M4P/dr8cVmI57sVtnQryiLWxfi1i88fe2pFdwla Etj0mpSRQUpILYkNacSLUmnXS5jDdeDQtw1WojYqZh27bcjeyLl5rYK/HzXdLPgb H8OtovDWiuche/N1Rd8pvk2N7kwV1tqnMSxNb4EOOw3v59gWShICOl/VTJYPD2PA mOVFTaZkyhrRUGC3jOgiW0Sj5/U4hhP69UqnAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUjqRpm9JiE0rTpOHGGDbx3TEszO4wHwYDVR0jBBgwFoAUAl4teU5v+uKVus5J EQDj0YuccUEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDc5 L0FsNHRlVTV2LXVLVnVzNUpFUURqMFl1Y2NVRS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvQWw0dGVVNXYtdUtWdXM1SkVRRGowWXVjY1VFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDc5L2pxUnBtOUppRTByVHBP SEdHRGJ4M1RFc3pPNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAc894AwDQYJKoZIhvcNAQELBQADggEBAE8dvmlZtwkWU01VNNIkLYcmBvRkFRHN Xq72S+gyazjrVMl2o44YuvD8t4hvhSXt+5/wL9Jc0kaj63rd6rsxNIrulekULEBo fdDLXdk0oBf7p+Zm6qELUG3sHy8f/FHcxRKrqr7g2+Ey9oU66RdJPkRcQw6MZQqZ FXS2vptYz9lO20OG6hGmbbU30omc9BWXmB+EADTAv/pfKfBz3MEJ+enaY6OizWVc OrbhvIQxf3cYvFxIyo2tXi6nsus9pUR+IvobCQSr9I5eCWZZsWjVw2r+dBje5GLN rs4VKjciOCRMxx1p1Y6STQuAmutPTcgb6KrDD3m2G/rhrRQdOgOZw2g= -----END CERTIFICATE-----Generated at Mon Jan 26 21:09:49 2026 by rpki-client