This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/C3_HQ1XRulHViw3ufo3uiX11UHI.roa File: C3_HQ1XRulHViw3ufo3uiX11UHI.roa (raw, json) Hash identifier: 9Cm68STXmk3Soev19L9WJFLKspiZQFmNKd9irZpegIc= Subject key identifier: 0B:7F:C7:43:55:D1:BA:51:D5:8B:0D:EE:7E:8D:EE:89:7D:75:50:72 Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A Certificate serial: 0721 Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/C3_HQ1XRulHViw3ufo3uiX11UHI.roa Signing time: Tue 30 Dec 2025 01:40:13 +0000 ROA not before: Tue 30 Dec 2025 01:40:13 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 24413 IP address blocks: 114.28.201.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1825 (0x721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A Validity Not Before: Dec 30 01:40:13 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0B7FC74355D1BA51D58B0DEE7E8DEE897D755072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:93:c3:4d:09:b4:7d:c2:e8:a6:7a:13:56:81: 60:37:52:8b:fc:a6:98:3a:18:dc:b7:b9:37:6e:b4: 7e:a0:b4:88:c8:4e:cc:95:f2:55:16:2b:e9:01:84: 9a:ff:e4:d1:69:84:fa:b1:e9:ec:f6:4b:e1:a1:99: f8:e2:a3:a5:3c:63:8e:0a:fe:f1:21:b3:2c:d7:1b: d3:e3:d9:c9:4f:20:f4:59:40:d0:f4:32:df:f4:e0: ac:ec:57:e7:f8:8d:c1:f8:e1:12:c9:37:00:a5:4c: 9c:20:69:28:c0:e3:70:1b:94:e0:70:1a:f4:02:6f: 46:3b:8f:5e:d7:f5:92:df:c5:2a:1d:ae:a6:70:60: 54:11:eb:24:09:f1:3f:ff:4f:eb:32:27:77:6d:4e: 66:fe:1a:4c:65:18:74:4c:81:53:45:a2:25:71:c6: 85:64:da:d9:d0:6d:3a:4b:82:66:3d:dd:7b:1b:3a: aa:55:7e:50:4b:f6:9e:4c:8e:49:a7:ee:09:e8:47: af:9b:25:eb:a5:55:6b:0e:37:74:6a:2e:7f:22:4f: 14:16:a4:6b:eb:50:03:d8:e4:8b:82:65:35:51:5d: 34:4e:36:70:10:ac:4e:f0:34:9c:32:67:9f:2e:09: 4e:8b:2b:7c:15:b1:38:be:7e:50:b0:72:2f:b8:e4: ba:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7F:C7:43:55:D1:BA:51:D5:8B:0D:EE:7E:8D:EE:89:7D:75:50:72 X509v3 Authority Key Identifier: keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/C3_HQ1XRulHViw3ufo3uiX11UHI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.28.201.0/24 Signature Algorithm: sha256WithRSAEncryption d1:57:35:f8:2e:95:6f:e1:22:d8:8d:c2:79:55:d6:17:0e:5b: 53:52:cf:d3:06:c1:eb:cc:b6:03:ff:48:2d:13:42:e2:91:2f: 40:b0:2d:84:27:62:06:80:8c:86:80:84:f6:34:28:f6:7d:6f: 8a:d4:aa:de:25:f1:2c:fd:23:a5:bf:86:56:dd:33:87:0d:cd: 74:87:3f:a1:b4:77:0a:54:34:24:b9:29:09:bc:fc:77:78:18: e1:6c:b1:12:c7:16:ea:a5:f3:71:2e:e3:10:02:d1:28:9b:53: 77:4b:e1:6d:ae:67:7d:65:a1:d2:b6:d5:a3:a6:2f:7f:e2:a2: 62:c6:01:50:ba:e0:f5:bc:d7:10:7d:b0:78:2c:fc:65:e3:e2: cc:cb:91:24:40:d5:87:a3:23:30:db:a8:48:22:5c:a0:68:5c: 13:af:33:57:89:c3:63:45:08:bc:ac:f8:28:bb:c2:0a:71:82: 98:de:34:12:40:d9:3c:67:ca:42:75:9e:22:a3:3c:99:eb:ae: fd:3f:7b:6e:ea:c5:17:4b:35:c2:d8:44:a5:b5:ee:c7:66:ad: b9:4f:8b:22:4e:62:2d:7b:37:61:4f:ee:64:c5:cf:2a:e2:dc: b0:67:54:f2:ac:c8:14:ca:f5:c4:c9:52:10:64:32:19:33:81: 0e:04:46:ad -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICByEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTEyMzAw MTQwMTNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDBCN0ZDNzQzNTVEMUJB NTFENThCMERFRTdFOERFRTg5N0Q3NTUwNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD+k8NNCbR9wuimehNWgWA3Uov8ppg6GNy3uTdutH6gtIjITsyV 8lUWK+kBhJr/5NFphPqx6ez2S+Ghmfjio6U8Y44K/vEhsyzXG9Pj2clPIPRZQND0 Mt/04KzsV+f4jcH44RLJNwClTJwgaSjA43AblOBwGvQCb0Y7j17X9ZLfxSodrqZw YFQR6yQJ8T//T+syJ3dtTmb+GkxlGHRMgVNFoiVxxoVk2tnQbTpLgmY93XsbOqpV flBL9p5Mjkmn7gnoR6+bJeulVWsON3RqLn8iTxQWpGvrUAPY5IuCZTVRXTRONnAQ rE7wNJwyZ58uCU6LK3wVsTi+flCwci+45LoVAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUC3/HQ1XRulHViw3ufo3uiX11UHIwHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwL0MzX0hRMVhSdWxIVml3 M3VmbzN1aVgxMVVISS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAByHMkwDQYJKoZIhvcNAQELBQADggEBANFXNfgulW/hItiNwnlV1hcOW1NSz9MG wevMtgP/SC0TQuKRL0CwLYQnYgaAjIaAhPY0KPZ9b4rUqt4l8Sz9I6W/hlbdM4cN zXSHP6G0dwpUNCS5KQm8/Hd4GOFssRLHFuql83Eu4xAC0SibU3dL4W2uZ31lodK2 1aOmL3/iomLGAVC64PW81xB9sHgs/GXj4szLkSRA1YejIzDbqEgiXKBoXBOvM1eJ w2NFCLys+Ci7wgpxgpjeNBJA2TxnykJ1niKjPJnrrv0/e27qxRdLNcLYRKW17sdm rblPiyJOYi17N2FP7mTFzyri3LBnVPKsyBTK9cTJUhBkMhkzgQ4ERq0= -----END CERTIFICATE-----Generated at Mon Jan 19 14:40:07 2026 by rpki-client