This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/FNQKDse8e8mqUU6Bk7qOGbE5adw.roa File: FNQKDse8e8mqUU6Bk7qOGbE5adw.roa (raw, json) Hash identifier: A7IomSeApdcErJEMUbsMbHlc5vbIWvnAi+TEurCXQjE= Subject key identifier: 14:D4:0A:0E:C7:BC:7B:C9:AA:51:4E:81:93:BA:8E:19:B1:39:69:DC Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A Certificate serial: 071D Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/FNQKDse8e8mqUU6Bk7qOGbE5adw.roa Signing time: Tue 30 Dec 2025 01:40:12 +0000 ROA not before: Tue 30 Dec 2025 01:40:12 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 24413 IP address blocks: 114.28.238.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1821 (0x71d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A Validity Not Before: Dec 30 01:40:12 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=14D40A0EC7BC7BC9AA514E8193BA8E19B13969DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:12:bb:7d:f9:ec:7e:87:82:d9:54:ea:82:2f: 89:32:07:d5:ec:1b:44:53:f7:ea:81:78:3a:ea:2e: cb:74:fa:b5:c9:35:d2:87:4c:1c:f6:9e:bb:91:9c: cf:40:1b:18:d5:17:7e:e6:fe:00:7a:09:71:38:66: af:c0:ea:96:b7:0d:91:46:7a:06:46:b0:ee:69:43: 54:6d:bb:9d:82:1c:07:d4:ba:82:6b:1f:4e:9d:27: 93:2d:d6:37:38:1d:64:67:4b:a5:6b:e7:4d:eb:ac: 9d:9a:73:f7:5c:2f:ff:9a:4b:02:4f:e6:14:69:74: b2:68:42:5b:85:c7:63:28:3b:2e:46:3d:dc:42:0f: 21:d4:a5:08:a9:77:e5:05:68:e2:87:34:e6:21:c3: 25:d2:1c:aa:27:64:4d:e9:d2:a0:b0:15:a8:e6:88: b2:83:d8:83:c5:f3:2f:6a:65:5c:10:47:9d:3f:6e: 3d:76:04:1b:4d:3b:3a:1d:4b:73:c8:ee:20:81:d0: 98:f5:e8:e0:7a:39:c6:03:cb:26:d8:79:08:af:33: a4:f3:10:09:43:40:13:b4:e5:8e:4f:5f:37:79:2d: b9:0c:53:12:e1:3e:71:be:ae:7e:0d:df:9e:5c:cd: ef:7d:05:3a:5b:8a:82:a4:4a:a1:7a:a3:77:48:00: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D4:0A:0E:C7:BC:7B:C9:AA:51:4E:81:93:BA:8E:19:B1:39:69:DC X509v3 Authority Key Identifier: keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/FNQKDse8e8mqUU6Bk7qOGbE5adw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.28.238.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:71:7c:ab:be:45:73:18:4d:4e:83:9a:60:05:84:5c:5c:26: 86:ab:f2:b5:d2:de:b4:9a:06:b3:65:28:94:f5:e8:c2:4a:3e: 0d:d5:4a:0b:37:8f:a7:ae:ae:b8:a5:25:d6:8e:48:11:ae:08: 22:65:dd:9d:df:ba:8c:d8:24:2d:f7:32:3f:22:b7:aa:09:00: e5:20:8f:fc:e4:db:b3:f3:cb:33:58:b9:3b:e3:8f:61:4f:77: 69:03:3a:42:87:33:a1:de:84:a7:2e:25:03:cd:88:16:94:5c: 79:57:2e:c7:9d:e1:ab:5e:19:43:52:b0:37:7b:eb:66:5a:54: 24:d0:9e:a6:c4:61:04:54:fe:3d:d2:eb:d6:96:fe:93:9f:55: 3d:b2:8d:60:3b:db:bc:ce:e6:08:2b:f3:5b:f0:0c:58:56:d2: f5:7b:72:e0:23:40:be:05:2b:13:48:cf:01:30:f0:77:d4:d3: 86:43:14:9c:ed:d1:89:81:39:15:56:40:27:93:4c:dd:ea:3a: 62:c9:c8:f9:21:e5:7f:d6:3c:c7:04:2e:27:d0:89:88:71:09: 84:b4:46:ed:8a:34:71:89:75:a8:e5:48:57:f8:b2:6c:b0:81: 14:58:68:8e:e5:d3:7d:01:df:f7:8f:71:f7:ce:f5:7d:62:e1: af:30:e4:31 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTEyMzAw MTQwMTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDE0RDQwQTBFQzdCQzdC QzlBQTUxNEU4MTkzQkE4RTE5QjEzOTY5REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlErt9+ex+h4LZVOqCL4kyB9XsG0RT9+qBeDrqLst0+rXJNdKH TBz2nruRnM9AGxjVF37m/gB6CXE4Zq/A6pa3DZFGegZGsO5pQ1Rtu52CHAfUuoJr H06dJ5Mt1jc4HWRnS6Vr503rrJ2ac/dcL/+aSwJP5hRpdLJoQluFx2MoOy5GPdxC DyHUpQipd+UFaOKHNOYhwyXSHKonZE3p0qCwFajmiLKD2IPF8y9qZVwQR50/bj12 BBtNOzodS3PI7iCB0Jj16OB6OcYDyybYeQivM6TzEAlDQBO05Y5PXzd5LbkMUxLh PnG+rn4N355cze99BTpbioKkSqF6o3dIAFALAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUFNQKDse8e8mqUU6Bk7qOGbE5adwwHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwL0ZOUUtEc2U4ZThtcVVV NkJrN3FPR2JFNWFkdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAByHO4wDQYJKoZIhvcNAQELBQADggEBAHpxfKu+RXMYTU6DmmAFhFxcJoar8rXS 3rSaBrNlKJT16MJKPg3VSgs3j6eurrilJdaOSBGuCCJl3Z3fuozYJC33Mj8it6oJ AOUgj/zk27PzyzNYuTvjj2FPd2kDOkKHM6HehKcuJQPNiBaUXHlXLsed4ateGUNS sDd762ZaVCTQnqbEYQRU/j3S69aW/pOfVT2yjWA727zO5ggr81vwDFhW0vV7cuAj QL4FKxNIzwEw8HfU04ZDFJzt0YmBORVWQCeTTN3qOmLJyPkh5X/WPMcELifQiYhx CYS0Ru2KNHGJdajlSFf4smywgRRYaI7l030B3/ePcffO9X1i4a8w5DE= -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:26 2026 by rpki-client