This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/OPumY0wkkoySKD34I44cw6wL1Lo.roa File: OPumY0wkkoySKD34I44cw6wL1Lo.roa (raw, json) Hash identifier: 10NRZYxgZIC01xqX2iSTpUqwOvr9lWyx0kypQoxRqHY= Subject key identifier: 38:FB:A6:63:4C:24:92:8C:92:28:3D:F8:23:8E:1C:C3:AC:0B:D4:BA Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A Certificate serial: 0714 Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/OPumY0wkkoySKD34I44cw6wL1Lo.roa Signing time: Tue 30 Dec 2025 01:40:10 +0000 ROA not before: Tue 30 Dec 2025 01:40:10 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 142132 IP address blocks: 114.28.195.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 11:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1812 (0x714) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A Validity Not Before: Dec 30 01:40:10 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=38FBA6634C24928C92283DF8238E1CC3AC0BD4BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3c:4f:91:70:28:14:5c:36:dd:11:ab:9e:06: 53:1e:33:c8:0f:ef:60:e5:35:14:92:38:3e:00:37: 1f:a6:bb:25:d2:3d:f4:0d:8d:60:4d:be:4b:e1:cb: 03:dd:40:bf:c2:a8:73:be:97:e2:fa:22:c9:f4:ae: a1:f8:d3:93:5a:60:4c:6e:cb:77:f1:66:d3:1c:7d: c2:33:fa:b0:c4:95:d8:80:4f:0d:dd:87:f0:86:6d: 05:6a:d5:94:79:f5:fa:5f:06:e1:71:ba:7a:45:b1: bd:c9:0d:c1:6d:07:cd:3f:a8:cc:65:c1:f7:9a:23: e3:3b:4f:f6:44:19:9f:96:e2:ae:a2:c2:b9:82:bf: 5f:95:a2:3c:04:ae:e3:2d:9d:3a:39:4b:3f:7f:93: 3c:07:6a:bf:1c:09:b9:80:14:69:3b:ad:0b:df:f8: ba:f3:08:a5:d9:51:f1:1c:e4:a3:0c:e3:62:b2:ff: 81:9a:ce:58:42:ac:3c:94:21:3d:34:80:8f:df:d3: 3e:87:d4:59:aa:61:02:14:15:59:86:a1:bc:ba:5a: fc:81:65:cc:a9:3e:f2:81:31:29:ad:eb:39:82:46: cc:a0:db:59:05:fe:2e:da:69:d8:82:09:49:53:ab: 27:e3:1a:c9:6f:6d:ee:3f:c9:21:46:a6:21:24:b4: 8d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FB:A6:63:4C:24:92:8C:92:28:3D:F8:23:8E:1C:C3:AC:0B:D4:BA X509v3 Authority Key Identifier: keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/OPumY0wkkoySKD34I44cw6wL1Lo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.28.195.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:67:be:00:18:07:ae:e6:c7:91:09:f1:8e:f3:ed:04:5a:a3: f2:6f:68:d3:42:27:d2:4c:3f:c8:87:ad:27:73:4e:f0:f8:46: 85:70:cd:60:b4:6e:6d:30:ac:84:b7:a0:e3:44:c2:77:17:1c: 59:e6:f1:06:d8:b8:7e:36:2d:c7:30:f5:b3:8f:8f:e4:48:92: 3c:f5:53:1e:5b:8a:7d:c3:c1:da:e5:26:6b:e8:70:6d:f9:1e: 83:ec:2d:d9:45:d0:05:9c:05:7e:9c:17:35:4b:3f:0b:f2:77: 85:34:7f:bf:e4:50:97:89:c5:0a:91:e6:bd:5d:e3:2e:d6:e8: f4:97:a9:a1:d3:1c:1d:8b:ba:f3:cf:45:bd:41:d8:4f:98:b8: c5:2a:c0:1e:2e:72:fe:36:4a:65:5a:15:38:fe:14:65:0b:89: 11:fe:67:10:ae:b4:e8:de:ae:2f:90:a0:6e:9f:96:0b:f6:9a: c5:c3:c2:2f:f9:fb:98:dd:fd:17:e7:b2:7e:44:cf:72:38:a1: 13:32:62:9b:8d:30:e5:6a:16:65:1b:7b:55:c8:1e:ad:6a:21: 45:c6:35:46:f7:a6:e6:78:97:94:19:d6:6c:e5:17:6f:29:07: a3:ef:41:99:a2:db:9b:b6:3b:0b:ec:d2:40:79:16:67:57:22: 63:13:74:92 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICBxQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTEyMzAw MTQwMTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDM4RkJBNjYzNEMyNDky OEM5MjI4M0RGODIzOEUxQ0MzQUMwQkQ0QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYPE+RcCgUXDbdEaueBlMeM8gP72DlNRSSOD4ANx+muyXSPfQN jWBNvkvhywPdQL/CqHO+l+L6Isn0rqH405NaYExuy3fxZtMcfcIz+rDEldiATw3d h/CGbQVq1ZR59fpfBuFxunpFsb3JDcFtB80/qMxlwfeaI+M7T/ZEGZ+W4q6iwrmC v1+VojwEruMtnTo5Sz9/kzwHar8cCbmAFGk7rQvf+LrzCKXZUfEc5KMM42Ky/4Ga zlhCrDyUIT00gI/f0z6H1FmqYQIUFVmGoby6WvyBZcypPvKBMSmt6zmCRsyg21kF /i7aadiCCUlTqyfjGslvbe4/ySFGpiEktI3tAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUOPumY0wkkoySKD34I44cw6wL1LowHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwL09QdW1ZMHdra295U0tE MzRJNDRjdzZ3TDFMby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAByHMMwDQYJKoZIhvcNAQELBQADggEBADxnvgAYB67mx5EJ8Y7z7QRao/JvaNNC J9JMP8iHrSdzTvD4RoVwzWC0bm0wrIS3oONEwncXHFnm8QbYuH42Lccw9bOPj+RI kjz1Ux5bin3DwdrlJmvocG35HoPsLdlF0AWcBX6cFzVLPwvyd4U0f7/kUJeJxQqR 5r1d4y7W6PSXqaHTHB2LuvPPRb1B2E+YuMUqwB4ucv42SmVaFTj+FGULiRH+ZxCu tOjeri+QoG6flgv2msXDwi/5+5jd/Rfnsn5Ez3I4oRMyYpuNMOVqFmUbe1XIHq1q IUXGNUb3puZ4l5QZ1mzlF28pB6PvQZmi25u2Owvs0kB5FmdXImMTdJI= -----END CERTIFICATE-----Generated at Mon Jan 19 11:23:46 2026 by rpki-client