This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/w5wjaYSmDIKh9bXq7G-aCoCOBXk.roa File: w5wjaYSmDIKh9bXq7G-aCoCOBXk.roa (raw, json) Hash identifier: 5+jVn2yfM6rgkogNZKIa0YZRh7DoZsF5/IJB9rxbJIQ= Subject key identifier: C3:9C:23:69:84:A6:0C:82:A1:F5:B5:EA:EC:6F:9A:0A:80:8E:05:79 Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A Certificate serial: 071A Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/w5wjaYSmDIKh9bXq7G-aCoCOBXk.roa Signing time: Tue 30 Dec 2025 01:40:11 +0000 ROA not before: Tue 30 Dec 2025 01:40:11 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 142132 IP address blocks: 114.28.218.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 11:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1818 (0x71a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A Validity Not Before: Dec 30 01:40:11 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C39C236984A60C82A1F5B5EAEC6F9A0A808E0579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:85:47:30:ac:6b:1a:b5:a0:6b:ed:ec:e7:b8: 52:47:f4:95:55:ac:98:cd:ab:fa:c8:18:12:93:da: 2b:ad:34:b2:cc:64:52:e1:ea:67:73:ec:24:6e:97: aa:ff:29:2c:72:1c:e5:7e:84:ed:3a:86:b9:1c:7b: 97:2b:13:e6:72:6a:39:2f:b5:a9:d9:cc:80:23:7b: 2d:55:b1:12:16:be:6f:64:ef:b9:80:27:86:61:0c: c5:38:40:8c:06:2b:f6:59:51:8b:54:18:a0:fe:ce: 31:5c:b8:2f:51:0f:a4:31:b6:67:1e:31:2d:d0:2c: 3f:3d:73:c4:5c:82:1e:84:f9:8f:4a:dc:0a:82:5b: 0e:8b:b3:9b:05:fb:df:59:43:61:6a:52:67:fe:37: ef:41:d8:b0:dc:23:26:ac:96:70:04:2f:f2:e2:33: 92:42:f7:ed:a2:2c:9f:b7:ca:bb:8f:58:51:25:8a: ac:60:d9:e9:0e:a5:00:c0:a6:b7:b5:3b:1c:89:0d: c1:39:dc:40:7e:76:0f:35:66:80:ea:0f:81:07:14: df:83:b9:e9:15:1c:72:31:a1:1b:d0:db:71:3c:f2: 34:b3:c1:c9:a5:06:ef:ba:55:f4:bb:35:c5:6f:1c: 6f:4a:3d:bd:fa:74:31:a0:5e:64:c6:c9:b5:f1:2a: cc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9C:23:69:84:A6:0C:82:A1:F5:B5:EA:EC:6F:9A:0A:80:8E:05:79 X509v3 Authority Key Identifier: keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/w5wjaYSmDIKh9bXq7G-aCoCOBXk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.28.218.0/23 Signature Algorithm: sha256WithRSAEncryption 25:b2:a6:d9:15:35:28:54:f0:42:b3:e5:04:da:7d:d7:c4:0c: ab:16:5e:29:1a:a2:3a:44:c6:00:cb:e4:eb:c5:7f:ba:d5:21: d3:94:9d:4b:ec:01:5a:31:4f:87:c2:fd:6f:8a:02:ca:71:ba: d1:21:da:11:78:f6:fe:1c:d0:33:1a:a7:49:ae:f0:42:33:ba: 21:d3:b3:6f:d1:10:1f:3b:6a:ee:f3:25:21:10:27:f1:55:69: 5a:6f:ad:a1:20:dd:76:c9:7f:ef:0d:92:db:b3:94:a8:b1:f5: 8b:d6:c2:65:76:1b:3f:9a:03:02:4f:07:29:ec:9d:0d:4d:7f: b5:f1:b0:aa:10:ed:b2:a2:db:6c:92:6f:38:f5:23:e7:29:6a: 0e:96:7d:09:37:03:9d:88:e7:22:1d:d7:69:cd:78:79:83:b4: fb:87:ef:7a:a9:8b:c2:21:4b:e0:7f:24:82:22:1f:0c:b8:78: 35:fc:88:c9:88:1f:cd:4b:5e:43:b7:d9:f2:88:71:78:8c:64: 65:2a:a9:06:c6:43:1e:b5:98:cc:6a:0d:14:30:06:e6:d6:22: 76:e4:38:7b:a7:5c:97:88:b8:79:3d:23:23:19:3e:f4:7a:88: 8d:1b:f9:ee:b1:81:21:23:a5:87:36:9e:18:37:58:b1:3d:d3: fb:40:fc:d9 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICBxowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTEyMzAw MTQwMTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEMzOUMyMzY5ODRBNjBD ODJBMUY1QjVFQUVDNkY5QTBBODA4RTA1NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRhUcwrGsataBr7eznuFJH9JVVrJjNq/rIGBKT2iutNLLMZFLh 6mdz7CRul6r/KSxyHOV+hO06hrkce5crE+ZyajkvtanZzIAjey1VsRIWvm9k77mA J4ZhDMU4QIwGK/ZZUYtUGKD+zjFcuC9RD6QxtmceMS3QLD89c8Rcgh6E+Y9K3AqC Ww6Ls5sF+99ZQ2FqUmf+N+9B2LDcIyaslnAEL/LiM5JC9+2iLJ+3yruPWFEliqxg 2ekOpQDApre1OxyJDcE53EB+dg81ZoDqD4EHFN+DuekVHHIxoRvQ23E88jSzwcml Bu+6VfS7NcVvHG9KPb36dDGgXmTGybXxKswjAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUw5wjaYSmDIKh9bXq7G+aCoCOBXkwHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwL3c1d2phWVNtRElLaDli WHE3Ry1hQ29DT0JYay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFyHNowDQYJKoZIhvcNAQELBQADggEBACWyptkVNShU8EKz5QTafdfEDKsWXika ojpExgDL5OvFf7rVIdOUnUvsAVoxT4fC/W+KAspxutEh2hF49v4c0DMap0mu8EIz uiHTs2/REB87au7zJSEQJ/FVaVpvraEg3XbJf+8NktuzlKix9YvWwmV2Gz+aAwJP BynsnQ1Nf7XxsKoQ7bKi22ySbzj1I+cpag6WfQk3A52I5yId12nNeHmDtPuH73qp i8IhS+B/JIIiHwy4eDX8iMmIH81LXkO32fKIcXiMZGUqqQbGQx61mMxqDRQwBubW InbkOHunXJeIuHk9IyMZPvR6iI0b+e6xgSEjpYc2nhg3WLE90/tA/Nk= -----END CERTIFICATE-----Generated at Mon Jan 19 11:23:53 2026 by rpki-client