This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/aCosFtyNu8FqFuLvZzabKFYzlk4.roa File: aCosFtyNu8FqFuLvZzabKFYzlk4.roa (raw, json) Hash identifier: GJ4A/8yFBR81QEtS8lKSbzPSbRwWafwsQc8OuSIN1YY= Subject key identifier: 68:2A:2C:16:DC:8D:BB:C1:6A:16:E2:EF:67:36:9B:28:56:33:96:4E Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 2445 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/aCosFtyNu8FqFuLvZzabKFYzlk4.roa Signing time: Mon 05 Jan 2026 07:41:29 +0000 ROA not before: Mon 05 Jan 2026 07:41:29 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 135377 IP address blocks: 101.237.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 01:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9285 (0x2445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Jan 5 07:41:29 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=682A2C16DC8DBBC16A16E2EF67369B285633964E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:30:23:15:a4:88:ff:12:79:8d:95:9c:82:ae: 72:67:4a:c8:bd:b2:57:af:43:b1:98:a3:76:78:ba: b8:b7:78:d1:8f:dd:84:18:bd:b6:57:8e:75:18:29: 12:7b:10:f8:54:c6:38:c4:9a:d7:54:e1:44:15:3d: 0f:ec:bc:1b:a0:e0:e7:d3:34:1b:76:72:7a:65:e3: 06:9f:0e:bb:17:84:fa:59:3f:41:df:26:f0:a7:00: 99:d7:5b:75:14:7c:f8:49:88:e8:69:b1:59:3e:ea: bd:9c:ce:ff:68:eb:d7:b6:8c:8a:af:5d:02:1d:64: d1:c6:0e:46:4c:e9:9f:ef:7b:1e:11:92:c6:b0:63: d0:3e:ed:e5:8b:4d:75:a5:ef:5e:c9:9b:1e:42:e8: 4d:be:4d:ab:fc:d6:d2:ab:2a:72:98:dd:39:68:69: 2d:06:79:6c:c7:fc:a9:e3:76:c2:9e:00:b9:2c:31: cc:c6:88:cb:44:6b:fa:b9:e6:b8:b8:a9:0b:2a:74: ef:a1:af:45:2d:ce:13:d6:9c:ad:7b:c5:a0:00:3e: 46:64:4f:68:3f:88:e9:9d:f7:a7:45:c7:6a:96:b9: 48:19:92:81:f3:98:43:7f:ec:99:ec:3b:08:dd:d0: 2f:d0:39:bd:a4:3c:34:47:67:49:03:1f:f2:84:0e: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2A:2C:16:DC:8D:BB:C1:6A:16:E2:EF:67:36:9B:28:56:33:96:4E X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/aCosFtyNu8FqFuLvZzabKFYzlk4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.237.249.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:e5:45:79:77:79:a4:fb:90:ba:3c:f8:66:72:9c:f0:0e:71: 71:18:a9:27:f4:76:ab:36:8b:e8:82:3a:17:9f:17:76:d6:9b: 40:b7:14:3a:75:4f:bd:de:9a:58:a9:d0:ff:2a:e7:7e:d4:f6: 07:be:1e:c3:6c:7b:a5:59:32:f0:0e:76:3c:9d:66:06:11:c4: 12:a1:53:d0:10:d5:0a:e1:cf:03:71:64:d4:05:1e:ca:e5:ad: 6a:52:d8:4b:f7:d3:ec:b3:21:5e:7d:ef:11:10:17:a9:67:64: 0b:f9:9e:64:cd:bf:32:67:e6:11:0d:78:7d:3c:40:75:db:9b: 40:59:23:fd:82:e4:e8:36:fc:98:13:1f:df:26:c5:2e:2d:b0: cb:72:78:cc:4d:b1:0a:84:98:4e:d7:f5:86:64:63:66:d4:cf: 87:57:1f:81:cb:ec:66:fe:77:a6:d8:9b:9e:80:e8:c1:98:75: e7:58:de:c2:0a:a4:41:25:1b:b7:6e:a3:30:a6:51:74:e7:cc: 85:85:05:77:47:96:b4:51:f0:eb:c8:7c:fc:ac:18:c2:88:b2: 04:1a:d1:aa:a8:f7:ed:54:d3:80:03:ea:65:58:79:87:1d:33: 5f:64:de:68:7a:70:34:44:0b:df:ce:33:bf:c9:9c:f5:ec:85: 85:c6:99:13 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICJEUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNjAxMDUw NzQxMjlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDY4MkEyQzE2REM4REJC QzE2QTE2RTJFRjY3MzY5QjI4NTYzMzk2NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnMCMVpIj/EnmNlZyCrnJnSsi9slevQ7GYo3Z4uri3eNGP3YQY vbZXjnUYKRJ7EPhUxjjEmtdU4UQVPQ/svBug4OfTNBt2cnpl4wafDrsXhPpZP0Hf JvCnAJnXW3UUfPhJiOhpsVk+6r2czv9o69e2jIqvXQIdZNHGDkZM6Z/vex4Rksaw Y9A+7eWLTXWl717Jmx5C6E2+Tav81tKrKnKY3TloaS0GeWzH/KnjdsKeALksMczG iMtEa/q55ri4qQsqdO+hr0UtzhPWnK17xaAAPkZkT2g/iOmd96dFx2qWuUgZkoHz mEN/7JnsOwjd0C/QOb2kPDRHZ0kDH/KEDnnBAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUaCosFtyNu8FqFuLvZzabKFYzlk4wHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L2FDb3NGdHlOdThGcUZ1 THZaemFiS0ZZemxrNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABl7fkwDQYJKoZIhvcNAQELBQADggEBAI3lRXl3eaT7kLo8+GZynPAOcXEYqSf0 dqs2i+iCOhefF3bWm0C3FDp1T73emlip0P8q537U9ge+HsNse6VZMvAOdjydZgYR xBKhU9AQ1QrhzwNxZNQFHsrlrWpS2Ev30+yzIV597xEQF6lnZAv5nmTNvzJn5hEN eH08QHXbm0BZI/2C5Og2/JgTH98mxS4tsMtyeMxNsQqEmE7X9YZkY2bUz4dXH4HL 7Gb+d6bYm56A6MGYdedY3sIKpEElG7duozCmUXTnzIWFBXdHlrRR8OvIfPysGMKI sgQa0aqo9+1U04AD6mVYeYcdM19k3mh6cDREC9/OM7/JnPXshYXGmRM= -----END CERTIFICATE-----Generated at Wed Jan 21 01:29:52 2026 by rpki-client