This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/bNziSzEGt8Lf90AzygaeMPzyS7A.roa File: bNziSzEGt8Lf90AzygaeMPzyS7A.roa (raw, json) Hash identifier: S0VrOUgqcZVPOS0ZVPA2eNzDjUDwCIGIyV2iDeTjIdA= Subject key identifier: 6C:DC:E2:4B:31:06:B7:C2:DF:F7:40:33:CA:06:9E:30:FC:F2:4B:B0 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 2449 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/bNziSzEGt8Lf90AzygaeMPzyS7A.roa Signing time: Mon 05 Jan 2026 07:44:17 +0000 ROA not before: Mon 05 Jan 2026 07:44:17 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 135377 IP address blocks: 101.237.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 01:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9289 (0x2449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Jan 5 07:44:17 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=6CDCE24B3106B7C2DFF74033CA069E30FCF24BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:27:e9:36:05:92:3e:2f:25:af:44:c5:9f:39: 3f:bd:0b:33:06:e1:aa:4b:4c:5d:a1:52:7e:61:5f: 21:b9:07:f2:2a:b3:70:30:8c:16:5b:26:ee:a7:48: 83:29:9f:e3:df:eb:29:31:56:be:70:38:51:6f:9e: 81:b2:95:c9:a8:c0:0f:a0:a7:57:51:94:76:bd:eb: 5b:06:b2:ca:70:31:99:7b:b1:f3:79:44:50:f4:80: 99:a6:ec:39:7c:3c:af:69:b4:80:fc:39:77:e9:95: 11:8e:3e:36:ce:fb:f3:37:f3:f5:58:d4:53:06:01: 01:7e:5b:7e:a0:39:6d:44:de:b3:13:b4:bd:3d:09: 8f:9d:db:85:fe:76:ee:6d:af:92:0c:a3:48:0f:e2: 7a:2f:15:0c:d3:75:89:9e:08:79:96:cc:cb:c5:da: 8e:4c:69:f7:ed:39:99:bb:6f:3d:be:9b:1d:b9:85: 63:51:40:11:62:12:5b:d6:c0:cc:5e:06:76:8a:17: ce:8c:72:b0:b8:1e:10:bc:a8:dd:fc:16:80:40:56: d8:7e:ac:68:42:bd:4c:c4:1d:78:c1:27:5e:05:7d: 93:e4:29:65:db:17:12:8d:82:d6:27:0d:c0:f1:74: a2:37:ae:e4:7a:bc:57:a0:7c:53:71:46:69:75:22: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DC:E2:4B:31:06:B7:C2:DF:F7:40:33:CA:06:9E:30:FC:F2:4B:B0 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/bNziSzEGt8Lf90AzygaeMPzyS7A.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.237.251.0/24 Signature Algorithm: sha256WithRSAEncryption 09:8e:13:bc:b4:dc:4d:9b:bd:81:20:f2:eb:3b:21:15:78:aa: de:54:24:fc:50:5c:a5:93:b2:e3:45:91:1e:49:21:eb:37:4d: 62:88:c8:c3:a5:77:1a:05:d1:92:f4:ad:f4:24:d7:2b:dd:3d: 2d:73:8a:b3:a6:49:fd:fe:28:3d:20:c0:fa:e5:97:6e:58:ea: 7f:3b:be:a3:0e:82:7a:6f:11:bb:d6:57:cf:59:d1:c9:f7:54: ed:9d:20:88:78:01:44:41:4e:40:d9:32:39:60:25:17:8e:bc: f9:71:5d:5b:6d:fa:1d:1a:25:7d:ee:fe:ac:d8:99:0a:03:87: 92:2b:57:b6:78:80:65:e0:53:ab:3b:73:e6:85:74:02:fe:ab: 92:2b:6e:45:d3:91:42:5a:7c:c6:dc:cb:9f:0b:2c:29:22:89: d0:0b:e3:6a:e1:0b:71:2f:a4:b0:80:b1:2b:49:27:1d:85:33: e0:26:ca:27:81:04:33:b4:1b:6f:45:ea:3a:eb:e7:bc:57:5c: d9:b5:7e:c8:12:55:a3:9b:87:21:e9:96:48:f5:5c:13:f5:c8: 4d:fb:ef:f1:25:86:40:b5:63:27:60:08:22:25:41:60:a0:11: 04:6a:c8:55:3c:13:2d:cb:40:2a:29:cc:8f:62:6d:3d:b7:04: 04:1b:9c:7d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICJEkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNjAxMDUw NzQ0MTdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDZDRENFMjRCMzEwNkI3 QzJERkY3NDAzM0NBMDY5RTMwRkNGMjRCQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9J+k2BZI+LyWvRMWfOT+9CzMG4apLTF2hUn5hXyG5B/Iqs3Aw jBZbJu6nSIMpn+Pf6ykxVr5wOFFvnoGylcmowA+gp1dRlHa961sGsspwMZl7sfN5 RFD0gJmm7Dl8PK9ptID8OXfplRGOPjbO+/M38/VY1FMGAQF+W36gOW1E3rMTtL09 CY+d24X+du5tr5IMo0gP4novFQzTdYmeCHmWzMvF2o5MafftOZm7bz2+mx25hWNR QBFiElvWwMxeBnaKF86McrC4HhC8qN38FoBAVth+rGhCvUzEHXjBJ14FfZPkKWXb FxKNgtYnDcDxdKI3ruR6vFegfFNxRml1IkmbAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUbNziSzEGt8Lf90AzygaeMPzyS7AwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L2JOemlTekVHdDhMZjkw QXp5Z2FlTVB6eVM3QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABl7fswDQYJKoZIhvcNAQELBQADggEBAAmOE7y03E2bvYEg8us7IRV4qt5UJPxQ XKWTsuNFkR5JIes3TWKIyMOldxoF0ZL0rfQk1yvdPS1zirOmSf3+KD0gwPrll25Y 6n87vqMOgnpvEbvWV89Z0cn3VO2dIIh4AURBTkDZMjlgJReOvPlxXVtt+h0aJX3u /qzYmQoDh5IrV7Z4gGXgU6s7c+aFdAL+q5IrbkXTkUJafMbcy58LLCkiidAL42rh C3EvpLCAsStJJx2FM+AmyieBBDO0G29F6jrr57xXXNm1fsgSVaObhyHplkj1XBP1 yE377/ElhkC1YydgCCIlQWCgEQRqyFU8Ey3LQCopzI9ibT23BAQbnH0= -----END CERTIFICATE-----Generated at Wed Jan 21 01:29:52 2026 by rpki-client