This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/fuqqQlfXDFfFChCl402IPl2DWXU.roa File: fuqqQlfXDFfFChCl402IPl2DWXU.roa (raw, json) Hash identifier: 9ZAIYgLNh8G/iCKWcyV55uJUfg/3xWNx1EyhxwazZxE= Subject key identifier: 7E:EA:AA:42:57:D7:0C:57:C5:0A:10:A5:E3:4D:88:3E:5D:83:59:75 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 244D Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/fuqqQlfXDFfFChCl402IPl2DWXU.roa Signing time: Mon 05 Jan 2026 07:45:51 +0000 ROA not before: Mon 05 Jan 2026 07:45:51 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 135377 IP address blocks: 42.240.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 01:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9293 (0x244d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Jan 5 07:45:51 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7EEAAA4257D70C57C50A10A5E34D883E5D835975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6a:97:83:71:d2:54:ce:da:18:f5:51:d0:f5: 18:6e:7f:56:5a:b0:09:15:bc:f3:8a:0e:fb:62:47: 4b:bf:f9:52:e9:03:28:23:d5:73:5c:35:7a:bd:21: 6d:67:8e:2d:50:d8:ae:9c:f3:f7:32:09:41:5f:24: ac:da:f7:92:12:42:2e:69:97:f0:5e:dd:94:3a:ca: 89:15:11:2a:fd:f1:05:04:bb:0e:a9:0c:c8:5e:81: f0:04:cf:dd:99:e6:89:84:bd:65:80:0a:7c:65:93: 33:f7:0d:4c:f1:3a:b9:31:22:9a:b6:bc:a5:ba:24: 55:a4:86:d8:a4:b9:0f:3a:77:10:d2:1c:70:71:11: e8:92:7e:b2:cf:24:6e:61:f8:c9:ef:32:2d:37:c8: 4d:41:c8:ea:35:dc:b8:14:94:93:27:07:fa:93:83: c9:09:71:2f:f2:4c:fc:eb:63:ef:28:4d:d3:a4:21: ae:89:f6:fe:99:2c:81:5b:3c:f1:c3:83:e7:b2:c7: 89:db:b7:0f:b7:40:27:cb:0a:39:86:91:fa:15:38: a8:ad:dc:af:fe:8f:9e:06:46:6e:29:15:97:7a:0c: 46:8a:e8:fe:85:0d:f9:2b:c0:9b:4f:b8:19:1b:82: 7f:cf:dd:72:0a:c0:a9:c1:45:99:93:ab:b2:fe:cf: 8c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EA:AA:42:57:D7:0C:57:C5:0A:10:A5:E3:4D:88:3E:5D:83:59:75 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/fuqqQlfXDFfFChCl402IPl2DWXU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.240.250.0/24 Signature Algorithm: sha256WithRSAEncryption 27:33:d2:65:d5:82:2c:51:71:03:09:e1:a9:40:51:8e:d4:da: 5e:bf:ed:14:fd:e7:d8:83:75:3f:93:82:86:a0:1c:f8:f7:b6: 03:72:02:bd:74:12:5a:43:bb:1a:27:d6:94:40:c6:1d:57:cc: 19:23:1b:a3:d7:8f:9d:48:9b:87:d1:4c:7b:44:0c:94:91:a8: 2c:d0:2c:aa:f6:d3:24:fd:f3:59:9f:41:28:f7:18:c4:29:c5: 91:d4:05:b1:62:00:59:d7:a6:72:32:77:5f:26:33:df:b3:28: 59:34:2e:55:14:ea:72:e4:b0:3c:14:17:60:17:8a:54:72:59: 74:f5:8d:64:b1:74:c7:88:e0:4b:14:1a:a4:11:17:c6:f0:0f: 84:53:55:ee:da:94:71:af:69:8b:7c:fd:b4:d9:fc:30:84:e4: c2:37:82:ba:8c:58:c6:ce:78:bd:dd:ba:f8:2c:f8:37:a3:cf: 94:0e:81:28:8f:f0:04:3a:52:69:80:2b:0a:a1:07:7f:e0:a8: dd:c1:02:c5:26:49:fe:1f:f6:3f:14:f0:6b:b1:80:d8:d5:14: fb:27:46:6d:5d:6a:e0:af:53:86:b0:e5:2d:93:d9:e6:76:7c: 57:ed:ce:42:c3:6b:cb:a7:20:50:86:42:90:c4:76:f6:c6:64: 4f:d2:90:0c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICJE0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNjAxMDUw NzQ1NTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDdFRUFBQTQyNTdENzBD NTdDNTBBMTBBNUUzNEQ4ODNFNUQ4MzU5NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdapeDcdJUztoY9VHQ9Rhuf1ZasAkVvPOKDvtiR0u/+VLpAygj 1XNcNXq9IW1nji1Q2K6c8/cyCUFfJKza95ISQi5pl/Be3ZQ6yokVESr98QUEuw6p DMhegfAEz92Z5omEvWWACnxlkzP3DUzxOrkxIpq2vKW6JFWkhtikuQ86dxDSHHBx EeiSfrLPJG5h+MnvMi03yE1ByOo13LgUlJMnB/qTg8kJcS/yTPzrY+8oTdOkIa6J 9v6ZLIFbPPHDg+eyx4nbtw+3QCfLCjmGkfoVOKit3K/+j54GRm4pFZd6DEaK6P6F DfkrwJtPuBkbgn/P3XIKwKnBRZmTq7L+z4wtAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUfuqqQlfXDFfFChCl402IPl2DWXUwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L2Z1cXFRbGZYREZmRkNo Q2w0MDJJUGwyRFdYVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAq8PowDQYJKoZIhvcNAQELBQADggEBACcz0mXVgixRcQMJ4alAUY7U2l6/7RT9 59iDdT+TgoagHPj3tgNyAr10ElpDuxon1pRAxh1XzBkjG6PXj51Im4fRTHtEDJSR qCzQLKr20yT981mfQSj3GMQpxZHUBbFiAFnXpnIyd18mM9+zKFk0LlUU6nLksDwU F2AXilRyWXT1jWSxdMeI4EsUGqQRF8bwD4RTVe7alHGvaYt8/bTZ/DCE5MI3grqM WMbOeL3duvgs+Dejz5QOgSiP8AQ6UmmAKwqhB3/gqN3BAsUmSf4f9j8U8GuxgNjV FPsnRm1dauCvU4aw5S2T2eZ2fFftzkLDa8unIFCGQpDEdvbGZE/SkAw= -----END CERTIFICATE-----Generated at Wed Jan 21 01:29:53 2026 by rpki-client