This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/242/7KhjyFArIahfZqUppN39B2U8uWw.roa File: 7KhjyFArIahfZqUppN39B2U8uWw.roa (raw, json) Hash identifier: 9Tt4efQa83mrdmNGrnz9HAzUOii4WtxIiWodw7TJf8k= Subject key identifier: EC:A8:63:C8:50:2B:21:A8:5F:66:A5:29:A4:DD:FD:07:65:3C:B9:6C Certificate issuer: /CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA Certificate serial: 199F Authority key identifier: 0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/7KhjyFArIahfZqUppN39B2U8uWw.roa Signing time: Fri 16 Jan 2026 02:10:32 +0000 ROA not before: Fri 16 Jan 2026 02:10:32 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 37963 IP address blocks: 157.119.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6559 (0x199f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA Validity Not Before: Jan 16 02:10:32 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=ECA863C8502B21A85F66A529A4DDFD07653CB96C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:35:75:01:56:8a:9b:2b:26:1e:7a:c1:7c:ba: 1e:58:1e:22:9a:55:12:51:40:14:1c:a7:81:cb:93: 27:b7:8d:8c:82:a3:4d:ba:94:69:3a:51:56:df:86: 5b:32:e8:85:6c:1f:57:b8:c0:98:fe:b4:d2:0d:18: f7:af:9b:cb:80:ca:de:52:be:73:9b:14:92:65:7f: 6f:3c:11:ce:1d:2a:c6:95:4d:8f:03:4f:fa:50:ea: 26:cf:ce:25:57:e0:b7:3d:ed:94:9d:86:0f:da:fe: 41:d8:23:6e:a4:d5:af:7c:50:e2:f9:93:85:eb:59: 9b:03:96:50:e5:2f:d1:93:21:00:be:31:6c:53:b0: b2:0f:fe:a8:76:87:54:85:37:8a:0b:52:45:b3:fd: c8:d2:ad:8c:c5:0e:ac:77:2d:3e:41:7c:43:90:38: ba:a7:96:77:69:8d:94:19:4b:9c:be:3d:47:7a:65: 32:28:d3:cb:c5:23:d4:ea:3d:82:b8:11:08:40:a7: fb:83:02:ca:77:f9:aa:1f:26:3d:fa:e6:02:b3:40: 37:97:a9:30:d9:31:df:c5:30:9b:3b:1e:5b:40:42: 28:f5:8d:b1:2c:49:64:76:14:79:5c:7b:98:84:e1: 99:a0:15:56:3c:f3:d3:32:70:9d:ff:f7:4d:56:63: aa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A8:63:C8:50:2B:21:A8:5F:66:A5:29:A4:DD:FD:07:65:3C:B9:6C X509v3 Authority Key Identifier: keyid:0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/7KhjyFArIahfZqUppN39B2U8uWw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.119.240.0/22 Signature Algorithm: sha256WithRSAEncryption b9:48:31:a7:8b:da:25:bf:4f:8d:88:c9:e1:48:cc:85:31:2d: 86:ff:a7:06:82:e4:b4:9d:8f:5a:60:37:e5:43:cb:20:4c:97: a5:2d:d3:56:2c:0b:f7:ad:f4:bf:07:19:e0:ec:f6:e9:d5:28: d2:a9:5d:7b:79:87:68:52:2e:6e:8f:13:fb:6d:ec:e2:b0:db: c1:97:a1:a7:9a:12:75:0e:cf:9e:dc:a9:f7:8e:e7:38:cf:6f: b5:24:ab:32:91:53:64:70:e8:3e:81:9a:5d:20:04:7f:a8:b3: 84:82:9a:2b:64:b8:47:c0:58:29:e3:5e:e7:16:5e:07:62:0f: dd:a7:2f:1a:5c:07:b6:27:92:99:4f:e7:a5:27:cf:f3:56:eb: 0b:f8:09:29:6e:7b:8f:a3:c9:f8:c2:63:f4:35:6e:df:8d:a5: a3:24:f5:5e:a7:73:a3:19:7f:13:2f:e3:46:e8:1f:03:7b:24: 2a:d0:84:bb:60:9f:2f:c6:cb:6e:77:3f:d4:7b:c1:c1:a4:3e: 93:12:29:33:57:94:4f:b7:69:01:a9:2a:43:bb:ae:25:49:57: 48:c7:02:f4:8e:bd:d4:2a:12:a7:df:a7:d6:d3:12:ba:3c:37: af:6e:1a:03:2c:22:44:08:b2:b0:ab:c1:00:cb:c8:0d:0e:f5: 6d:8f:1a:a8 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGZ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE2 Rjk3MkQyNDA3OEY4OTA4OEVEMTEwQTI2RENERjkwQTlFQkNFQTAeFw0yNjAxMTYw MjEwMzJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEVDQTg2M0M4NTAyQjIx QTg1RjY2QTUyOUE0RERGRDA3NjUzQ0I5NkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNNXUBVoqbKyYeesF8uh5YHiKaVRJRQBQcp4HLkye3jYyCo026 lGk6UVbfhlsy6IVsH1e4wJj+tNINGPevm8uAyt5SvnObFJJlf288Ec4dKsaVTY8D T/pQ6ibPziVX4Lc97ZSdhg/a/kHYI26k1a98UOL5k4XrWZsDllDlL9GTIQC+MWxT sLIP/qh2h1SFN4oLUkWz/cjSrYzFDqx3LT5BfEOQOLqnlndpjZQZS5y+PUd6ZTIo 08vFI9TqPYK4EQhAp/uDAsp3+aofJj365gKzQDeXqTDZMd/FMJs7HltAQij1jbEs SWR2FHlce5iE4ZmgFVY889MycJ3/901WY6rrAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU7KhjyFArIahfZqUppN39B2U8uWwwHwYDVR0jBBgwFoAUCm+XLSQHj4kIjtEQ om3N+QqevOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQy L0NtLVhMU1FIajRrSWp0RVFvbTNOLVFxZXZPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvQ20tWExTUUhqNGtJanRFUW9tM04tUXFldk9vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQyLzdLaGp5RkFySWFoZlpx VXBwTjM5QjJVOHVXdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAKdd/AwDQYJKoZIhvcNAQELBQADggEBALlIMaeL2iW/T42IyeFIzIUxLYb/pwaC 5LSdj1pgN+VDyyBMl6Ut01YsC/et9L8HGeDs9unVKNKpXXt5h2hSLm6PE/tt7OKw 28GXoaeaEnUOz57cqfeO5zjPb7UkqzKRU2Rw6D6Bml0gBH+os4SCmitkuEfAWCnj XucWXgdiD92nLxpcB7YnkplP56Unz/NW6wv4CSlue4+jyfjCY/Q1bt+NpaMk9V6n c6MZfxMv40boHwN7JCrQhLtgny/Gy253P9R7wcGkPpMSKTNXlE+3aQGpKkO7riVJ V0jHAvSOvdQqEqffp9bTEro8N69uGgMsIkQIsrCrwQDLyA0O9W2PGqg= -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:31 2026 by rpki-client