This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/242/AKNyCIbrTIx6gqAV6a5tQrFYrPo.roa File: AKNyCIbrTIx6gqAV6a5tQrFYrPo.roa (raw, json) Hash identifier: dA337WQUV0b/ikW/HF9ddxaiuctveKDFYo10YnqO8bE= Subject key identifier: 00:A3:72:08:86:EB:4C:8C:7A:82:A0:15:E9:AE:6D:42:B1:58:AC:FA Certificate issuer: /CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA Certificate serial: 19A1 Authority key identifier: 0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/AKNyCIbrTIx6gqAV6a5tQrFYrPo.roa Signing time: Fri 16 Jan 2026 02:11:26 +0000 ROA not before: Fri 16 Jan 2026 02:11:26 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 37963 IP address blocks: 103.216.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6561 (0x19a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA Validity Not Before: Jan 16 02:11:26 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=00A3720886EB4C8C7A82A015E9AE6D42B158ACFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:b7:1b:0c:6e:bd:2a:3b:67:ca:b0:fb:89:ea: 04:77:f3:e6:a9:83:48:42:7c:8c:25:6b:80:cb:2e: 39:5d:04:ce:ac:8b:93:6e:f1:7e:d4:9e:e0:7e:f7: 7d:07:57:5f:f0:25:3b:6a:ca:5a:7f:4d:70:86:3b: 66:98:96:73:5f:59:6e:59:c7:ae:f2:cc:d3:89:d5: 72:08:8b:4e:ee:eb:5f:9b:6b:69:9a:c7:c1:8f:f9: 68:94:c0:50:ac:6f:bf:20:8f:de:38:81:0f:50:58: 76:14:13:1a:d8:2d:83:3f:41:a5:14:66:ec:7b:64: 1b:e8:7a:9a:a4:64:12:8d:4c:0c:dc:b1:5c:da:cc: d3:f6:63:cd:af:83:97:a7:1c:dc:57:f3:72:9b:20: fa:a3:5d:0b:31:ba:8e:dc:d4:11:5c:8a:75:5e:0f: ed:af:d9:31:32:7b:1a:98:0d:2f:7f:45:1d:4c:c0: 6c:8b:a5:10:da:59:12:08:5e:9f:b2:c7:33:bb:54: 90:b4:9d:34:65:9c:d7:37:cb:f8:78:51:6a:d6:f5: cf:06:b2:e0:a1:80:05:f3:d2:63:94:4d:f5:87:d5: 1d:93:32:0d:81:6f:ec:11:6b:18:a6:76:c0:4d:8d: 23:e4:ca:7d:2f:b1:7b:a8:76:74:91:59:c9:a9:73: a7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A3:72:08:86:EB:4C:8C:7A:82:A0:15:E9:AE:6D:42:B1:58:AC:FA X509v3 Authority Key Identifier: keyid:0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/AKNyCIbrTIx6gqAV6a5tQrFYrPo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.216.108.0/22 Signature Algorithm: sha256WithRSAEncryption 78:76:21:2f:13:f7:54:30:c5:d9:59:a4:3f:d2:e4:a1:fc:f5: 1e:78:46:53:6c:3d:43:9a:d3:04:02:ba:77:81:4a:be:e6:49: 96:81:a2:b7:8a:09:78:ad:57:2b:2c:7e:d2:85:9e:1e:f9:79: fa:7a:73:b2:8f:d2:a1:7d:4c:cf:5e:74:19:ec:d3:1c:e5:dc: a9:29:10:cc:55:95:fd:34:66:41:1d:a7:0d:0a:2e:b7:87:3b: 83:d5:08:35:02:3f:df:f0:f6:a6:d0:2e:0a:37:7a:f6:22:b3: 7b:3e:3a:53:d1:2b:0f:e9:0b:e1:a3:f5:51:82:5e:86:ae:63: 91:63:92:76:d6:7d:22:c5:65:de:0b:b3:13:17:44:89:72:32: 35:95:16:c4:25:71:87:7c:65:4f:b8:a4:d1:b3:71:65:9f:b0: 8d:a3:2c:b0:52:b6:a2:c1:f8:75:2a:4e:12:ed:50:00:80:f9: c9:56:26:d4:91:2b:a2:63:ad:47:b1:04:c4:97:8d:9c:9a:d4: 68:c6:d4:02:e6:35:6f:f2:6c:93:eb:28:8f:f8:76:ec:92:0d: af:2c:ed:92:09:94:13:16:9e:fb:15:c2:b3:7f:95:b9:69:17: 9f:2a:f0:10:70:45:37:55:fd:90:d1:29:e3:b1:94:f7:1d:21: 2c:8b:85:5b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE2 Rjk3MkQyNDA3OEY4OTA4OEVEMTEwQTI2RENERjkwQTlFQkNFQTAeFw0yNjAxMTYw MjExMjZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDAwQTM3MjA4ODZFQjRD OEM3QTgyQTAxNUU5QUU2RDQyQjE1OEFDRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD7txsMbr0qO2fKsPuJ6gR38+apg0hCfIwla4DLLjldBM6si5Nu 8X7UnuB+930HV1/wJTtqylp/TXCGO2aYlnNfWW5Zx67yzNOJ1XIIi07u61+ba2ma x8GP+WiUwFCsb78gj944gQ9QWHYUExrYLYM/QaUUZux7ZBvoepqkZBKNTAzcsVza zNP2Y82vg5enHNxX83KbIPqjXQsxuo7c1BFcinVeD+2v2TEyexqYDS9/RR1MwGyL pRDaWRIIXp+yxzO7VJC0nTRlnNc3y/h4UWrW9c8GsuChgAXz0mOUTfWH1R2TMg2B b+wRaximdsBNjSPkyn0vsXuodnSRWcmpc6ffAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUAKNyCIbrTIx6gqAV6a5tQrFYrPowHwYDVR0jBBgwFoAUCm+XLSQHj4kIjtEQ om3N+QqevOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQy L0NtLVhMU1FIajRrSWp0RVFvbTNOLVFxZXZPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvQ20tWExTUUhqNGtJanRFUW9tM04tUXFldk9vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQyL0FLTnlDSWJyVEl4Nmdx QVY2YTV0UXJGWXJQby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn2GwwDQYJKoZIhvcNAQELBQADggEBAHh2IS8T91QwxdlZpD/S5KH89R54RlNs PUOa0wQCuneBSr7mSZaBoreKCXitVyssftKFnh75efp6c7KP0qF9TM9edBns0xzl 3KkpEMxVlf00ZkEdpw0KLreHO4PVCDUCP9/w9qbQLgo3evYis3s+OlPRKw/pC+Gj 9VGCXoauY5FjknbWfSLFZd4LsxMXRIlyMjWVFsQlcYd8ZU+4pNGzcWWfsI2jLLBS tqLB+HUqThLtUACA+clWJtSRK6JjrUexBMSXjZya1GjG1ALmNW/ybJPrKI/4duyS Da8s7ZIJlBMWnvsVwrN/lblpF58q8BBwRTdV/ZDRKeOxlPcdISyLhVs= -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:21 2026 by rpki-client