This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/341/31f7_X2TBqLiBpRN1OnRgM8DC7Q.roa File: 31f7_X2TBqLiBpRN1OnRgM8DC7Q.roa (raw, json) Hash identifier: EDZq6dLm3M96Cr9vfuuCf7swYf2DAzXUcm7JKmSi2EI= Subject key identifier: DF:57:FB:FD:7D:93:06:A2:E2:06:94:4D:D4:E9:D1:80:CF:03:0B:B4 Certificate issuer: /CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE Certificate serial: 1B75 Authority key identifier: 85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/31f7_X2TBqLiBpRN1OnRgM8DC7Q.roa Signing time: Tue 06 Jan 2026 02:05:46 +0000 ROA not before: Tue 06 Jan 2026 02:05:46 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 37963 IP address blocks: 139.5.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7029 (0x1b75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE Validity Not Before: Jan 6 02:05:46 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DF57FBFD7D9306A2E206944DD4E9D180CF030BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:c3:53:f2:e9:4d:1d:b8:3f:e0:1d:31:3d: 91:f7:1d:5d:e3:9d:e8:57:98:d1:2b:11:80:0c:a1: f9:dd:25:b6:4c:1b:1d:52:77:c5:bb:4b:35:42:e4: 5b:e2:7d:18:a5:08:90:8f:68:7f:d1:dd:58:27:b0: a7:a6:fe:d5:dd:42:09:c6:22:b0:c4:88:0e:14:fa: 14:1b:5c:16:df:66:ba:d1:af:99:ee:b0:c1:6f:ae: ca:e5:8d:a6:41:3c:1a:95:ed:5a:91:d7:5e:01:c7: cd:79:3d:6f:43:4c:2a:f7:86:44:4e:9a:b1:33:26: f7:da:1b:05:d4:56:24:88:ff:e2:6d:be:5f:81:85: 2d:3f:16:40:1a:a0:3f:a8:04:22:f1:2c:87:b4:61: 41:c2:c8:50:73:51:84:58:16:b3:c3:7a:ac:a4:8d: fd:43:18:bf:ba:da:34:b3:92:5d:8c:c8:dc:a2:28: be:7f:02:d1:1e:75:e4:64:8c:f0:b2:3d:21:a3:5c: a4:55:0f:57:dc:5c:5d:1e:44:50:3f:06:34:3f:37: 23:23:75:34:a2:e8:b5:f7:6b:07:6c:e2:ba:dc:94: 60:ee:ef:50:11:4f:8e:cb:8a:2f:31:33:54:3f:44: cc:f6:12:47:81:e0:1a:b1:61:d8:c2:6b:bd:3b:12: 55:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:57:FB:FD:7D:93:06:A2:E2:06:94:4D:D4:E9:D1:80:CF:03:0B:B4 X509v3 Authority Key Identifier: keyid:85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/31f7_X2TBqLiBpRN1OnRgM8DC7Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 139.5.160.0/22 Signature Algorithm: sha256WithRSAEncryption 23:f4:51:15:d0:f4:6d:90:60:da:3c:05:9d:29:28:e1:7e:00: 70:9d:92:d6:f6:16:33:f1:eb:b1:06:02:27:1c:1c:9e:ed:9f: 97:e5:b3:ce:b4:72:39:ac:e2:ef:ab:c6:45:aa:07:a7:01:23: 2c:24:97:d1:22:5d:e4:f6:ee:e5:94:ec:f7:d1:04:a2:f4:a7: 3f:75:b0:b5:e5:93:1e:7b:53:9e:ef:97:44:97:ab:aa:59:16: c6:d3:d2:58:07:da:f7:fc:c0:78:72:e8:ca:ff:dc:b2:07:62: d5:4b:f1:f9:d0:0f:19:6c:7f:41:32:0c:a3:99:00:d6:b1:2d: 82:89:2f:5f:34:65:71:32:0d:af:5c:3d:1b:f3:f4:f2:ce:33: 6d:db:51:f2:e9:d3:22:b2:9a:d8:bb:92:be:40:d7:47:a6:a3: 0f:ce:74:58:6d:85:84:c8:12:63:cc:79:11:2f:8d:75:16:ea: 15:4c:44:1a:0b:17:52:e9:76:e3:b2:22:81:9b:e0:f1:83:33: d2:d4:b9:45:ab:64:32:78:f7:16:de:5e:7e:a3:c4:75:c7:48: 86:f3:a9:c8:92:85:5a:45:38:9a:1b:44:4c:15:91:08:f0:c5: 10:c3:80:18:bd:69:69:31:25:08:df:f9:90:4d:34:b1:05:d0: ee:bb:8a:86 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICG3UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODU2 REE4NUY5QThBMjg2QjY1Mjg3MEQ0RTQ3NjM1RkYzRDBFOTJBRTAeFw0yNjAxMDYw MjA1NDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERGNTdGQkZEN0Q5MzA2 QTJFMjA2OTQ0REQ0RTlEMTgwQ0YwMzBCQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVg8NT8ulNHbg/4B0xPZH3HV3jnehXmNErEYAMofndJbZMGx1S d8W7SzVC5FvifRilCJCPaH/R3VgnsKem/tXdQgnGIrDEiA4U+hQbXBbfZrrRr5nu sMFvrsrljaZBPBqV7VqR114Bx815PW9DTCr3hkROmrEzJvfaGwXUViSI/+Jtvl+B hS0/FkAaoD+oBCLxLIe0YUHCyFBzUYRYFrPDeqykjf1DGL+62jSzkl2MyNyiKL5/ AtEedeRkjPCyPSGjXKRVD1fcXF0eRFA/BjQ/NyMjdTSi6LX3awds4rrclGDu71AR T47Lii8xM1Q/RMz2EkeB4BqxYdjCa707ElVpAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU31f7/X2TBqLiBpRN1OnRgM8DC7QwHwYDVR0jBBgwFoAUhW2oX5qKKGtlKHDU 5HY1/z0Okq4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx L2hXMm9YNXFLS0d0bEtIRFU1SFkxX3owT2txNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaFcyb1g1cUtLR3RsS0hEVTVIWTFfejBPa3E0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxLzMxZjdfWDJUQnFMaUJw Uk4xT25SZ004REM3US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAKLBaAwDQYJKoZIhvcNAQELBQADggEBACP0URXQ9G2QYNo8BZ0pKOF+AHCdktb2 FjPx67EGAiccHJ7tn5fls860cjms4u+rxkWqB6cBIywkl9EiXeT27uWU7PfRBKL0 pz91sLXlkx57U57vl0SXq6pZFsbT0lgH2vf8wHhy6Mr/3LIHYtVL8fnQDxlsf0Ey DKOZANaxLYKJL180ZXEyDa9cPRvz9PLOM23bUfLp0yKymti7kr5A10emow/OdFht hYTIEmPMeREvjXUW6hVMRBoLF1LpduOyIoGb4PGDM9LUuUWrZDJ49xbeXn6jxHXH SIbzqciShVpFOJobREwVkQjwxRDDgBi9aWkxJQjf+ZBNNLEF0O67ioY= -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:18 2026 by rpki-client