This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/341/8whNrfvksK_nL7nUwlr3YQ8OCMM.roa File: 8whNrfvksK_nL7nUwlr3YQ8OCMM.roa (raw, json) Hash identifier: 7A86aEeVyO9bav/9GN5OuESIKlM542uYzcxXx/yoB84= Subject key identifier: F3:08:4D:AD:FB:E4:B0:AF:E7:2F:B9:D4:C2:5A:F7:61:0F:0E:08:C3 Certificate issuer: /CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE Certificate serial: 1B38 Authority key identifier: 85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/8whNrfvksK_nL7nUwlr3YQ8OCMM.roa Signing time: Fri 26 Dec 2025 02:58:33 +0000 ROA not before: Fri 26 Dec 2025 02:58:33 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 37963 IP address blocks: 110.75.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6968 (0x1b38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE Validity Not Before: Dec 26 02:58:33 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F3084DADFBE4B0AFE72FB9D4C25AF7610F0E08C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d9:6d:a0:fa:48:a1:d0:3b:9c:8b:51:e2:3f: 48:06:03:c2:23:a2:fe:97:e5:d0:ff:7f:56:33:a1: 82:77:d6:ae:43:d0:b8:3f:4f:46:4a:0b:65:4d:b3: 2c:bd:a6:56:ca:ea:80:74:f0:2a:e1:13:c5:e1:26: ad:62:be:e2:dd:e3:ec:e7:8e:59:3e:2b:a5:66:c5: b6:9b:53:76:36:45:90:73:3a:d4:d8:d0:3a:21:74: 17:d4:cc:f5:10:2c:4f:7e:65:3f:5b:df:2b:96:bd: 6c:26:c0:99:22:df:f3:27:fb:2a:e4:4d:83:d3:0b: 5d:a4:d2:13:ec:38:c8:c1:eb:6f:00:c8:9a:e8:e2: 46:8d:cd:ae:48:8c:9d:5e:43:61:0c:fc:0c:e4:be: aa:9f:80:08:5f:f2:44:b6:7f:ad:bf:3b:f7:29:8b: 4d:a2:dc:d0:cb:f0:fa:4e:7e:a9:7e:b5:cc:96:ea: f4:f9:75:86:db:fd:d8:64:94:31:97:3c:f9:97:14: 66:4f:22:4b:1b:3e:50:69:67:3e:15:24:e7:6b:f3: 93:99:a9:5f:ed:6d:d9:19:2b:9b:05:90:ac:fe:db: d6:95:53:d2:83:28:56:89:22:17:49:01:a4:eb:50: ed:3e:fe:96:5e:95:3b:39:77:a3:28:f0:66:a2:b5: b5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:08:4D:AD:FB:E4:B0:AF:E7:2F:B9:D4:C2:5A:F7:61:0F:0E:08:C3 X509v3 Authority Key Identifier: keyid:85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/8whNrfvksK_nL7nUwlr3YQ8OCMM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.75.0.0/18 Signature Algorithm: sha256WithRSAEncryption 21:ba:cd:6a:4c:28:02:8b:ed:49:31:96:b7:e6:5b:eb:cf:bf: a1:b2:35:b1:2e:28:b8:b7:e2:3a:5e:5f:6e:da:c7:08:ba:c6: 0c:7b:d5:fd:13:14:7b:9c:19:b8:7d:9b:32:ba:50:87:78:a2: 99:9b:ef:89:25:c3:60:29:ef:46:91:7b:bb:18:e6:a2:08:51: 0d:a1:dc:e5:a9:80:20:c8:b1:b6:4d:25:d8:6a:9b:78:c4:43: 80:4e:60:13:2c:af:62:0b:67:b5:7e:08:00:9d:e7:01:f1:2c: 83:47:f3:2c:ea:48:48:58:d9:a3:bf:8d:3f:d6:8e:dc:22:ff: 83:4c:f8:7d:21:51:c6:67:b5:16:22:cf:9a:1c:dd:e0:80:8c: 07:c1:8c:58:c4:bc:5a:97:5b:33:26:4f:fc:14:47:ab:a8:2e: 2e:92:fb:7c:2a:87:ed:86:1f:77:d2:44:91:1c:9e:12:8a:6b: be:c0:70:84:ed:eb:3a:e4:aa:7c:4e:8a:cd:b8:61:bb:00:1f: 17:63:24:17:73:09:33:56:96:18:d6:ae:66:73:63:bf:63:60: 94:ad:88:f4:b6:c7:08:ad:8f:21:fc:23:bb:d7:85:53:7f:f3: 39:b7:3c:a6:b1:7a:7d:fe:91:f1:32:39:05:4b:fc:03:66:54: 6a:9a:99:90 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGzgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODU2 REE4NUY5QThBMjg2QjY1Mjg3MEQ0RTQ3NjM1RkYzRDBFOTJBRTAeFw0yNTEyMjYw MjU4MzNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEYzMDg0REFERkJFNEIw QUZFNzJGQjlENEMyNUFGNzYxMEYwRTA4QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ2W2g+kih0Duci1HiP0gGA8Ijov6X5dD/f1YzoYJ31q5D0Lg/ T0ZKC2VNsyy9plbK6oB08CrhE8XhJq1ivuLd4+znjlk+K6VmxbabU3Y2RZBzOtTY 0DohdBfUzPUQLE9+ZT9b3yuWvWwmwJki3/Mn+yrkTYPTC12k0hPsOMjB628AyJro 4kaNza5IjJ1eQ2EM/AzkvqqfgAhf8kS2f62/O/cpi02i3NDL8PpOfql+tcyW6vT5 dYbb/dhklDGXPPmXFGZPIksbPlBpZz4VJOdr85OZqV/tbdkZK5sFkKz+29aVU9KD KFaJIhdJAaTrUO0+/pZelTs5d6Mo8GaitbVhAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU8whNrfvksK/nL7nUwlr3YQ8OCMMwHwYDVR0jBBgwFoAUhW2oX5qKKGtlKHDU 5HY1/z0Okq4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx L2hXMm9YNXFLS0d0bEtIRFU1SFkxX3owT2txNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaFcyb1g1cUtLR3RsS0hEVTVIWTFfejBPa3E0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxLzh3aE5yZnZrc0tfbkw3 blV3bHIzWVE4T0NNTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAZuSwAwDQYJKoZIhvcNAQELBQADggEBACG6zWpMKAKL7UkxlrfmW+vPv6GyNbEu KLi34jpeX27axwi6xgx71f0TFHucGbh9mzK6UId4opmb74klw2Ap70aRe7sY5qII UQ2h3OWpgCDIsbZNJdhqm3jEQ4BOYBMsr2ILZ7V+CACd5wHxLINH8yzqSEhY2aO/ jT/Wjtwi/4NM+H0hUcZntRYiz5oc3eCAjAfBjFjEvFqXWzMmT/wUR6uoLi6S+3wq h+2GH3fSRJEcnhKKa77AcITt6zrkqnxOis24YbsAHxdjJBdzCTNWlhjWrmZzY79j YJStiPS2xwitjyH8I7vXhVN/8zm3PKaxen3+kfEyOQVL/ANmVGqamZA= -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:46 2026 by rpki-client