This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/341/Fx26zS42ZKgHp10iH3hf0EXlPC0.roa File: Fx26zS42ZKgHp10iH3hf0EXlPC0.roa (raw, json) Hash identifier: a8XrDUhYRXFVdJn/cYGcXPHJ88eqVViVtNhyRhNrCeM= Subject key identifier: 17:1D:BA:CD:2E:36:64:A8:07:A7:5D:22:1F:78:5F:D0:45:E5:3C:2D Certificate issuer: /CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE Certificate serial: 1B6E Authority key identifier: 85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/Fx26zS42ZKgHp10iH3hf0EXlPC0.roa Signing time: Mon 05 Jan 2026 06:21:25 +0000 ROA not before: Mon 05 Jan 2026 06:21:25 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 37963 IP address blocks: 110.173.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7022 (0x1b6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE Validity Not Before: Jan 5 06:21:25 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=171DBACD2E3664A807A75D221F785FD045E53C2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5d:a8:bf:9b:db:5f:f9:f0:27:e9:b1:ce:cb: 76:26:9b:76:ad:ad:65:7b:cd:be:d1:36:9a:16:0f: 0d:aa:a2:18:5f:e8:fe:bf:74:7b:0a:2c:6d:f6:bc: 1f:dd:ac:f5:b8:e2:5f:95:61:09:5c:f1:88:5e:2b: 69:f4:85:28:0c:64:5c:5e:5e:61:dc:b5:c9:06:9b: 78:74:0f:f1:02:58:c2:52:c4:de:7b:d4:33:5f:78: 12:44:d3:7b:f1:a6:5e:cf:54:2a:0a:2f:8d:6e:64: 30:7a:2e:69:da:91:7a:fd:fa:ae:55:13:7f:5b:9f: 7b:c2:38:a7:6c:e9:bb:f3:ff:bf:30:09:b7:19:75: c8:6a:3b:10:ef:05:02:47:54:de:5c:9e:9f:f9:6f: 43:e5:49:85:bb:67:e6:2c:e7:71:ec:b8:f4:bc:ff: 30:78:c7:c6:ac:14:2e:07:cd:92:25:f2:d1:05:6f: bd:a9:4b:08:01:fc:25:fc:04:9b:0a:c4:c3:cb:28: ca:02:bd:c8:5e:b1:f5:df:49:13:d0:01:b8:22:dd: c8:2c:38:82:b5:d3:95:3d:b5:4f:74:38:bc:fe:bd: f8:34:87:ca:e7:b1:1d:ed:29:07:f9:5a:7e:56:79: a5:fe:be:9f:65:61:95:24:8a:52:f9:72:df:e4:06: 55:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1D:BA:CD:2E:36:64:A8:07:A7:5D:22:1F:78:5F:D0:45:E5:3C:2D X509v3 Authority Key Identifier: keyid:85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/Fx26zS42ZKgHp10iH3hf0EXlPC0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.173.192.0/19 Signature Algorithm: sha256WithRSAEncryption 4b:4d:e4:ae:86:a2:c2:6b:12:51:60:3c:34:5e:e8:df:60:7e: d4:e9:0f:5a:eb:20:96:54:58:44:cf:25:f8:49:d8:c7:e4:d5: 5b:3d:63:91:8e:1f:66:73:78:0f:76:92:1a:d9:b5:c8:81:97: fd:cc:38:ed:c1:7c:ec:c5:16:2a:0f:02:ef:88:23:80:16:a0: c0:58:1a:79:6f:06:79:c5:8f:81:17:f0:03:e5:b9:d5:10:18: 51:a7:1e:df:e3:15:a4:6b:b5:8d:f9:a8:ad:d6:b0:7d:a5:6a: f8:8a:62:73:50:8e:e6:0f:24:7e:ed:aa:da:91:c4:30:15:f2: 30:09:c5:fd:48:d5:d0:65:61:84:c2:17:20:00:9e:c7:2a:94: 59:d9:78:06:1d:74:ba:c4:af:89:85:da:f2:df:e6:81:d3:9a: f2:10:2c:4d:60:53:ab:dc:ca:63:0b:fa:87:64:a2:c8:13:1a: db:88:92:db:9d:a7:cd:cb:05:14:b2:92:2e:e2:cc:f6:65:19: 4f:6f:d8:80:90:69:18:e8:08:14:d4:bb:37:d9:27:6b:82:39: 15:66:ae:df:79:b7:3a:3a:e9:bc:57:a0:ad:c3:fc:eb:f7:6f: f0:8e:88:f8:28:ef:c4:e7:6b:77:77:24:4d:e3:e5:11:47:e7: 7c:83:e0:dd -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICG24wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODU2 REE4NUY5QThBMjg2QjY1Mjg3MEQ0RTQ3NjM1RkYzRDBFOTJBRTAeFw0yNjAxMDUw NjIxMjVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDE3MURCQUNEMkUzNjY0 QTgwN0E3NUQyMjFGNzg1RkQwNDVFNTNDMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmXai/m9tf+fAn6bHOy3Ymm3atrWV7zb7RNpoWDw2qohhf6P6/ dHsKLG32vB/drPW44l+VYQlc8YheK2n0hSgMZFxeXmHctckGm3h0D/ECWMJSxN57 1DNfeBJE03vxpl7PVCoKL41uZDB6LmnakXr9+q5VE39bn3vCOKds6bvz/78wCbcZ dchqOxDvBQJHVN5cnp/5b0PlSYW7Z+Ys53HsuPS8/zB4x8asFC4HzZIl8tEFb72p SwgB/CX8BJsKxMPLKMoCvchesfXfSRPQAbgi3cgsOIK105U9tU90OLz+vfg0h8rn sR3tKQf5Wn5WeaX+vp9lYZUkilL5ct/kBlXjAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUFx26zS42ZKgHp10iH3hf0EXlPC0wHwYDVR0jBBgwFoAUhW2oX5qKKGtlKHDU 5HY1/z0Okq4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx L2hXMm9YNXFLS0d0bEtIRFU1SFkxX3owT2txNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaFcyb1g1cUtLR3RsS0hEVTVIWTFfejBPa3E0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxL0Z4MjZ6UzQyWktnSHAx MGlIM2hmMEVYbFBDMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAVurcAwDQYJKoZIhvcNAQELBQADggEBAEtN5K6GosJrElFgPDRe6N9gftTpD1rr IJZUWETPJfhJ2Mfk1Vs9Y5GOH2ZzeA92khrZtciBl/3MOO3BfOzFFioPAu+II4AW oMBYGnlvBnnFj4EX8APludUQGFGnHt/jFaRrtY35qK3WsH2laviKYnNQjuYPJH7t qtqRxDAV8jAJxf1I1dBlYYTCFyAAnscqlFnZeAYddLrEr4mF2vLf5oHTmvIQLE1g U6vcymML+odkosgTGtuIktudp83LBRSyki7izPZlGU9v2ICQaRjoCBTUuzfZJ2uC ORVmrt95tzo66bxXoK3D/Ov3b/COiPgo78Tna3d3JE3j5RFH53yD4N0= -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:17 2026 by rpki-client