This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/341/IsbkjaUAU7euQKyY1WgOzQ_ves4.roa File: IsbkjaUAU7euQKyY1WgOzQ_ves4.roa (raw, json) Hash identifier: 88yWZHpmVTvOwW8PjW5Ko+13RaT8E8srLT6pcqhzCGw= Subject key identifier: 22:C6:E4:8D:A5:00:53:B7:AE:40:AC:98:D5:68:0E:CD:0F:EF:7A:CE Certificate issuer: /CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE Certificate serial: 1B70 Authority key identifier: 85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/IsbkjaUAU7euQKyY1WgOzQ_ves4.roa Signing time: Mon 05 Jan 2026 08:11:58 +0000 ROA not before: Mon 05 Jan 2026 08:11:58 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 37963 IP address blocks: 115.124.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 02:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7024 (0x1b70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE Validity Not Before: Jan 5 08:11:58 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=22C6E48DA50053B7AE40AC98D5680ECD0FEF7ACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fa:3e:ea:40:5a:93:ca:fe:46:f7:9f:4b:f9: 48:52:e4:0d:b7:4b:9c:95:e0:98:a2:b9:f5:cf:99: ff:8e:68:95:03:ba:1f:5d:89:3f:0f:13:ea:e0:8c: 1c:c9:10:fe:30:5a:be:c2:f1:12:5b:be:3f:ab:3e: ae:1f:f0:c6:81:a0:ed:21:6b:7d:58:a0:93:4f:e8: 23:43:9e:fc:31:77:56:2d:ee:47:b4:7b:b1:eb:1f: 82:09:99:e3:f7:e0:71:cc:85:f3:60:98:84:f5:5b: 1a:72:f3:5e:f8:c7:b5:14:f3:bf:b9:55:81:13:ed: 5c:f1:00:b3:22:79:a0:1d:27:3f:54:3c:dd:93:b4: d3:4c:78:f0:d0:ed:9d:6e:f7:3a:19:98:9f:97:d5: de:04:47:e9:de:7f:44:c7:9e:45:4b:4c:57:f6:03: 29:36:24:e7:18:53:80:04:b9:2c:c0:aa:9d:10:ad: 76:18:ce:50:09:3f:0f:9f:9e:4a:f7:a6:53:97:d1: 48:87:62:43:06:f5:88:59:b4:ea:f5:c9:2d:b1:76: b2:97:66:58:47:52:66:37:87:a1:2d:91:29:0b:14: ed:fe:f2:05:76:81:d3:62:1e:99:90:2f:c1:bb:c5: 36:6b:ee:86:78:2f:61:e7:ca:3e:a7:f7:b9:3b:b8: 97:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C6:E4:8D:A5:00:53:B7:AE:40:AC:98:D5:68:0E:CD:0F:EF:7A:CE X509v3 Authority Key Identifier: keyid:85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/IsbkjaUAU7euQKyY1WgOzQ_ves4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.124.16.0/20 Signature Algorithm: sha256WithRSAEncryption aa:9b:44:93:61:82:59:76:8f:6d:62:6a:15:30:12:4e:42:07: a2:f5:56:4d:98:82:9a:ad:a5:9c:db:bb:d9:76:e4:0d:59:3a: 09:9f:93:03:9f:98:6d:72:22:70:74:0f:08:c3:aa:3a:82:b7: 4e:ec:1e:04:1a:b3:f7:5c:dc:9b:4a:c5:e6:74:9d:60:b2:ce: ac:91:7f:2d:6b:e1:7e:66:7a:75:1a:1a:d3:cb:a2:50:3b:9c: 79:82:f8:e4:45:86:f5:21:65:c1:05:45:a9:10:31:f7:6c:23: 8d:07:0f:d5:93:22:ad:f0:a8:26:22:d4:3c:27:f6:32:b1:66: b8:c6:9f:e6:1e:0d:bd:5f:a8:82:cc:1a:52:a4:b3:69:52:f9: 66:ea:97:9f:35:32:90:5f:fe:fd:54:fa:a3:5a:cf:43:f2:2c: 84:ba:cb:5b:5a:56:27:c1:86:10:68:3a:ca:53:1a:f6:45:94: b1:67:13:b7:8e:e0:29:a8:3f:3b:c0:80:42:ef:c1:a2:40:be: 13:66:2f:cc:75:e9:0d:30:ff:c3:32:75:52:48:e0:22:74:78: 68:eb:8e:c7:d4:41:f3:b7:40:8e:1f:40:29:d9:84:77:cf:ab: 05:e7:d1:fd:b1:72:b4:53:bb:51:45:b3:3d:95:4f:fa:c9:c3: 31:1e:82:ef -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICG3AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODU2 REE4NUY5QThBMjg2QjY1Mjg3MEQ0RTQ3NjM1RkYzRDBFOTJBRTAeFw0yNjAxMDUw ODExNThaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIyQzZFNDhEQTUwMDUz QjdBRTQwQUM5OEQ1NjgwRUNEMEZFRjdBQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA+j7qQFqTyv5G959L+UhS5A23S5yV4JiiufXPmf+OaJUDuh9d iT8PE+rgjBzJEP4wWr7C8RJbvj+rPq4f8MaBoO0ha31YoJNP6CNDnvwxd1Yt7ke0 e7HrH4IJmeP34HHMhfNgmIT1Wxpy8174x7UU87+5VYET7VzxALMieaAdJz9UPN2T tNNMePDQ7Z1u9zoZmJ+X1d4ER+nef0THnkVLTFf2Ayk2JOcYU4AEuSzAqp0QrXYY zlAJPw+fnkr3plOX0UiHYkMG9YhZtOr1yS2xdrKXZlhHUmY3h6EtkSkLFO3+8gV2 gdNiHpmQL8G7xTZr7oZ4L2Hnyj6n97k7uJcDAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUIsbkjaUAU7euQKyY1WgOzQ/ves4wHwYDVR0jBBgwFoAUhW2oX5qKKGtlKHDU 5HY1/z0Okq4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx L2hXMm9YNXFLS0d0bEtIRFU1SFkxX3owT2txNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaFcyb1g1cUtLR3RsS0hEVTVIWTFfejBPa3E0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxL0lzYmtqYVVBVTdldVFL eVkxV2dPelFfdmVzNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BARzfBAwDQYJKoZIhvcNAQELBQADggEBAKqbRJNhgll2j21iahUwEk5CB6L1Vk2Y gpqtpZzbu9l25A1ZOgmfkwOfmG1yInB0DwjDqjqCt07sHgQas/dc3JtKxeZ0nWCy zqyRfy1r4X5menUaGtPLolA7nHmC+ORFhvUhZcEFRakQMfdsI40HD9WTIq3wqCYi 1Dwn9jKxZrjGn+YeDb1fqILMGlKks2lS+Wbql581MpBf/v1U+qNaz0PyLIS6y1ta VifBhhBoOspTGvZFlLFnE7eO4CmoPzvAgELvwaJAvhNmL8x16Q0w/8MydVJI4CJ0 eGjrjsfUQfO3QI4fQCnZhHfPqwXn0f2xcrRTu1FFsz2VT/rJwzEegu8= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:40 2026 by rpki-client