This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/341/O7PXvsoQVsVCbjm80wPTdCIX_2M.roa File: O7PXvsoQVsVCbjm80wPTdCIX_2M.roa (raw, json) Hash identifier: i9dI/Y0v5xPJObMG4dUgiVFFT9xbvOLXCYys5EeEDBg= Subject key identifier: 3B:B3:D7:BE:CA:10:56:C5:42:6E:39:BC:D3:03:D3:74:22:17:FF:63 Certificate issuer: /CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE Certificate serial: 1B3A Authority key identifier: 85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/O7PXvsoQVsVCbjm80wPTdCIX_2M.roa Signing time: Fri 26 Dec 2025 02:58:33 +0000 ROA not before: Fri 26 Dec 2025 02:58:33 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 37963 IP address blocks: 103.212.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 02:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6970 (0x1b3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE Validity Not Before: Dec 26 02:58:33 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=3BB3D7BECA1056C5426E39BCD303D3742217FF63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:35:f1:3b:87:5e:46:0b:ce:fb:72:bf:09:18: 20:11:98:c2:9e:e1:b9:47:92:d6:f2:9c:20:15:04: 93:3d:89:be:8d:fd:1a:83:63:aa:bd:62:dc:cd:11: ae:07:f7:1f:a8:8d:ed:b6:0f:27:71:8f:d1:9e:eb: d8:95:3c:93:56:2c:c5:cb:ac:c7:0e:c7:e3:5d:45: 1b:ba:24:5f:cc:58:c4:cb:5a:5c:db:89:86:ef:39: a3:da:77:6d:56:67:23:be:d2:66:37:84:bd:8f:2f: 06:70:d3:b3:a1:d0:4b:19:54:1e:c9:96:17:5f:ce: d9:36:36:15:dd:d0:5f:96:e8:6b:c5:90:46:f4:0b: 40:55:f2:7d:ad:b8:78:42:91:12:94:69:3a:54:a2: 54:bd:ca:d5:c3:c4:9d:17:24:c1:db:49:01:06:64: 2a:7a:dd:74:2c:9a:0d:c0:b5:4e:75:fe:d5:bd:b6: e3:15:25:78:59:02:82:28:d3:19:8f:9f:c8:0f:4c: c5:e7:ed:1f:96:e9:94:c9:c4:73:51:b0:2c:a2:bd: c6:8d:28:40:9b:9b:0e:a5:69:b9:94:5a:06:a5:a1: db:ec:45:82:71:0d:72:56:53:dd:c3:12:58:f4:f0: 58:7e:e7:ba:80:99:24:f1:43:d5:ce:0d:42:00:e6: cd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B3:D7:BE:CA:10:56:C5:42:6E:39:BC:D3:03:D3:74:22:17:FF:63 X509v3 Authority Key Identifier: keyid:85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/O7PXvsoQVsVCbjm80wPTdCIX_2M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.212.44.0/22 Signature Algorithm: sha256WithRSAEncryption 11:4f:5c:f0:2b:db:c5:05:e2:b5:37:48:77:e4:c7:65:5e:a8: ec:74:ef:3f:60:c3:4c:b6:60:87:92:3a:2e:63:75:4f:44:80: a8:c0:ee:a1:4b:2f:9c:04:d4:25:58:45:bb:ae:bd:c1:e4:bc: b0:03:14:af:60:c8:95:c3:40:99:12:8d:b9:5f:b8:05:42:3d: d9:cd:ab:1f:57:ff:8f:ce:f2:17:c3:47:5e:f3:7f:8e:fe:bf: 89:bb:f1:3e:ba:94:06:26:b1:28:82:f9:2a:30:57:78:92:20: f6:06:9d:82:5c:2d:79:6b:c5:9e:c9:15:1f:18:93:43:d3:7e: 2a:a1:4f:61:cd:87:a1:58:f1:57:9c:4d:9e:7a:cb:84:9e:80: 53:ea:6a:f4:5f:50:fd:76:d3:01:40:45:86:85:3e:f7:fd:5d: 8a:81:94:f3:63:0f:19:b9:71:e1:c8:04:b6:ee:52:06:d6:50: da:f3:2e:95:33:1c:a7:06:28:79:1e:2a:7c:4b:8d:d7:3b:02: ce:05:1f:e6:62:6e:04:6d:0f:05:6c:8d:46:44:e5:0d:e7:98: c1:26:22:47:05:5e:8e:21:bf:95:22:f0:0b:2c:a0:0f:77:ea: b9:8b:c8:9e:85:a6:e5:28:70:08:2f:f3:3c:e4:cc:a5:6a:c5: 51:1b:26:f5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGzowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODU2 REE4NUY5QThBMjg2QjY1Mjg3MEQ0RTQ3NjM1RkYzRDBFOTJBRTAeFw0yNTEyMjYw MjU4MzNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDNCQjNEN0JFQ0ExMDU2 QzU0MjZFMzlCQ0QzMDNEMzc0MjIxN0ZGNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUNfE7h15GC877cr8JGCARmMKe4blHktbynCAVBJM9ib6N/RqD Y6q9YtzNEa4H9x+oje22Dydxj9Ge69iVPJNWLMXLrMcOx+NdRRu6JF/MWMTLWlzb iYbvOaPad21WZyO+0mY3hL2PLwZw07Oh0EsZVB7Jlhdfztk2NhXd0F+W6GvFkEb0 C0BV8n2tuHhCkRKUaTpUolS9ytXDxJ0XJMHbSQEGZCp63XQsmg3AtU51/tW9tuMV JXhZAoIo0xmPn8gPTMXn7R+W6ZTJxHNRsCyivcaNKECbmw6labmUWgalodvsRYJx DXJWU93DElj08Fh+57qAmSTxQ9XODUIA5s27AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUO7PXvsoQVsVCbjm80wPTdCIX/2MwHwYDVR0jBBgwFoAUhW2oX5qKKGtlKHDU 5HY1/z0Okq4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx L2hXMm9YNXFLS0d0bEtIRFU1SFkxX3owT2txNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaFcyb1g1cUtLR3RsS0hEVTVIWTFfejBPa3E0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxL083UFh2c29RVnNWQ2Jq bTgwd1BUZENJWF8yTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn1CwwDQYJKoZIhvcNAQELBQADggEBABFPXPAr28UF4rU3SHfkx2VeqOx07z9g w0y2YIeSOi5jdU9EgKjA7qFLL5wE1CVYRbuuvcHkvLADFK9gyJXDQJkSjblfuAVC PdnNqx9X/4/O8hfDR17zf47+v4m78T66lAYmsSiC+SowV3iSIPYGnYJcLXlrxZ7J FR8Yk0PTfiqhT2HNh6FY8VecTZ56y4SegFPqavRfUP120wFARYaFPvf9XYqBlPNj Dxm5ceHIBLbuUgbWUNrzLpUzHKcGKHkeKnxLjdc7As4FH+ZibgRtDwVsjUZE5Q3n mMEmIkcFXo4hv5Ui8AssoA936rmLyJ6FpuUocAgv8zzkzKVqxVEbJvU= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:37 2026 by rpki-client