This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/341/TYjGjuiRoF-hGIfULnpS3-xjoQw.roa File: TYjGjuiRoF-hGIfULnpS3-xjoQw.roa (raw, json) Hash identifier: TKhwOdjif9ZZ0EHxMGHuC1TKqyqj+utqZbNaJEnhffo= Subject key identifier: 4D:88:C6:8E:E8:91:A0:5F:A1:18:87:D4:2E:7A:52:DF:EC:63:A1:0C Certificate issuer: /CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE Certificate serial: 1B39 Authority key identifier: 85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/TYjGjuiRoF-hGIfULnpS3-xjoQw.roa Signing time: Fri 26 Dec 2025 02:58:33 +0000 ROA not before: Fri 26 Dec 2025 02:58:33 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 37963 IP address blocks: 110.75.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6969 (0x1b39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE Validity Not Before: Dec 26 02:58:33 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4D88C68EE891A05FA11887D42E7A52DFEC63A10C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c0:c4:47:a1:46:9f:d1:f8:25:38:3f:11:f1: d7:81:93:6f:05:9d:8d:05:82:d6:b9:78:09:43:d9: ab:a6:01:f2:a2:d8:b1:bb:7f:8d:ac:db:a7:82:e6: 1e:7a:69:9c:8f:87:8c:5f:ac:5a:d5:25:6d:9e:71: 81:b8:6d:59:ad:b9:5a:4b:48:cf:97:ad:03:ae:c3: 12:25:7c:e6:f5:a4:77:d0:12:1e:d4:d1:2b:6d:75: cd:ee:f7:ed:9b:6a:ea:a6:de:07:f5:47:27:aa:12: f3:60:71:76:0f:24:06:17:c6:99:33:0e:b4:04:23: 81:ae:53:08:e3:18:0a:37:e9:d9:21:fa:06:35:e8: 6a:05:75:48:3e:3e:13:c1:c3:14:30:58:85:2b:1f: c9:e3:21:6a:7b:84:07:1a:1d:3e:a8:e2:f6:12:f8: e0:d6:2c:83:88:0d:19:6e:6a:fe:86:fa:dd:5e:8f: 62:61:fa:7d:6a:66:d7:4d:f8:bd:79:12:a5:12:82: c6:a1:66:a6:d1:9f:11:73:0f:c2:32:3d:5b:eb:1b: c8:3e:1d:b8:8c:f2:31:84:eb:c4:50:20:a8:2c:32: 73:00:34:3b:8a:1f:40:8a:95:56:82:f6:e8:b5:8f: be:41:9f:29:b0:56:a1:ad:21:b8:0f:b7:d9:32:58: b8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:88:C6:8E:E8:91:A0:5F:A1:18:87:D4:2E:7A:52:DF:EC:63:A1:0C X509v3 Authority Key Identifier: keyid:85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/TYjGjuiRoF-hGIfULnpS3-xjoQw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.75.64.0/18 Signature Algorithm: sha256WithRSAEncryption b3:4f:42:35:17:7c:b3:f9:00:d8:34:29:a0:b7:92:db:7f:0d: 3c:3a:86:62:03:7d:01:3a:1b:b6:1d:b5:6b:06:ce:77:05:25: 36:e1:94:b8:8e:79:c2:ab:d2:86:da:0a:2d:80:b3:a9:fa:b6: c3:9d:91:54:a1:a7:7f:db:a0:58:ce:fb:97:93:87:58:c5:58: bb:78:e6:1d:44:58:42:b4:88:af:6f:bb:3c:35:ab:75:71:6c: ef:09:42:f2:a4:b4:ac:aa:41:56:5c:d0:b2:a9:fe:3d:00:54: 66:0a:f7:a3:72:86:98:03:53:be:d5:fc:01:0d:f6:8d:88:63: 30:48:f9:58:26:fe:39:9c:2b:08:5c:a9:55:23:13:aa:67:0e: 46:59:ba:53:12:2d:49:f2:60:db:2b:d1:0c:e5:0f:3d:bb:01: 28:4b:62:ea:55:cd:c5:a1:97:03:68:c6:ef:20:70:47:27:eb: 64:76:ad:cc:cf:c7:d4:b9:81:ef:7f:15:76:05:5c:6f:35:a3: 61:9f:b5:ea:fc:94:2c:36:24:cc:90:70:d4:32:b7:37:94:6c: e6:76:b0:eb:0f:12:08:4d:4e:3e:e4:c3:d5:49:f7:22:e2:95: 7b:08:9b:5b:e9:f6:00:c7:c7:dd:39:5a:f0:54:c4:2f:14:c9: 1a:64:1d:6c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGzkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODU2 REE4NUY5QThBMjg2QjY1Mjg3MEQ0RTQ3NjM1RkYzRDBFOTJBRTAeFw0yNTEyMjYw MjU4MzNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDREODhDNjhFRTg5MUEw NUZBMTE4ODdENDJFN0E1MkRGRUM2M0ExMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCTwMRHoUaf0fglOD8R8deBk28FnY0Fgta5eAlD2aumAfKi2LG7 f42s26eC5h56aZyPh4xfrFrVJW2ecYG4bVmtuVpLSM+XrQOuwxIlfOb1pHfQEh7U 0Sttdc3u9+2bauqm3gf1RyeqEvNgcXYPJAYXxpkzDrQEI4GuUwjjGAo36dkh+gY1 6GoFdUg+PhPBwxQwWIUrH8njIWp7hAcaHT6o4vYS+ODWLIOIDRluav6G+t1ej2Jh +n1qZtdN+L15EqUSgsahZqbRnxFzD8IyPVvrG8g+HbiM8jGE68RQIKgsMnMANDuK H0CKlVaC9ui1j75BnymwVqGtIbgPt9kyWLg7AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUTYjGjuiRoF+hGIfULnpS3+xjoQwwHwYDVR0jBBgwFoAUhW2oX5qKKGtlKHDU 5HY1/z0Okq4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx L2hXMm9YNXFLS0d0bEtIRFU1SFkxX3owT2txNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaFcyb1g1cUtLR3RsS0hEVTVIWTFfejBPa3E0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxL1RZakdqdWlSb0YtaEdJ ZlVMbnBTMy14am9Rdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAZuS0AwDQYJKoZIhvcNAQELBQADggEBALNPQjUXfLP5ANg0KaC3ktt/DTw6hmID fQE6G7YdtWsGzncFJTbhlLiOecKr0obaCi2As6n6tsOdkVShp3/boFjO+5eTh1jF WLt45h1EWEK0iK9vuzw1q3VxbO8JQvKktKyqQVZc0LKp/j0AVGYK96NyhpgDU77V /AEN9o2IYzBI+Vgm/jmcKwhcqVUjE6pnDkZZulMSLUnyYNsr0QzlDz27AShLYupV zcWhlwNoxu8gcEcn62R2rczPx9S5ge9/FXYFXG81o2Gfter8lCw2JMyQcNQytzeU bOZ2sOsPEghNTj7kw9VJ9yLilXsIm1vp9gDHx905WvBUxC8UyRpkHWw= -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:18 2026 by rpki-client