This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/8tMAOHTX2RAHsoAgcZcXAwntHIc.roa File: 8tMAOHTX2RAHsoAgcZcXAwntHIc.roa (raw, json) Hash identifier: QmSQGSdv0VeN2QLbhV1cMwoSE6Or5hxCF7OMt3RkGCM= Subject key identifier: F2:D3:00:38:74:D7:D9:10:07:B2:80:20:71:97:17:03:09:ED:1C:87 Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 22D0 Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/8tMAOHTX2RAHsoAgcZcXAwntHIc.roa Signing time: Wed 07 Jan 2026 06:13:06 +0000 ROA not before: Wed 07 Jan 2026 06:13:06 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 45110 IP address blocks: 2403:9b00:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 21:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8912 (0x22d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Jan 7 06:13:06 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F2D3003874D7D91007B280207197170309ED1C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:d3:32:f6:cb:51:10:23:de:7b:8f:44:7c: 50:64:6e:52:c8:01:1d:e1:26:5b:e3:03:54:08:48: 47:9a:b3:6e:08:a5:a9:a3:14:5f:d9:70:45:d7:96: d2:13:3f:9e:da:cc:f5:22:3e:84:c1:a5:89:10:e5: 67:3f:96:84:88:1a:f5:dd:ca:63:1b:5a:ad:bf:04: f8:c1:02:07:a1:91:51:0a:14:07:ba:2e:f9:58:67: 24:b5:d2:19:0a:8d:ad:3b:93:97:b1:38:41:03:0a: 8c:05:14:40:ba:53:9c:c5:6f:95:cd:95:a7:41:9b: 71:9d:3d:58:67:b8:d8:cc:96:de:27:b9:72:f5:6e: 9b:90:37:23:d0:b8:b8:d5:98:bd:2d:97:ae:1c:30: b5:e0:a9:05:92:8e:4f:3d:90:1b:1f:f1:fb:ab:79: bc:10:fa:7b:b8:e7:09:0c:62:06:11:f3:cb:da:ec: 3a:65:16:46:b9:f4:b4:aa:db:23:64:85:de:9b:f4: 88:e9:dc:ae:9a:a3:9e:b7:12:bb:50:90:99:b6:6b: f4:b8:36:dd:85:4e:c4:f1:d1:80:31:11:20:6a:79: 71:ef:ae:a2:65:a7:b0:65:23:c3:56:2a:49:9d:0c: 09:35:ea:d8:9e:41:a3:37:4e:27:32:97:32:ad:94: 96:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D3:00:38:74:D7:D9:10:07:B2:80:20:71:97:17:03:09:ED:1C:87 X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/8tMAOHTX2RAHsoAgcZcXAwntHIc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:9b00:6000::/48 Signature Algorithm: sha256WithRSAEncryption 08:0c:7c:75:10:17:f9:08:92:cb:cd:44:ff:d1:f2:87:e1:d1: db:87:fe:01:e8:af:bb:7c:21:cc:39:54:4a:63:3f:71:ca:cb: 53:e5:8d:77:c1:5a:66:32:73:98:f0:52:48:d9:65:11:3a:1b: 6c:5f:06:e4:e2:34:da:00:90:75:ae:15:54:6b:56:b8:c1:ac: 7d:68:1b:4d:36:9a:fc:b5:71:a9:cb:b1:0a:62:68:3f:51:e1: ce:ef:9c:03:05:b0:5b:53:be:c1:99:d8:a7:24:da:4b:a2:bd: b2:d7:f8:53:02:06:5e:7d:80:db:5f:07:0c:6d:f7:9b:fd:a7: ee:04:20:3a:0a:53:64:52:3c:07:39:65:17:bc:17:98:bd:d1: a1:a2:48:1a:b9:71:e7:20:2b:45:69:64:7a:4e:d2:a6:24:4e: cb:b6:16:87:2e:c9:71:bf:1f:ab:84:82:b8:d3:8b:de:b9:dc: da:2d:ab:d3:48:f8:32:d2:68:2e:a0:38:2f:5e:6f:6b:c5:74: 8a:d8:ed:d8:3f:a8:5a:86:3b:e5:9c:80:64:e1:9c:07:fa:5b: 92:82:91:98:07:eb:4c:eb:c8:e9:f5:50:8f:52:35:06:e0:66: 64:1e:26:37:62:ef:cd:ea:c8:f4:45:4d:3e:78:bd:b6:59:03: a7:af:24:52 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICItAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNjAxMDcw NjEzMDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEYyRDMwMDM4NzREN0Q5 MTAwN0IyODAyMDcxOTcxNzAzMDlFRDFDODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnTtMy9stRECPee49EfFBkblLIAR3hJlvjA1QISEeas24Ipamj FF/ZcEXXltITP57azPUiPoTBpYkQ5Wc/loSIGvXdymMbWq2/BPjBAgehkVEKFAe6 LvlYZyS10hkKja07k5exOEEDCowFFEC6U5zFb5XNladBm3GdPVhnuNjMlt4nuXL1 bpuQNyPQuLjVmL0tl64cMLXgqQWSjk89kBsf8furebwQ+nu45wkMYgYR88va7Dpl Fka59LSq2yNkhd6b9Ijp3K6ao563ErtQkJm2a/S4Nt2FTsTx0YAxESBqeXHvrqJl p7BlI8NWKkmdDAk16tieQaM3TicylzKtlJbRAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU8tMAOHTX2RAHsoAgcZcXAwntHIcwHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxLzh0TUFPSFRYMlJBSHNv QWdjWmNYQXdudEhJYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAkA5sAYAAwDQYJKoZIhvcNAQELBQADggEBAAgMfHUQF/kIksvNRP/R8ofh0duH /gHor7t8Icw5VEpjP3HKy1PljXfBWmYyc5jwUkjZZRE6G2xfBuTiNNoAkHWuFVRr VrjBrH1oG002mvy1canLsQpiaD9R4c7vnAMFsFtTvsGZ2Kck2kuivbLX+FMCBl59 gNtfBwxt95v9p+4EIDoKU2RSPAc5ZRe8F5i90aGiSBq5cecgK0VpZHpO0qYkTsu2 FocuyXG/H6uEgrjTi9653Notq9NI+DLSaC6gOC9eb2vFdIrY7dg/qFqGO+WcgGTh nAf6W5KCkZgH60zryOn1UI9SNQbgZmQeJjdi783qyPRFTT54vbZZA6evJFI= -----END CERTIFICATE-----Generated at Sun Jan 25 18:21:04 2026 by rpki-client