This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/0MuLyMgfCvnPVXWVYAgvRvZUiN0.roa File: 0MuLyMgfCvnPVXWVYAgvRvZUiN0.roa (raw, json) Hash identifier: 2vB7tpVr5vZMjXaj8LAcrAQ4WTRi/NkZXCOcc0goZ/I= Subject key identifier: D0:CB:8B:C8:C8:1F:0A:F9:CF:55:75:95:60:08:2F:46:F6:54:88:DD Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Certificate serial: 230E Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/0MuLyMgfCvnPVXWVYAgvRvZUiN0.roa Signing time: Mon 26 Jan 2026 06:53:14 +0000 ROA not before: Mon 26 Jan 2026 06:53:14 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63677 IP address blocks: 27.0.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 22:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8974 (0x230e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Validity Not Before: Jan 26 06:53:14 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=D0CB8BC8C81F0AF9CF55759560082F46F65488DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6b:b1:68:d4:db:0b:ee:d9:83:49:08:66:a6: 96:32:3a:9b:e8:e7:88:e8:d5:c0:18:6d:ca:64:d6: 4b:d6:67:61:42:6d:0b:2d:07:32:ec:fe:2b:ad:c4: 04:b2:d9:92:ec:05:51:16:38:29:28:4a:23:f3:79: da:8b:a2:cf:16:3d:3f:6a:7e:18:c6:b3:39:12:43: 6c:de:af:8c:cd:66:ad:5f:99:c2:3c:2b:38:82:29: 66:17:8c:4c:9f:3f:29:f0:67:16:66:24:da:23:94: dd:86:d8:4f:9b:cb:ee:3b:e8:31:4b:b6:f7:5f:aa: 5c:30:95:63:53:af:d3:33:e4:97:5f:fc:be:09:5e: c2:07:2e:05:56:f0:0e:b5:74:d5:90:da:75:4f:71: cd:ed:c0:d3:f3:2f:f5:70:74:b3:21:24:a3:e7:22: 43:14:68:85:53:4f:62:70:29:a9:59:8d:53:9d:0b: ef:ef:57:50:c7:f7:d7:3a:0d:59:b3:c6:e9:5a:76: 0d:2e:18:f6:af:2c:6b:5a:6b:50:6f:5b:9f:77:f4: e0:b4:19:3c:98:4d:b6:27:1d:62:04:ac:05:fe:d9: f2:c4:0a:16:dc:d6:b6:f1:47:f5:c1:ad:aa:dd:1a: a3:9c:04:33:22:bd:44:3f:49:4f:11:a3:67:f6:60: 7a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CB:8B:C8:C8:1F:0A:F9:CF:55:75:95:60:08:2F:46:F6:54:88:DD X509v3 Authority Key Identifier: keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/0MuLyMgfCvnPVXWVYAgvRvZUiN0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.0.204.0/22 Signature Algorithm: sha256WithRSAEncryption 10:f0:c3:b6:81:f9:71:b2:d5:87:d0:c9:f6:c4:66:78:f8:6e: 19:e6:a1:9c:1d:76:70:3b:ad:82:48:9c:9b:a0:2f:99:07:74: d6:72:1b:ad:af:84:b4:5c:cc:fd:b2:9c:0a:48:69:e0:3a:ee: 3e:4e:09:07:e5:73:07:c0:bc:c8:dd:f1:6f:a6:68:64:4c:51: 27:23:6b:c2:74:2c:de:d1:eb:6b:30:09:a8:36:29:40:c5:e5: 0a:ca:d8:38:b7:16:ee:01:46:79:72:09:63:80:66:20:41:fc: 60:0c:e5:96:12:01:0a:83:47:e3:cd:e6:5c:e4:b3:27:59:58: 26:90:c5:c4:b2:32:8b:0d:59:b3:54:d7:f9:7f:af:8c:46:f7: ba:58:26:32:cd:ac:95:6e:5f:4e:5e:ff:60:f1:aa:9c:a9:ab: 8d:1a:7d:43:42:b2:ae:24:2e:b1:df:0c:f8:85:24:52:ff:50: ae:87:ea:3c:75:6f:4c:7a:bc:1b:f5:05:5a:97:96:46:0f:a6: b8:09:b0:23:0f:81:b4:f4:44:9a:4b:22:d2:80:c1:5d:5f:ef: 14:11:ae:6e:a2:7e:54:49:e0:d8:7a:4b:59:73:81:e5:1a:02: e7:85:07:36:95:50:a2:ef:cc:49:e9:b9:fb:4f:84:9e:35:fc: 98:16:f3:8d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIw4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEMx RkI1NTNGRjIzMzEyQ0Q5QzI1REUxREE3MjA0OEYwNjQ4M0M1QTAeFw0yNjAxMjYw NjUzMTRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEQwQ0I4QkM4QzgxRjBB RjlDRjU1NzU5NTYwMDgyRjQ2RjY1NDg4REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBa7Fo1NsL7tmDSQhmppYyOpvo54jo1cAYbcpk1kvWZ2FCbQst BzLs/iutxASy2ZLsBVEWOCkoSiPzedqLos8WPT9qfhjGszkSQ2zer4zNZq1fmcI8 KziCKWYXjEyfPynwZxZmJNojlN2G2E+by+476DFLtvdfqlwwlWNTr9Mz5Jdf/L4J XsIHLgVW8A61dNWQ2nVPcc3twNPzL/VwdLMhJKPnIkMUaIVTT2JwKalZjVOdC+/v V1DH99c6DVmzxuladg0uGPavLGtaa1BvW5939OC0GTyYTbYnHWIErAX+2fLEChbc 1rbxR/XBrardGqOcBDMivUQ/SU8Ro2f2YHo3AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU0MuLyMgfCvnPVXWVYAgvRvZUiN0wHwYDVR0jBBgwFoAUTB+1U/8jMSzZwl3h 2nIEjwZIPFowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTYz MC9UQi0xVV84ak1Telp3bDNoMm5JRWp3WklQRm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RCLTFVXzhqTVN6WndsM2gybklFandaSVBGby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2MzAvME11THlNZ2ZDdm5Q VlhXVllBZ3ZSdlpVaU4wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAhsAzDANBgkqhkiG9w0BAQsFAAOCAQEAEPDDtoH5cbLVh9DJ9sRmePhuGeah nB12cDutgkicm6AvmQd01nIbra+EtFzM/bKcCkhp4DruPk4JB+VzB8C8yN3xb6Zo ZExRJyNrwnQs3tHrazAJqDYpQMXlCsrYOLcW7gFGeXIJY4BmIEH8YAzllhIBCoNH 483mXOSzJ1lYJpDFxLIyiw1Zs1TX+X+vjEb3ulgmMs2slW5fTl7/YPGqnKmrjRp9 Q0KyriQusd8M+IUkUv9QrofqPHVvTHq8G/UFWpeWRg+muAmwIw+BtPREmksi0oDB XV/vFBGubqJ+VEng2HpLWXOB5RoC54UHNpVQou/MSem5+0+EnjX8mBbzjQ== -----END CERTIFICATE-----Generated at Mon Jan 26 21:09:08 2026 by rpki-client