This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/C7lZz10lBEx3wUOFJTR3GPXu9lY.roa File: C7lZz10lBEx3wUOFJTR3GPXu9lY.roa (raw, json) Hash identifier: beaj4HMKZXLwd5gH98xm4h7dULkF0X21Hpj4TcbFYLk= Subject key identifier: 0B:B9:59:CF:5D:25:04:4C:77:C1:43:85:25:34:77:18:F5:EE:F6:56 Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Certificate serial: 230D Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/C7lZz10lBEx3wUOFJTR3GPXu9lY.roa Signing time: Mon 26 Jan 2026 06:53:14 +0000 ROA not before: Mon 26 Jan 2026 06:53:14 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63679 IP address blocks: 27.0.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 22:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8973 (0x230d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Validity Not Before: Jan 26 06:53:14 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0BB959CF5D25044C77C1438525347718F5EEF656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b3:b9:1c:ba:d9:55:1f:1a:cd:2d:77:2b:3d: 04:90:a5:a3:7f:5d:74:0f:30:1b:8c:3a:30:a0:28: 32:dd:d4:5d:9f:75:5b:e3:28:b6:a6:7d:35:6b:b4: 0a:0e:84:70:73:c0:47:1e:30:2e:e8:6e:74:be:e5: 2c:5a:52:6c:20:67:31:dd:68:55:e9:44:91:29:67: 13:a9:4f:3a:20:7c:49:51:13:8e:7b:11:f8:f1:1b: 68:d1:33:9b:65:01:08:31:c5:3c:97:b9:70:02:c1: 71:94:17:57:c3:14:80:2d:51:b7:e4:48:ad:1e:e3: e7:4e:21:8f:19:f4:b8:ee:44:90:82:03:1c:57:7c: 85:73:e5:23:9d:d3:4c:63:18:39:8b:30:ef:17:0b: 27:bd:ea:cf:56:39:31:ce:99:60:dc:a8:8b:3e:f1: 5c:48:13:ba:dc:3a:a5:08:43:f7:14:30:ae:c0:40: 98:1d:55:0e:73:b5:56:7b:f7:8b:2b:14:54:8c:bb: 97:3a:63:e0:e1:9e:e7:aa:0f:2e:14:b7:6f:e4:db: 72:77:cd:17:f9:f0:ee:00:1c:88:54:84:c0:d6:61: 7f:3f:67:80:bc:6c:4c:7c:c2:bc:06:d5:ea:37:99: 2a:8e:9b:9b:6b:d6:e7:47:b3:c4:0a:c2:3f:f4:f8: c6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B9:59:CF:5D:25:04:4C:77:C1:43:85:25:34:77:18:F5:EE:F6:56 X509v3 Authority Key Identifier: keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/C7lZz10lBEx3wUOFJTR3GPXu9lY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.0.207.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:fc:c6:14:0f:5b:fb:71:84:85:ad:a8:8f:c1:df:da:61:61: 17:a1:49:08:21:89:c1:61:99:57:b8:bd:f5:a0:9f:74:a7:dc: 7a:c2:26:67:64:14:93:92:57:8d:46:58:af:e9:a8:3c:ea:88: 5e:cf:58:2a:d9:fa:d5:bc:c7:48:7f:c4:ce:64:4b:1d:2b:52: 2d:96:17:cb:00:6e:d9:9e:26:82:34:ec:b0:61:d8:c1:e1:04: a3:78:86:d2:58:51:18:50:38:66:3d:41:a6:b0:40:cd:1b:af: 05:ce:99:89:5b:c3:34:7f:ce:21:1f:8c:f0:c1:a5:66:71:5d: 01:3d:47:15:6a:0c:25:f7:12:7a:0c:d7:f6:00:fd:24:df:4d: ec:a5:5d:72:63:2d:aa:7b:cb:55:a7:3d:82:3e:f2:bb:b3:82: 09:c6:b4:e8:2e:60:fb:63:55:c5:e7:c8:40:16:ca:14:98:19: d3:cf:5d:a1:03:4a:70:3c:02:4b:dc:81:b3:5a:c5:f2:41:96: e2:36:d1:71:74:d8:55:1f:78:d2:97:9a:6d:49:a2:35:44:64: 78:89:fe:f2:bc:3b:56:b7:cc:b4:9f:c2:ed:2a:6d:73:db:7a: 64:ec:af:b5:34:f7:89:07:b0:e9:c5:fb:6c:e4:b6:d7:75:ec: 2e:78:07:3c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIw0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEMx RkI1NTNGRjIzMzEyQ0Q5QzI1REUxREE3MjA0OEYwNjQ4M0M1QTAeFw0yNjAxMjYw NjUzMTRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDBCQjk1OUNGNUQyNTA0 NEM3N0MxNDM4NTI1MzQ3NzE4RjVFRUY2NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCas7kcutlVHxrNLXcrPQSQpaN/XXQPMBuMOjCgKDLd1F2fdVvj KLamfTVrtAoOhHBzwEceMC7obnS+5SxaUmwgZzHdaFXpRJEpZxOpTzogfElRE457 EfjxG2jRM5tlAQgxxTyXuXACwXGUF1fDFIAtUbfkSK0e4+dOIY8Z9LjuRJCCAxxX fIVz5SOd00xjGDmLMO8XCye96s9WOTHOmWDcqIs+8VxIE7rcOqUIQ/cUMK7AQJgd VQ5ztVZ794srFFSMu5c6Y+DhnueqDy4Ut2/k23J3zRf58O4AHIhUhMDWYX8/Z4C8 bEx8wrwG1eo3mSqOm5tr1udHs8QKwj/0+MYlAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUC7lZz10lBEx3wUOFJTR3GPXu9lYwHwYDVR0jBBgwFoAUTB+1U/8jMSzZwl3h 2nIEjwZIPFowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTYz MC9UQi0xVV84ak1Telp3bDNoMm5JRWp3WklQRm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RCLTFVXzhqTVN6WndsM2gybklFandaSVBGby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2MzAvQzdsWnoxMGxCRXgz d1VPRkpUUjNHUFh1OWxZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEABsAzzANBgkqhkiG9w0BAQsFAAOCAQEAavzGFA9b+3GEha2oj8Hf2mFhF6FJ CCGJwWGZV7i99aCfdKfcesImZ2QUk5JXjUZYr+moPOqIXs9YKtn61bzHSH/EzmRL HStSLZYXywBu2Z4mgjTssGHYweEEo3iG0lhRGFA4Zj1BprBAzRuvBc6ZiVvDNH/O IR+M8MGlZnFdAT1HFWoMJfcSegzX9gD9JN9N7KVdcmMtqnvLVac9gj7yu7OCCca0 6C5g+2NVxefIQBbKFJgZ089doQNKcDwCS9yBs1rF8kGW4jbRcXTYVR940peabUmi NURkeIn+8rw7VrfMtJ/C7Sptc9t6ZOyvtTT3iQew6cX7bOS213XsLngHPA== -----END CERTIFICATE-----Generated at Mon Jan 26 21:09:09 2026 by rpki-client