This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/DA2VyIe4F0U39LibmZKyVqrcKyw.roa File: DA2VyIe4F0U39LibmZKyVqrcKyw.roa (raw, json) Hash identifier: KfTXQmMIZNCBnYt6z9up1pkTCbs4Zc7ypsYD0uvMgSI= Subject key identifier: 0C:0D:95:C8:87:B8:17:45:37:F4:B8:9B:99:92:B2:56:AA:DC:2B:2C Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Certificate serial: 2309 Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/DA2VyIe4F0U39LibmZKyVqrcKyw.roa Signing time: Mon 26 Jan 2026 06:53:13 +0000 ROA not before: Mon 26 Jan 2026 06:53:13 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63677 IP address blocks: 27.0.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 22:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8969 (0x2309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Validity Not Before: Jan 26 06:53:13 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0C0D95C887B8174537F4B89B9992B256AADC2B2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:d7:1f:b6:b8:5e:a8:46:12:b2:7f:1a:28: ff:25:62:1b:fe:ce:fd:9b:5d:2c:2b:89:ff:84:fb: 49:c0:7a:4b:d0:f2:17:63:ac:23:59:11:98:c0:3a: 5e:59:f3:6a:3a:3a:64:17:47:2c:2d:52:fa:47:9e: 95:23:84:b3:44:fb:5d:6f:42:6e:f6:db:2c:f6:0f: e4:fe:34:30:ed:48:48:e0:be:f0:69:2a:8f:50:4c: cf:c1:ae:9e:d1:5a:1b:64:d8:3e:27:9a:af:85:c3: 5e:24:fd:8f:e2:60:da:e3:16:83:1d:8c:fd:97:84: 7a:89:7b:d6:69:a0:cb:8f:59:69:cb:2c:3e:4d:c8: f4:8e:3b:d8:17:89:1b:99:40:98:4e:57:d3:25:dc: 0e:91:78:13:f3:49:df:3e:4a:f0:11:cd:11:ab:e3: e3:d8:6f:92:58:21:ff:54:1e:34:81:1c:e1:de:65: df:e0:27:2c:39:f3:1d:29:e9:3d:1d:22:57:d9:0a: 10:f5:54:0d:d0:d4:b9:a1:df:e3:8a:6c:20:2b:68: b8:7e:e9:35:ab:1a:30:08:17:e8:17:c7:47:17:69: 6d:97:b0:be:ab:aa:d1:d7:0f:29:1a:1a:ea:ec:d7: 27:bb:a5:2e:7d:63:2d:f5:2e:b7:61:fe:76:6c:bc: 2e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0D:95:C8:87:B8:17:45:37:F4:B8:9B:99:92:B2:56:AA:DC:2B:2C X509v3 Authority Key Identifier: keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/DA2VyIe4F0U39LibmZKyVqrcKyw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.0.212.0/22 Signature Algorithm: sha256WithRSAEncryption 23:8a:08:6f:29:a7:20:39:68:e3:48:19:1b:2c:33:11:2e:b0: 3d:97:7d:36:5c:e9:29:e2:65:f2:b8:2f:91:90:0b:9e:c3:a7: ff:02:f3:08:af:ac:2b:bc:dd:46:4b:24:13:37:44:b5:06:d1: 83:06:87:bf:e2:0c:55:96:b2:36:96:2b:d8:61:ea:7a:0f:1f: 6d:47:80:ca:d9:33:73:c4:60:fb:f1:57:4f:80:84:d8:46:8d: fa:14:2a:4e:11:41:56:22:c2:b4:2e:67:78:5b:16:5f:25:a9: 98:1f:a4:86:70:97:5e:4d:ee:71:7a:57:46:bd:be:77:4c:38: c8:e2:13:d3:bf:84:8a:1d:c1:7a:72:0b:e8:e5:33:ce:3a:1a: 80:a6:05:1a:42:4b:d2:62:55:0e:4d:59:3b:1c:1f:48:34:68: 7f:bd:b9:d2:d5:6c:66:58:fd:d3:ca:63:af:40:75:79:89:e4: 82:d8:b1:6d:04:cb:0f:01:9b:7e:82:43:72:04:87:e5:b2:4c: f7:c0:11:0d:30:cf:ef:ff:66:ea:06:e9:c2:53:a7:d5:c1:50: 49:51:a5:be:c7:b3:d1:8e:9e:8a:51:76:f5:5b:73:8d:11:86: f0:e3:05:ae:32:b4:b8:a5:1b:81:72:12:03:db:80:2f:56:b2: c2:81:ec:c6 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIwkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEMx RkI1NTNGRjIzMzEyQ0Q5QzI1REUxREE3MjA0OEYwNjQ4M0M1QTAeFw0yNjAxMjYw NjUzMTNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDBDMEQ5NUM4ODdCODE3 NDUzN0Y0Qjg5Qjk5OTJCMjU2QUFEQzJCMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwWtcftrheqEYSsn8aKP8lYhv+zv2bXSwrif+E+0nAekvQ8hdj rCNZEZjAOl5Z82o6OmQXRywtUvpHnpUjhLNE+11vQm722yz2D+T+NDDtSEjgvvBp Ko9QTM/Brp7RWhtk2D4nmq+Fw14k/Y/iYNrjFoMdjP2XhHqJe9ZpoMuPWWnLLD5N yPSOO9gXiRuZQJhOV9Ml3A6ReBPzSd8+SvARzRGr4+PYb5JYIf9UHjSBHOHeZd/g Jyw58x0p6T0dIlfZChD1VA3Q1Lmh3+OKbCAraLh+6TWrGjAIF+gXx0cXaW2XsL6r qtHXDykaGurs1ye7pS59Yy31Lrdh/nZsvC4FAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUDA2VyIe4F0U39LibmZKyVqrcKywwHwYDVR0jBBgwFoAUTB+1U/8jMSzZwl3h 2nIEjwZIPFowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTYz MC9UQi0xVV84ak1Telp3bDNoMm5JRWp3WklQRm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RCLTFVXzhqTVN6WndsM2gybklFandaSVBGby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2MzAvREEyVnlJZTRGMFUz OUxpYm1aS3lWcXJjS3l3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAhsA1DANBgkqhkiG9w0BAQsFAAOCAQEAI4oIbymnIDlo40gZGywzES6wPZd9 NlzpKeJl8rgvkZALnsOn/wLzCK+sK7zdRkskEzdEtQbRgwaHv+IMVZayNpYr2GHq eg8fbUeAytkzc8Rg+/FXT4CE2EaN+hQqThFBViLCtC5neFsWXyWpmB+khnCXXk3u cXpXRr2+d0w4yOIT07+Eih3BenIL6OUzzjoagKYFGkJL0mJVDk1ZOxwfSDRof725 0tVsZlj908pjr0B1eYnkgtixbQTLDwGbfoJDcgSH5bJM98ARDTDP7/9m6gbpwlOn 1cFQSVGlvsez0Y6eilF29VtzjRGG8OMFrjK0uKUbgXISA9uAL1aywoHsxg== -----END CERTIFICATE-----Generated at Mon Jan 26 21:09:11 2026 by rpki-client