This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/aN_d1auW_bTX7Ylu0Ule_KH_8Rg.roa File: aN_d1auW_bTX7Ylu0Ule_KH_8Rg.roa (raw, json) Hash identifier: RQMR74cQd6B3xxTXlLduHy30v+m9gw7Rq5hXGCPThi0= Subject key identifier: 68:DF:DD:D5:AB:96:FD:B4:D7:ED:89:6E:D1:49:5E:FC:A1:FF:F1:18 Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Certificate serial: 2308 Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/aN_d1auW_bTX7Ylu0Ule_KH_8Rg.roa Signing time: Mon 26 Jan 2026 06:53:12 +0000 ROA not before: Mon 26 Jan 2026 06:53:12 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63677 IP address blocks: 27.0.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 22:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8968 (0x2308) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Validity Not Before: Jan 26 06:53:12 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=68DFDDD5AB96FDB4D7ED896ED1495EFCA1FFF118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:09:5f:80:a1:a1:4c:ca:a3:5d:a2:bd:1d:c3: ac:d6:63:2e:32:4b:98:a0:bc:e3:3a:2b:6f:6b:3e: 62:8f:8d:c5:de:2f:6f:63:71:54:74:81:0b:8d:dc: 85:91:e9:e6:3e:7e:9b:19:88:52:78:b5:2e:15:a9: ef:2f:1a:5f:1c:a8:13:00:61:93:d9:6e:2b:1b:0c: 55:46:5d:23:84:8b:f0:2e:3b:4c:37:7c:bf:59:8a: 79:65:52:c8:ea:6e:73:d2:b3:1e:0b:37:cd:bd:4f: 5e:fd:68:44:d2:b7:3d:1d:71:ea:47:c2:5d:14:3d: 17:f4:97:b3:81:74:d3:86:aa:2a:a1:89:44:6a:4d: 09:e9:62:43:0a:a8:e3:b4:21:90:c8:2c:05:d6:82: 8a:78:1b:23:7c:1c:66:32:e8:24:1c:9c:b5:51:28: 90:5d:c0:03:f6:1d:8a:f5:51:d1:29:a4:92:d3:55: 26:4f:11:54:d9:21:e8:30:13:d5:60:e6:44:fd:93: d6:2a:90:34:c1:51:e9:3f:24:51:a4:8d:42:dc:08: 1c:5b:9b:32:b3:2d:12:ae:43:43:23:69:c9:b4:f8: 64:8a:f5:b2:09:c6:e4:9e:4a:f1:02:cc:b6:da:92: 5a:2d:28:9a:b5:3f:63:16:fb:23:fc:61:14:39:b2: 4f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DF:DD:D5:AB:96:FD:B4:D7:ED:89:6E:D1:49:5E:FC:A1:FF:F1:18 X509v3 Authority Key Identifier: keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/aN_d1auW_bTX7Ylu0Ule_KH_8Rg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.0.208.0/22 Signature Algorithm: sha256WithRSAEncryption 53:7f:11:d6:30:89:63:95:b8:09:c0:93:2b:73:08:b4:53:5c: 56:a6:48:bd:2c:64:05:07:dc:8d:79:ff:f8:cd:2d:81:c4:92: fb:52:6a:5e:70:6a:a9:64:c8:c6:c7:5d:50:6a:23:29:de:80: ab:90:6a:82:51:84:35:f4:38:e2:49:91:77:82:32:23:17:68: c8:e8:ed:39:51:c7:9b:3f:4d:68:50:a5:64:19:d2:1c:1a:a9: ae:af:e4:bc:a4:cc:91:96:d7:52:f8:51:da:8b:f5:34:09:db: 00:56:88:af:7f:0b:c6:a0:8b:da:df:6b:94:87:69:11:7b:f6: 07:1b:52:25:38:ed:f2:4d:ab:e6:21:e4:a8:e6:e7:25:7e:89: 50:27:0b:34:7f:9e:ab:49:9c:c8:0e:e9:c5:33:33:87:a2:10: 93:70:37:9a:64:70:2d:73:9f:4b:41:15:95:15:02:77:75:49: 21:96:8d:7b:84:5c:80:17:37:d7:a1:21:cc:b8:f6:ba:59:ee: c6:6c:08:ac:22:55:26:29:b7:0f:a3:dd:1d:e2:ad:c1:d3:bc: a9:d2:13:81:92:11:6c:ec:f3:bd:f5:53:7d:64:4d:3e:07:d0: 4f:af:21:b8:f2:57:e0:f0:f9:50:77:a0:50:11:c6:f6:05:bf: db:c2:37:f3 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIwgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEMx RkI1NTNGRjIzMzEyQ0Q5QzI1REUxREE3MjA0OEYwNjQ4M0M1QTAeFw0yNjAxMjYw NjUzMTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDY4REZEREQ1QUI5NkZE QjREN0VEODk2RUQxNDk1RUZDQTFGRkYxMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDACV+AoaFMyqNdor0dw6zWYy4yS5igvOM6K29rPmKPjcXeL29j cVR0gQuN3IWR6eY+fpsZiFJ4tS4Vqe8vGl8cqBMAYZPZbisbDFVGXSOEi/AuO0w3 fL9ZinllUsjqbnPSsx4LN829T179aETStz0dcepHwl0UPRf0l7OBdNOGqiqhiURq TQnpYkMKqOO0IZDILAXWgop4GyN8HGYy6CQcnLVRKJBdwAP2HYr1UdEppJLTVSZP EVTZIegwE9Vg5kT9k9YqkDTBUek/JFGkjULcCBxbmzKzLRKuQ0Mjacm0+GSK9bIJ xuSeSvECzLbaklotKJq1P2MW+yP8YRQ5sk+XAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUaN/d1auW/bTX7Ylu0Ule/KH/8RgwHwYDVR0jBBgwFoAUTB+1U/8jMSzZwl3h 2nIEjwZIPFowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTYz MC9UQi0xVV84ak1Telp3bDNoMm5JRWp3WklQRm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RCLTFVXzhqTVN6WndsM2gybklFandaSVBGby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2MzAvYU5fZDFhdVdfYlRY N1lsdTBVbGVfS0hfOFJnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAhsA0DANBgkqhkiG9w0BAQsFAAOCAQEAU38R1jCJY5W4CcCTK3MItFNcVqZI vSxkBQfcjXn/+M0tgcSS+1JqXnBqqWTIxsddUGojKd6Aq5BqglGENfQ44kmRd4Iy IxdoyOjtOVHHmz9NaFClZBnSHBqprq/kvKTMkZbXUvhR2ov1NAnbAFaIr38LxqCL 2t9rlIdpEXv2BxtSJTjt8k2r5iHkqObnJX6JUCcLNH+eq0mcyA7pxTMzh6IQk3A3 mmRwLXOfS0EVlRUCd3VJIZaNe4RcgBc316EhzLj2ulnuxmwIrCJVJim3D6PdHeKt wdO8qdITgZIRbOzzvfVTfWRNPgfQT68huPJX4PD5UHegUBHG9gW/28I38w== -----END CERTIFICATE-----Generated at Mon Jan 26 21:09:53 2026 by rpki-client