This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/p8WD_n-XSaPBVMUW6URwq-naVs8.roa File: p8WD_n-XSaPBVMUW6URwq-naVs8.roa (raw, json) Hash identifier: qYJAy3i7qrmJ20yOWcmnKyYpLzOt+2J2NjSpwcnPsP8= Subject key identifier: A7:C5:83:FE:7F:97:49:A3:C1:54:C5:16:E9:44:70:AB:E9:DA:56:CF Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Certificate serial: 230B Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/p8WD_n-XSaPBVMUW6URwq-naVs8.roa Signing time: Mon 26 Jan 2026 06:53:13 +0000 ROA not before: Mon 26 Jan 2026 06:53:13 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63679 IP address blocks: 27.0.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 22:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8971 (0x230b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Validity Not Before: Jan 26 06:53:13 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A7C583FE7F9749A3C154C516E94470ABE9DA56CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:08:00:fb:19:ad:f6:b0:35:87:97:8f:8b: d1:4c:e5:49:27:2b:2d:f3:39:73:0b:02:5a:8d:eb: 7f:e2:f9:6f:7e:b6:df:86:e4:2e:00:32:2f:93:e8: b0:22:e8:a0:02:7f:93:58:fb:c6:59:77:a6:61:35: 89:f1:47:8b:6d:7d:95:de:4e:56:15:6a:00:46:1c: 15:b0:e8:88:a8:99:3a:4f:2f:90:80:1d:05:cb:73: 65:c4:52:fd:7a:5f:45:91:96:24:5d:19:22:ad:6e: dc:cf:3f:3e:d4:35:0d:17:84:e6:46:74:6b:c5:5a: 2b:e6:a9:c8:ad:7f:91:63:bb:09:16:21:47:b5:7b: cc:0e:e0:0a:e5:5f:ae:21:33:a7:3f:3e:44:cd:88: f4:2e:75:11:10:5b:a6:2f:99:06:fb:65:14:bc:c4: 62:e8:f7:ec:1c:40:03:2e:f8:bd:27:12:6b:fe:06: 40:70:ae:4e:a8:f6:f5:d8:7c:a9:8b:a9:3b:2d:e5: fd:af:86:96:04:9d:15:dc:a6:fd:d2:29:dc:ab:1e: 36:8d:8b:3a:2e:7c:cf:c7:1f:78:99:14:2a:05:a2: 74:b9:d5:f3:e8:4e:1e:15:7a:47:fa:b1:11:70:a8: 1b:22:e3:8d:d5:ab:06:96:c4:be:c1:68:ac:59:27: c8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C5:83:FE:7F:97:49:A3:C1:54:C5:16:E9:44:70:AB:E9:DA:56:CF X509v3 Authority Key Identifier: keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/p8WD_n-XSaPBVMUW6URwq-naVs8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.0.204.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:38:8f:50:3a:a9:7b:ff:15:b6:bc:38:30:5b:03:90:56:2e: f0:32:59:af:a8:3f:33:39:35:91:47:19:df:1c:2d:5e:74:ea: 04:f5:af:06:d0:2e:01:a0:21:a4:65:9b:de:7d:3c:04:0e:4d: 56:4e:5f:08:df:54:f9:e3:75:3c:3a:e5:05:84:d3:f8:d9:d2: aa:71:0a:c9:85:73:78:52:31:e4:cf:e4:96:52:ea:47:8a:db: f8:bb:cf:b1:de:d0:b1:b7:9a:39:aa:23:d5:d9:40:1a:94:b7: 3d:bc:f7:82:8a:d0:99:53:fa:f3:26:2c:de:43:c2:30:70:d8: 1a:85:f5:f0:2a:12:82:33:da:c5:e3:6f:db:2a:49:f1:4d:43: 01:b1:c5:40:25:0d:04:2c:f6:7c:7e:ad:c3:0b:b8:0d:c0:62: 8e:6d:55:ff:91:02:e2:ca:ff:7d:9d:e0:a4:89:dd:38:d3:80: 9c:9f:05:63:81:19:b9:a0:9a:e9:97:df:87:48:61:cb:c5:d3: 0b:19:b3:d0:bb:00:f3:72:4c:ad:4e:d8:64:e3:9a:35:26:0d: bc:11:ae:11:09:ee:b2:22:eb:b0:f8:f8:7f:f7:e2:24:35:cc: 03:ce:de:39:3d:33:99:9a:72:52:f1:31:7e:0e:81:25:e2:0c: 81:83:85:01 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIwswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEMx RkI1NTNGRjIzMzEyQ0Q5QzI1REUxREE3MjA0OEYwNjQ4M0M1QTAeFw0yNjAxMjYw NjUzMTNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEE3QzU4M0ZFN0Y5NzQ5 QTNDMTU0QzUxNkU5NDQ3MEFCRTlEQTU2Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrEwgA+xmt9rA1h5ePi9FM5UknKy3zOXMLAlqN63/i+W9+tt+G 5C4AMi+T6LAi6KACf5NY+8ZZd6ZhNYnxR4ttfZXeTlYVagBGHBWw6IiomTpPL5CA HQXLc2XEUv16X0WRliRdGSKtbtzPPz7UNQ0XhOZGdGvFWivmqcitf5FjuwkWIUe1 e8wO4ArlX64hM6c/PkTNiPQudREQW6YvmQb7ZRS8xGLo9+wcQAMu+L0nEmv+BkBw rk6o9vXYfKmLqTst5f2vhpYEnRXcpv3SKdyrHjaNizoufM/HH3iZFCoFonS51fPo Th4Vekf6sRFwqBsi443VqwaWxL7BaKxZJ8jdAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUp8WD/n+XSaPBVMUW6URwq+naVs8wHwYDVR0jBBgwFoAUTB+1U/8jMSzZwl3h 2nIEjwZIPFowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTYz MC9UQi0xVV84ak1Telp3bDNoMm5JRWp3WklQRm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RCLTFVXzhqTVN6WndsM2gybklFandaSVBGby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2MzAvcDhXRF9uLVhTYVBC Vk1VVzZVUndxLW5hVnM4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAhsAzDANBgkqhkiG9w0BAQsFAAOCAQEAmziPUDqpe/8Vtrw4MFsDkFYu8DJZ r6g/Mzk1kUcZ3xwtXnTqBPWvBtAuAaAhpGWb3n08BA5NVk5fCN9U+eN1PDrlBYTT +NnSqnEKyYVzeFIx5M/kllLqR4rb+LvPsd7QsbeaOaoj1dlAGpS3Pbz3gorQmVP6 8yYs3kPCMHDYGoX18CoSgjPaxeNv2ypJ8U1DAbHFQCUNBCz2fH6twwu4DcBijm1V /5EC4sr/fZ3gpIndONOAnJ8FY4EZuaCa6Zffh0hhy8XTCxmz0LsA83JMrU7YZOOa NSYNvBGuEQnusiLrsPj4f/fiJDXMA87eOT0zmZpyUvExfg6BJeIMgYOFAQ== -----END CERTIFICATE-----Generated at Mon Jan 26 21:09:54 2026 by rpki-client