This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/SC6m8P0q6p7ntOCpRRKCLD07IV4.roa File: SC6m8P0q6p7ntOCpRRKCLD07IV4.roa (raw, json) Hash identifier: F3LkbRuTsF/ZxSWkX81y3jRWbGla7q1/rRTJ2pXLLBQ= Subject key identifier: 48:2E:A6:F0:FD:2A:EA:9E:E7:B4:E0:A9:45:12:82:2C:3D:3B:21:5E Certificate issuer: /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850 Certificate serial: 06CC Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/SC6m8P0q6p7ntOCpRRKCLD07IV4.roa Signing time: Wed 31 Dec 2025 08:10:56 +0000 ROA not before: Wed 31 Dec 2025 08:10:56 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 17969 IP address blocks: 27.144.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850 Validity Not Before: Dec 31 08:10:56 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=482EA6F0FD2AEA9EE7B4E0A94512822C3D3B215E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:bf:ab:5c:a9:9c:31:e6:ed:b9:8f:96:b0: 1a:cd:fa:10:c9:0e:78:9b:b9:2b:40:84:03:89:75: b4:4c:ee:95:51:f5:25:28:7b:74:90:08:b4:fd:12: 24:36:5d:ed:71:60:ce:ae:02:4f:4e:e8:80:84:11: dd:e6:e4:2f:a9:ce:64:b3:64:b7:5f:94:f0:0d:ff: f6:ec:60:ae:f3:b9:91:70:90:db:52:a6:ab:7f:3d: 8d:1d:d6:d1:0d:73:67:9c:f4:e9:30:64:7a:e2:76: 8b:a4:25:99:26:dd:68:78:61:0a:17:ba:00:20:99: 9a:63:30:76:f7:d7:1b:75:b6:12:89:d9:d8:8e:95: 54:54:65:2b:fa:b7:27:7d:8c:19:d5:6d:54:80:8c: 69:de:11:ac:0d:5e:83:e6:67:64:79:4b:ea:af:0b: a5:1f:12:64:78:ab:db:d7:99:32:56:65:fb:1c:71: b3:5e:32:98:07:f0:2a:ae:75:96:9a:d5:97:99:b2: a8:be:64:c7:04:55:2d:c8:eb:90:7b:b8:ff:80:d4: db:ab:38:1e:72:d3:c2:48:cd:db:aa:88:73:ec:76: 7a:a7:c3:c1:a4:02:3d:84:fb:40:6f:69:85:9c:18: 1d:78:c0:6a:ed:56:f7:70:3f:4b:c4:26:35:01:ff: c1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2E:A6:F0:FD:2A:EA:9E:E7:B4:E0:A9:45:12:82:2C:3D:3B:21:5E X509v3 Authority Key Identifier: keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/SC6m8P0q6p7ntOCpRRKCLD07IV4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.144.0.0/16 Signature Algorithm: sha256WithRSAEncryption bd:e9:06:bd:18:a0:c8:b8:de:75:b1:8a:e2:b6:69:da:c3:e8: 27:1c:be:8a:4d:41:9d:b6:21:a5:bf:49:9a:cd:0d:03:ac:3a: 90:11:70:d4:66:72:d6:6f:1e:06:f6:48:fc:b9:6a:0b:3f:e1: dd:03:a4:d4:ab:ad:06:df:54:49:5b:04:de:4f:57:2a:58:b4: c9:74:1c:f4:69:27:e2:fc:08:11:5a:57:b8:f5:aa:2c:a4:ca: 3d:42:dc:8f:2f:9f:2c:30:97:33:ab:f1:84:45:cf:bc:83:98: d1:1a:12:3a:b0:ff:66:71:62:cf:5c:20:cb:0c:16:70:3d:64: 39:37:29:82:8c:22:3c:9c:d9:5c:8d:0c:71:7d:07:a4:12:5a: 3e:08:e4:66:11:66:13:bf:72:bb:0e:4c:26:fd:55:24:e9:17: 7d:e6:18:f6:39:2a:87:30:88:57:fd:40:de:27:4d:1b:1d:11: 72:a3:2f:06:5c:81:05:41:ba:3c:3a:a2:c0:e1:b5:8f:00:b6: 15:5e:2a:6f:a4:98:ea:5c:6a:14:e0:c5:9e:ba:12:a5:77:9a: 6d:9c:a3:e6:a5:c0:ae:b4:05:0b:aa:a2:42:4e:80:15:88:0c: 54:7f:5c:16:b8:21:cc:7f:b8:25:9e:67:a8:ee:da:9e:b5:04: 35:b5:63:d7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBswwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNC MjczQjA5Nzk5N0MwMkI0RjUyRTVDMUJCNEZFRkU2Njc5Nzg1MDAeFw0yNTEyMzEw ODEwNTZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQ4MkVBNkYwRkQyQUVB OUVFN0I0RTBBOTQ1MTI4MjJDM0QzQjIxNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+BL+rXKmcMebtuY+WsBrN+hDJDnibuStAhAOJdbRM7pVR9SUo e3SQCLT9EiQ2Xe1xYM6uAk9O6ICEEd3m5C+pzmSzZLdflPAN//bsYK7zuZFwkNtS pqt/PY0d1tENc2ec9OkwZHridoukJZkm3Wh4YQoXugAgmZpjMHb31xt1thKJ2diO lVRUZSv6tyd9jBnVbVSAjGneEawNXoPmZ2R5S+qvC6UfEmR4q9vXmTJWZfsccbNe MpgH8CqudZaa1ZeZsqi+ZMcEVS3I65B7uP+A1NurOB5y08JIzduqiHPsdnqnw8Gk Aj2E+0BvaYWcGB14wGrtVvdwP0vEJjUB/8FbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUSC6m8P0q6p7ntOCpRRKCLD07IV4wHwYDVR0jBBgwFoAU7LJzsJeZfAK09S5c G7T+/mZ5eFAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjIv N0xKenNKZVpmQUswOVM1Y0c3VC1fbVo1ZUZBLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC83TEp6c0plWmZBSzA5UzVjRzdULV9tWjVlRkEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMi9TQzZtOFAwcTZwN250T0Nw UlJLQ0xEMDdJVjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA G5AwDQYJKoZIhvcNAQELBQADggEBAL3pBr0YoMi43nWxiuK2adrD6CccvopNQZ22 IaW/SZrNDQOsOpARcNRmctZvHgb2SPy5ags/4d0DpNSrrQbfVElbBN5PVypYtMl0 HPRpJ+L8CBFaV7j1qiykyj1C3I8vnywwlzOr8YRFz7yDmNEaEjqw/2ZxYs9cIMsM FnA9ZDk3KYKMIjyc2VyNDHF9B6QSWj4I5GYRZhO/crsOTCb9VSTpF33mGPY5Kocw iFf9QN4nTRsdEXKjLwZcgQVBujw6osDhtY8AthVeKm+kmOpcahTgxZ66EqV3mm2c o+alwK60BQuqokJOgBWIDFR/XBa4Icx/uCWeZ6ju2p61BDW1Y9c= -----END CERTIFICATE-----Generated at Mon Jan 19 15:28:03 2026 by rpki-client