This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/fotDNxN_sQREMyU_nWg8lpAAvIY.roa File: fotDNxN_sQREMyU_nWg8lpAAvIY.roa (raw, json) Hash identifier: jD3/6TF1DTlEAMRgojNykbybNyv7ZOor/AQZnLJhVXY= Subject key identifier: 7E:8B:43:37:13:7F:B1:04:44:33:25:3F:9D:68:3C:96:90:00:BC:86 Certificate issuer: /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850 Certificate serial: 06C9 Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/fotDNxN_sQREMyU_nWg8lpAAvIY.roa Signing time: Wed 31 Dec 2025 08:10:55 +0000 ROA not before: Wed 31 Dec 2025 08:10:55 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 17969 IP address blocks: 2401:7e00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850 Validity Not Before: Dec 31 08:10:55 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7E8B4337137FB1044433253F9D683C969000BC86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:5c:31:ba:17:38:1a:34:7e:38:fb:7c:4b: 63:03:36:38:b5:96:07:6c:43:79:ab:9c:af:a3:d2: af:13:52:b8:5a:ba:b6:2a:ca:be:6e:e8:f8:2f:79: e4:15:6e:18:bd:1a:a0:98:e8:02:b3:9e:bb:00:ac: a4:a5:b9:37:ba:d0:2b:d9:9c:31:33:f8:ff:51:0b: d6:cc:65:2d:af:85:57:61:ee:7e:ee:87:37:27:40: 69:ae:fd:18:11:db:14:af:b9:11:1a:ac:76:49:52: 0b:47:cb:e6:18:8b:3f:1a:73:02:db:2c:ca:20:a0: 12:12:e1:a1:06:ff:61:ba:15:a0:32:fc:0b:98:f9: fb:b9:77:08:64:f8:b2:a3:c6:4d:ad:57:e8:aa:c1: c7:f4:88:7b:b2:08:7d:88:84:9f:b8:cf:22:de:89: cf:f7:60:e4:5d:2b:04:af:bf:8d:88:a8:dd:df:df: a4:25:86:1b:a8:c8:e4:23:37:d1:62:e5:a4:7b:e5: 49:1b:ac:91:cb:8b:21:fc:44:1c:2d:79:1a:2f:df: 81:ee:9f:ee:80:2b:25:44:1b:c7:ca:a7:4d:ac:c2: 7e:2b:d3:86:71:c2:ba:66:7f:b1:f9:ec:fb:41:66: 9f:90:f9:ec:b0:0c:82:15:34:41:8d:3b:b9:01:17: 49:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8B:43:37:13:7F:B1:04:44:33:25:3F:9D:68:3C:96:90:00:BC:86 X509v3 Authority Key Identifier: keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/fotDNxN_sQREMyU_nWg8lpAAvIY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:7e00::/32 Signature Algorithm: sha256WithRSAEncryption 07:95:24:44:ee:46:cc:a8:81:c8:5e:f4:b4:36:6a:a1:56:80: e8:8d:9a:f7:f3:8f:c7:39:f1:a0:30:05:39:00:bc:35:2d:4c: e3:67:9e:fc:d5:3f:af:21:6c:96:4b:e5:d5:5c:59:bb:1d:22: 2c:51:8e:72:b5:51:1f:72:30:eb:cd:6b:e2:66:ba:01:f0:0b: b7:f4:36:98:dc:f8:da:c9:83:07:f5:32:58:cd:e0:c0:c0:f3: 76:00:02:b3:dc:66:be:2c:3a:b2:47:09:ea:79:fc:95:d4:cc: a0:2e:4f:31:d2:07:23:01:1e:af:23:bd:cd:fb:8e:38:9a:81: 2d:e6:da:0f:79:4f:18:6c:c1:37:dc:15:cf:8c:46:b1:fc:dc: be:df:73:47:64:7d:09:f6:ef:e0:55:7a:ee:ba:4b:ec:0f:2d: c6:3d:db:f8:a3:82:42:cf:20:c3:e1:23:33:b2:ca:ba:d6:e9: bd:c0:c6:75:f0:68:fb:21:2a:86:e0:e3:78:3a:91:d2:d9:b6: f5:30:24:d3:0c:0e:a7:86:0b:65:d0:e5:5e:2a:24:23:b3:0c: 0b:c0:98:a2:97:4f:b6:04:7b:46:7e:88:68:25:2d:43:e7:8d: 41:c6:b5:f9:7a:b0:d0:7d:5c:73:eb:20:4b:c0:89:76:ff:24: 68:f4:71:f1 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNC MjczQjA5Nzk5N0MwMkI0RjUyRTVDMUJCNEZFRkU2Njc5Nzg1MDAeFw0yNTEyMzEw ODEwNTVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDdFOEI0MzM3MTM3RkIx MDQ0NDMzMjUzRjlENjgzQzk2OTAwMEJDODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAm1wxuhc4GjR+OPt8S2MDNji1lgdsQ3mrnK+j0q8TUrhaurYq yr5u6PgveeQVbhi9GqCY6AKznrsArKSluTe60CvZnDEz+P9RC9bMZS2vhVdh7n7u hzcnQGmu/RgR2xSvuREarHZJUgtHy+YYiz8acwLbLMogoBIS4aEG/2G6FaAy/AuY +fu5dwhk+LKjxk2tV+iqwcf0iHuyCH2IhJ+4zyLeic/3YORdKwSvv42IqN3f36Ql hhuoyOQjN9Fi5aR75UkbrJHLiyH8RBwteRov34Hun+6AKyVEG8fKp02swn4r04Zx wrpmf7H57PtBZp+Q+eywDIIVNEGNO7kBF0nTAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUfotDNxN/sQREMyU/nWg8lpAAvIYwHwYDVR0jBBgwFoAU7LJzsJeZfAK09S5c G7T+/mZ5eFAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjIv N0xKenNKZVpmQUswOVM1Y0c3VC1fbVo1ZUZBLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC83TEp6c0plWmZBSzA5UzVjRzdULV9tWjVlRkEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMi9mb3RETnhOX3NRUkVNeVVf bldnOGxwQUF2SVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA JAF+ADANBgkqhkiG9w0BAQsFAAOCAQEAB5UkRO5GzKiByF70tDZqoVaA6I2a9/OP xznxoDAFOQC8NS1M42ee/NU/ryFslkvl1VxZux0iLFGOcrVRH3Iw681r4ma6AfAL t/Q2mNz42smDB/UyWM3gwMDzdgACs9xmviw6skcJ6nn8ldTMoC5PMdIHIwEeryO9 zfuOOJqBLebaD3lPGGzBN9wVz4xGsfzcvt9zR2R9Cfbv4FV67rpL7A8txj3b+KOC Qs8gw+EjM7LKutbpvcDGdfBo+yEqhuDjeDqR0tm29TAk0wwOp4YLZdDlXiokI7MM C8CYopdPtgR7Rn6IaCUtQ+eNQca1+Xqw0H1cc+sgS8CJdv8kaPRx8Q== -----END CERTIFICATE-----Generated at Mon Jan 19 15:28:02 2026 by rpki-client