This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/341/RWOom0h13zAc02rOz6i24OlEc34.roa File: RWOom0h13zAc02rOz6i24OlEc34.roa (raw, json) Hash identifier: +R6GoicznAedk6+/LwpWWdjF8MN83mh2P32QVuI/qSo= Subject key identifier: 45:63:A8:9B:48:75:DF:30:1C:D3:6A:CE:CF:A8:B6:E0:E9:44:73:7E Certificate issuer: /CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE Certificate serial: 1BA0 Authority key identifier: 85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/RWOom0h13zAc02rOz6i24OlEc34.roa Signing time: Wed 14 Jan 2026 08:15:06 +0000 ROA not before: Wed 14 Jan 2026 08:15:06 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 37963 IP address blocks: 2406:1880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7072 (0x1ba0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE Validity Not Before: Jan 14 08:15:06 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4563A89B4875DF301CD36ACECFA8B6E0E944737E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4f:35:58:2f:9b:f1:c3:06:d4:43:0a:5e:7c: ca:53:e8:5f:49:dc:6b:72:00:97:5d:72:c6:e4:72: 9c:a2:02:41:c0:52:8d:6d:d2:ba:5f:88:5f:ce:1c: ca:64:ea:d8:34:69:d1:97:0e:ef:fc:84:62:37:ee: a7:d0:95:e9:92:f0:5f:9a:1e:85:6c:ea:95:14:97: 95:02:2d:d0:93:67:14:5d:da:ea:c5:76:0c:a9:a4: 00:d1:99:96:7f:65:92:63:2d:f1:ad:b0:e6:6c:89: 6c:1c:f7:54:3a:89:99:53:95:65:cb:06:40:45:9d: 93:60:e3:fa:80:57:1e:e3:fe:d4:3f:13:66:2f:61: 30:30:8d:7c:55:21:3c:a4:71:81:8c:3c:af:8d:0c: e6:54:df:83:32:29:38:1b:d3:ae:29:6a:b7:e4:2d: 9e:0f:92:cd:c0:f8:e1:01:7e:04:2a:1b:ea:76:69: e0:7b:ba:64:67:92:c3:24:03:3c:d6:40:d7:dc:54: e4:e6:5c:73:31:d3:86:a1:c5:45:11:30:4e:73:e6: ef:bc:ff:a5:e5:11:cc:00:94:82:b7:74:98:a2:fc: 39:d1:f4:35:12:34:05:52:bd:f6:4d:f0:b9:d9:b3: f9:7e:03:b9:55:5a:76:3e:0a:83:02:51:02:27:ca: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:63:A8:9B:48:75:DF:30:1C:D3:6A:CE:CF:A8:B6:E0:E9:44:73:7E X509v3 Authority Key Identifier: keyid:85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/RWOom0h13zAc02rOz6i24OlEc34.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:1880::/32 Signature Algorithm: sha256WithRSAEncryption 1a:18:21:37:f9:c7:c5:d9:8d:5f:5f:2e:27:ab:2e:b1:b7:13: 80:24:1b:e5:eb:6b:5c:f3:5c:a4:c4:53:ea:31:09:74:b5:a6: e2:89:a0:69:b3:42:7f:2f:16:d8:b8:00:06:a2:3b:5c:43:d0: 59:de:aa:8f:e6:d3:7b:10:a0:78:86:54:3e:0e:87:e8:05:b7: 30:78:94:ff:f4:b3:b0:54:d5:17:71:15:cf:61:9a:9b:8a:88: a1:9a:5a:9d:ff:3f:50:dd:18:24:8c:0f:9c:af:b4:7d:84:89: 22:ac:31:09:fd:d3:f3:bb:9e:26:97:d8:52:5c:78:be:32:98: 06:3a:fd:4f:35:4e:b6:92:fc:f2:99:fc:1c:81:28:c7:d8:e0: 4a:81:bd:cb:20:55:1a:ac:5f:f3:02:e9:03:4d:d0:4c:af:98: 33:9a:dc:d4:ee:b5:f8:8e:b9:2c:50:d1:95:1d:44:55:5c:e3: c0:62:11:de:00:98:8d:91:5c:81:a1:a6:da:68:dd:38:27:57: 30:ed:cb:a0:5d:b6:17:af:18:0c:1e:27:a5:cc:b3:fe:33:db: 6d:b4:06:1e:e7:3f:ca:f5:02:5e:bd:18:46:3a:ea:57:89:7f: fc:04:99:3b:26:d0:42:fc:6b:7a:e2:64:01:35:bb:c4:08:7e: 1f:f7:f4:4a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICG6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODU2 REE4NUY5QThBMjg2QjY1Mjg3MEQ0RTQ3NjM1RkYzRDBFOTJBRTAeFw0yNjAxMTQw ODE1MDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQ1NjNBODlCNDg3NURG MzAxQ0QzNkFDRUNGQThCNkUwRTk0NDczN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFTzVYL5vxwwbUQwpefMpT6F9J3GtyAJddcsbkcpyiAkHAUo1t 0rpfiF/OHMpk6tg0adGXDu/8hGI37qfQlemS8F+aHoVs6pUUl5UCLdCTZxRd2urF dgyppADRmZZ/ZZJjLfGtsOZsiWwc91Q6iZlTlWXLBkBFnZNg4/qAVx7j/tQ/E2Yv YTAwjXxVITykcYGMPK+NDOZU34MyKTgb064parfkLZ4Pks3A+OEBfgQqG+p2aeB7 umRnksMkAzzWQNfcVOTmXHMx04ahxUURME5z5u+8/6XlEcwAlIK3dJii/DnR9DUS NAVSvfZN8LnZs/l+A7lVWnY+CoMCUQInyu7BAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQURWOom0h13zAc02rOz6i24OlEc34wHwYDVR0jBBgwFoAUhW2oX5qKKGtlKHDU 5HY1/z0Okq4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx L2hXMm9YNXFLS0d0bEtIRFU1SFkxX3owT2txNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaFcyb1g1cUtLR3RsS0hEVTVIWTFfejBPa3E0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxL1JXT29tMGgxM3pBYzAy ck96NmkyNE9sRWMzNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkBhiAMA0GCSqGSIb3DQEBCwUAA4IBAQAaGCE3+cfF2Y1fXy4nqy6xtxOAJBvl 62tc81ykxFPqMQl0tabiiaBps0J/LxbYuAAGojtcQ9BZ3qqP5tN7EKB4hlQ+Dofo BbcweJT/9LOwVNUXcRXPYZqbioihmlqd/z9Q3RgkjA+cr7R9hIkirDEJ/dPzu54m l9hSXHi+MpgGOv1PNU62kvzymfwcgSjH2OBKgb3LIFUarF/zAukDTdBMr5gzmtzU 7rX4jrksUNGVHURVXOPAYhHeAJiNkVyBoabaaN04J1cw7cugXbYXrxgMHielzLP+ M9tttAYe5z/K9QJevRhGOupXiX/8BJk7JtBC/Gt64mQBNbvECH4f9/RK -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:37 2026 by rpki-client