This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/UcTohbTQodAbEAI3lzS2aS5o8k8.roa File: UcTohbTQodAbEAI3lzS2aS5o8k8.roa (raw, json) Hash identifier: Vd+P8Da+KkTKhV689IfBELIJGjeJR1MDlO/BU9VdRD0= Subject key identifier: 51:C4:E8:85:B4:D0:A1:D0:1B:10:02:37:97:34:B6:69:2E:68:F2:4F Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Certificate serial: 1BC5 Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/UcTohbTQodAbEAI3lzS2aS5o8k8.roa Signing time: Thu 15 Jan 2026 08:31:40 +0000 ROA not before: Thu 15 Jan 2026 08:31:40 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 37963 IP address blocks: 2406:2880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 10:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7109 (0x1bc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Validity Not Before: Jan 15 08:31:40 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=51C4E885B4D0A1D01B1002379734B6692E68F24F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c9:19:c4:c4:f5:38:82:d8:c3:aa:63:23:98: f6:40:db:5c:41:ca:91:c1:fd:10:9e:e0:80:66:3a: 4c:e4:27:5f:5e:a2:67:80:b3:19:f1:03:54:5e:52: f0:4e:e5:a2:f7:f6:54:49:61:3d:40:cc:ca:85:93: 67:96:76:ca:be:c3:8b:7d:b1:12:62:27:3d:7a:56: 9b:1c:1e:70:17:c4:60:6c:db:f1:f7:51:07:68:18: 32:80:ab:36:08:7b:4b:88:8f:16:70:7b:45:e1:b9: 43:5a:b9:04:20:6a:af:d4:5a:c8:85:3c:26:79:e9: 65:45:49:b0:05:c9:b1:60:05:fc:0b:3e:b0:5e:0f: 8f:66:ef:42:c5:40:ea:db:ed:97:1e:fc:96:67:17: 96:b6:ce:38:3b:f6:6a:ca:d9:4f:dd:5b:8d:c5:45: b0:e3:b3:81:8c:f5:81:82:14:ba:01:ec:28:8e:9e: 00:28:85:f1:3c:ef:9f:01:68:6c:25:13:5d:66:4c: 5a:c2:65:af:6c:9b:17:31:b0:55:dd:b1:25:34:f1: dc:a0:72:9b:61:63:80:e3:45:f3:88:bd:1a:d1:e3: 6d:28:ef:1b:dc:ce:61:05:b8:ef:1e:06:de:94:30: 7d:e2:a9:8d:96:ee:78:11:ea:c5:6c:fe:34:72:6b: 79:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C4:E8:85:B4:D0:A1:D0:1B:10:02:37:97:34:B6:69:2E:68:F2:4F X509v3 Authority Key Identifier: keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/UcTohbTQodAbEAI3lzS2aS5o8k8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:2880::/32 Signature Algorithm: sha256WithRSAEncryption 15:bb:8b:ff:fe:aa:4b:6d:d4:96:00:ae:68:e2:c4:37:fe:4b: 73:d2:fd:1a:2e:7f:09:d9:68:76:4f:e2:17:bd:56:6c:8a:50: b8:fc:73:e9:20:0e:7c:f9:36:9f:84:82:ba:58:58:f4:ed:6a: 41:a5:db:35:a7:36:5a:f7:5d:73:0d:c1:8e:3a:a0:f5:c4:e8: 45:f7:bd:c9:cc:be:08:b7:26:73:81:1c:9d:ab:f8:56:b0:fd: 12:62:49:de:9c:ee:08:9b:72:47:5f:91:2e:c1:b4:1d:f3:90: 15:8d:fa:cb:7f:4b:76:55:c9:eb:07:05:d4:ad:4c:f1:2e:d3: f6:f8:91:f8:7f:8a:0c:4b:7e:f0:1d:c9:c0:de:af:fd:37:29: 1f:c0:ea:e4:29:e1:53:38:a2:53:a6:f7:36:18:6d:3e:30:95: 82:23:cf:d3:cd:ae:2f:eb:d4:52:bb:fe:8b:f6:4f:ef:f4:4c: ae:ed:1b:9e:1a:d0:c4:6b:70:9c:ae:f8:da:4a:10:e5:1e:db: 3a:4f:82:0c:68:e8:a2:5d:51:17:f9:31:b5:2f:4b:90:a9:8f: ae:ab:42:38:d8:e4:71:39:f8:2c:7b:f9:d2:67:f5:76:20:03: 6d:07:6e:05:dc:33:2f:35:9b:7b:ed:f0:36:ef:f6:58:6d:ee: 5d:58:5e:f7 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICG8UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjNC QTZBRUYzQjhGQTJFNUQ5QjVFNDM0MzhFMDAyMEQ0MjZBMUVDQTAeFw0yNjAxMTUw ODMxNDBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDUxQzRFODg1QjREMEEx RDAxQjEwMDIzNzk3MzRCNjY5MkU2OEYyNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWyRnExPU4gtjDqmMjmPZA21xBypHB/RCe4IBmOkzkJ19eomeA sxnxA1ReUvBO5aL39lRJYT1AzMqFk2eWdsq+w4t9sRJiJz16VpscHnAXxGBs2/H3 UQdoGDKAqzYIe0uIjxZwe0XhuUNauQQgaq/UWsiFPCZ56WVFSbAFybFgBfwLPrBe D49m70LFQOrb7Zce/JZnF5a2zjg79mrK2U/dW43FRbDjs4GM9YGCFLoB7CiOngAo hfE8758BaGwlE11mTFrCZa9smxcxsFXdsSU08dygcpthY4DjRfOIvRrR420o7xvc zmEFuO8eBt6UMH3iqY2W7ngR6sVs/jRya3mTAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUUcTohbTQodAbEAI3lzS2aS5o8k8wHwYDVR0jBBgwFoAUs7pq7zuPouXZteQ0 OOACDUJqHsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3 L3M3cHE3enVQb3VYWnRlUTBPT0FDRFVKcUhzby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L1VjVG9oYlRRb2RBYkVB STNselMyYVM1bzhrOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkBiiAMA0GCSqGSIb3DQEBCwUAA4IBAQAVu4v//qpLbdSWAK5o4sQ3/ktz0v0a Ln8J2Wh2T+IXvVZsilC4/HPpIA58+TafhIK6WFj07WpBpds1pzZa911zDcGOOqD1 xOhF973JzL4ItyZzgRydq/hWsP0SYknenO4Im3JHX5EuwbQd85AVjfrLf0t2Vcnr BwXUrUzxLtP2+JH4f4oMS37wHcnA3q/9NykfwOrkKeFTOKJTpvc2GG0+MJWCI8/T za4v69RSu/6L9k/v9Eyu7RueGtDEa3CcrvjaShDlHts6T4IMaOiiXVEX+TG1L0uQ qY+uq0I42ORxOfgse/nSZ/V2IANtB24F3DMvNZt77fA27/ZYbe5dWF73 -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:06 2026 by rpki-client