This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/EWen10QMTuzZKfqQAEDh3mVAEEA.roa File: EWen10QMTuzZKfqQAEDh3mVAEEA.roa (raw, json) Hash identifier: rSSyJ5p/uRi3M8aaCyO5xNuqvlrUSuiO7pWU9iALh4E= Subject key identifier: 11:67:A7:D7:44:0C:4E:EC:D9:29:FA:90:00:40:E1:DE:65:40:10:40 Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Certificate serial: 221D Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/EWen10QMTuzZKfqQAEDh3mVAEEA.roa Signing time: Tue 25 Nov 2025 08:48:06 +0000 ROA not before: Tue 25 Nov 2025 08:48:06 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63641 IP address blocks: 123.49.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8733 (0x221d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Validity Not Before: Nov 25 08:48:06 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=1167A7D7440C4EECD929FA900040E1DE65401040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:da:98:4e:11:73:17:bc:52:5f:d5:0d:c8:47: 89:f2:41:f3:4a:0b:4c:0e:1d:e7:36:3f:67:d0:b0: 42:80:11:16:98:08:e5:8a:a9:82:88:d1:ed:82:79: 0d:9a:20:da:02:6d:bf:3c:93:50:36:6f:7f:ef:cb: ec:0b:ea:85:b2:26:33:82:c7:f0:c0:0c:68:b8:1f: 11:3b:61:a5:29:1d:5b:e0:ee:8c:40:96:f4:60:eb: 12:93:9d:65:6b:a4:17:34:d8:98:67:ca:9b:0a:4e: 91:54:d3:ad:19:d9:12:a4:be:5a:29:8c:81:7f:14: fb:36:9e:e7:38:8c:ad:01:0d:75:dd:47:df:41:fc: 51:46:e8:8f:f0:01:96:ee:8a:77:de:f1:d1:5f:c9: a0:c8:1d:00:fd:f7:97:01:62:fc:c2:f2:66:84:d0: aa:93:63:7f:43:f7:57:c7:f5:10:00:d2:bf:76:fe: d7:f8:75:04:ce:3b:69:da:95:d9:e1:01:ca:4f:c6: 10:a6:75:a8:ce:b1:fb:fe:73:84:b7:7d:a3:15:4a: fe:0c:ea:fb:21:09:ba:87:e5:f2:6d:3a:a3:04:15: 39:2b:8b:17:0d:5d:7c:43:9f:e8:c8:28:d2:93:1f: 5c:ba:05:fb:79:58:fa:b2:58:61:50:25:78:14:74: f5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:67:A7:D7:44:0C:4E:EC:D9:29:FA:90:00:40:E1:DE:65:40:10:40 X509v3 Authority Key Identifier: keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/EWen10QMTuzZKfqQAEDh3mVAEEA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.49.196.0/24 Signature Algorithm: sha256WithRSAEncryption aa:ac:f1:ab:3e:ec:10:56:75:35:ca:95:e6:62:7f:6d:82:91: e6:05:1c:55:22:47:7b:af:8e:04:e4:49:27:80:e3:56:0f:1d: be:e4:d6:b9:6e:44:6e:42:61:f9:30:b7:55:09:64:56:e1:d8: 2d:ed:ba:e6:f8:1a:be:6c:38:49:40:56:cf:f1:cb:89:0a:5d: 80:32:ac:e8:b7:1b:c1:e2:58:f4:d3:fd:53:92:5b:67:5a:45: 97:f9:d4:3a:ba:96:6b:08:dd:a3:be:26:e3:2f:10:b9:65:22: 8c:26:71:99:b9:20:f0:b9:39:e3:94:ea:cf:13:ff:40:0c:41: 0f:34:7d:33:81:d4:90:4d:76:d6:91:c8:43:a5:63:8c:da:3d: 08:ac:1b:88:4d:ff:f2:0e:23:34:6f:93:01:a0:cc:6a:9a:92: fb:da:4d:a8:50:ac:61:c6:0e:49:5f:da:75:03:cf:f8:b1:a5: 46:de:11:49:2f:eb:b8:50:23:c5:32:0d:b4:af:da:c9:e5:56: 05:8a:04:fc:9c:41:65:65:71:44:6a:27:84:2f:d2:06:61:6c: 36:f8:6c:7b:d1:83:24:ca:9b:82:8a:a5:b1:97:ba:9b:ad:eb: b4:45:15:8b:c6:b3:9d:68:fd:7f:9d:26:d5:27:2e:8f:04:67: 8e:ee:96:b4 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODg4 ODRENEQ0QTc1RjE3RjA4REQ0NENCQTk1OTJGRTcwRjUzOUQ5NzAeFw0yNTExMjUw ODQ4MDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDExNjdBN0Q3NDQwQzRF RUNEOTI5RkE5MDAwNDBFMURFNjU0MDEwNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO2phOEXMXvFJf1Q3IR4nyQfNKC0wOHec2P2fQsEKAERaYCOWK qYKI0e2CeQ2aINoCbb88k1A2b3/vy+wL6oWyJjOCx/DADGi4HxE7YaUpHVvg7oxA lvRg6xKTnWVrpBc02JhnypsKTpFU060Z2RKkvlopjIF/FPs2nuc4jK0BDXXdR99B /FFG6I/wAZbuinfe8dFfyaDIHQD995cBYvzC8maE0KqTY39D91fH9RAA0r92/tf4 dQTOO2naldnhAcpPxhCmdajOsfv+c4S3faMVSv4M6vshCbqH5fJtOqMEFTkrixcN XXxDn+jIKNKTH1y6Bft5WPqyWGFQJXgUdPXtAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUEWen10QMTuzZKfqQAEDh3mVAEEAwHwYDVR0jBBgwFoAUiIhNTUp18X8I3UTL qVkv5w9TnZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy Mi9pSWhOVFVwMThYOEkzVVRMcVZrdjV3OVRuWmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2lJaE5UVXAxOFg4STNVVExxVmt2NXc5VG5aYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjIvRVdlbjEwUU1UdXpa S2ZxUUFFRGgzbVZBRUVBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHsxxDANBgkqhkiG9w0BAQsFAAOCAQEAqqzxqz7sEFZ1NcqV5mJ/bYKR5gUc VSJHe6+OBORJJ4DjVg8dvuTWuW5EbkJh+TC3VQlkVuHYLe265vgavmw4SUBWz/HL iQpdgDKs6LcbweJY9NP9U5JbZ1pFl/nUOrqWawjdo74m4y8QuWUijCZxmbkg8Lk5 45TqzxP/QAxBDzR9M4HUkE121pHIQ6VjjNo9CKwbiE3/8g4jNG+TAaDMapqS+9pN qFCsYcYOSV/adQPP+LGlRt4RSS/ruFAjxTINtK/ayeVWBYoE/JxBZWVxRGonhC/S BmFsNvhse9GDJMqbgoqlsZe6m63rtEUVi8aznWj9f50m1ScujwRnju6WtA== -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:33 2025 by rpki-client