This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/MqzIh0336AnO_QjJlhnz1vftDaQ.roa File: MqzIh0336AnO_QjJlhnz1vftDaQ.roa (raw, json) Hash identifier: dNYWvlMTjkYkhFJMfAzZfUDLeoiUgKHhZgYOwITR49M= Subject key identifier: 32:AC:C8:87:4D:F7:E8:09:CE:FD:08:C9:96:19:F3:D6:F7:ED:0D:A4 Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Certificate serial: 221E Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/MqzIh0336AnO_QjJlhnz1vftDaQ.roa Signing time: Tue 25 Nov 2025 08:48:06 +0000 ROA not before: Tue 25 Nov 2025 08:48:06 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63641 IP address blocks: 123.49.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8734 (0x221e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Validity Not Before: Nov 25 08:48:06 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=32ACC8874DF7E809CEFD08C99619F3D6F7ED0DA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:89:99:69:bb:39:20:a9:e9:87:aa:cd:5d:8e: 62:79:c3:70:6d:9b:3b:11:38:45:d3:a1:9a:a6:bb: 81:89:9c:a4:5c:44:3a:10:41:61:7b:5d:8b:ec:6f: af:91:8f:12:11:73:c4:4e:43:f8:ad:54:18:6f:cc: 79:b1:2c:83:02:a4:ed:56:eb:33:d9:86:e1:99:2a: b1:5b:0e:93:a5:b7:cc:f1:33:56:d4:29:33:a7:58: df:ab:dd:10:67:e5:b1:07:70:38:ad:64:8d:09:ed: fd:9d:61:98:3f:22:8e:58:8f:f8:08:c2:9f:30:fe: 09:99:3d:bb:4b:a2:17:ed:0a:1e:19:c2:44:34:0e: 86:b7:8a:8f:7e:c4:8c:61:a1:3c:c0:0f:e6:fe:d7: 3b:66:9e:bb:0c:9b:46:1f:b5:d2:25:2c:3e:c7:33: c9:08:e8:c1:a3:9b:cf:e1:36:b3:0c:04:0c:a9:b9: e5:36:37:d8:9f:31:2b:97:2a:2e:ef:b5:4a:a5:7d: b5:6e:1f:70:3a:0d:a8:52:1f:8c:91:75:62:3d:45: cc:78:9f:f7:8b:10:02:8d:49:54:d9:29:eb:51:19: c4:dc:89:7c:2e:9c:7b:a7:cf:d5:b3:c2:b4:65:ba: 7b:34:ff:df:00:ec:44:4d:14:45:98:b2:0c:d6:6a: f9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AC:C8:87:4D:F7:E8:09:CE:FD:08:C9:96:19:F3:D6:F7:ED:0D:A4 X509v3 Authority Key Identifier: keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/MqzIh0336AnO_QjJlhnz1vftDaQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.49.195.0/24 Signature Algorithm: sha256WithRSAEncryption 17:2b:fa:0e:ac:0a:a6:0d:61:02:68:37:eb:e0:f6:a7:01:74: 5c:39:0e:10:31:01:bb:0c:cd:3c:88:2c:d7:a0:6e:43:50:fe: 15:ed:1d:94:7b:c4:c8:e0:24:89:6d:c2:ec:e6:50:d9:f8:80: 0c:7e:18:db:e5:b7:da:2c:06:2e:d1:c5:cd:90:6d:b9:79:4e: 14:c8:42:b3:2c:c4:df:e4:bf:24:37:72:51:c7:8f:c2:da:06: f6:e6:0a:7f:9f:09:89:60:9a:9a:44:f0:4f:be:d1:d1:15:29: 2c:33:ed:ac:31:60:47:ea:4d:5c:7e:34:3a:d3:76:94:bd:07: f4:0b:75:df:58:9a:07:3c:50:37:eb:da:20:84:8f:aa:3d:86: c5:d9:e5:e7:f5:94:8c:07:5b:f5:a0:9c:96:f8:a8:b7:36:98: e5:9e:5b:ee:6d:1a:13:d3:2c:e9:d2:2b:5d:f3:3d:10:d9:af: f4:e4:7b:fd:e2:48:e6:b6:90:6a:6c:80:8b:fa:ad:55:ee:52: 76:0e:1e:ed:70:06:b8:51:5c:ae:57:04:52:94:fb:58:c1:c3: cd:39:6a:09:e2:69:8e:36:b6:36:7f:e0:bc:6e:cf:3c:17:ef: fc:92:fe:9b:9e:f4:6f:46:63:16:54:9c:ef:f1:4d:6d:1b:01: 06:ca:f8:36 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIh4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODg4 ODRENEQ0QTc1RjE3RjA4REQ0NENCQTk1OTJGRTcwRjUzOUQ5NzAeFw0yNTExMjUw ODQ4MDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDMyQUNDODg3NERGN0U4 MDlDRUZEMDhDOTk2MTlGM0Q2RjdFRDBEQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8iZlpuzkgqemHqs1djmJ5w3BtmzsROEXToZqmu4GJnKRcRDoQ QWF7XYvsb6+RjxIRc8ROQ/itVBhvzHmxLIMCpO1W6zPZhuGZKrFbDpOlt8zxM1bU KTOnWN+r3RBn5bEHcDitZI0J7f2dYZg/Io5Yj/gIwp8w/gmZPbtLohftCh4ZwkQ0 Doa3io9+xIxhoTzAD+b+1ztmnrsMm0YftdIlLD7HM8kI6MGjm8/hNrMMBAypueU2 N9ifMSuXKi7vtUqlfbVuH3A6DahSH4yRdWI9Rcx4n/eLEAKNSVTZKetRGcTciXwu nHunz9WzwrRluns0/98A7ERNFEWYsgzWavnhAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUMqzIh0336AnO/QjJlhnz1vftDaQwHwYDVR0jBBgwFoAUiIhNTUp18X8I3UTL qVkv5w9TnZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy Mi9pSWhOVFVwMThYOEkzVVRMcVZrdjV3OVRuWmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2lJaE5UVXAxOFg4STNVVExxVmt2NXc5VG5aYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjIvTXF6SWgwMzM2QW5P X1FqSmxobnoxdmZ0RGFRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHsxwzANBgkqhkiG9w0BAQsFAAOCAQEAFyv6DqwKpg1hAmg36+D2pwF0XDkO EDEBuwzNPIgs16BuQ1D+Fe0dlHvEyOAkiW3C7OZQ2fiADH4Y2+W32iwGLtHFzZBt uXlOFMhCsyzE3+S/JDdyUcePwtoG9uYKf58JiWCamkTwT77R0RUpLDPtrDFgR+pN XH40OtN2lL0H9At131iaBzxQN+vaIISPqj2Gxdnl5/WUjAdb9aCclviotzaY5Z5b 7m0aE9Ms6dIrXfM9ENmv9OR7/eJI5raQamyAi/qtVe5Sdg4e7XAGuFFcrlcEUpT7 WMHDzTlqCeJpjja2Nn/gvG7PPBfv/JL+m570b0ZjFlSc7/FNbRsBBsr4Ng== -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:35 2025 by rpki-client