This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/Udu4Y2VVSfSvAsDnVgr4ywyw784.roa File: Udu4Y2VVSfSvAsDnVgr4ywyw784.roa (raw, json) Hash identifier: b+votEcUwTvuXUiyb8agRXfAYHbNT531+XZyEUMsCjo= Subject key identifier: 51:DB:B8:63:65:55:49:F4:AF:02:C0:E7:56:0A:F8:CB:0C:B0:EF:CE Certificate issuer: /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850 Certificate serial: 06CA Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/Udu4Y2VVSfSvAsDnVgr4ywyw784.roa Signing time: Wed 31 Dec 2025 08:10:55 +0000 ROA not before: Wed 31 Dec 2025 08:10:55 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 17969 IP address blocks: 117.59.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1738 (0x6ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850 Validity Not Before: Dec 31 08:10:55 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=51DBB863655549F4AF02C0E7560AF8CB0CB0EFCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:39:ca:7c:e5:e9:19:2a:9e:1c:34:45:a9: fb:e4:f6:cb:9b:ea:0a:7c:f0:99:13:fb:df:1a:ec: fb:16:73:b2:20:f1:39:21:a4:03:18:6d:99:d3:18: 35:d6:ca:f5:d6:50:b3:ce:42:2b:a1:59:ce:b6:e1: 6e:e9:24:d5:64:06:31:6b:d4:50:0f:f1:41:c2:08: 50:8e:5d:a3:6a:0c:05:d0:41:cf:0d:fe:3d:60:35: d8:b6:cb:31:3d:15:92:f6:17:6e:02:b0:da:76:a9: ba:54:12:c8:fa:e7:11:4a:00:53:fd:ce:40:78:28: e7:de:30:19:34:47:84:76:ef:48:3d:75:8c:80:91: 46:3f:eb:db:b3:59:45:d4:47:ef:fd:0c:4f:d3:8f: 49:b0:96:1b:9d:34:d2:1e:63:16:79:70:c6:b6:7c: 3b:a8:59:b7:df:20:3e:c9:ba:37:8e:14:e1:d2:65: 22:b6:8b:48:2f:a3:73:be:38:90:a9:83:ca:57:ac: 74:a7:37:5f:03:e7:7c:5f:75:19:7a:00:81:bc:79: c2:e3:b2:36:c6:a1:ad:a9:1e:96:f9:6b:9e:40:09: eb:c7:d7:a6:18:2e:c0:f6:9f:81:06:1c:05:82:ef: cc:b1:10:6b:ea:b7:09:e4:1d:96:de:af:49:3f:ee: 7c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DB:B8:63:65:55:49:F4:AF:02:C0:E7:56:0A:F8:CB:0C:B0:EF:CE X509v3 Authority Key Identifier: keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/Udu4Y2VVSfSvAsDnVgr4ywyw784.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 117.59.0.0/16 Signature Algorithm: sha256WithRSAEncryption 71:74:86:48:77:ae:c4:9e:19:81:db:68:f9:55:9f:8d:9b:c2: 12:8a:fe:ec:10:bd:72:f3:ab:49:95:9b:59:36:8e:1c:2a:74: f5:27:18:b1:d5:e7:dd:0d:46:9d:07:b2:e1:98:c9:6c:8e:f8: eb:00:e0:6e:cb:6a:4f:e2:12:6d:2c:cc:9b:80:af:a2:fa:b7: d9:81:61:b0:e9:64:0d:2f:38:5d:62:0b:db:f3:e0:56:31:4a: 78:1b:ec:ff:2b:f7:a3:79:1a:70:b5:7a:4f:61:bb:e0:b3:52: da:75:9a:2f:20:28:e7:fc:7f:99:0d:6c:60:37:a8:69:1a:6a: b9:df:cb:ff:a9:e8:67:da:97:9a:85:09:48:12:1f:2e:21:c5: 48:a1:95:2c:3c:06:34:1a:67:02:04:5d:1f:c7:40:a3:1c:98: e9:4c:63:ad:22:b2:15:de:d5:b8:a3:fc:fd:0f:ce:45:46:c2: ba:cd:1f:c8:d1:e8:c0:92:29:48:20:0b:d1:79:c9:e1:81:0f: 8d:b2:10:55:2f:94:be:b7:d9:b9:a0:94:ca:54:1d:e9:c6:f3: 1d:b4:0d:40:62:56:cb:c8:e2:45:18:e4:83:cc:d6:2b:f8:8f: d1:38:b9:0c:b3:a1:9a:5c:a9:9f:c2:78:6a:82:26:9d:4c:8a: c6:15:a8:d1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBsowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNC MjczQjA5Nzk5N0MwMkI0RjUyRTVDMUJCNEZFRkU2Njc5Nzg1MDAeFw0yNTEyMzEw ODEwNTVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDUxREJCODYzNjU1NTQ5 RjRBRjAyQzBFNzU2MEFGOENCMENCMEVGQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyWDnKfOXpGSqeHDRFqfvk9sub6gp88JkT+98a7PsWc7Ig8Tkh pAMYbZnTGDXWyvXWULPOQiuhWc624W7pJNVkBjFr1FAP8UHCCFCOXaNqDAXQQc8N /j1gNdi2yzE9FZL2F24CsNp2qbpUEsj65xFKAFP9zkB4KOfeMBk0R4R270g9dYyA kUY/69uzWUXUR+/9DE/Tj0mwlhudNNIeYxZ5cMa2fDuoWbffID7JujeOFOHSZSK2 i0gvo3O+OJCpg8pXrHSnN18D53xfdRl6AIG8ecLjsjbGoa2pHpb5a55ACevH16YY LsD2n4EGHAWC78yxEGvqtwnkHZber0k/7nyfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUdu4Y2VVSfSvAsDnVgr4ywyw784wHwYDVR0jBBgwFoAU7LJzsJeZfAK09S5c G7T+/mZ5eFAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjIv N0xKenNKZVpmQUswOVM1Y0c3VC1fbVo1ZUZBLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC83TEp6c0plWmZBSzA5UzVjRzdULV9tWjVlRkEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMi9VZHU0WTJWVlNmU3ZBc0Ru VmdyNHl3eXc3ODQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dTswDQYJKoZIhvcNAQELBQADggEBAHF0hkh3rsSeGYHbaPlVn42bwhKK/uwQvXLz q0mVm1k2jhwqdPUnGLHV590NRp0HsuGYyWyO+OsA4G7Lak/iEm0szJuAr6L6t9mB YbDpZA0vOF1iC9vz4FYxSngb7P8r96N5GnC1ek9hu+CzUtp1mi8gKOf8f5kNbGA3 qGkaarnfy/+p6Gfal5qFCUgSHy4hxUihlSw8BjQaZwIEXR/HQKMcmOlMY60ishXe 1bij/P0PzkVGwrrNH8jR6MCSKUggC9F5yeGBD42yEFUvlL632bmglMpUHenG8x20 DUBiVsvI4kUY5IPM1iv4j9E4uQyzoZpcqZ/CeGqCJp1MisYVqNE= -----END CERTIFICATE-----Generated at Mon Jan 19 15:28:00 2026 by rpki-client