This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/esCYu0JEVMH_YqtMUSJdoOkRWQ4.roa File: esCYu0JEVMH_YqtMUSJdoOkRWQ4.roa (raw, json) Hash identifier: uyPmbNzEpeAABBZYgbGkveGl7ynOz33DLToGYNoP7hg= Subject key identifier: 7A:C0:98:BB:42:44:54:C1:FF:62:AB:4C:51:22:5D:A0:E9:11:59:0E Certificate issuer: /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850 Certificate serial: 06CD Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/esCYu0JEVMH_YqtMUSJdoOkRWQ4.roa Signing time: Wed 31 Dec 2025 08:10:56 +0000 ROA not before: Wed 31 Dec 2025 08:10:56 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 17969 IP address blocks: 125.62.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1741 (0x6cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850 Validity Not Before: Dec 31 08:10:56 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7AC098BB424454C1FF62AB4C51225DA0E911590E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:f6:14:25:81:bc:0f:29:28:16:3e:df:59: d3:d7:63:7e:e1:c9:20:d5:be:31:a9:c3:91:05:48: 01:19:75:c2:16:54:c6:92:a1:b4:ce:bf:68:c4:fe: 94:a9:0f:84:bc:10:b2:65:aa:a0:85:86:b8:9e:5a: 59:71:ea:18:94:70:cc:95:cb:38:43:4e:29:a1:fc: 30:95:8e:bd:6c:fd:cd:c2:fd:2a:a2:c9:83:0d:5a: b8:8a:3d:fe:36:18:14:36:32:b0:2b:94:de:6d:03: bd:f2:2d:5d:e9:04:12:fd:a3:9e:6e:b7:6a:db:d9: 7b:e6:1a:11:8f:5b:22:46:b0:ab:3a:23:b2:24:a9: 13:cc:b8:09:cd:b4:49:9e:f6:59:ce:ed:84:42:65: 3b:a4:e2:8f:4c:8b:64:39:cc:36:b7:99:a9:4d:51: 8c:aa:0d:d8:42:ad:a9:11:95:27:34:65:b8:2f:e8: 3e:32:5e:38:08:67:e8:9a:b4:26:79:52:89:84:4d: 24:d4:11:c6:e3:7b:b9:90:92:c0:5f:08:f4:16:d1: 84:49:12:7a:52:11:16:f9:83:4b:2c:88:06:eb:ac: 16:f2:de:53:42:1b:f2:ef:da:48:97:3d:05:3b:23: 87:0f:0e:5c:ac:c5:46:55:2a:aa:e1:6c:b2:e3:0f: 4b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C0:98:BB:42:44:54:C1:FF:62:AB:4C:51:22:5D:A0:E9:11:59:0E X509v3 Authority Key Identifier: keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/esCYu0JEVMH_YqtMUSJdoOkRWQ4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.62.0.0/18 Signature Algorithm: sha256WithRSAEncryption bc:ca:6a:a5:09:b3:9f:e4:3a:91:f5:ce:a9:67:a4:a1:01:b5: 32:55:c5:2c:96:00:c7:fd:22:63:f0:b4:e1:c5:0c:3c:30:94: be:0c:7d:83:bc:86:22:71:b9:6c:92:6b:49:4e:e2:00:7b:d1: e8:1a:ab:08:c8:fb:d6:ed:7b:14:c0:ed:8a:d0:99:b3:2a:37: 39:5f:a1:f9:f1:c7:96:82:8d:1b:ce:3d:16:3e:e3:9b:62:c7: ef:a2:22:4d:6d:df:76:8e:e7:8a:ec:68:68:d0:c1:82:b7:1e: 71:78:b9:59:42:7a:f4:59:5e:77:58:70:84:c2:b3:2b:f8:7e: bd:2b:a9:5a:f0:40:c7:1d:17:2b:61:a5:5b:97:c6:48:6f:4f: ca:d4:ba:3c:5f:ad:15:ca:31:d0:68:f9:0c:6e:59:9e:ae:53: 93:aa:99:6c:87:c8:2f:75:8c:df:79:cf:8b:93:18:50:4c:aa: c4:0f:8f:08:fd:89:a8:c3:2d:ba:7f:f8:7e:a9:6d:31:cb:94: 71:f9:4f:5b:7f:e4:58:dc:aa:59:81:3a:17:69:42:2a:bd:13: b9:08:dd:30:17:f3:f9:7a:89:a9:7a:25:c3:1f:a0:25:c3:54: 80:3d:e8:f1:15:aa:1f:af:0b:86:43:a7:fd:69:88:68:d6:3a: b2:1c:dd:be -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBs0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNC MjczQjA5Nzk5N0MwMkI0RjUyRTVDMUJCNEZFRkU2Njc5Nzg1MDAeFw0yNTEyMzEw ODEwNTZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDdBQzA5OEJCNDI0NDU0 QzFGRjYyQUI0QzUxMjI1REEwRTkxMTU5MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDATPYUJYG8DykoFj7fWdPXY37hySDVvjGpw5EFSAEZdcIWVMaS obTOv2jE/pSpD4S8ELJlqqCFhrieWllx6hiUcMyVyzhDTimh/DCVjr1s/c3C/Sqi yYMNWriKPf42GBQ2MrArlN5tA73yLV3pBBL9o55ut2rb2XvmGhGPWyJGsKs6I7Ik qRPMuAnNtEme9lnO7YRCZTuk4o9Mi2Q5zDa3malNUYyqDdhCrakRlSc0Zbgv6D4y XjgIZ+iatCZ5UomETSTUEcbje7mQksBfCPQW0YRJEnpSERb5g0ssiAbrrBby3lNC G/Lv2kiXPQU7I4cPDlysxUZVKqrhbLLjD0tFAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUesCYu0JEVMH/YqtMUSJdoOkRWQ4wHwYDVR0jBBgwFoAU7LJzsJeZfAK09S5c G7T+/mZ5eFAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjIv N0xKenNKZVpmQUswOVM1Y0c3VC1fbVo1ZUZBLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC83TEp6c0plWmZBSzA5UzVjRzdULV9tWjVlRkEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMi9lc0NZdTBKRVZNSF9ZcXRN VVNKZG9Pa1JXUTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG fT4AMA0GCSqGSIb3DQEBCwUAA4IBAQC8ymqlCbOf5DqR9c6pZ6ShAbUyVcUslgDH /SJj8LThxQw8MJS+DH2DvIYicblskmtJTuIAe9HoGqsIyPvW7XsUwO2K0JmzKjc5 X6H58ceWgo0bzj0WPuObYsfvoiJNbd92jueK7Gho0MGCtx5xeLlZQnr0WV53WHCE wrMr+H69K6la8EDHHRcrYaVbl8ZIb0/K1Lo8X60VyjHQaPkMblmerlOTqplsh8gv dYzfec+LkxhQTKrED48I/Ymowy26f/h+qW0xy5Rx+U9bf+RY3KpZgToXaUIqvRO5 CN0wF/P5eompeiXDH6Alw1SAPejxFaofrwuGQ6f9aYho1jqyHN2+ -----END CERTIFICATE-----Generated at Mon Jan 19 15:28:03 2026 by rpki-client