This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/nW9xiz0MnXgXyzr9ugb6MDBQVGo.roa File: nW9xiz0MnXgXyzr9ugb6MDBQVGo.roa (raw, json) Hash identifier: 8DlphKnOC+OQmVIxd6QvTWzWu9l+65jBnGINNbqNneA= Subject key identifier: 9D:6F:71:8B:3D:0C:9D:78:17:CB:3A:FD:BA:06:FA:30:30:50:54:6A Certificate issuer: /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850 Certificate serial: 06CB Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/nW9xiz0MnXgXyzr9ugb6MDBQVGo.roa Signing time: Wed 31 Dec 2025 08:10:56 +0000 ROA not before: Wed 31 Dec 2025 08:10:56 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 17969 IP address blocks: 218.244.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1739 (0x6cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850 Validity Not Before: Dec 31 08:10:56 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=9D6F718B3D0C9D7817CB3AFDBA06FA303050546A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:21:59:77:62:de:d9:af:d3:ee:78:66:95:17: f5:07:58:44:72:73:90:63:60:9e:73:64:c7:29:2d: 6e:a1:04:59:fa:3a:15:66:58:ad:57:29:87:86:61: a4:75:0c:76:b9:f5:79:15:e6:a2:59:9c:cd:98:c2: 2d:0d:6a:82:8c:1d:6b:9b:6c:3f:3d:61:e9:fc:a0: 35:e6:79:33:3b:ae:18:8f:eb:a5:77:d0:e4:5a:a5: 60:c0:ab:60:9a:fc:09:e7:a6:f9:5a:41:13:bf:1a: bb:36:ae:72:88:8f:16:a2:6c:a2:53:1b:e0:a7:91: 3f:22:6e:e0:e9:c7:ef:4f:ee:6f:2a:71:15:9e:ca: 27:4c:c0:51:b8:fc:af:30:bc:75:14:8d:81:56:b8: 9b:59:74:b3:49:2d:8e:1c:f0:1c:88:58:0c:48:66: 64:e0:ea:06:b9:ea:1f:12:3c:54:70:ee:b0:6f:3f: ee:44:37:16:3d:d8:80:81:d7:f9:51:1f:11:bf:f4: 03:c2:b2:c8:d6:2c:ee:a3:a8:f3:a7:28:a6:42:65: 88:6e:a2:c7:79:73:99:04:cb:6a:7e:60:f2:9c:7e: 75:e8:c4:e1:3b:f5:da:6d:30:9b:f2:b6:8f:44:52: 54:29:f1:06:d1:6e:6f:cc:59:40:4e:79:cf:72:a1: 40:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6F:71:8B:3D:0C:9D:78:17:CB:3A:FD:BA:06:FA:30:30:50:54:6A X509v3 Authority Key Identifier: keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/nW9xiz0MnXgXyzr9ugb6MDBQVGo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.244.0.0/19 Signature Algorithm: sha256WithRSAEncryption 24:60:6f:8b:2f:eb:00:d7:2e:13:db:7a:c1:45:c6:55:2d:7a: fb:18:66:78:06:98:74:7b:f6:e0:b3:64:b6:b1:b9:62:81:75: a7:df:b9:d2:a5:6d:8b:36:1f:79:01:a7:17:d4:ae:83:8b:b9: d8:af:91:8c:04:03:35:1e:2c:cd:b4:11:6f:45:90:67:37:1a: ff:35:a0:2e:35:57:ae:92:83:51:1d:a0:de:72:55:6c:c5:ce: c3:fb:77:94:50:e5:13:5c:a8:b7:90:ee:0e:e5:6c:69:55:b1: 01:9f:a4:d9:c0:88:4a:51:89:de:bf:e0:e4:ef:4f:18:42:f5: 6b:01:f6:90:d8:8f:f4:cd:4a:b9:ee:b7:1b:be:f3:7c:27:14: 58:92:89:a7:cd:33:2d:0e:37:87:e0:7b:ff:f2:1a:45:fa:be: f9:e0:d6:c6:1a:4a:2d:68:14:a0:89:95:96:ab:41:42:bc:f1: 14:74:cc:1b:85:3c:f5:6a:64:4e:15:30:a0:cd:f0:da:90:1b: 2b:a6:94:10:07:be:de:92:28:f2:2a:ca:63:a5:23:e7:1d:65: 46:f3:6b:6d:f9:d1:e7:b5:7f:02:61:17:71:2b:05:3a:32:02: 6e:e4:71:8c:d7:dc:04:62:01:ad:c4:25:b4:e8:71:c3:47:41: 39:a1:50:04 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBsswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNC MjczQjA5Nzk5N0MwMkI0RjUyRTVDMUJCNEZFRkU2Njc5Nzg1MDAeFw0yNTEyMzEw ODEwNTZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDlENkY3MThCM0QwQzlE NzgxN0NCM0FGREJBMDZGQTMwMzA1MDU0NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqIVl3Yt7Zr9PueGaVF/UHWERyc5BjYJ5zZMcpLW6hBFn6OhVm WK1XKYeGYaR1DHa59XkV5qJZnM2Ywi0NaoKMHWubbD89Yen8oDXmeTM7rhiP66V3 0ORapWDAq2Ca/AnnpvlaQRO/Grs2rnKIjxaibKJTG+CnkT8ibuDpx+9P7m8qcRWe yidMwFG4/K8wvHUUjYFWuJtZdLNJLY4c8ByIWAxIZmTg6ga56h8SPFRw7rBvP+5E NxY92ICB1/lRHxG/9APCssjWLO6jqPOnKKZCZYhuosd5c5kEy2p+YPKcfnXoxOE7 9dptMJvyto9EUlQp8QbRbm/MWUBOec9yoUC9AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUnW9xiz0MnXgXyzr9ugb6MDBQVGowHwYDVR0jBBgwFoAU7LJzsJeZfAK09S5c G7T+/mZ5eFAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjIv N0xKenNKZVpmQUswOVM1Y0c3VC1fbVo1ZUZBLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC83TEp6c0plWmZBSzA5UzVjRzdULV9tWjVlRkEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMi9uVzl4aXowTW5YZ1h5enI5 dWdiNk1EQlFWR28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF 2vQAMA0GCSqGSIb3DQEBCwUAA4IBAQAkYG+LL+sA1y4T23rBRcZVLXr7GGZ4Bph0 e/bgs2S2sbligXWn37nSpW2LNh95AacX1K6Di7nYr5GMBAM1HizNtBFvRZBnNxr/ NaAuNVeukoNRHaDeclVsxc7D+3eUUOUTXKi3kO4O5WxpVbEBn6TZwIhKUYnev+Dk 708YQvVrAfaQ2I/0zUq57rcbvvN8JxRYkomnzTMtDjeH4Hv/8hpF+r754NbGGkot aBSgiZWWq0FCvPEUdMwbhTz1amROFTCgzfDakBsrppQQB77ekijyKspjpSPnHWVG 82tt+dHntX8CYRdxKwU6MgJu5HGM19wEYgGtxCW06HHDR0E5oVAE -----END CERTIFICATE-----Generated at Mon Jan 19 15:28:01 2026 by rpki-client