This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/261/vvOKXymRaSI3p6t6qdM-wcp-XKY.roa File: vvOKXymRaSI3p6t6qdM-wcp-XKY.roa (raw, json) Hash identifier: Rln3sSUBZRdzoWdj/jYlJEkVmYhk2f9Kq67p1EWI2GE= Subject key identifier: BE:F3:8A:5F:29:91:69:22:37:A7:AB:7A:A9:D3:3E:C1:CA:7E:5C:A6 Certificate issuer: /CN=76E046E3ECA10B928499F22A5E765C0416A60A4F Certificate serial: 06C5 Authority key identifier: 76:E0:46:E3:EC:A1:0B:92:84:99:F2:2A:5E:76:5C:04:16:A6:0A:4F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/duBG4-yhC5KEmfIqXnZcBBamCk8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/vvOKXymRaSI3p6t6qdM-wcp-XKY.roa Signing time: Wed 31 Dec 2025 03:10:46 +0000 ROA not before: Wed 31 Dec 2025 03:10:46 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 23771 IP address blocks: 59.153.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/duBG4-yhC5KEmfIqXnZcBBamCk8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1733 (0x6c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76E046E3ECA10B928499F22A5E765C0416A60A4F Validity Not Before: Dec 31 03:10:46 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=BEF38A5F2991692237A7AB7AA9D33EC1CA7E5CA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:ff:ae:4d:6f:54:81:e7:51:2e:49:01:06: d2:8b:31:c6:8b:63:99:b7:22:25:1d:3c:a8:55:9a: 4b:bb:d1:bf:ad:f1:72:79:47:64:bb:b6:9c:c6:37: 5e:9f:a6:51:b1:10:db:55:65:73:90:6f:2c:34:c7: 3e:6c:f2:e6:c9:3c:de:7e:40:a4:aa:7a:e3:49:80: f7:8f:1f:c3:32:fa:06:18:d5:86:06:c7:f4:f6:89: 2b:a9:c2:21:4f:e5:74:98:9a:f7:6f:a8:7a:54:e1: b4:71:b8:8f:fd:ec:bd:91:1f:c5:d1:35:36:0b:c0: f4:8b:5d:6c:e4:3c:fe:79:ea:02:f6:67:ea:50:55: a4:db:20:bf:43:bc:dc:f4:f5:43:b9:3e:46:10:45: 97:75:e2:e9:6f:f7:15:f7:ae:64:c6:7c:64:25:23: 53:30:6a:95:26:3e:28:a0:d1:8b:b8:f0:26:b4:88: cf:05:3c:dd:4c:fe:2f:03:bf:10:82:51:c0:2e:0b: 78:3b:e5:05:23:46:38:f8:56:92:ad:75:c7:e7:15: 26:04:53:85:8e:71:24:0a:f3:f0:11:38:09:36:4e: 6d:c1:15:19:75:4a:c4:50:84:28:74:63:77:0a:da: fc:6d:33:75:5a:92:68:96:99:c4:34:cf:4b:df:6e: b5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F3:8A:5F:29:91:69:22:37:A7:AB:7A:A9:D3:3E:C1:CA:7E:5C:A6 X509v3 Authority Key Identifier: keyid:76:E0:46:E3:EC:A1:0B:92:84:99:F2:2A:5E:76:5C:04:16:A6:0A:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/duBG4-yhC5KEmfIqXnZcBBamCk8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/vvOKXymRaSI3p6t6qdM-wcp-XKY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.153.4.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:ce:43:21:e3:e0:e0:55:aa:ce:41:6f:ef:1e:44:b8:e3:75: ec:8c:41:55:f4:b0:2f:89:27:33:1f:58:40:d9:ff:65:17:d7: 39:58:81:79:51:f6:b6:3d:2b:4c:bc:e4:48:37:16:36:47:e9: 2f:49:b9:e7:c9:75:5a:17:f2:08:3f:a8:10:1b:57:97:42:a9: 49:6b:a1:dc:bb:7f:7f:10:9e:30:d7:35:76:32:f2:f7:39:72: 2f:00:b5:e2:06:3e:e2:3a:b9:fc:17:8f:78:63:15:64:68:f1: 0a:8a:90:87:54:de:ba:1a:23:f0:cc:a9:fc:9f:e5:48:ba:e1: 98:59:6d:f4:56:6f:82:2d:d9:e5:05:af:5c:6f:2a:d7:0d:ce: 18:e9:c2:96:90:a8:9d:9e:15:67:6f:93:39:bd:a2:66:22:0b: e0:76:74:e6:0f:84:45:fb:1a:82:2a:59:21:86:fd:ed:10:f9: 6e:54:1d:98:8b:7d:d0:9b:90:54:d2:ee:1a:2a:4d:54:f5:b8: 65:10:62:bc:cd:04:00:d4:50:7d:5f:d6:09:d1:6e:c9:f4:40: 7b:29:ee:0e:e2:68:53:63:1c:57:b8:ce:ae:51:20:93:ae:2e: 1f:9f:67:93:f9:0f:5a:f5:b7:ae:fd:8e:45:60:6f:3b:84:5f: f4:27:61:2d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzZF MDQ2RTNFQ0ExMEI5Mjg0OTlGMjJBNUU3NjVDMDQxNkE2MEE0RjAeFw0yNTEyMzEw MzEwNDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEJFRjM4QTVGMjk5MTY5 MjIzN0E3QUI3QUE5RDMzRUMxQ0E3RTVDQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNhf+uTW9UgedRLkkBBtKLMcaLY5m3IiUdPKhVmku70b+t8XJ5 R2S7tpzGN16fplGxENtVZXOQbyw0xz5s8ubJPN5+QKSqeuNJgPePH8My+gYY1YYG x/T2iSupwiFP5XSYmvdvqHpU4bRxuI/97L2RH8XRNTYLwPSLXWzkPP556gL2Z+pQ VaTbIL9DvNz09UO5PkYQRZd14ulv9xX3rmTGfGQlI1MwapUmPiig0Yu48Ca0iM8F PN1M/i8DvxCCUcAuC3g75QUjRjj4VpKtdcfnFSYEU4WOcSQK8/AROAk2Tm3BFRl1 SsRQhCh0Y3cK2vxtM3VakmiWmcQ0z0vfbrX3AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUvvOKXymRaSI3p6t6qdM+wcp+XKYwHwYDVR0jBBgwFoAUduBG4+yhC5KEmfIq XnZcBBamCk8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx L2R1Qkc0LXloQzVLRW1mSXFYblpjQkJhbUNrOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZHVCRzQteWhDNUtFbWZJcVhuWmNCQmFtQ2s4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYxL3Z2T0tYeW1SYVNJM3A2 dDZxZE0td2NwLVhLWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAA7mQQwDQYJKoZIhvcNAQELBQADggEBAC/OQyHj4OBVqs5Bb+8eRLjjdeyMQVX0 sC+JJzMfWEDZ/2UX1zlYgXlR9rY9K0y85Eg3FjZH6S9JuefJdVoX8gg/qBAbV5dC qUlrody7f38QnjDXNXYy8vc5ci8AteIGPuI6ufwXj3hjFWRo8QqKkIdU3roaI/DM qfyf5Ui64ZhZbfRWb4It2eUFr1xvKtcNzhjpwpaQqJ2eFWdvkzm9omYiC+B2dOYP hEX7GoIqWSGG/e0Q+W5UHZiLfdCbkFTS7hoqTVT1uGUQYrzNBADUUH1f1gnRbsn0 QHsp7g7iaFNjHFe4zq5RIJOuLh+fZ5P5D1r1t679jkVgbzuEX/QnYS0= -----END CERTIFICATE-----Generated at Mon Jan 19 15:28:00 2026 by rpki-client