This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/fxn0TFjT4nTzdVWUBV_lYwne-LM.roa File: fxn0TFjT4nTzdVWUBV_lYwne-LM.roa (raw, json) Hash identifier: ubnnFA9oFCk+h8nVNAcrUF+W3D6ZH3RFNX51U/+tyRE= Subject key identifier: 7F:19:F4:4C:58:D3:E2:74:F3:75:55:94:05:5F:E5:63:09:DE:F8:B3 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 1716 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/fxn0TFjT4nTzdVWUBV_lYwne-LM.roa Signing time: Fri 14 Nov 2025 09:51:14 +0000 ROA not before: Fri 14 Nov 2025 09:51:14 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 136907 IP address blocks: 124.71.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5910 (0x1716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Nov 14 09:51:14 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7F19F44C58D3E274F3755594055FE56309DEF8B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:b0:9e:29:d9:0e:b1:9e:99:a6:10:2c:10: 46:62:ac:96:d1:48:d5:ab:f5:0d:27:3d:06:8d:c6: 9d:ab:b7:84:f4:65:80:8e:62:a8:a3:1b:4c:a0:e8: c0:c0:2d:de:dd:e8:6b:7a:72:73:7b:e6:ee:64:c2: a3:95:f9:bb:b1:bf:97:6a:f9:66:34:45:86:a1:99: eb:dd:1b:bb:dc:4e:37:9d:6f:ac:9c:3d:43:d6:f4: 20:19:00:be:d0:99:0d:ee:3e:9d:f5:48:e2:05:ec: fd:3e:60:9b:51:90:f4:63:81:48:98:9b:75:06:12: 98:f7:e5:49:f0:0e:e1:1c:a2:4b:3a:dd:77:36:a5: 2c:aa:ae:ca:e9:8a:55:3e:67:c2:72:86:16:96:a4: b7:47:3a:ad:44:e5:ad:f5:3e:17:e2:45:a4:43:3c: 7e:ed:93:74:ce:e6:0b:07:ca:6b:f9:7f:79:e6:93: b6:ea:96:88:3a:f1:77:e4:6e:9f:6f:61:b7:46:5b: 28:b0:71:9b:37:65:dd:16:c1:3f:58:e2:93:d4:fc: 1e:7a:5b:8e:c3:b9:0d:11:75:10:a2:8c:da:33:2d: 82:62:c2:78:20:c6:d1:31:c9:b5:95:36:2c:0b:3c: 59:56:2c:bc:bf:c9:1e:8f:07:4e:0a:d1:9a:20:2e: 39:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:19:F4:4C:58:D3:E2:74:F3:75:55:94:05:5F:E5:63:09:DE:F8:B3 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/fxn0TFjT4nTzdVWUBV_lYwne-LM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.71.248.0/24 Signature Algorithm: sha256WithRSAEncryption 00:dc:ee:26:bd:b7:57:1d:00:02:23:2a:09:bb:b3:83:47:61: 57:54:86:b5:43:f1:c7:69:a2:7c:bf:14:cb:57:9b:60:21:7c: 75:8e:7f:1e:c2:b9:df:91:3f:92:1e:f5:13:39:5c:43:2c:22: af:6d:2a:6f:c4:94:13:d6:39:06:7b:a8:c2:0b:a9:74:3c:20: d9:3a:72:2d:0f:84:b8:49:92:90:a2:5a:06:07:ec:b6:b4:5e: 44:bd:f1:29:54:ad:49:b4:bc:2e:03:19:5b:3d:8d:a0:2e:40: 1e:ce:ac:ec:9e:d2:99:3a:bc:ed:2e:9e:c9:ea:e6:68:0a:45: 21:cd:22:55:fd:d8:6a:18:b8:6c:df:a3:ff:89:2a:40:8f:20: 00:8c:60:f2:6a:1b:d6:b9:8e:f5:71:39:0c:e1:2a:99:9c:84: 8d:8e:4e:fa:90:b8:23:20:04:aa:1d:1f:e8:d2:a0:49:7e:ec: c5:99:58:70:11:cc:60:e6:a8:75:2c:e4:44:c2:9f:e1:23:18: db:e9:13:f4:76:de:f0:cb:b3:25:e0:bd:ee:e6:e9:ce:e4:29: b6:b8:28:1f:e0:8f:b1:b6:2d:3e:92:fb:90:82:ec:65:94:53: f3:ce:7f:b5:ca:5e:67:f4:76:95:bd:b0:f5:68:78:9e:f9:b3: f9:9d:72:99 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFxYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTExMTQw OTUxMTRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDdGMTlGNDRDNThEM0Uy NzRGMzc1NTU5NDA1NUZFNTYzMDlERUY4QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIzrCeKdkOsZ6ZphAsEEZirJbRSNWr9Q0nPQaNxp2rt4T0ZYCO YqijG0yg6MDALd7d6Gt6cnN75u5kwqOV+buxv5dq+WY0RYahmevdG7vcTjedb6yc PUPW9CAZAL7QmQ3uPp31SOIF7P0+YJtRkPRjgUiYm3UGEpj35UnwDuEcoks63Xc2 pSyqrsrpilU+Z8JyhhaWpLdHOq1E5a31PhfiRaRDPH7tk3TO5gsHymv5f3nmk7bq log68Xfkbp9vYbdGWyiwcZs3Zd0WwT9Y4pPU/B56W47DuQ0RdRCijNozLYJiwngg xtExybWVNiwLPFlWLLy/yR6PB04K0ZogLjnRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUfxn0TFjT4nTzdVWUBV/lYwne+LMwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvZnhuMFRGalQ0blR6 ZFZXVUJWX2xZd25lLUxNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHxH+DANBgkqhkiG9w0BAQsFAAOCAQEAANzuJr23Vx0AAiMqCbuzg0dhV1SG tUPxx2mifL8Uy1ebYCF8dY5/HsK535E/kh71EzlcQywir20qb8SUE9Y5Bnuowgup dDwg2TpyLQ+EuEmSkKJaBgfstrReRL3xKVStSbS8LgMZWz2NoC5AHs6s7J7SmTq8 7S6eyermaApFIc0iVf3Yahi4bN+j/4kqQI8gAIxg8mob1rmO9XE5DOEqmZyEjY5O +pC4IyAEqh0f6NKgSX7sxZlYcBHMYOaodSzkRMKf4SMY2+kT9Hbe8MuzJeC97ubp zuQptrgoH+CPsbYtPpL7kILsZZRT885/tcpeZ/R2lb2w9Wh4nvmz+Z1ymQ== -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:36 2025 by rpki-client