This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/McAQBQT-mTIUT3Ej9iYNhvzVH_c.roa File: McAQBQT-mTIUT3Ej9iYNhvzVH_c.roa (raw, json) Hash identifier: 6gEuq867WxL8bOksBVsn5ny74Pnbw5KCpYtOg064wdo= Subject key identifier: 31:C0:10:05:04:FE:99:32:14:4F:71:23:F6:26:0D:86:FC:D5:1F:F7 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A6E Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/McAQBQT-mTIUT3Ej9iYNhvzVH_c.roa Signing time: Sat 13 Sep 2025 03:07:15 +0000 ROA not before: Sat 13 Sep 2025 03:07:15 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 7018 IP address blocks: 180.223.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 07:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6766 (0x1a6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:15 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=31C0100504FE9932144F7123F6260D86FCD51FF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:88:fa:80:31:c1:67:6b:b6:af:6a:c9:ee: b8:9a:6a:7d:4d:e0:f9:a0:0c:ff:82:bc:d2:02:a8: 99:a7:60:d3:0e:5f:a7:ee:78:81:ea:5a:86:d2:2f: 3c:bf:8e:05:c4:b8:38:45:79:06:a8:be:be:3f:ff: a2:66:c7:e6:e9:d0:c4:c0:d7:03:1f:90:a9:8c:23: 45:44:2c:c4:3d:c3:03:62:6a:c1:73:e1:ee:f9:ae: 38:fb:d0:04:dd:bd:59:25:60:6e:69:e9:99:ee:54: 58:58:76:95:32:80:90:fa:a7:c1:2e:6e:4e:bd:66: c4:6d:b7:61:af:77:9c:96:f8:08:74:b9:94:9d:d2: af:24:94:40:cf:4b:d1:d9:cb:ec:c9:22:87:d3:37: bf:06:da:a4:49:8c:52:39:d3:ca:3e:8c:45:42:ea: a9:54:1d:b9:d6:8e:bc:cc:7e:9b:6b:cb:47:76:7a: 14:0e:9d:76:7e:36:cb:bf:dc:be:ec:2b:d9:8c:90: 4e:c5:96:6f:5d:e3:9e:1b:b8:13:a8:44:e2:25:87: 7a:5b:58:d4:f2:af:91:8a:9d:1d:45:ac:b7:d1:dd: 23:aa:57:d8:66:d2:60:12:7c:a6:eb:78:4e:80:e7: 9c:e9:e6:84:d0:2d:8a:dd:92:e2:9a:7e:95:2b:fa: e9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C0:10:05:04:FE:99:32:14:4F:71:23:F6:26:0D:86:FC:D5:1F:F7 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/McAQBQT-mTIUT3Ej9iYNhvzVH_c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.104.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:28:d6:58:f4:ca:4c:65:3a:b2:2a:98:bc:be:db:62:93:b6: ed:1b:dd:49:61:72:4d:40:8c:e8:8a:65:26:65:84:ac:ce:ff: 28:10:0d:ac:d0:00:04:92:61:00:05:fc:25:6f:ea:81:e5:e6: b5:1c:37:93:4f:09:ea:2a:0e:ff:8e:ed:da:97:85:01:6f:5a: 18:e2:bd:f0:ba:07:b1:be:6a:5c:7a:dc:eb:69:36:dc:e1:be: ed:46:f3:a2:fd:8a:d2:4b:df:65:a0:98:57:98:0a:56:0e:e1: dc:c4:51:25:f8:33:e8:36:8f:07:41:48:08:ae:6b:a1:f4:49: 10:9e:1e:2f:37:10:8d:9a:c1:a8:f2:79:f6:92:50:23:8f:00: 21:51:d1:a4:4c:3d:e9:94:ca:95:43:43:b2:24:55:a3:db:1a: 01:e5:cc:66:62:0f:ac:9e:71:ee:58:4b:af:bf:2a:60:b1:36: 58:64:6e:ee:0e:8d:14:f9:ad:07:0e:46:11:ef:9a:be:38:b8: 30:55:5f:03:8a:c6:a8:e6:92:36:38:be:e4:9f:45:12:bf:ce: b8:9b:e7:55:d2:86:e7:9e:1c:1a:e9:af:25:73:3b:b1:f5:ec: 39:f6:19:02:9c:3e:12:12:24:ce:97:53:1f:48:f9:bd:39:ff: 2a:90:64:cc -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGm4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDMxQzAxMDA1MDRGRTk5 MzIxNDRGNzEyM0Y2MjYwRDg2RkNENTFGRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvt4j6gDHBZ2u2r2rJ7riaan1N4PmgDP+CvNICqJmnYNMOX6fu eIHqWobSLzy/jgXEuDhFeQaovr4//6Jmx+bp0MTA1wMfkKmMI0VELMQ9wwNiasFz 4e75rjj70ATdvVklYG5p6ZnuVFhYdpUygJD6p8Eubk69ZsRtt2Gvd5yW+Ah0uZSd 0q8klEDPS9HZy+zJIofTN78G2qRJjFI508o+jEVC6qlUHbnWjrzMfptry0d2ehQO nXZ+Nsu/3L7sK9mMkE7Flm9d454buBOoROIlh3pbWNTyr5GKnR1FrLfR3SOqV9hm 0mASfKbreE6A55zp5oTQLYrdkuKafpUr+un7AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUMcAQBQT+mTIUT3Ej9iYNhvzVH/cwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvTWNBUUJRVC1tVElV VDNFajlpWU5odnpWSF9jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfaDANBgkqhkiG9w0BAQsFAAOCAQEADSjWWPTKTGU6siqYvL7bYpO27Rvd SWFyTUCM6IplJmWErM7/KBANrNAABJJhAAX8JW/qgeXmtRw3k08J6ioO/47t2peF AW9aGOK98LoHsb5qXHrc62k23OG+7Ubzov2K0kvfZaCYV5gKVg7h3MRRJfgz6DaP B0FICK5rofRJEJ4eLzcQjZrBqPJ59pJQI48AIVHRpEw96ZTKlUNDsiRVo9saAeXM ZmIPrJ5x7lhLr78qYLE2WGRu7g6NFPmtBw5GEe+avji4MFVfA4rGqOaSNji+5J9F Er/OuJvnVdKG554cGumvJXM7sfXsOfYZApw+EhIkzpdTH0j5vTn/KpBkzA== -----END CERTIFICATE-----Generated at Thu Dec 4 05:58:34 2025 by rpki-client