This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/PyDtdEk7SDdInPirvHSeb0S9dyI.roa File: PyDtdEk7SDdInPirvHSeb0S9dyI.roa (raw, json) Hash identifier: hrsai+CzpB3uEKss+zEh/wsa25ZUdMenLdtvBxZP5eY= Subject key identifier: 3F:20:ED:74:49:3B:48:37:48:9C:F8:AB:BC:74:9E:6F:44:BD:77:22 Certificate issuer: /CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D Certificate serial: 0701 Authority key identifier: B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/PyDtdEk7SDdInPirvHSeb0S9dyI.roa Signing time: Wed 31 Dec 2025 02:04:33 +0000 ROA not before: Wed 31 Dec 2025 02:04:33 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9457 IP address blocks: 112.73.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1793 (0x701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D Validity Not Before: Dec 31 02:04:33 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=3F20ED74493B4837489CF8ABBC749E6F44BD7722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:42:3c:c0:31:7a:34:0e:3f:16:1b:3e:60:50: 70:2d:a4:d1:f4:77:30:c6:39:55:ac:86:2a:89:ac: dd:19:2e:83:4f:d4:8c:0b:b3:f1:f6:6b:96:df:21: 42:34:36:47:fc:a5:3e:83:71:5f:9a:a7:d0:bc:c2: 51:01:22:8c:38:6f:fd:7b:d7:2b:6b:be:92:30:a1: c5:19:37:c1:a2:d6:fb:13:ba:ea:ee:5e:eb:ba:13: f6:0c:69:9c:2b:61:c2:e3:1d:4a:4d:3a:30:f9:aa: 4c:b1:cc:be:45:f9:e4:2b:37:66:1b:2b:1a:72:f3: 45:40:23:f6:76:fb:e4:35:da:fd:be:08:55:e5:08: 6b:60:b1:f0:cf:9a:9d:82:c2:f9:06:e6:7e:00:2c: 97:77:3b:f1:e5:4d:8d:96:4a:1e:55:3e:ef:34:38: 16:09:a4:9b:43:a2:ea:4e:2a:2f:f2:1b:db:03:3a: 40:5a:96:2e:91:ea:ad:6b:ee:1a:0c:41:f4:c4:74: 46:9a:74:c0:eb:c9:5d:1f:30:2a:62:ba:fc:e2:67: 63:ce:4c:05:3d:2b:88:52:1a:01:80:a1:b8:79:de: 9d:86:74:b7:38:ff:c7:58:55:ec:d4:d6:85:22:47: b2:73:db:89:9c:52:55:3a:bc:80:e8:d9:14:6a:41: 7f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:20:ED:74:49:3B:48:37:48:9C:F8:AB:BC:74:9E:6F:44:BD:77:22 X509v3 Authority Key Identifier: keyid:B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/PyDtdEk7SDdInPirvHSeb0S9dyI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.73.0.0/16 Signature Algorithm: sha256WithRSAEncryption 90:cb:6f:f4:bd:ac:34:f6:a0:8e:c9:6b:56:1b:8a:59:7f:96: 13:9a:5d:f7:18:61:97:27:8f:f3:50:5e:a8:d1:ab:af:b7:46: 87:5e:f0:40:55:55:3c:98:95:49:b9:f0:ed:5a:cd:16:3d:14: e2:e2:c5:b9:e4:e4:f1:46:bc:c1:0a:da:0a:5a:0d:a4:c7:36: 3e:76:40:0b:8d:8a:03:da:66:13:26:22:80:80:1a:6b:33:bd: 9b:00:67:8a:21:81:82:35:58:1a:84:8e:0b:a0:c9:4b:e0:51: 50:9f:2e:63:e2:4c:38:81:6b:33:be:10:54:50:80:ce:8d:2a: fe:e9:fb:e7:64:25:cd:9a:1b:b5:b1:c6:60:a4:31:86:53:f8: d9:e6:82:56:0e:0a:10:8b:f6:33:5a:63:6b:25:b3:4d:32:9a: 21:69:ba:98:02:3e:bd:aa:ab:c7:7d:f5:9d:bb:b6:50:38:29: 92:03:6a:ec:96:ca:85:f7:d5:24:e2:17:3f:41:c5:19:00:1b: f5:fc:e3:8e:da:bf:2f:21:1c:b5:1d:0c:d8:05:dc:b4:6e:e1: ed:7b:c4:50:a0:e4:12:b0:09:aa:3d:f4:b1:b4:f8:34:7c:00: 78:73:77:d9:9d:69:fc:13:c0:b4:1f:6d:ed:b2:03:86:4b:95: 31:61:31:c6 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICBwEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjcw RjlBQ0JGMTAwMTQ2QjVBNkM3RTREMENFMkNGREZGQjE3ODAwRDAeFw0yNTEyMzEw MjA0MzNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDNGMjBFRDc0NDkzQjQ4 Mzc0ODlDRjhBQkJDNzQ5RTZGNDRCRDc3MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwQjzAMXo0Dj8WGz5gUHAtpNH0dzDGOVWshiqJrN0ZLoNP1IwL s/H2a5bfIUI0Nkf8pT6DcV+ap9C8wlEBIow4b/171ytrvpIwocUZN8Gi1vsTuuru Xuu6E/YMaZwrYcLjHUpNOjD5qkyxzL5F+eQrN2YbKxpy80VAI/Z2++Q12v2+CFXl CGtgsfDPmp2CwvkG5n4ALJd3O/HlTY2WSh5VPu80OBYJpJtDoupOKi/yG9sDOkBa li6R6q1r7hoMQfTEdEaadMDryV0fMCpiuvziZ2POTAU9K4hSGgGAobh53p2GdLc4 /8dYVezU1oUiR7Jz24mcUlU6vIDo2RRqQX93AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUPyDtdEk7SDdInPirvHSeb0S9dyIwHwYDVR0jBBgwFoAUtw+ay/EAFGtabH5N DOLP3/sXgA0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 NS90dy1heV9FQUZHdGFiSDVORE9MUDNfc1hnQTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3R3LWF5X0VBRkd0YWJINU5ET0xQM19zWGdBMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDUvUHlEdGRFazdTRGRJ blBpcnZIU2ViMFM5ZHlJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAHBJMA0GCSqGSIb3DQEBCwUAA4IBAQCQy2/0vaw09qCOyWtWG4pZf5YTml33 GGGXJ4/zUF6o0auvt0aHXvBAVVU8mJVJufDtWs0WPRTi4sW55OTxRrzBCtoKWg2k xzY+dkALjYoD2mYTJiKAgBprM72bAGeKIYGCNVgahI4LoMlL4FFQny5j4kw4gWsz vhBUUIDOjSr+6fvnZCXNmhu1scZgpDGGU/jZ5oJWDgoQi/YzWmNrJbNNMpohabqY Aj69qqvHffWdu7ZQOCmSA2rslsqF99Uk4hc/QcUZABv1/OOO2r8vIRy1HQzYBdy0 buHte8RQoOQSsAmqPfSxtPg0fAB4c3fZnWn8E8C0H23tsgOGS5UxYTHG -----END CERTIFICATE-----Generated at Mon Jan 19 15:11:37 2026 by rpki-client