This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/QNmaUZ9odBUKr7-GsJabU8_NGAo.roa File: QNmaUZ9odBUKr7-GsJabU8_NGAo.roa (raw, json) Hash identifier: /2fTnVqeoPrkZWX481e++x3S/mGdslWVB79maUC1fA0= Subject key identifier: 40:D9:9A:51:9F:68:74:15:0A:AF:BF:86:B0:96:9B:53:CF:CD:18:0A Certificate issuer: /CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D Certificate serial: 06B9 Authority key identifier: B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/QNmaUZ9odBUKr7-GsJabU8_NGAo.roa Signing time: Wed 17 Dec 2025 08:06:42 +0000 ROA not before: Wed 17 Dec 2025 08:06:42 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 398704 IP address blocks: 112.73.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 11:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1721 (0x6b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D Validity Not Before: Dec 17 08:06:42 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=40D99A519F6874150AAFBF86B0969B53CFCD180A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:69:fb:9c:be:8a:ea:4e:58:8f:00:f2:ab:ea: d4:24:99:b3:5d:8e:8c:58:73:13:dd:74:26:b3:d6: b7:b6:1f:d3:c2:b9:24:c7:76:1f:4d:a2:18:93:28: b8:90:64:63:50:80:82:bd:12:4b:a3:74:a3:a5:92: 77:a6:26:df:ff:60:3e:09:9c:d9:37:1a:71:a7:54: d9:48:35:d9:36:77:b4:aa:e1:7b:2e:6e:27:a0:6b: c5:8a:43:d8:e9:fc:52:d7:47:37:84:ea:0e:36:1c: b6:c1:70:a7:82:08:0a:3e:bb:3c:74:3c:fe:17:e7: 0c:e0:ef:f6:70:aa:67:5c:68:80:be:b3:3c:39:3e: 86:ee:85:c6:36:b7:b2:a7:d4:7c:a9:42:b8:5a:23: b4:71:88:97:62:89:aa:19:d5:17:b0:55:36:c5:51: d0:a1:7f:c9:87:f7:f1:dd:bd:8b:a0:a6:11:fa:91: 9f:41:cd:f2:fe:08:64:2d:3d:d1:69:3e:92:17:51: b5:eb:dd:16:8c:75:de:b5:99:e9:ff:e7:59:0f:f1: a9:74:2c:d7:af:25:52:6a:03:8b:42:a7:17:f6:f1: 83:c8:c2:e0:13:ce:f9:8e:43:dc:6b:e8:6b:d7:e3: 5d:19:17:01:1f:09:28:b1:33:c0:5c:be:1f:7e:3c: 32:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D9:9A:51:9F:68:74:15:0A:AF:BF:86:B0:96:9B:53:CF:CD:18:0A X509v3 Authority Key Identifier: keyid:B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/QNmaUZ9odBUKr7-GsJabU8_NGAo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.73.128.0/22 Signature Algorithm: sha256WithRSAEncryption 44:4f:dd:43:93:48:89:28:71:23:f4:f7:5a:48:21:dd:f9:0e: b2:c0:f7:f1:2c:ec:6a:bb:08:63:e4:6c:f3:66:08:6d:fd:da: bf:fb:52:7c:b3:47:95:b9:dc:53:c5:75:24:b2:67:1e:f8:fb: 26:02:e3:84:e6:87:53:3c:b3:5d:43:0b:0a:3e:ad:09:32:45: 8c:79:af:57:a5:38:83:da:62:ff:36:58:b2:d7:44:0c:9e:80: a7:09:0f:96:b0:a8:d4:86:58:ac:c0:38:02:81:89:69:4f:f7: 29:3f:f7:aa:81:23:6e:40:a7:f0:00:f6:af:a8:72:fd:d1:a1: 36:1b:41:78:73:3d:85:4e:18:ea:85:0f:5b:83:9c:9f:c8:cd: a6:3a:1e:21:f2:4b:06:96:d4:54:0b:3e:34:3c:52:ff:7c:9e: a5:65:85:c0:64:dc:d9:31:74:f3:02:40:83:86:35:c9:c7:fb: 2f:60:0c:c4:b5:6c:58:f8:fb:d7:0f:bb:b4:33:80:33:82:67: b7:80:ed:01:54:be:c6:42:72:cc:07:85:b4:4c:63:60:d4:a2: fe:15:b9:84:6a:7a:e1:bb:a9:df:34:42:e9:38:3d:92:4c:38: bd:82:c0:56:44:e4:3b:4f:21:e1:ba:60:61:20:d1:05:a8:df: ec:d4:2f:d3 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBrkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjcw RjlBQ0JGMTAwMTQ2QjVBNkM3RTREMENFMkNGREZGQjE3ODAwRDAeFw0yNTEyMTcw ODA2NDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQwRDk5QTUxOUY2ODc0 MTUwQUFGQkY4NkIwOTY5QjUzQ0ZDRDE4MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvafucvorqTliPAPKr6tQkmbNdjoxYcxPddCaz1re2H9PCuSTH dh9NohiTKLiQZGNQgIK9EkujdKOlknemJt//YD4JnNk3GnGnVNlINdk2d7Sq4Xsu biega8WKQ9jp/FLXRzeE6g42HLbBcKeCCAo+uzx0PP4X5wzg7/ZwqmdcaIC+szw5 PobuhcY2t7Kn1HypQrhaI7RxiJdiiaoZ1RewVTbFUdChf8mH9/HdvYugphH6kZ9B zfL+CGQtPdFpPpIXUbXr3RaMdd61men/51kP8al0LNevJVJqA4tCpxf28YPIwuAT zvmOQ9xr6GvX410ZFwEfCSixM8Bcvh9+PDLhAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUQNmaUZ9odBUKr7+GsJabU8/NGAowHwYDVR0jBBgwFoAUtw+ay/EAFGtabH5N DOLP3/sXgA0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 NS90dy1heV9FQUZHdGFiSDVORE9MUDNfc1hnQTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3R3LWF5X0VBRkd0YWJINU5ET0xQM19zWGdBMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDUvUU5tYVVaOW9kQlVL cjctR3NKYWJVOF9OR0FvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAnBJgDANBgkqhkiG9w0BAQsFAAOCAQEARE/dQ5NIiShxI/T3Wkgh3fkOssD3 8SzsarsIY+Rs82YIbf3av/tSfLNHlbncU8V1JLJnHvj7JgLjhOaHUzyzXUMLCj6t CTJFjHmvV6U4g9pi/zZYstdEDJ6ApwkPlrCo1IZYrMA4AoGJaU/3KT/3qoEjbkCn 8AD2r6hy/dGhNhtBeHM9hU4Y6oUPW4Ocn8jNpjoeIfJLBpbUVAs+NDxS/3yepWWF wGTc2TF08wJAg4Y1ycf7L2AMxLVsWPj71w+7tDOAM4Jnt4DtAVS+xkJyzAeFtExj YNSi/hW5hGp64bup3zRC6Tg9kkw4vYLAVkTkO08h4bpgYSDRBajf7NQv0w== -----END CERTIFICATE-----Generated at Fri Dec 19 10:51:38 2025 by rpki-client