This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3390/V4nYBCNpx6YSzCyX84mIQqRuvzI.roa
File: V4nYBCNpx6YSzCyX84mIQqRuvzI.roa (raw, json)
Hash identifier: 6fgt7EC6BoZ6tk8Xe/JP8tBAJb6zi17WBHpF9aFgVw8=
Subject key identifier: 57:89:D8:04:23:69:C7:A6:12:CC:2C:97:F3:89:88:42:A4:6E:BF:32
Certificate issuer: /CN=226549B6299640B4815E70F0403521A2960160DD
Certificate serial: 018A
Authority key identifier: 22:65:49:B6:29:96:40:B4:81:5E:70:F0:40:35:21:A2:96:01:60:DD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ImVJtimWQLSBXnDwQDUhopYBYN0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/V4nYBCNpx6YSzCyX84mIQqRuvzI.roa
Signing time: Mon 17 Nov 2025 02:01:52 +0000
ROA not before: Mon 17 Nov 2025 02:01:52 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 131511
IP address blocks: 202.6.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/ImVJtimWQLSBXnDwQDUhopYBYN0.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/ImVJtimWQLSBXnDwQDUhopYBYN0.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ImVJtimWQLSBXnDwQDUhopYBYN0.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 01:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226549B6299640B4815E70F0403521A2960160DD
Validity
Not Before: Nov 17 02:01:52 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=5789D8042369C7A612CC2C97F3898842A46EBF32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:aa:0f:2e:d6:42:ad:c5:dc:e3:57:c9:3a:
a5:d4:a2:de:c5:b9:6e:7a:2a:1c:e8:f4:8d:3a:3d:
b8:ed:62:8c:b2:84:b2:cc:ba:3d:c1:05:fe:29:25:
c8:ca:c6:8d:11:3e:36:63:1a:37:df:ee:fa:87:8d:
1d:ce:77:54:cb:50:81:33:fd:ba:7a:1a:f9:43:df:
8f:c9:f1:1f:93:e8:d9:08:b5:f9:91:af:d6:ad:f7:
9e:d9:8a:bc:85:da:84:75:6d:19:2c:01:ea:ab:30:
90:95:41:fb:a1:91:5a:05:04:92:7a:0a:59:e0:98:
31:b5:00:5c:06:13:a5:2b:ba:24:26:2f:71:0e:94:
04:e7:9f:9b:52:49:f3:12:16:2d:ca:c6:c7:a5:10:
6b:40:e8:4b:fc:25:57:03:a6:fd:64:23:f0:00:b4:
b6:39:f0:e7:98:e3:e9:c5:65:f2:7d:27:8a:dc:d1:
e4:4d:0f:03:eb:93:87:d0:14:5b:0e:5a:ef:0f:a2:
3d:1a:f7:9f:96:23:bd:f9:52:df:23:78:18:75:c0:
41:02:5b:42:da:48:5f:26:f6:39:02:0f:f3:fc:0d:
7a:d9:67:56:25:54:a0:c0:65:14:60:b6:97:de:ab:
18:c7:b4:b6:5f:55:f3:eb:b0:e2:51:b9:c6:6e:bc:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:89:D8:04:23:69:C7:A6:12:CC:2C:97:F3:89:88:42:A4:6E:BF:32
X509v3 Authority Key Identifier:
keyid:22:65:49:B6:29:96:40:B4:81:5E:70:F0:40:35:21:A2:96:01:60:DD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/ImVJtimWQLSBXnDwQDUhopYBYN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ImVJtimWQLSBXnDwQDUhopYBYN0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/V4nYBCNpx6YSzCyX84mIQqRuvzI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.6.202.0/23
Signature Algorithm: sha256WithRSAEncryption
02:36:1d:0e:c1:e8:b7:7b:f6:eb:8f:e7:34:a7:e1:f4:c3:8f:
22:28:88:ab:23:6b:45:38:ba:23:bf:25:a7:9f:49:50:b7:84:
3e:f3:18:5f:02:51:ca:8c:07:8e:1f:5d:8c:b9:f6:29:5c:23:
d2:c8:ac:12:d5:44:70:4e:ea:13:fd:32:0c:17:c3:07:28:74:
87:89:11:a6:44:db:18:16:a6:be:9f:7a:b9:72:d1:79:2d:36:
fb:94:0d:0d:32:23:d3:11:6f:e4:d3:ea:77:63:2e:d3:3f:af:
64:1f:a8:61:81:71:a9:1f:be:e3:21:1c:ca:cf:22:cb:23:d3:
c5:55:f7:b4:7a:72:1e:aa:5f:90:c4:c4:8c:4d:4b:2b:be:e5:
00:ec:14:4f:3d:3f:10:90:a7:ed:30:10:7f:ef:12:0f:fd:ac:
5b:63:45:ed:44:81:d1:5b:8f:6d:66:60:29:2e:44:5b:10:7f:
34:b9:37:50:d0:27:bb:93:67:ff:ff:cd:bf:0b:4a:f4:79:76:
7b:5b:1b:9f:55:5f:9b:e0:da:3e:a4:66:fe:91:d8:35:f1:de:
ed:73:19:a5:e4:b1:f9:7b:49:92:92:fe:f9:a3:09:5b:06:80:
74:25:f4:0a:34:46:5f:fb:67:5d:1d:8a:fe:1d:a6:cb:72:27:
18:74:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 00:30:31 2025 by rpki-client