This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3390/Z7EfLGEwnQr_hOuEGveWY_okeaY.roa File: Z7EfLGEwnQr_hOuEGveWY_okeaY.roa (raw, json) Hash identifier: Yl0mpPzhiSOT83cfb64jO32JvYwKnXAvyKTTGT42fQA= Subject key identifier: 67:B1:1F:2C:61:30:9D:0A:FF:84:EB:84:1A:F7:96:63:FA:24:79:A6 Certificate issuer: /CN=9D205AB9DCDCA16245A06898059101FC907DCB21 Certificate serial: 12 Authority key identifier: 9D:20:5A:B9:DC:DC:A1:62:45:A0:68:98:05:91:01:FC:90:7D:CB:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nSBaudzcoWJFoGiYBZEB_JB9yyE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/Z7EfLGEwnQr_hOuEGveWY_okeaY.roa Signing time: Mon 17 Nov 2025 02:01:52 +0000 ROA not before: Mon 17 Nov 2025 02:01:52 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 131511 IP address blocks: 157.10.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nSBaudzcoWJFoGiYBZEB_JB9yyE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D205AB9DCDCA16245A06898059101FC907DCB21 Validity Not Before: Nov 17 02:01:52 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=67B11F2C61309D0AFF84EB841AF79663FA2479A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:35:86:9e:02:f7:00:0a:4a:d5:88:2a:23: db:93:95:d1:3c:e8:41:7f:99:96:a4:1a:7f:09:22: 03:e4:0d:50:0e:94:7e:82:45:dc:8b:84:28:95:4d: e6:60:b6:66:3a:ad:2f:c7:0a:08:94:d0:ee:7c:c7: ea:31:bd:ec:a6:37:b4:fd:cd:0a:4f:cc:4b:7e:b3: a9:7d:90:da:10:b1:5a:e9:7c:4f:f7:33:38:83:c6: 63:2a:d5:fd:cc:47:b4:2f:63:2a:f9:e3:ac:70:a7: a2:9b:8e:09:d2:b2:88:26:bb:06:5d:78:ba:99:c7: b4:50:d3:fb:a5:e1:3c:49:d6:02:be:48:2d:89:60: 7a:ac:4e:bd:1e:c5:c8:32:6e:6b:16:be:30:aa:e5: e9:16:ca:a7:71:b8:af:89:9e:b8:8a:06:f3:07:ea: 39:4b:d5:f9:40:22:25:f6:76:9b:d6:d8:eb:da:3e: 7f:fc:2c:05:af:5e:61:76:80:40:56:6b:a8:f1:a0: d6:f9:49:d1:6a:bf:0b:66:81:04:c1:59:dc:63:a1: 20:56:32:89:cf:f9:1a:6b:57:81:4d:86:80:d2:64: ba:19:ce:57:14:dd:fd:b8:bc:b1:72:a3:73:8a:2e: 5c:8a:f5:f8:eb:f5:4e:e5:84:68:ee:4c:4f:48:ee: 60:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B1:1F:2C:61:30:9D:0A:FF:84:EB:84:1A:F7:96:63:FA:24:79:A6 X509v3 Authority Key Identifier: keyid:9D:20:5A:B9:DC:DC:A1:62:45:A0:68:98:05:91:01:FC:90:7D:CB:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/nSBaudzcoWJFoGiYBZEB_JB9yyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nSBaudzcoWJFoGiYBZEB_JB9yyE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/Z7EfLGEwnQr_hOuEGveWY_okeaY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.10.112.0/23 Signature Algorithm: sha256WithRSAEncryption 32:7e:a0:d2:74:02:6d:18:48:db:5e:1b:12:97:9a:cd:5e:f5: 83:e9:83:22:87:6e:f1:24:12:89:17:a0:95:00:28:c5:31:7f: fd:84:4c:4f:04:40:40:aa:6d:d2:38:50:64:f5:02:1e:29:10: 29:62:a0:df:a3:22:3a:00:10:40:a1:c3:79:a9:e9:37:65:24: 52:a9:97:f3:17:21:10:c4:ce:96:48:4e:3a:4a:e1:a2:1a:74: 81:6e:83:30:37:6c:31:be:da:04:a4:73:e0:ba:2e:a6:c8:25: 2d:b9:b9:bd:0a:46:7d:47:a5:99:f5:af:ed:4b:51:ac:8e:ab: 87:10:72:3a:9a:fd:5a:dd:0b:0e:b5:e0:fd:24:6e:ca:c3:24: 63:90:51:66:fa:89:3e:71:ff:42:99:44:8d:aa:96:d7:4c:22: d6:dd:48:39:26:76:1d:2f:3a:71:9e:f7:15:6d:cd:18:b8:06: 92:60:5a:3f:fd:3c:84:63:b1:bd:99:16:45:43:fa:3c:1e:7d: c0:af:66:4b:3a:41:b1:7b:d6:9d:c9:d2:df:d6:9f:d4:2e:6e: 3f:90:aa:12:df:21:df:ed:75:7a:77:50:0f:aa:1b:b4:9d:d6: 1e:df:0b:cc:05:a7:fa:a8:08:1a:2b:97:86:71:3d:db:6c:6e: f9:2f:79:24 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RDIw NUFCOURDRENBMTYyNDVBMDY4OTgwNTkxMDFGQzkwN0RDQjIxMB4XDTI1MTExNzAy MDE1MloXDTI2MTAyMzAzMDEwM1owMzExMC8GA1UEAxMoNjdCMTFGMkM2MTMwOUQw QUZGODRFQjg0MUFGNzk2NjNGQTI0NzlBNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALo/NYaeAvcACkrViCoj25OV0TzoQX+ZlqQafwkiA+QNUA6UfoJF 3IuEKJVN5mC2ZjqtL8cKCJTQ7nzH6jG97KY3tP3NCk/MS36zqX2Q2hCxWul8T/cz OIPGYyrV/cxHtC9jKvnjrHCnopuOCdKyiCa7Bl14upnHtFDT+6XhPEnWAr5ILYlg eqxOvR7FyDJuaxa+MKrl6RbKp3G4r4meuIoG8wfqOUvV+UAiJfZ2m9bY69o+f/ws Ba9eYXaAQFZrqPGg1vlJ0Wq/C2aBBMFZ3GOhIFYyic/5GmtXgU2GgNJkuhnOVxTd /bi8sXKjc4ouXIr1+Ov1TuWEaO5MT0juYMUCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBRnsR8sYTCdCv+E64Qa95Zj+iR5pjAfBgNVHSMEGDAWgBSdIFq53NyhYkWgaJgF kQH8kH3LITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzkw L25TQmF1ZHpjb1dKRm9HaVlCWkVCX0pCOXl5RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvblNCYXVkemNvV0pGb0dpWUJaRUJfSkI5eXlFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5MC9aN0VmTEdFd25Rcl9o T3VFR3ZlV1lfb2tlYVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnQpwMA0GCSqGSIb3DQEBCwUAA4IBAQAyfqDSdAJtGEjbXhsSl5rNXvWD6YMi h27xJBKJF6CVACjFMX/9hExPBEBAqm3SOFBk9QIeKRApYqDfoyI6ABBAocN5qek3 ZSRSqZfzFyEQxM6WSE46SuGiGnSBboMwN2wxvtoEpHPgui6myCUtubm9CkZ9R6WZ 9a/tS1GsjquHEHI6mv1a3QsOteD9JG7KwyRjkFFm+ok+cf9CmUSNqpbXTCLW3Ug5 JnYdLzpxnvcVbc0YuAaSYFo//TyEY7G9mRZFQ/o8Hn3Ar2ZLOkGxe9adydLf1p/U Lm4/kKoS3yHf7XV6d1APqhu0ndYe3wvMBaf6qAgaK5eGcT3bbG75L3kk -----END CERTIFICATE-----Generated at Fri Dec 5 01:45:32 2025 by rpki-client