This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3390/yEZnw21vkPJiprmqqu05bkcxpo8.roa File: yEZnw21vkPJiprmqqu05bkcxpo8.roa (raw, json) Hash identifier: /tkwmGVuyf1tRcwSQBryes/S6j9JolM78aRmDni515A= Subject key identifier: C8:46:67:C3:6D:6F:90:F2:62:A6:B9:AA:AA:ED:39:6E:47:31:A6:8F Certificate issuer: /CN=226549B6299640B4815E70F0403521A2960160DD Certificate serial: 018F Authority key identifier: 22:65:49:B6:29:96:40:B4:81:5E:70:F0:40:35:21:A2:96:01:60:DD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ImVJtimWQLSBXnDwQDUhopYBYN0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/yEZnw21vkPJiprmqqu05bkcxpo8.roa Signing time: Mon 17 Nov 2025 02:06:17 +0000 ROA not before: Mon 17 Nov 2025 02:06:17 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 131511 IP address blocks: 2402:2620::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/ImVJtimWQLSBXnDwQDUhopYBYN0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/ImVJtimWQLSBXnDwQDUhopYBYN0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ImVJtimWQLSBXnDwQDUhopYBYN0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=226549B6299640B4815E70F0403521A2960160DD Validity Not Before: Nov 17 02:06:17 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C84667C36D6F90F262A6B9AAAAED396E4731A68F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7c:fb:d0:83:f6:98:33:5f:91:1e:a5:62:c8: de:47:16:30:db:05:b2:4e:8d:cc:78:d5:b8:78:35: ca:54:49:87:4c:be:87:b9:b3:d4:f2:ed:4c:87:b7: 63:99:75:e0:b1:f3:35:bd:66:af:61:59:7f:a8:9f: b4:d6:c3:e4:63:61:b9:3e:96:07:f8:8b:3c:e4:28: a6:b4:e8:23:e6:e6:f8:33:fb:92:ee:69:88:6f:0e: 5a:f7:7c:39:30:3d:89:82:50:df:c2:4e:b0:b1:43: 90:bf:de:6c:8a:62:13:a8:72:ef:04:00:f7:75:9c: a7:02:d7:92:2b:71:93:35:74:aa:75:eb:c9:57:59: a7:31:f6:4a:ec:45:76:60:ee:d6:af:4a:d0:50:97: ab:21:a6:1b:a8:8c:9b:c0:f9:a4:1f:da:42:bb:0c: e7:a3:b9:5b:92:af:4c:3a:f8:a8:57:51:19:1b:19: 79:6a:91:e2:87:d7:c3:27:0b:ff:44:6d:63:bf:c1: f9:2c:79:e1:d3:95:c1:b9:65:47:56:4f:12:4e:0f: 7f:42:cd:78:02:aa:a4:1c:b1:f9:bb:b7:8f:d2:f7: a7:59:cf:3a:16:82:0d:2b:46:bb:85:98:37:74:65: 36:50:5b:6c:44:73:f0:19:54:67:fe:a5:c1:02:ce: 32:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:46:67:C3:6D:6F:90:F2:62:A6:B9:AA:AA:ED:39:6E:47:31:A6:8F X509v3 Authority Key Identifier: keyid:22:65:49:B6:29:96:40:B4:81:5E:70:F0:40:35:21:A2:96:01:60:DD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/ImVJtimWQLSBXnDwQDUhopYBYN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ImVJtimWQLSBXnDwQDUhopYBYN0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/yEZnw21vkPJiprmqqu05bkcxpo8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:2620::/32 Signature Algorithm: sha256WithRSAEncryption 75:fe:b5:2f:ba:53:f5:c8:2f:87:c4:87:1f:18:ae:01:25:e1: 50:2a:a1:d2:a9:a5:29:d0:a3:e2:a3:ad:7a:ca:d1:ff:5a:af: f8:c4:9c:bc:c6:c6:da:46:f8:a7:53:10:6a:7a:12:c1:b4:21: 01:39:60:3e:85:30:de:1c:dc:53:e9:99:91:75:f8:42:42:27: 7c:23:ec:98:b5:fc:4f:84:b8:82:c1:42:d7:ef:f0:11:50:9c: b1:cd:61:4f:89:cf:b5:6e:d9:f4:ed:b8:22:a1:91:26:5d:40: 46:e2:84:22:8d:c1:c0:1b:e0:ba:64:9b:28:0a:23:9a:de:0a: 2e:1b:0e:7e:a7:c0:b9:ec:27:54:01:6a:af:04:d7:cc:83:3f: c1:31:b5:d4:b0:af:4c:3c:a0:41:d1:b4:4b:34:ba:63:48:ff: 8a:cf:28:07:44:eb:c1:77:73:ba:cb:0d:b1:39:31:66:40:0d: 19:66:99:0d:90:db:90:61:1d:ad:94:2d:23:d6:41:9b:47:cd: b6:e0:58:bd:44:2d:36:34:44:73:d3:a6:f4:bd:5c:1b:e8:09: b0:7a:f9:0e:19:87:ad:ff:5c:5c:26:0f:5e:eb:66:87:9a:0d: 76:be:7c:3b:d5:44:0b:e5:65:0a:7d:86:b0:f7:99:ab:ef:47: ff:26:0c:d4 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjI2 NTQ5QjYyOTk2NDBCNDgxNUU3MEYwNDAzNTIxQTI5NjAxNjBERDAeFw0yNTExMTcw MjA2MTdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEM4NDY2N0MzNkQ2Rjkw RjI2MkE2QjlBQUFBRUQzOTZFNDczMUE2OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNfPvQg/aYM1+RHqViyN5HFjDbBbJOjcx41bh4NcpUSYdMvoe5 s9Ty7UyHt2OZdeCx8zW9Zq9hWX+on7TWw+RjYbk+lgf4izzkKKa06CPm5vgz+5Lu aYhvDlr3fDkwPYmCUN/CTrCxQ5C/3myKYhOocu8EAPd1nKcC15IrcZM1dKp168lX Wacx9krsRXZg7tavStBQl6shphuojJvA+aQf2kK7DOejuVuSr0w6+KhXURkbGXlq keKH18MnC/9EbWO/wfkseeHTlcG5ZUdWTxJOD39CzXgCqqQcsfm7t4/S96dZzzoW gg0rRruFmDd0ZTZQW2xEc/AZVGf+pcECzjKzAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUyEZnw21vkPJiprmqqu05bkcxpo8wHwYDVR0jBBgwFoAUImVJtimWQLSBXnDw QDUhopYBYN0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 MC9JbVZKdGltV1FMU0JYbkR3UURVaG9wWUJZTjAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0ltVkp0aW1XUUxTQlhuRHdRRFVob3BZQllOMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTAveUVabncyMXZrUEpp cHJtcXF1MDVia2N4cG84LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQCJiAwDQYJKoZIhvcNAQELBQADggEBAHX+tS+6U/XIL4fEhx8YrgEl4VAq odKppSnQo+KjrXrK0f9ar/jEnLzGxtpG+KdTEGp6EsG0IQE5YD6FMN4c3FPpmZF1 +EJCJ3wj7Ji1/E+EuILBQtfv8BFQnLHNYU+Jz7Vu2fTtuCKhkSZdQEbihCKNwcAb 4LpkmygKI5reCi4bDn6nwLnsJ1QBaq8E18yDP8ExtdSwr0w8oEHRtEs0umNI/4rP KAdE68F3c7rLDbE5MWZADRlmmQ2Q25BhHa2ULSPWQZtHzbbgWL1ELTY0RHPTpvS9 XBvoCbB6+Q4Zh63/XFwmD17rZoeaDXa+fDvVRAvlZQp9hrD3mavvR/8mDNQ= -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:45 2025 by rpki-client