This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/V6NiqHldygmM49ykMDoPumg5XAI.roa File: V6NiqHldygmM49ykMDoPumg5XAI.roa (raw, json) Hash identifier: y/fks/i71vh6l6uemH7wH12rHcD/qFfaFcIgtISM3jU= Subject key identifier: 57:A3:62:A8:79:5D:CA:09:8C:E3:DC:A4:30:3A:0F:BA:68:39:5C:02 Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 1626 Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/V6NiqHldygmM49ykMDoPumg5XAI.roa Signing time: Mon 10 Nov 2025 13:58:08 +0000 ROA not before: Mon 10 Nov 2025 13:58:08 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 62387 IP address blocks: 119.59.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 02:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5670 (0x1626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Nov 10 13:58:08 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=57A362A8795DCA098CE3DCA4303A0FBA68395C02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:e8:0a:bc:0b:fb:1a:a9:fc:50:52:8d:26: ee:a6:c1:08:ad:18:c0:a9:d1:48:e1:89:7b:bc:4f: 76:43:1d:4b:64:b5:cd:c4:ef:fc:ff:9a:3a:1a:7a: 98:75:89:87:4b:31:40:82:29:17:c0:30:a8:20:64: f1:40:c9:e6:b5:7a:2a:84:bb:f3:cd:76:bb:82:55: e2:0e:08:4f:d4:ed:f0:09:ef:1e:c4:a5:df:80:36: 53:b3:dc:95:92:0c:5b:c4:55:3d:92:32:aa:9c:6b: 89:f4:36:72:af:2f:c5:39:5f:a8:48:4c:75:16:0a: f3:19:4f:7a:63:da:ca:08:66:11:59:37:81:f6:5f: 41:8c:94:56:02:3e:93:e4:03:2e:ff:21:33:fa:ca: 0c:8a:32:38:38:07:b3:ff:11:cc:65:1a:36:ee:4c: a9:87:5c:2a:d7:67:53:51:93:7e:16:97:b2:93:d3: 3d:06:b3:61:92:44:6c:44:a1:83:06:c8:54:f3:c6: cc:b4:82:0c:07:c5:d3:25:2d:ba:ba:2f:52:b6:92: 6e:70:38:8e:99:b3:a2:15:3f:0c:f2:73:30:e1:41: 08:89:64:20:f2:80:11:a6:55:ba:ef:ec:1d:e3:79: f6:ae:6b:c4:fa:e4:ea:1a:5c:8a:42:b0:79:2f:8d: dd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A3:62:A8:79:5D:CA:09:8C:E3:DC:A4:30:3A:0F:BA:68:39:5C:02 X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/V6NiqHldygmM49ykMDoPumg5XAI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.59.212.0/22 Signature Algorithm: sha256WithRSAEncryption df:82:19:01:0e:c6:43:96:83:90:87:b7:3d:13:43:06:60:9c: 41:7d:89:cc:d4:a6:e1:30:51:4e:3f:4f:ec:0a:43:b6:ad:6f: 30:30:df:da:bf:b8:7f:1d:7a:da:55:25:02:9d:46:5b:21:50: 0a:21:3e:73:e6:d5:a3:cd:a6:26:27:69:b8:ab:bd:06:aa:3a: 2d:fb:92:3e:a1:16:da:e7:ab:57:7e:94:bf:b8:d6:d6:99:41: 9e:82:6e:e4:b3:8d:ad:92:f9:83:b0:b8:9b:15:a8:e9:f8:ba: d2:54:96:46:76:df:a9:af:1b:e6:a8:db:21:61:ad:6b:7b:2d: 2a:d0:93:9e:69:f0:6f:4e:b2:0d:78:5f:f9:97:58:91:38:d0: 1b:78:69:6d:21:c4:d0:25:21:c7:d5:d7:2c:5f:aa:2e:cd:98: 32:54:3e:f6:c1:13:5f:32:62:62:c9:2c:da:49:7b:94:16:a7: aa:15:c4:be:1d:93:87:88:cc:73:7f:5c:c1:8c:36:2b:e4:96: f6:64:ff:15:f0:42:b3:01:50:34:6e:8c:c1:12:43:e3:25:66: e2:f7:5e:84:6e:47:06:11:42:5d:a1:ef:c1:4d:b0:37:bd:8e: 62:d7:e6:d7:5f:f8:db:96:be:25:09:a0:ca:e6:7a:c0:86:a1: c6:f4:ac:d6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFiYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTExMTAx MzU4MDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDU3QTM2MkE4Nzk1RENB MDk4Q0UzRENBNDMwM0EwRkJBNjgzOTVDMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9uugKvAv7Gqn8UFKNJu6mwQitGMCp0UjhiXu8T3ZDHUtktc3E 7/z/mjoaeph1iYdLMUCCKRfAMKggZPFAyea1eiqEu/PNdruCVeIOCE/U7fAJ7x7E pd+ANlOz3JWSDFvEVT2SMqqca4n0NnKvL8U5X6hITHUWCvMZT3pj2soIZhFZN4H2 X0GMlFYCPpPkAy7/ITP6ygyKMjg4B7P/EcxlGjbuTKmHXCrXZ1NRk34Wl7KT0z0G s2GSRGxEoYMGyFTzxsy0ggwHxdMlLbq6L1K2km5wOI6Zs6IVPwzyczDhQQiJZCDy gBGmVbrv7B3jefaua8T65OoaXIpCsHkvjd2BAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUV6NiqHldygmM49ykMDoPumg5XAIwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL1Y2TmlxSGxkeWdtTTQ5 eWtNRG9QdW1nNVhBSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJ3O9QwDQYJKoZIhvcNAQELBQADggEBAN+CGQEOxkOWg5CHtz0TQwZgnEF9iczU puEwUU4/T+wKQ7atbzAw39q/uH8detpVJQKdRlshUAohPnPm1aPNpiYnabirvQaq Oi37kj6hFtrnq1d+lL+41taZQZ6CbuSzja2S+YOwuJsVqOn4utJUlkZ236mvG+ao 2yFhrWt7LSrQk55p8G9Osg14X/mXWJE40Bt4aW0hxNAlIcfV1yxfqi7NmDJUPvbB E18yYmLJLNpJe5QWp6oVxL4dk4eIzHN/XMGMNivklvZk/xXwQrMBUDRujMESQ+Ml ZuL3XoRuRwYRQl2h78FNsDe9jmLX5tdf+NuWviUJoMrmesCGocb0rNY= -----END CERTIFICATE-----Generated at Sun Dec 7 02:14:43 2025 by rpki-client