This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/0ER4jMdxaZc8TtHdyMtb0Tt8wH4.roa File: 0ER4jMdxaZc8TtHdyMtb0Tt8wH4.roa (raw, json) Hash identifier: OyqTw7UdQe7wf3n+Uzbs30m7FnEu/Oyfl7FMQebch84= Subject key identifier: D0:44:78:8C:C7:71:69:97:3C:4E:D1:DD:C8:CB:5B:D1:3B:7C:C0:7E Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Certificate serial: 0627 Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/0ER4jMdxaZc8TtHdyMtb0Tt8wH4.roa Signing time: Thu 06 Nov 2025 02:54:51 +0000 ROA not before: Thu 06 Nov 2025 02:54:51 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9812 IP address blocks: 124.151.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Validity Not Before: Nov 6 02:54:51 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=D044788CC77169973C4ED1DDC8CB5BD13B7CC07E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:94:29:3e:c0:9a:e6:8a:dc:3e:d1:78:5b: 71:4d:28:ab:e0:68:da:dd:32:7d:cf:fa:8c:07:14: e6:60:5d:dc:e3:f5:c5:4b:3a:54:25:07:d7:9e:66: 43:a6:87:e1:89:0c:8c:74:17:7c:f2:10:95:ca:2a: 67:0f:a2:7e:c0:b9:49:45:7d:5f:03:e1:0f:8e:50: b5:4c:92:5b:01:f4:9d:3d:5c:02:ab:ea:14:1a:60: f3:d9:a4:e3:6d:6f:4b:96:9a:a2:d9:58:19:87:e4: 58:74:d1:69:ae:b2:57:d6:a1:15:3e:d9:0f:94:be: 38:ed:94:98:c3:86:29:6f:46:1f:ef:64:52:3b:bb: 96:24:19:aa:d5:15:92:77:28:fb:a4:df:96:eb:ae: 38:3b:c5:d5:15:57:f0:cc:24:8d:81:3a:71:ed:dd: 65:a8:27:0c:15:91:7c:9a:b3:a5:ae:57:a3:35:c8: 06:30:3e:37:cc:f2:82:26:37:4c:5a:ee:f6:44:01: 4d:0e:34:36:95:d1:d0:2d:e0:0e:3a:2f:bf:df:d8: 30:7a:c5:d5:1f:25:72:0b:27:04:35:06:01:5e:af: 68:01:07:88:a2:8a:0a:a7:a6:1f:97:b6:d5:25:4e: 57:ad:61:5e:69:f0:1d:4e:8d:2b:3d:1d:32:e8:3e: 05:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:44:78:8C:C7:71:69:97:3C:4E:D1:DD:C8:CB:5B:D1:3B:7C:C0:7E X509v3 Authority Key Identifier: keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/0ER4jMdxaZc8TtHdyMtb0Tt8wH4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.151.0.0/17 Signature Algorithm: sha256WithRSAEncryption 51:fc:c8:6a:c2:5d:07:fc:87:32:6e:a5:c1:e7:bd:c2:5b:ea: 42:58:1c:d9:42:36:2a:6b:b9:f8:4d:2f:c2:28:81:38:e0:b5: 89:17:0a:bb:c8:9b:13:9a:17:db:c7:d9:40:cc:fc:04:58:6e: 04:9e:88:95:8f:f9:60:85:17:6b:cd:e9:ab:fd:1b:8a:9b:b0: 00:20:96:93:db:b8:83:30:3b:a3:85:ee:39:ad:d5:38:73:45: 53:7f:97:42:10:c2:56:31:21:4f:dc:cd:ae:77:77:b0:dc:ed: 36:72:f3:7e:25:c7:1b:4f:20:19:05:c8:70:79:89:4b:cb:50: 61:54:bb:32:28:84:0f:3c:21:eb:67:54:31:fe:58:5c:b1:02: 29:b5:cc:5e:ff:e6:c1:7c:ee:bb:98:68:d5:50:b6:71:99:0f: 4e:14:76:01:56:63:22:3d:65:1d:37:0d:16:4a:78:e8:cf:0e: f6:c7:df:05:02:b5:93:32:98:76:9e:e7:b9:f1:48:48:5d:71: 55:2d:69:b3:78:2f:37:e3:de:eb:70:2d:02:96:fb:62:c5:1a: 93:23:63:a3:e7:b0:77:01:6d:d3:cc:97:4e:25:0f:57:8d:2a: 6f:5b:de:91:fa:b7:8b:12:a4:79:ad:90:e1:64:95:2b:46:8f: 65:51:10:e6 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBicwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNTExMDYw MjU0NTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEQwNDQ3ODhDQzc3MTY5 OTczQzRFRDFEREM4Q0I1QkQxM0I3Q0MwN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDppQpPsCa5orcPtF4W3FNKKvgaNrdMn3P+owHFOZgXdzj9cVL OlQlB9eeZkOmh+GJDIx0F3zyEJXKKmcPon7AuUlFfV8D4Q+OULVMklsB9J09XAKr 6hQaYPPZpONtb0uWmqLZWBmH5Fh00WmuslfWoRU+2Q+UvjjtlJjDhilvRh/vZFI7 u5YkGarVFZJ3KPuk35brrjg7xdUVV/DMJI2BOnHt3WWoJwwVkXyas6WuV6M1yAYw PjfM8oImN0xa7vZEAU0ONDaV0dAt4A46L7/f2DB6xdUfJXILJwQ1BgFer2gBB4ii igqnph+XttUlTletYV5p8B1OjSs9HTLoPgW/AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU0ER4jMdxaZc8TtHdyMtb0Tt8wH4wHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi8wRVI0ak1keGFaYzhUdEhk eU10YjBUdDh3SDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH fJcAMA0GCSqGSIb3DQEBCwUAA4IBAQBR/Mhqwl0H/IcybqXB573CW+pCWBzZQjYq a7n4TS/CKIE44LWJFwq7yJsTmhfbx9lAzPwEWG4EnoiVj/lghRdrzemr/RuKm7AA IJaT27iDMDujhe45rdU4c0VTf5dCEMJWMSFP3M2ud3ew3O02cvN+JccbTyAZBchw eYlLy1BhVLsyKIQPPCHrZ1Qx/lhcsQIptcxe/+bBfO67mGjVULZxmQ9OFHYBVmMi PWUdNw0WSnjozw72x98FArWTMph2nue58UhIXXFVLWmzeC83497rcC0ClvtixRqT I2Oj57B3AW3TzJdOJQ9XjSpvW96R+reLEqR5rZDhZJUrRo9lURDm -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:45 2025 by rpki-client