This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/FsNjJzs1Yu8J3RzTy5_mOby8TFw.roa File: FsNjJzs1Yu8J3RzTy5_mOby8TFw.roa (raw, json) Hash identifier: 6r4baApbFlPunzlUjPwIrxGY8Ee79UnFpHBGgAOA+To= Subject key identifier: 16:C3:63:27:3B:35:62:EF:09:DD:1C:D3:CB:9F:E6:39:BC:BC:4C:5C Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Certificate serial: 0625 Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/FsNjJzs1Yu8J3RzTy5_mOby8TFw.roa Signing time: Thu 06 Nov 2025 02:54:51 +0000 ROA not before: Thu 06 Nov 2025 02:54:51 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9812 IP address blocks: 219.233.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1573 (0x625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Validity Not Before: Nov 6 02:54:51 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=16C363273B3562EF09DD1CD3CB9FE639BCBC4C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f8:44:61:f1:41:94:d7:b4:39:37:03:df:23: 63:bd:eb:ed:39:4c:6f:5b:01:23:76:32:18:07:06: a4:ed:9b:1b:c8:79:71:2e:1c:b9:10:84:58:69:2f: 96:4d:7c:92:de:1d:2e:40:32:c1:d7:e8:57:4b:5e: ed:c3:31:74:7d:cf:f1:7b:2b:1b:92:c2:57:38:e9: 3a:40:73:1b:f0:22:57:fe:db:1a:70:f8:51:22:d4: c0:b7:a7:6a:cf:8b:f1:ac:ef:2c:07:81:26:8f:3c: ff:e1:99:61:5e:62:91:16:39:71:8c:0d:b8:fe:a0: fb:1f:38:a0:f5:91:c7:ef:36:8b:dd:fa:59:53:c9: 5c:7c:c8:32:eb:dd:0e:3e:dd:a3:ba:b1:d7:72:a0: 01:58:af:f7:bb:13:23:8b:18:93:18:2a:18:7e:b7: 84:6c:e4:3b:0f:0f:c8:c1:7d:87:0e:48:94:f6:69: 41:55:3e:db:9d:f6:ec:d5:f1:56:14:fe:df:69:39: be:c5:b0:7c:37:59:85:fb:56:8a:ef:c4:91:9a:b2: 5a:43:8e:19:15:c6:3b:fe:37:27:85:3a:e4:af:2f: c6:5c:d4:90:f2:1d:66:bd:6c:51:3d:c6:a2:eb:cf: 91:03:04:26:d7:94:1c:4d:c8:2e:e9:1b:9b:f4:a8: f7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C3:63:27:3B:35:62:EF:09:DD:1C:D3:CB:9F:E6:39:BC:BC:4C:5C X509v3 Authority Key Identifier: keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/FsNjJzs1Yu8J3RzTy5_mOby8TFw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.233.0.0/16 Signature Algorithm: sha256WithRSAEncryption a2:7f:7e:87:4a:36:d0:d2:f7:7b:ca:45:b7:7f:b3:47:8b:ec: a8:dc:04:65:eb:6d:ab:60:45:6e:94:ce:49:cf:89:7b:9f:d3: 06:87:d0:02:74:92:d1:a9:61:13:e5:e2:42:97:51:85:0d:dd: 72:7d:11:5e:35:82:6a:98:ba:c0:a0:e6:f3:38:d2:63:80:74: 1a:62:16:54:61:4b:96:0a:c3:c0:be:03:28:fc:89:be:7b:ba: 0b:40:09:eb:72:73:84:5b:ac:04:28:5b:95:bf:20:c9:0f:fc: 37:b2:52:4c:7d:3a:81:da:00:77:e8:17:d7:0e:40:fe:82:ca: 30:54:dd:5e:cd:00:bf:cc:6d:de:f2:00:b1:56:46:1c:3c:b3: 27:8d:d2:6e:cf:cb:12:a2:6d:0f:cb:a1:cb:8a:87:ef:19:e8: 53:6a:6f:b2:d0:07:c7:ad:12:c6:42:e3:ce:03:28:92:cc:39: fb:b5:f0:ec:fe:3a:4e:13:b7:75:0a:6a:c2:71:bf:99:6b:87: 8d:2f:a9:8d:4b:40:64:d3:82:78:df:96:1c:ab:4f:1a:13:05: a9:a4:a3:d7:37:32:37:12:ca:12:25:c8:9a:f2:f9:41:ba:74: c2:c6:dc:2d:50:41:2a:87:30:28:5d:83:c6:2b:96:ec:f8:af: 05:34:83:e7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNTExMDYw MjU0NTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDE2QzM2MzI3M0IzNTYy RUYwOUREMUNEM0NCOUZFNjM5QkNCQzRDNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU+ERh8UGU17Q5NwPfI2O96+05TG9bASN2MhgHBqTtmxvIeXEu HLkQhFhpL5ZNfJLeHS5AMsHX6FdLXu3DMXR9z/F7KxuSwlc46TpAcxvwIlf+2xpw +FEi1MC3p2rPi/Gs7ywHgSaPPP/hmWFeYpEWOXGMDbj+oPsfOKD1kcfvNovd+llT yVx8yDLr3Q4+3aO6sddyoAFYr/e7EyOLGJMYKhh+t4Rs5DsPD8jBfYcOSJT2aUFV Ptud9uzV8VYU/t9pOb7FsHw3WYX7VorvxJGaslpDjhkVxjv+NyeFOuSvL8Zc1JDy HWa9bFE9xqLrz5EDBCbXlBxNyC7pG5v0qPeTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFsNjJzs1Yu8J3RzTy5/mOby8TFwwHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi9Gc05qSnpzMVl1OEozUnpU eTVfbU9ieThURncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA 2+kwDQYJKoZIhvcNAQELBQADggEBAKJ/fodKNtDS93vKRbd/s0eL7KjcBGXrbatg RW6UzknPiXuf0waH0AJ0ktGpYRPl4kKXUYUN3XJ9EV41gmqYusCg5vM40mOAdBpi FlRhS5YKw8C+Ayj8ib57ugtACetyc4RbrAQoW5W/IMkP/DeyUkx9OoHaAHfoF9cO QP6CyjBU3V7NAL/Mbd7yALFWRhw8syeN0m7PyxKibQ/LocuKh+8Z6FNqb7LQB8et EsZC484DKJLMOfu18Oz+Ok4Tt3UKasJxv5lrh40vqY1LQGTTgnjflhyrTxoTBamk o9c3MjcSyhIlyJry+UG6dMLG3C1QQSqHMChdg8Yrluz4rwU0g+c= -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:39 2025 by rpki-client