This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/HRTwxgISQAmHmdsgldlFy9VsDfE.roa File: HRTwxgISQAmHmdsgldlFy9VsDfE.roa (raw, json) Hash identifier: g6WGfqvUj1zzde8Rhwh8PepCNVDdY2F4smGEucl/PgY= Subject key identifier: 1D:14:F0:C6:02:12:40:09:87:99:DB:20:95:D9:45:CB:D5:6C:0D:F1 Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Certificate serial: 0623 Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/HRTwxgISQAmHmdsgldlFy9VsDfE.roa Signing time: Thu 06 Nov 2025 02:54:51 +0000 ROA not before: Thu 06 Nov 2025 02:54:51 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9812 IP address blocks: 211.167.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1571 (0x623) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Validity Not Before: Nov 6 02:54:51 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=1D14F0C6021240098799DB2095D945CBD56C0DF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:81:7a:fc:ea:12:28:f0:f9:a1:b8:e7:35: 52:55:bf:d9:a9:f1:e4:98:24:d8:8a:38:b2:9b:b1: c6:f9:60:cd:34:44:e9:f1:00:94:5c:03:e8:ef:fb: 10:7d:98:ae:93:30:9a:45:84:92:e1:1c:bb:73:0a: 51:3e:85:d6:fd:e2:f6:ab:12:ad:84:ea:b8:d5:4a: ac:d7:85:88:05:fa:43:06:10:4a:0b:dc:fd:b0:70: 6c:23:32:25:05:b3:dc:f9:d5:fc:dc:c6:ef:4d:35: 37:8b:6a:a9:06:b7:78:f0:c3:16:3b:f8:5b:a2:d6: d8:b2:bf:f2:bb:f0:8f:2e:8e:2c:4b:42:fb:30:8d: d9:2c:ac:3c:3d:e1:c7:c6:c6:95:63:3c:ed:bb:86: 94:fa:c6:7a:cc:b1:dc:d5:58:52:79:a2:d7:62:75: ff:05:e0:3e:c6:ef:23:c0:51:86:31:79:5a:ce:d2: 30:d6:a1:7e:36:33:86:5a:05:21:91:44:1e:68:43: cc:84:c0:84:67:86:3a:a4:1d:11:4c:62:f0:ce:9d: aa:d2:45:fb:19:ae:e5:fa:8b:ab:e6:8b:14:d5:9f: a3:73:a8:95:8a:b8:2a:ec:b7:d2:17:57:3a:56:ef: 97:d4:3d:29:81:bb:44:66:bd:24:5d:b2:5d:8c:c2: 86:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:14:F0:C6:02:12:40:09:87:99:DB:20:95:D9:45:CB:D5:6C:0D:F1 X509v3 Authority Key Identifier: keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/HRTwxgISQAmHmdsgldlFy9VsDfE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.167.96.0/19 Signature Algorithm: sha256WithRSAEncryption 68:ad:32:7b:37:7d:6e:5d:81:55:8d:b7:5d:17:c1:d9:a0:63: 07:80:cc:3f:b6:1c:d5:4d:41:83:26:02:71:a0:5b:b7:9b:4e: a9:42:1d:7c:ee:23:2f:cb:fe:e6:17:2c:8b:f7:5c:97:2e:ad: a9:5f:a1:55:69:a5:e7:f0:eb:1d:a0:b2:0d:b4:2a:40:5b:71: c6:fb:3c:18:b2:ba:5a:20:dc:f4:75:73:11:fe:eb:a5:90:4c: 28:fa:16:75:db:c2:f0:40:04:04:80:ce:20:7e:a9:13:42:fc: fb:9d:e2:dc:a0:20:2c:56:05:42:d3:cf:13:2b:a3:44:e7:c9: 3b:69:58:13:d2:12:05:40:a3:3d:9c:b1:7b:12:f5:5f:db:21: 28:80:3e:b2:e2:ff:ab:56:ed:81:87:0d:d7:ac:72:b8:d8:22: d3:3b:b3:12:e7:3c:1a:50:22:79:da:2e:39:09:07:ff:4f:06: 52:8c:25:f2:f5:3e:df:1a:3f:bf:7d:14:6f:af:66:8c:40:3c: e5:b8:d8:f1:ab:4f:df:f3:d0:b8:1a:3a:64:5a:2a:1d:3c:ce: ea:62:ff:92:cd:8d:77:b1:9f:d4:82:b3:6d:d4:cc:9d:de:f5: 27:82:66:84:78:87:e9:72:01:a1:bd:76:8a:7f:13:31:ff:ad: 3d:a5:01:0e -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBiMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNTExMDYw MjU0NTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDFEMTRGMEM2MDIxMjQw MDk4Nzk5REIyMDk1RDk0NUNCRDU2QzBERjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtV4F6/OoSKPD5objnNVJVv9mp8eSYJNiKOLKbscb5YM00ROnx AJRcA+jv+xB9mK6TMJpFhJLhHLtzClE+hdb94varEq2E6rjVSqzXhYgF+kMGEEoL 3P2wcGwjMiUFs9z51fzcxu9NNTeLaqkGt3jwwxY7+Fui1tiyv/K78I8ujixLQvsw jdksrDw94cfGxpVjPO27hpT6xnrMsdzVWFJ5otdidf8F4D7G7yPAUYYxeVrO0jDW oX42M4ZaBSGRRB5oQ8yEwIRnhjqkHRFMYvDOnarSRfsZruX6i6vmixTVn6NzqJWK uCrst9IXVzpW75fUPSmBu0RmvSRdsl2MwobHAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUHRTwxgISQAmHmdsgldlFy9VsDfEwHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi9IUlR3eGdJU1FBbUhtZHNn bGRsRnk5VnNEZkUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF 06dgMA0GCSqGSIb3DQEBCwUAA4IBAQBorTJ7N31uXYFVjbddF8HZoGMHgMw/thzV TUGDJgJxoFu3m06pQh187iMvy/7mFyyL91yXLq2pX6FVaaXn8OsdoLINtCpAW3HG +zwYsrpaINz0dXMR/uulkEwo+hZ128LwQAQEgM4gfqkTQvz7neLcoCAsVgVC088T K6NE58k7aVgT0hIFQKM9nLF7EvVf2yEogD6y4v+rVu2Bhw3XrHK42CLTO7MS5zwa UCJ52i45CQf/TwZSjCXy9T7fGj+/fRRvr2aMQDzluNjxq0/f89C4GjpkWiodPM7q Yv+SzY13sZ/UgrNt1Myd3vUngmaEeIfpcgGhvXaKfxMx/609pQEO -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:48 2025 by rpki-client