This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/I2TJPU72SpSJBAm_wQfPP-piEeg.roa File: I2TJPU72SpSJBAm_wQfPP-piEeg.roa (raw, json) Hash identifier: 6pXkzBsFD6PhVp7wOtmgLqSyacRrKRLWCWMnHXBLGW8= Subject key identifier: 23:64:C9:3D:4E:F6:4A:94:89:04:09:BF:C1:07:CF:3F:EA:62:11:E8 Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Certificate serial: 0624 Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/I2TJPU72SpSJBAm_wQfPP-piEeg.roa Signing time: Thu 06 Nov 2025 02:54:51 +0000 ROA not before: Thu 06 Nov 2025 02:54:51 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9812 IP address blocks: 218.242.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1572 (0x624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Validity Not Before: Nov 6 02:54:51 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2364C93D4EF64A94890409BFC107CF3FEA6211E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ff:a5:21:cd:fe:2f:34:94:35:b9:ad:07:1e: 1e:63:85:85:0c:88:6c:50:00:f7:4d:7f:60:88:f7: ec:f7:b8:9a:44:e1:b6:53:1e:0f:ff:29:69:34:68: aa:b6:7d:b6:22:01:22:22:b6:38:7f:ef:98:ee:6f: 85:b2:92:0f:62:57:61:98:6c:d4:80:1e:90:93:13: c9:b5:7b:14:c7:9c:96:64:a6:27:f9:ac:b8:68:bd: 70:50:47:1e:3e:f7:db:08:a9:9f:49:7a:a7:c9:39: 11:88:80:2e:9d:77:bb:ef:ed:7f:20:c4:35:3c:0e: 7b:a0:e4:e8:f6:d1:5a:ae:ed:6e:4e:00:55:ff:0f: 09:d3:2d:5f:dd:d2:12:fb:96:f2:6c:eb:16:d8:85: 0a:14:1d:c3:1b:26:f7:47:fc:a9:b9:0c:62:85:a5: aa:2f:b4:ab:54:a7:18:de:31:86:3a:18:f1:26:57: a1:3d:43:9c:8b:63:3b:5c:14:ae:fc:38:e5:cd:bb: 06:28:82:52:09:f2:ed:4b:6c:7f:f3:32:d2:ed:7d: 02:7b:e5:58:5f:ea:b2:df:3d:35:90:1a:b8:16:3d: 34:72:69:b8:97:bf:ad:5a:f7:cc:f1:3a:e1:00:ed: 91:4d:c7:98:99:7c:bf:f6:fa:87:00:ee:d6:56:e6: 59:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:64:C9:3D:4E:F6:4A:94:89:04:09:BF:C1:07:CF:3F:EA:62:11:E8 X509v3 Authority Key Identifier: keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/I2TJPU72SpSJBAm_wQfPP-piEeg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.242.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4a:0c:a3:2c:52:ca:c6:20:04:66:2b:0e:06:37:67:4b:f0:24: 5a:7a:a7:fb:0e:ec:ca:5c:32:f9:a6:aa:91:6b:b1:12:8a:7f: da:60:e9:49:8d:f2:38:eb:a2:7d:28:7f:79:a7:42:d3:05:0e: 29:e6:e1:b7:f9:d9:ce:de:0e:76:62:35:2f:a4:64:b1:20:d6: f3:0e:c2:26:37:b1:06:9c:0b:e1:38:53:f0:ff:c2:4b:ca:ef: d5:65:fd:88:ef:d5:ad:25:00:b2:01:8f:85:8d:3a:11:ed:16: 44:1c:d8:9f:5a:d4:e7:e7:cf:96:e3:62:78:cd:97:4a:ee:89: 3b:4a:02:c5:60:73:c7:e6:67:c7:b4:c3:fa:03:43:ec:d9:ee: ca:b3:b8:27:94:64:e4:fd:ee:2a:33:b0:9a:b1:ad:7e:60:07: d4:21:46:32:6f:87:c4:39:5d:80:87:04:66:63:9a:fc:9c:8d: c1:3b:93:88:6e:9e:20:08:8d:98:12:be:81:d3:79:bb:43:63: 0d:98:b7:ca:d8:c9:cf:8a:87:26:ff:75:00:ae:53:27:dd:6d: 2c:e4:b7:e9:cf:e1:2f:32:dd:d2:b3:fb:81:d9:0a:3f:64:c8: 08:55:96:3e:47:e3:ed:df:11:84:7f:4f:02:54:75:eb:d0:0a: 30:7b:2f:01 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBiQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNTExMDYw MjU0NTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIzNjRDOTNENEVGNjRB OTQ4OTA0MDlCRkMxMDdDRjNGRUE2MjExRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ/6Uhzf4vNJQ1ua0HHh5jhYUMiGxQAPdNf2CI9+z3uJpE4bZT Hg//KWk0aKq2fbYiASIitjh/75jub4Wykg9iV2GYbNSAHpCTE8m1exTHnJZkpif5 rLhovXBQRx4+99sIqZ9JeqfJORGIgC6dd7vv7X8gxDU8Dnug5Oj20Vqu7W5OAFX/ DwnTLV/d0hL7lvJs6xbYhQoUHcMbJvdH/Km5DGKFpaovtKtUpxjeMYY6GPEmV6E9 Q5yLYztcFK78OOXNuwYoglIJ8u1LbH/zMtLtfQJ75Vhf6rLfPTWQGrgWPTRyabiX v61a98zxOuEA7ZFNx5iZfL/2+ocA7tZW5llfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUI2TJPU72SpSJBAm/wQfPP+piEegwHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi9JMlRKUFU3MlNwU0pCQW1f d1FmUFAtcGlFZWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA 2vIwDQYJKoZIhvcNAQELBQADggEBAEoMoyxSysYgBGYrDgY3Z0vwJFp6p/sO7Mpc MvmmqpFrsRKKf9pg6UmN8jjron0of3mnQtMFDinm4bf52c7eDnZiNS+kZLEg1vMO wiY3sQacC+E4U/D/wkvK79Vl/Yjv1a0lALIBj4WNOhHtFkQc2J9a1Ofnz5bjYnjN l0ruiTtKAsVgc8fmZ8e0w/oDQ+zZ7sqzuCeUZOT97iozsJqxrX5gB9QhRjJvh8Q5 XYCHBGZjmvycjcE7k4huniAIjZgSvoHTebtDYw2Yt8rYyc+Khyb/dQCuUyfdbSzk t+nP4S8y3dKz+4HZCj9kyAhVlj5H4+3fEYR/TwJUdevQCjB7LwE= -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:39 2025 by rpki-client