This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/ckh1WTl4f1_gVSLhSUBk8RsfFi4.roa File: ckh1WTl4f1_gVSLhSUBk8RsfFi4.roa (raw, json) Hash identifier: 5queQWpVBXn7exbHvpky1MLt+h9a11+sZq2dFGFxGkw= Subject key identifier: 72:48:75:59:39:78:7F:5F:E0:55:22:E1:49:40:64:F1:1B:1F:16:2E Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Certificate serial: 0621 Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/ckh1WTl4f1_gVSLhSUBk8RsfFi4.roa Signing time: Thu 06 Nov 2025 02:47:41 +0000 ROA not before: Thu 06 Nov 2025 02:47:41 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9812 IP address blocks: 118.132.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1569 (0x621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Validity Not Before: Nov 6 02:47:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7248755939787F5FE05522E1494064F11B1F162E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:f5:1d:b0:6a:ed:9b:95:3d:b8:43:6d:0a: 39:22:95:83:1b:5e:63:27:93:9d:60:61:51:35:f6: 19:0b:a8:3e:eb:11:61:87:53:b9:f1:48:7c:1a:4c: b6:f2:f5:58:8c:03:34:3d:0b:d5:b5:c1:b0:68:a8: e3:53:67:6f:fd:d9:3f:12:72:08:0e:3d:9b:73:14: b6:26:4b:1c:bc:54:a2:5c:fc:6a:c1:88:b9:8f:fd: e4:ac:16:09:47:6a:3d:66:d1:5d:68:62:50:45:df: 3e:95:5b:a5:dd:0d:f1:85:c1:37:f6:6a:a5:22:fc: ef:4b:f7:13:fe:03:af:c8:40:23:d1:a4:78:77:3b: 78:46:4c:b3:4d:00:3c:17:ea:a1:ad:b4:92:b6:0e: a7:f3:bf:bb:81:28:bc:11:3d:a0:36:41:c1:37:3d: 9b:90:d1:b4:1b:46:a5:a9:53:32:cb:53:e9:00:fa: 71:f7:cf:a4:4c:0a:db:d3:04:0b:5b:46:56:f1:ef: cf:33:21:eb:51:6d:a9:60:e9:fd:3f:da:e8:da:2b: 39:23:c7:b0:2a:8e:8c:bd:df:bf:4f:3f:fe:3c:3c: e1:c4:31:ea:57:fd:e9:aa:20:6b:f0:06:96:79:8e: 7e:84:18:5d:12:1b:4f:aa:fb:54:de:43:25:1c:c9: cf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:48:75:59:39:78:7F:5F:E0:55:22:E1:49:40:64:F1:1B:1F:16:2E X509v3 Authority Key Identifier: keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/ckh1WTl4f1_gVSLhSUBk8RsfFi4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.132.0.0/14 Signature Algorithm: sha256WithRSAEncryption 99:06:17:ae:0f:eb:c1:33:11:a4:2b:b7:51:fb:7a:65:8c:7e: 5b:24:b8:25:78:ca:3b:82:a8:7e:aa:ca:0c:f6:49:bb:97:f7: 41:85:ba:29:ca:7d:a6:47:3c:b8:97:a8:8a:1c:86:f9:05:73: b3:d8:9c:9b:e1:8d:b8:1c:17:9e:09:4c:d8:f6:53:c5:2e:bc: 70:87:4c:05:90:fd:9d:35:47:69:f9:97:d5:6e:11:b3:e3:9e: 98:46:80:0f:51:36:75:ab:00:86:4e:1c:e9:09:dd:d5:b3:26: 2e:5c:7f:8b:68:49:ea:c9:28:5b:5f:2c:51:ce:ee:39:fd:ea: f3:da:49:59:14:f8:c9:66:7c:c4:cd:d9:bf:6e:41:84:e1:59: c5:de:9b:72:f1:8d:27:80:96:12:b9:43:16:8f:04:0d:bc:d4: 09:13:6e:71:65:6f:95:79:c3:d8:66:1c:62:2d:06:89:76:6d: f1:64:d0:32:56:bf:1a:14:9a:82:9e:99:7a:ef:d5:ba:45:a4: 4d:f4:ca:71:09:90:2a:e9:ec:53:6b:13:f3:3c:99:6e:4b:12: a4:3a:25:ee:33:be:cc:75:af:da:9a:ec:df:e4:4e:6a:03:36: 60:38:7a:8f:74:22:39:ba:69:87:7d:a9:83:ac:2a:ba:39:6e: 88:6e:20:ab -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNTExMDYw MjQ3NDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDcyNDg3NTU5Mzk3ODdG NUZFMDU1MjJFMTQ5NDA2NEYxMUIxRjE2MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmC/UdsGrtm5U9uENtCjkilYMbXmMnk51gYVE19hkLqD7rEWGH U7nxSHwaTLby9ViMAzQ9C9W1wbBoqONTZ2/92T8ScggOPZtzFLYmSxy8VKJc/GrB iLmP/eSsFglHaj1m0V1oYlBF3z6VW6XdDfGFwTf2aqUi/O9L9xP+A6/IQCPRpHh3 O3hGTLNNADwX6qGttJK2Dqfzv7uBKLwRPaA2QcE3PZuQ0bQbRqWpUzLLU+kA+nH3 z6RMCtvTBAtbRlbx788zIetRbalg6f0/2ujaKzkjx7Aqjoy9379PP/48POHEMepX /emqIGvwBpZ5jn6EGF0SG0+q+1TeQyUcyc8vAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUckh1WTl4f1/gVSLhSUBk8RsfFi4wHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi9ja2gxV1RsNGYxX2dWU0xo U1VCazhSc2ZGaTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMC doQwDQYJKoZIhvcNAQELBQADggEBAJkGF64P68EzEaQrt1H7emWMflskuCV4yjuC qH6qygz2SbuX90GFuinKfaZHPLiXqIochvkFc7PYnJvhjbgcF54JTNj2U8UuvHCH TAWQ/Z01R2n5l9VuEbPjnphGgA9RNnWrAIZOHOkJ3dWzJi5cf4toSerJKFtfLFHO 7jn96vPaSVkU+MlmfMTN2b9uQYThWcXem3LxjSeAlhK5QxaPBA281AkTbnFlb5V5 w9hmHGItBol2bfFk0DJWvxoUmoKemXrv1bpFpE30ynEJkCrp7FNrE/M8mW5LEqQ6 Je4zvsx1r9qa7N/kTmoDNmA4eo90Ijm6aYd9qYOsKro5bohuIKs= -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:30 2025 by rpki-client