This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/nbePnKzqWYXckdwHzmenc50MYCw.roa File: nbePnKzqWYXckdwHzmenc50MYCw.roa (raw, json) Hash identifier: C7r8zvcAPxto9wXb2DRqahJYPDZzJ5zBLJ1sGPIzvcA= Subject key identifier: 9D:B7:8F:9C:AC:EA:59:85:DC:91:DC:07:CE:67:A7:73:9D:0C:60:2C Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Certificate serial: 061B Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/nbePnKzqWYXckdwHzmenc50MYCw.roa Signing time: Thu 06 Nov 2025 02:47:40 +0000 ROA not before: Thu 06 Nov 2025 02:47:40 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9812 IP address blocks: 121.76.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1563 (0x61b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Validity Not Before: Nov 6 02:47:40 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=9DB78F9CACEA5985DC91DC07CE67A7739D0C602C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:1f:5e:74:c0:fa:e5:e8:9e:03:b0:8c:b2: 55:50:81:b7:2e:24:8e:c8:a6:ea:9e:4e:97:95:a5: bc:d5:12:5c:ce:9f:25:88:dc:85:b0:53:a5:e3:f3: 61:d0:7d:f0:7b:25:d3:ee:b9:83:fc:bc:d4:b9:d5: 30:5b:f3:15:ef:0c:df:c3:0f:a0:bc:09:ed:18:c5: f7:11:8b:78:b4:9f:b8:da:b4:20:b6:cc:11:d0:27: d0:5e:ab:bb:f1:d9:84:ce:7b:15:18:ea:f1:0b:76: 29:65:ea:c3:a4:28:92:a5:ad:4e:65:61:0a:4d:c2: f1:93:a4:e9:09:03:82:f9:6a:ad:e6:62:a9:15:e0: 2d:5f:42:6b:70:8c:c6:d5:20:fd:33:96:79:25:19: f2:80:dc:1a:f4:09:a4:0b:c2:25:bf:c0:74:5b:7a: 6d:6c:34:12:a5:e5:0e:31:4d:22:c2:b2:a6:1f:69: 6f:ae:e6:dd:c1:bb:e1:c4:0c:88:49:0f:bd:25:20: 89:30:0d:ad:55:07:b0:a6:99:72:08:b6:f2:79:9d: 35:54:de:65:e6:4c:cd:3e:4a:af:ea:2c:8a:ee:74: 3b:06:20:47:73:de:30:f7:6e:ba:74:42:de:79:5b: 19:1e:bc:60:db:30:6c:7d:ba:00:d3:69:6f:64:a0: 62:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B7:8F:9C:AC:EA:59:85:DC:91:DC:07:CE:67:A7:73:9D:0C:60:2C X509v3 Authority Key Identifier: keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/nbePnKzqWYXckdwHzmenc50MYCw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.76.0.0/15 Signature Algorithm: sha256WithRSAEncryption 57:be:66:76:4a:b2:38:15:15:37:f0:1c:66:33:8a:d3:60:17: b7:78:a6:b4:b1:c7:1b:66:fe:bb:70:21:7f:6f:8a:39:81:8a: 97:37:3a:2d:7a:fb:05:90:64:77:1f:d9:cb:d4:5d:ba:a7:18: 6b:67:30:71:6b:c8:03:20:72:a4:d7:fb:76:5d:d1:d0:14:1c: e0:14:38:12:b7:34:ec:59:10:c6:ad:75:d4:da:fb:f1:60:29: cd:48:c6:e7:ad:32:0e:73:fd:fe:e8:48:d2:87:07:79:a0:1a: 5a:ff:95:c7:fa:ad:a5:d4:cf:ab:e8:19:52:88:93:4c:3e:d2: 1c:d5:e1:f8:7f:5c:f4:ff:55:99:2f:0c:ff:e5:96:d9:a5:58: 84:71:83:4b:7f:58:16:2b:90:5d:a4:a7:b5:f5:86:24:66:25: ee:bd:bb:32:7b:e0:ad:bf:48:2f:27:a9:11:a0:ee:64:b5:f1: 96:45:97:fc:05:51:21:2e:4a:cf:c3:57:a0:1b:20:c0:9e:a5: 6d:2a:7d:9b:12:64:27:c7:5b:0e:6f:5e:36:f3:4d:c9:cf:34: 69:0c:84:6e:d3:e0:41:f1:dd:c2:6c:00:d6:62:4f:7a:d6:b1: 87:e3:7a:60:c3:ff:22:98:a0:12:ac:49:46:e7:e2:0d:6e:e1: f7:b5:64:36 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBhswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNTExMDYw MjQ3NDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDlEQjc4RjlDQUNFQTU5 ODVEQzkxREMwN0NFNjdBNzczOUQwQzYwMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoBB9edMD65eieA7CMslVQgbcuJI7IpuqeTpeVpbzVElzOnyWI 3IWwU6Xj82HQffB7JdPuuYP8vNS51TBb8xXvDN/DD6C8Ce0YxfcRi3i0n7jatCC2 zBHQJ9Beq7vx2YTOexUY6vELdill6sOkKJKlrU5lYQpNwvGTpOkJA4L5aq3mYqkV 4C1fQmtwjMbVIP0zlnklGfKA3Br0CaQLwiW/wHRbem1sNBKl5Q4xTSLCsqYfaW+u 5t3Bu+HEDIhJD70lIIkwDa1VB7CmmXIItvJ5nTVU3mXmTM0+Sq/qLIrudDsGIEdz 3jD3brp0Qt55WxkevGDbMGx9ugDTaW9koGL1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUnbePnKzqWYXckdwHzmenc50MYCwwHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi9uYmVQbkt6cVdZWGNrZHdI em1lbmM1ME1ZQ3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB eUwwDQYJKoZIhvcNAQELBQADggEBAFe+ZnZKsjgVFTfwHGYzitNgF7d4prSxxxtm /rtwIX9vijmBipc3Oi16+wWQZHcf2cvUXbqnGGtnMHFryAMgcqTX+3Zd0dAUHOAU OBK3NOxZEMatddTa+/FgKc1IxuetMg5z/f7oSNKHB3mgGlr/lcf6raXUz6voGVKI k0w+0hzV4fh/XPT/VZkvDP/lltmlWIRxg0t/WBYrkF2kp7X1hiRmJe69uzJ74K2/ SC8nqRGg7mS18ZZFl/wFUSEuSs/DV6AbIMCepW0qfZsSZCfHWw5vXjbzTcnPNGkM hG7T4EHx3cJsANZiT3rWsYfjemDD/yKYoBKsSUbn4g1u4fe1ZDY= -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:37 2025 by rpki-client