This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/qW6Bv7uoL_195H1MB_jChMWMSvo.roa
File: qW6Bv7uoL_195H1MB_jChMWMSvo.roa (raw, json)
Hash identifier: AnbkRBuOTQcpm4hcUi0EemyrsDvNd2UATJd1hS1A14Q=
Subject key identifier: A9:6E:81:BF:BB:A8:2F:FD:7D:E4:7D:4C:07:F8:C2:84:C5:8C:4A:FA
Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1
Certificate serial: 062B
Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/qW6Bv7uoL_195H1MB_jChMWMSvo.roa
Signing time: Thu 06 Nov 2025 02:54:52 +0000
ROA not before: Thu 06 Nov 2025 02:54:52 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 9812
IP address blocks: 220.234.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 01:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1579 (0x62b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1
Validity
Not Before: Nov 6 02:54:52 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=A96E81BFBBA82FFD7DE47D4C07F8C284C58C4AFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:a8:be:30:76:1d:0d:43:9b:76:8d:86:80:
c8:0b:6a:b4:65:7f:cd:7f:b8:5b:c7:55:ce:02:d6:
4a:11:15:35:7c:8e:98:d4:4b:dc:57:76:19:5a:9a:
22:ef:7c:e7:b0:a4:7f:72:df:e4:15:e2:6f:5e:d3:
01:94:df:7a:50:87:e3:72:ef:5c:c5:21:11:89:14:
0f:cb:52:a3:a7:b7:5f:16:fe:ae:c1:a9:68:3b:79:
8d:29:31:5b:1a:19:c3:7a:6a:49:6f:b1:71:28:a1:
7a:45:3d:c0:dd:aa:60:a5:f5:7e:b1:b9:34:35:08:
ee:ab:c3:9e:f5:54:21:ca:1a:11:63:df:cd:33:19:
39:7b:81:de:9d:f5:52:f8:d0:93:9e:fe:0a:f3:a1:
42:fc:aa:06:84:36:24:10:ba:d0:9a:6d:47:14:68:
01:5a:18:4d:5a:1d:dc:56:be:27:8c:d5:9b:74:42:
e9:01:6f:bb:9d:9c:1b:77:65:9a:5e:ce:eb:0b:bc:
3e:96:2d:75:94:2a:ae:4e:5d:e8:5e:5c:13:21:c4:
ee:53:93:43:dc:40:92:d2:29:bb:b8:7e:0f:dc:27:
96:a6:c2:4a:46:59:2c:4b:70:3b:d0:43:c2:3f:69:
40:e6:b6:16:53:34:1c:aa:1e:00:d6:9f:40:a5:6a:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6E:81:BF:BB:A8:2F:FD:7D:E4:7D:4C:07:F8:C2:84:C5:8C:4A:FA
X509v3 Authority Key Identifier:
keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/qW6Bv7uoL_195H1MB_jChMWMSvo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:6e:bf:88:4f:81:7c:1e:dc:b1:cc:da:58:10:0a:8b:80:dd:
8a:ef:a0:28:c1:d1:d0:01:b3:32:c5:fb:af:03:c1:66:69:b4:
a7:da:37:d6:2b:c6:48:f8:3a:c5:6a:98:48:99:a3:1d:60:d0:
28:43:ac:6b:a6:75:a2:30:8e:1c:47:10:09:86:b2:54:02:f3:
a1:1f:d6:ed:63:15:b3:36:65:41:dc:6d:95:ff:b7:b0:93:2a:
31:a3:9a:35:4e:f8:7d:0a:75:37:fe:f7:b8:f2:29:6b:9a:8e:
f4:0e:bd:a5:47:bb:d6:2e:35:69:cd:1e:a1:09:26:a1:d6:bc:
18:ad:03:b0:5b:38:90:65:d1:8c:6c:f1:80:06:e7:db:e8:e5:
f6:7b:43:98:2c:a0:4e:7b:1a:e7:e1:6b:0d:e8:56:07:34:8c:
74:a4:d4:f5:bb:c1:0d:26:0a:c9:99:3f:25:61:d3:f1:c4:b8:
c2:0e:27:ec:e0:62:de:b1:e5:8a:5b:ef:e7:73:d8:97:9c:ab:
5e:c2:72:6a:d6:99:cc:8c:33:35:db:75:ee:56:d8:dc:7f:6f:
a8:6c:20:40:29:d2:7b:92:a9:f9:22:b1:70:4a:d0:b1:b6:46:
7f:05:da:ae:41:da:8b:e5:d3:03:83:f0:39:77:a5:a7:1a:cc:
fc:84:48:dd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBiswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx
REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNTExMDYw
MjU0NTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEE5NkU4MUJGQkJBODJG
RkQ3REU0N0Q0QzA3RjhDMjg0QzU4QzRBRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCz/ai+MHYdDUObdo2GgMgLarRlf81/uFvHVc4C1koRFTV8jpjU
S9xXdhlamiLvfOewpH9y3+QV4m9e0wGU33pQh+Ny71zFIRGJFA/LUqOnt18W/q7B
qWg7eY0pMVsaGcN6aklvsXEooXpFPcDdqmCl9X6xuTQ1CO6rw571VCHKGhFj380z
GTl7gd6d9VL40JOe/grzoUL8qgaENiQQutCabUcUaAFaGE1aHdxWvieM1Zt0QukB
b7udnBt3ZZpezusLvD6WLXWUKq5OXeheXBMhxO5Tk0PcQJLSKbu4fg/cJ5amwkpG
WSxLcDvQQ8I/aUDmthZTNByqHgDWn0ClavW/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUqW6Bv7uoL/195H1MB/jChMWMSvowHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg
tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv
MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi9xVzZCdjd1b0xfMTk1SDFN
Ql9qQ2hNV01Tdm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
3OowDQYJKoZIhvcNAQELBQADggEBAI1uv4hPgXwe3LHM2lgQCouA3YrvoCjB0dAB
szLF+68DwWZptKfaN9Yrxkj4OsVqmEiZox1g0ChDrGumdaIwjhxHEAmGslQC86Ef
1u1jFbM2ZUHcbZX/t7CTKjGjmjVO+H0KdTf+97jyKWuajvQOvaVHu9YuNWnNHqEJ
JqHWvBitA7BbOJBl0Yxs8YAG59vo5fZ7Q5gsoE57Gufhaw3oVgc0jHSk1PW7wQ0m
CsmZPyVh0/HEuMIOJ+zgYt6x5Ypb7+dz2Jecq17CcmrWmcyMMzXbde5W2Nx/b6hs
IEAp0nuSqfkisXBK0LG2Rn8F2q5B2ovl0wOD8Dl3pacazPyESN0=
-----END CERTIFICATE-----
Generated at Fri Dec 5 00:30:39 2025 by rpki-client