This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/tKqDxDPGtgTgElv65DlcSr-X_T4.roa File: tKqDxDPGtgTgElv65DlcSr-X_T4.roa (raw, json) Hash identifier: cHCd9pprNMNd8KhcFuXBWl+YG4k0Bv7a9xzKCVTOqlg= Subject key identifier: B4:AA:83:C4:33:C6:B6:04:E0:12:5B:FA:E4:39:5C:4A:BF:97:FD:3E Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Certificate serial: 061E Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/tKqDxDPGtgTgElv65DlcSr-X_T4.roa Signing time: Thu 06 Nov 2025 02:47:40 +0000 ROA not before: Thu 06 Nov 2025 02:47:40 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9812 IP address blocks: 61.87.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Validity Not Before: Nov 6 02:47:40 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B4AA83C433C6B604E0125BFAE4395C4ABF97FD3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:6b:d8:a3:11:d2:aa:2b:1c:bb:e2:19:16: ec:fb:53:43:13:4f:8a:e7:95:a0:88:8c:41:56:f9: 74:1d:04:4c:f9:93:eb:3c:46:a9:cf:9d:71:58:ff: d4:80:60:12:49:5c:6b:b2:58:ea:a8:33:4e:d1:87: a4:47:fb:11:e4:b7:f3:9b:17:f8:3b:16:dd:fe:40: 72:0d:35:20:80:8f:e0:9b:0e:96:78:ad:40:fa:c2: d3:61:40:27:c3:80:5e:66:c5:78:d8:b8:c9:85:e5: 94:1c:e2:2d:23:22:76:0d:20:da:49:65:b6:81:b5: a9:15:38:5d:b2:ac:e3:1e:e2:e4:e3:07:b1:75:89: 78:c6:56:4f:97:91:27:58:ba:27:8b:67:35:27:63: 23:37:4d:c6:8c:ea:45:f8:22:a3:7f:a9:0e:a5:07: 26:5e:e7:bd:0e:48:9a:b0:03:c2:31:cb:26:db:15: f0:e9:7b:89:74:11:cd:3c:d9:e4:30:57:ed:9b:57: 7d:e9:c2:e5:54:ba:54:42:2f:74:5e:eb:ab:90:6b: dd:1d:d1:17:d5:5a:3c:77:2c:cd:4d:96:63:0d:70: cd:44:4c:69:db:87:84:5e:cb:ef:05:ed:67:b3:da: 49:b8:b6:f9:da:17:86:c9:20:fc:2f:e1:5f:62:ba: f9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AA:83:C4:33:C6:B6:04:E0:12:5B:FA:E4:39:5C:4A:BF:97:FD:3E X509v3 Authority Key Identifier: keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/tKqDxDPGtgTgElv65DlcSr-X_T4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.87.192.0/18 Signature Algorithm: sha256WithRSAEncryption 5d:84:4f:2c:81:7c:a2:18:d5:1e:89:b9:d0:00:a9:c2:87:eb: 02:19:e2:c3:c6:ff:d6:8e:f3:83:8b:7a:fd:4b:d7:fa:f3:b9: 4f:7d:43:59:db:27:9d:b0:a9:f8:8a:8e:c3:33:7f:5b:57:df: 91:43:6b:dd:2d:ef:e0:03:07:c7:5f:1e:c8:8b:1c:85:18:00: 54:15:28:20:e0:72:35:2f:92:b6:4a:e6:e7:fd:06:60:8d:03: fd:0f:92:91:dc:e7:c8:56:65:6e:d6:2a:1d:47:81:4a:e7:5b: d3:f5:3e:18:8b:f1:83:f6:84:cc:86:c1:ba:cc:a6:aa:cd:34: c0:0a:cb:fb:bb:b6:36:91:86:d4:43:b1:17:1e:06:ce:27:e5: cc:eb:bc:85:98:eb:e6:1b:35:6b:78:5e:6e:78:17:a0:7e:fc: fa:39:82:53:00:b7:75:09:a2:e3:38:09:a6:97:44:40:17:66: 60:af:21:94:ea:0c:4f:2c:a7:39:05:ce:1e:53:d0:fe:ab:01: 93:d8:79:65:3c:0b:55:1e:5b:5b:b5:4a:a9:46:42:1e:d1:a3: df:9c:0e:01:34:24:a9:ca:20:a1:8d:c7:c8:32:69:68:56:7d: b2:9e:ef:5c:39:10:e1:79:d4:d9:4d:ae:02:57:f5:a6:e8:2c: c7:9e:72:31 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNTExMDYw MjQ3NDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEI0QUE4M0M0MzNDNkI2 MDRFMDEyNUJGQUU0Mzk1QzRBQkY5N0ZEM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGc2vYoxHSqiscu+IZFuz7U0MTT4rnlaCIjEFW+XQdBEz5k+s8 RqnPnXFY/9SAYBJJXGuyWOqoM07Rh6RH+xHkt/ObF/g7Ft3+QHINNSCAj+CbDpZ4 rUD6wtNhQCfDgF5mxXjYuMmF5ZQc4i0jInYNINpJZbaBtakVOF2yrOMe4uTjB7F1 iXjGVk+XkSdYuieLZzUnYyM3TcaM6kX4IqN/qQ6lByZe570OSJqwA8IxyybbFfDp e4l0Ec082eQwV+2bV33pwuVUulRCL3Re66uQa90d0RfVWjx3LM1NlmMNcM1ETGnb h4Rey+8F7Wez2km4tvnaF4bJIPwv4V9iuvmhAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUtKqDxDPGtgTgElv65DlcSr+X/T4wHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi90S3FEeERQR3RnVGdFbHY2 NURsY1NyLVhfVDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG PVfAMA0GCSqGSIb3DQEBCwUAA4IBAQBdhE8sgXyiGNUeibnQAKnCh+sCGeLDxv/W jvODi3r9S9f687lPfUNZ2yedsKn4io7DM39bV9+RQ2vdLe/gAwfHXx7IixyFGABU FSgg4HI1L5K2Subn/QZgjQP9D5KR3OfIVmVu1iodR4FK51vT9T4Yi/GD9oTMhsG6 zKaqzTTACsv7u7Y2kYbUQ7EXHgbOJ+XM67yFmOvmGzVreF5ueBegfvz6OYJTALd1 CaLjOAmml0RAF2ZgryGU6gxPLKc5Bc4eU9D+qwGT2HllPAtVHltbtUqpRkIe0aPf nA4BNCSpyiChjcfIMmloVn2ynu9cORDhedTZTa4CV/Wm6CzHnnIx -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:32 2025 by rpki-client