This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/wAnT0H3Exwuh0puPOa84PkUo7jw.roa File: wAnT0H3Exwuh0puPOa84PkUo7jw.roa (raw, json) Hash identifier: 9bqRSUm0pia4VbU9iB77Hvh6P5hej4AYTWlO3ngwdEw= Subject key identifier: C0:09:D3:D0:7D:C4:C7:0B:A1:D2:9B:8F:39:AF:38:3E:45:28:EE:3C Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Certificate serial: 062D Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/wAnT0H3Exwuh0puPOa84PkUo7jw.roa Signing time: Thu 06 Nov 2025 02:54:53 +0000 ROA not before: Thu 06 Nov 2025 02:54:53 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9812 IP address blocks: 221.137.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1581 (0x62d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Validity Not Before: Nov 6 02:54:53 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C009D3D07DC4C70BA1D29B8F39AF383E4528EE3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7e:98:d9:39:c3:a2:34:7e:fc:8b:7a:71:25: a9:32:cd:2d:76:ac:b6:60:9e:90:b3:17:e1:32:c2: 3c:23:a1:4a:9f:09:50:5d:d3:1d:d8:95:3b:2a:d0: d5:65:dd:bd:e3:92:3a:63:a1:98:0d:e8:de:25:29: fd:8b:8a:ae:d5:f5:fd:9a:14:c2:07:82:8d:a3:9e: 7a:ff:f5:71:08:21:06:cb:07:88:29:b1:53:3e:e5: 62:16:1c:c6:b0:d6:65:15:f3:d4:78:be:a5:33:64: 4b:88:92:2a:ef:bb:27:84:37:60:9d:d7:9a:0c:bb: 65:7d:ff:7a:ae:1c:6e:c3:cd:2e:3d:bc:81:eb:4a: d7:cf:c1:21:f3:10:2f:43:5f:95:29:ba:1a:a7:98: 29:a6:6e:bd:d7:62:a2:26:2a:d1:8e:72:41:6b:a9: e8:76:41:89:52:75:cb:68:5b:43:b8:5c:ca:ea:b6: 88:d8:d0:0e:55:98:58:d8:ed:ff:80:21:e0:a5:95: 03:f7:71:de:4b:f3:63:38:db:f8:4f:21:ad:c9:70: a8:50:a9:8f:22:66:19:3d:16:85:d2:7f:50:dd:9f: 39:68:81:70:8d:80:f3:1f:4b:11:9b:a9:44:05:43: f2:dd:e5:a8:5d:92:f8:48:89:01:3c:0a:90:d4:1c: 57:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:09:D3:D0:7D:C4:C7:0B:A1:D2:9B:8F:39:AF:38:3E:45:28:EE:3C X509v3 Authority Key Identifier: keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/wAnT0H3Exwuh0puPOa84PkUo7jw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 221.137.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0b:c8:4c:5e:e3:88:3c:69:d7:1f:80:13:94:89:0c:d9:f4:ad: a8:85:a1:8b:c0:6d:0b:c8:60:fe:e9:07:cf:b9:03:58:12:5a: 9f:52:7b:17:c6:47:c1:79:32:ad:a4:94:51:84:53:86:34:3b: f1:8e:2b:48:0e:bf:65:5a:a7:8e:43:49:a4:97:e9:82:86:0e: b1:a6:b9:fd:f9:84:d9:40:d0:0a:53:88:99:db:a8:ba:43:2e: 80:3e:f3:cd:20:14:ee:b3:9f:5e:02:9e:7e:cf:1b:ea:06:58: a2:d3:ab:36:b4:1f:b1:e8:db:b7:f1:92:9e:b1:87:14:f5:85: 6e:9e:37:ce:a3:0c:c2:2e:50:f1:3c:20:ce:fd:7a:67:6d:c0: 3e:8a:a3:46:11:44:bd:d1:e8:e5:a0:87:6b:57:98:50:e7:b9: 8a:27:4e:5e:1a:a2:96:93:c0:cd:c2:61:36:b1:ef:fb:4a:6c: 57:b9:19:3e:00:41:04:bd:32:bf:7f:1a:10:dd:5a:4a:42:14: f8:5b:b2:a1:6f:65:24:78:9e:df:ef:bd:ca:e2:31:49:ef:e3: 99:fc:09:5f:a9:5f:0f:26:47:26:7e:c7:a0:2d:81:ad:a4:a1: cb:64:ba:19:16:50:3a:4a:85:60:f2:ba:56:fa:81:1a:f2:ea: c3:49:f7:42 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBi0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNTExMDYw MjU0NTNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEMwMDlEM0QwN0RDNEM3 MEJBMUQyOUI4RjM5QUYzODNFNDUyOEVFM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3fpjZOcOiNH78i3pxJakyzS12rLZgnpCzF+EywjwjoUqfCVBd 0x3YlTsq0NVl3b3jkjpjoZgN6N4lKf2Liq7V9f2aFMIHgo2jnnr/9XEIIQbLB4gp sVM+5WIWHMaw1mUV89R4vqUzZEuIkirvuyeEN2Cd15oMu2V9/3quHG7DzS49vIHr StfPwSHzEC9DX5UpuhqnmCmmbr3XYqImKtGOckFrqeh2QYlSdctoW0O4XMrqtojY 0A5VmFjY7f+AIeCllQP3cd5L82M42/hPIa3JcKhQqY8iZhk9FoXSf1DdnzlogXCN gPMfSxGbqUQFQ/Ld5ahdkvhIiQE8CpDUHFdPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwAnT0H3Exwuh0puPOa84PkUo7jwwHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi93QW5UMEgzRXh3dWgwcHVQ T2E4NFBrVW83ancucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA 3YkwDQYJKoZIhvcNAQELBQADggEBAAvITF7jiDxp1x+AE5SJDNn0raiFoYvAbQvI YP7pB8+5A1gSWp9SexfGR8F5Mq2klFGEU4Y0O/GOK0gOv2Vap45DSaSX6YKGDrGm uf35hNlA0ApTiJnbqLpDLoA+880gFO6zn14Cnn7PG+oGWKLTqza0H7Ho27fxkp6x hxT1hW6eN86jDMIuUPE8IM79emdtwD6Ko0YRRL3R6OWgh2tXmFDnuYonTl4aopaT wM3CYTax7/tKbFe5GT4AQQS9Mr9/GhDdWkpCFPhbsqFvZSR4nt/vvcriMUnv45n8 CV+pXw8mRyZ+x6Atga2koctkuhkWUDpKhWDyulb6gRry6sNJ90I= -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:33 2025 by rpki-client