This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/zCAu8bQkxhNq1UyLI-UHPkMUgi0.roa File: zCAu8bQkxhNq1UyLI-UHPkMUgi0.roa (raw, json) Hash identifier: rkNIbIaIMcy8iXZo7RC1Aj8Owgsiv0QiyLgPgoyEC/k= Subject key identifier: CC:20:2E:F1:B4:24:C6:13:6A:D5:4C:8B:23:E5:07:3E:43:14:82:2D Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Certificate serial: 0628 Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/zCAu8bQkxhNq1UyLI-UHPkMUgi0.roa Signing time: Thu 06 Nov 2025 02:54:51 +0000 ROA not before: Thu 06 Nov 2025 02:54:51 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9812 IP address blocks: 202.158.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1576 (0x628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Validity Not Before: Nov 6 02:54:51 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=CC202EF1B424C6136AD54C8B23E5073E4314822D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:74:49:26:bb:d1:e4:40:0b:f1:ee:7b:de:c9: 7c:b7:80:42:63:d7:f1:3c:53:cf:22:c8:66:54:56: d9:6a:f9:1f:7f:7a:2e:34:07:47:79:0a:a5:a5:01: 17:78:45:22:cb:aa:22:f9:de:29:34:00:0c:eb:a4: 60:89:ee:0b:5c:28:41:e4:6a:a6:4d:f8:af:d0:67: 29:57:91:b1:20:6e:b9:c8:05:21:dd:e8:ae:2f:5c: 34:8d:8b:67:0d:ad:7b:bc:f8:fb:0d:0c:74:8d:13: e3:32:2d:18:f2:4b:73:b9:6d:33:4e:1a:e3:4e:31: 2a:5c:44:65:f0:99:b9:79:5f:d1:38:65:4d:8b:22: b5:93:fc:b3:32:b0:1e:27:56:ad:09:c9:31:59:51: c3:d1:67:ef:5b:06:0e:27:d8:28:75:ec:69:7f:44: 40:39:9e:9b:f5:06:fe:26:dd:9c:46:9d:f6:b3:79: 82:e4:f1:45:f5:57:f8:28:ef:65:39:86:dd:6d:5d: 2c:d0:3a:d0:23:39:3e:d2:79:1d:1d:6c:5c:e5:64: 59:c6:14:1a:8d:2a:02:b4:e1:83:72:10:a4:89:3a: 54:a2:10:d6:f2:be:4f:c9:9a:ef:55:97:95:3d:d4: c4:30:70:69:ac:45:a5:e9:44:d3:e4:9b:ed:3d:f3: c9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:20:2E:F1:B4:24:C6:13:6A:D5:4C:8B:23:E5:07:3E:43:14:82:2D X509v3 Authority Key Identifier: keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/zCAu8bQkxhNq1UyLI-UHPkMUgi0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.158.160.0/19 Signature Algorithm: sha256WithRSAEncryption 5b:d4:84:b8:83:bd:8a:6a:f8:77:b9:52:09:02:00:1d:b3:89: 51:14:98:0d:97:93:f7:4a:1f:e2:73:1d:23:11:fd:0d:eb:a5: 3c:63:76:83:d6:75:88:b3:ea:19:c5:a6:83:db:0f:ce:98:5e: 6d:66:1c:76:6b:17:64:a8:8c:6d:1e:d8:cd:7d:81:47:71:1b: 8f:7b:3e:18:a0:ad:15:95:4b:82:19:c0:4a:65:87:42:cd:7a: 7e:a5:88:5d:83:e9:4d:28:60:18:cc:31:b1:62:7d:ea:51:dd: 2b:ae:fb:43:92:0a:69:99:1e:a9:60:f6:ae:3b:20:e9:5b:1d: 0b:22:87:9f:8a:4a:5e:06:f8:25:58:b4:d0:c4:7a:d4:be:bd: d1:81:b1:ec:b6:0c:a3:ac:50:4b:90:7d:69:8a:39:f5:47:01: cc:10:70:f2:3e:ab:0f:38:8c:66:5b:fe:fc:25:bc:06:99:5b: 18:28:b3:b7:b4:7c:38:1d:8c:ae:26:52:2b:dc:49:cf:4c:3d: 3d:84:84:41:ad:fe:6d:e8:dc:36:2d:ae:98:08:d3:4b:25:0a: d8:c3:e9:33:b2:55:e8:59:2c:a9:54:5f:87:6f:6f:5d:16:fc: dc:15:ea:4e:96:dd:e6:a3:07:d3:6f:0c:a4:64:0f:65:ec:fa: 6b:a5:0e:96 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBigwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNTExMDYw MjU0NTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKENDMjAyRUYxQjQyNEM2 MTM2QUQ1NEM4QjIzRTUwNzNFNDMxNDgyMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNdEkmu9HkQAvx7nveyXy3gEJj1/E8U88iyGZUVtlq+R9/ei40 B0d5CqWlARd4RSLLqiL53ik0AAzrpGCJ7gtcKEHkaqZN+K/QZylXkbEgbrnIBSHd 6K4vXDSNi2cNrXu8+PsNDHSNE+MyLRjyS3O5bTNOGuNOMSpcRGXwmbl5X9E4ZU2L IrWT/LMysB4nVq0JyTFZUcPRZ+9bBg4n2Ch17Gl/REA5npv1Bv4m3ZxGnfazeYLk 8UX1V/go72U5ht1tXSzQOtAjOT7SeR0dbFzlZFnGFBqNKgK04YNyEKSJOlSiENby vk/Jmu9Vl5U91MQwcGmsRaXpRNPkm+0988lHAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUzCAu8bQkxhNq1UyLI+UHPkMUgi0wHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi96Q0F1OGJRa3hoTnExVXlM SS1VSFBrTVVnaTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF yp6gMA0GCSqGSIb3DQEBCwUAA4IBAQBb1IS4g72Kavh3uVIJAgAds4lRFJgNl5P3 Sh/icx0jEf0N66U8Y3aD1nWIs+oZxaaD2w/OmF5tZhx2axdkqIxtHtjNfYFHcRuP ez4YoK0VlUuCGcBKZYdCzXp+pYhdg+lNKGAYzDGxYn3qUd0rrvtDkgppmR6pYPau OyDpWx0LIoefikpeBvglWLTQxHrUvr3RgbHstgyjrFBLkH1pijn1RwHMEHDyPqsP OIxmW/78JbwGmVsYKLO3tHw4HYyuJlIr3EnPTD09hIRBrf5t6Nw2La6YCNNLJQrY w+kzslXoWSypVF+Hb29dFvzcFepOlt3mowfTbwykZA9l7PprpQ6W -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:45 2025 by rpki-client