This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/zDsF_ocr-Vhn7g0PuK3Nfa0PpnQ.roa File: zDsF_ocr-Vhn7g0PuK3Nfa0PpnQ.roa (raw, json) Hash identifier: ACjLAHtSQnr5lM2TkMPAk5riK/6jJk80g1efX+v02Dw= Subject key identifier: CC:3B:05:FE:87:2B:F9:58:67:EE:0D:0F:B8:AD:CD:7D:AD:0F:A6:74 Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Certificate serial: 062A Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/zDsF_ocr-Vhn7g0PuK3Nfa0PpnQ.roa Signing time: Thu 06 Nov 2025 02:54:52 +0000 ROA not before: Thu 06 Nov 2025 02:54:52 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9812 IP address blocks: 211.144.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1578 (0x62a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Validity Not Before: Nov 6 02:54:52 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=CC3B05FE872BF95867EE0D0FB8ADCD7DAD0FA674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fe:62:fa:68:69:37:24:13:af:43:cf:48:ea: 60:5e:83:28:86:a7:2b:2f:e5:1d:fe:3a:e7:59:63: 36:53:7b:07:fc:ad:12:c5:fb:ba:7d:49:ae:68:2d: d7:7a:53:37:3e:fd:df:80:48:f8:dd:16:de:a3:c6: 58:61:aa:c5:a5:ca:e7:22:be:4c:28:92:cb:af:b6: 72:4a:b3:3d:2b:10:3e:2f:e0:f6:11:92:8d:d8:ef: b8:35:ea:71:37:6d:d8:a1:df:6f:a2:9e:e8:ff:1e: b1:a8:4c:e8:99:bc:2c:35:18:3f:83:c3:75:28:4d: 4a:6b:cd:d4:32:dc:67:06:c6:df:14:02:78:17:e0: d5:8e:07:e4:f9:03:bc:cf:04:7c:eb:80:dd:99:68: 8b:f3:b5:aa:77:ad:59:44:45:59:d1:b4:b5:50:2a: fd:4a:c5:be:2c:16:16:29:13:ed:f4:e5:f2:7f:df: da:db:ec:bb:d9:8a:0f:62:3b:94:7c:eb:a3:0b:52: a3:b0:95:9a:a5:ab:89:8e:fe:48:8e:da:40:81:33: 8a:a8:50:3e:b9:9c:37:89:75:dd:7b:05:76:8f:f8: 9a:26:b4:7b:74:ad:9b:f7:f7:44:2b:72:60:cc:0e: 17:61:68:89:aa:05:2d:0f:e9:2a:8f:3e:99:b1:8d: 38:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3B:05:FE:87:2B:F9:58:67:EE:0D:0F:B8:AD:CD:7D:AD:0F:A6:74 X509v3 Authority Key Identifier: keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/zDsF_ocr-Vhn7g0PuK3Nfa0PpnQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.144.64.0/19 Signature Algorithm: sha256WithRSAEncryption 1c:bc:44:22:1f:42:40:f0:d6:f5:e7:6a:08:5d:4e:18:98:00: 6a:93:84:c9:15:7a:ce:f7:1c:3e:7e:88:fc:32:23:ee:37:92: 8b:47:48:28:0a:15:c6:52:ab:8d:cd:23:ed:23:7e:32:b7:a3: 57:12:9e:56:f0:94:d8:fe:c3:3d:d8:d6:61:e5:ce:23:5f:93: 05:13:29:8d:e6:c9:59:73:ca:18:4f:56:19:31:10:59:84:3f: 35:dd:02:0b:a4:b0:2b:1b:69:00:4e:a9:3e:f9:26:42:eb:42: 2a:37:e0:6d:5d:fd:64:d7:de:a3:ed:71:86:72:32:06:07:c2: 39:57:75:05:cf:9d:e3:57:b2:c7:37:23:c9:37:b8:32:b8:81: 7f:52:30:b7:01:a0:a9:cb:43:0a:ac:e6:0f:a3:44:80:bd:1a: 49:d8:db:f3:aa:ff:ea:60:a0:92:7d:e6:84:f8:2c:77:75:be: 9b:13:f7:4f:b0:a3:fb:83:08:bd:ed:f9:eb:3b:7d:54:aa:34: 54:0d:8a:ad:9c:1e:13:81:78:98:96:62:71:cc:7a:93:d3:1f: af:a0:aa:23:1c:a5:10:ed:55:e7:56:ae:6b:0f:3c:a1:c8:e9: a0:4b:14:d6:99:21:13:da:ad:e2:f9:90:97:51:2d:15:eb:1c: 0c:bf:0e:2b -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBiowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNTExMDYw MjU0NTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKENDM0IwNUZFODcyQkY5 NTg2N0VFMEQwRkI4QURDRDdEQUQwRkE2NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ/mL6aGk3JBOvQ89I6mBegyiGpysv5R3+OudZYzZTewf8rRLF +7p9Sa5oLdd6Uzc+/d+ASPjdFt6jxlhhqsWlyucivkwoksuvtnJKsz0rED4v4PYR ko3Y77g16nE3bdih32+inuj/HrGoTOiZvCw1GD+Dw3UoTUprzdQy3GcGxt8UAngX 4NWOB+T5A7zPBHzrgN2ZaIvztap3rVlERVnRtLVQKv1Kxb4sFhYpE+305fJ/39rb 7LvZig9iO5R866MLUqOwlZqlq4mO/kiO2kCBM4qoUD65nDeJdd17BXaP+JomtHt0 rZv390QrcmDMDhdhaImqBS0P6SqPPpmxjTjtAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUzDsF/ocr+Vhn7g0PuK3Nfa0PpnQwHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi96RHNGX29jci1WaG43ZzBQ dUszTmZhMFBwblEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF 05BAMA0GCSqGSIb3DQEBCwUAA4IBAQAcvEQiH0JA8Nb152oIXU4YmABqk4TJFXrO 9xw+foj8MiPuN5KLR0goChXGUquNzSPtI34yt6NXEp5W8JTY/sM92NZh5c4jX5MF EymN5slZc8oYT1YZMRBZhD813QILpLArG2kATqk++SZC60IqN+BtXf1k196j7XGG cjIGB8I5V3UFz53jV7LHNyPJN7gyuIF/UjC3AaCpy0MKrOYPo0SAvRpJ2Nvzqv/q YKCSfeaE+Cx3db6bE/dPsKP7gwi97fnrO31UqjRUDYqtnB4TgXiYlmJxzHqT0x+v oKojHKUQ7VXnVq5rDzyhyOmgSxTWmSET2q3i+ZCXUS0V6xwMvw4r -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:31 2025 by rpki-client