This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/zr0OFwbZ2F5cmZc-6VFRH2avvFg.roa File: zr0OFwbZ2F5cmZc-6VFRH2avvFg.roa (raw, json) Hash identifier: PVklNp9GSoeIuS+Ad4ZbIw0p9RPoglbHk2bAgL58PbU= Subject key identifier: CE:BD:0E:17:06:D9:D8:5E:5C:99:97:3E:E9:51:51:1F:66:AF:BC:58 Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Certificate serial: 061C Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/zr0OFwbZ2F5cmZc-6VFRH2avvFg.roa Signing time: Thu 06 Nov 2025 02:47:40 +0000 ROA not before: Thu 06 Nov 2025 02:47:40 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9812 IP address blocks: 60.63.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1564 (0x61c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Validity Not Before: Nov 6 02:47:40 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=CEBD0E1706D9D85E5C99973EE951511F66AFBC58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ff:2a:dd:53:53:a0:9a:14:9a:9b:1c:a4:cb: 1c:4b:38:54:0e:f6:83:05:b8:d6:41:27:e4:88:da: fe:0a:90:0b:c5:51:bb:23:e3:36:2b:cd:87:1e:f0: d4:d2:06:b4:20:02:db:0b:fc:c9:f1:39:af:87:1c: 4f:91:9f:5e:ba:84:fd:74:bf:5f:cf:39:fd:72:e3: 2d:4d:16:3c:69:04:b3:b6:9a:be:b5:2b:e0:a9:0e: 84:f6:ad:85:72:1f:76:9c:fc:e4:d7:28:0b:7c:15: fe:24:d4:45:3d:ff:63:5b:bd:44:38:af:d7:7e:55: 9b:2a:ae:da:c6:89:11:f1:31:01:cc:38:6c:a5:37: 95:d7:0b:a0:68:65:f3:22:e1:a9:73:c6:b5:f1:a3: 46:fa:f6:e8:40:38:bd:fe:37:18:f3:a2:27:d3:4a: 73:f1:e4:bc:76:d1:06:13:24:09:89:f8:c8:62:56: 87:b0:e6:e0:a3:e8:10:f8:12:eb:75:6c:01:6c:4d: 81:0c:21:37:94:b4:f1:0d:a3:ab:37:ea:b0:10:92: 3a:28:8c:01:8a:02:11:fd:8f:a8:4f:8e:45:62:6a: 26:ce:d8:4c:9b:de:f6:22:25:e6:3a:d4:5c:4c:f0: 28:cb:9e:2c:f8:0f:d6:14:29:46:01:b7:f5:ef:7c: ef:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BD:0E:17:06:D9:D8:5E:5C:99:97:3E:E9:51:51:1F:66:AF:BC:58 X509v3 Authority Key Identifier: keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/zr0OFwbZ2F5cmZc-6VFRH2avvFg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.63.0.0/16 Signature Algorithm: sha256WithRSAEncryption 58:96:f2:29:c2:c3:6d:be:a6:af:83:5f:73:30:3b:ac:c4:e1: cb:81:39:70:37:0b:3b:59:55:0c:7b:53:d4:7a:4e:60:0e:d9: a1:6f:c4:af:52:3c:a0:34:91:69:a3:ae:c3:d1:95:a1:d6:76: 53:bf:97:cc:d4:10:63:57:29:75:63:a8:69:ba:8e:e2:22:89: 99:09:f1:36:ef:ee:a7:b2:74:ed:72:63:45:68:ea:93:ff:da: e2:76:d1:ac:5b:42:01:85:a8:5b:a2:88:31:90:1d:d7:39:c8: 1c:c4:81:fe:8d:d5:93:2d:c6:a5:b6:31:7b:ed:45:db:80:47: b8:af:88:a8:bd:e9:5e:54:f2:25:8a:d5:b9:aa:71:42:51:dc: 69:66:46:8f:ee:19:73:d9:21:1b:68:1c:35:f8:5f:64:81:1d: 77:11:77:1c:02:dc:7d:42:9f:15:8f:4e:b3:7f:9e:ea:76:3a: 63:ce:fe:ad:41:f4:61:de:c9:65:94:17:63:d5:fa:8f:fa:ec: 40:03:84:9e:2b:23:29:c5:cf:9f:35:37:81:c1:e2:dc:a5:6e: 95:ca:ca:6f:bf:70:6a:09:14:e3:a8:98:fb:96:83:56:47:a3: 96:b8:30:d2:05:0f:e4:8e:22:71:ba:fd:13:e0:6e:74:ca:58: ea:8d:dc:24 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNTExMDYw MjQ3NDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKENFQkQwRTE3MDZEOUQ4 NUU1Qzk5OTczRUU5NTE1MTFGNjZBRkJDNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDf/yrdU1OgmhSamxykyxxLOFQO9oMFuNZBJ+SI2v4KkAvFUbsj 4zYrzYce8NTSBrQgAtsL/MnxOa+HHE+Rn166hP10v1/POf1y4y1NFjxpBLO2mr61 K+CpDoT2rYVyH3ac/OTXKAt8Ff4k1EU9/2NbvUQ4r9d+VZsqrtrGiRHxMQHMOGyl N5XXC6BoZfMi4alzxrXxo0b69uhAOL3+NxjzoifTSnPx5Lx20QYTJAmJ+MhiVoew 5uCj6BD4Eut1bAFsTYEMITeUtPENo6s36rAQkjoojAGKAhH9j6hPjkViaibO2Eyb 3vYiJeY61FxM8CjLniz4D9YUKUYBt/XvfO8DAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUzr0OFwbZ2F5cmZc+6VFRH2avvFgwHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi96cjBPRndiWjJGNWNtWmMt NlZGUkgyYXZ2Rmcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA PD8wDQYJKoZIhvcNAQELBQADggEBAFiW8inCw22+pq+DX3MwO6zE4cuBOXA3CztZ VQx7U9R6TmAO2aFvxK9SPKA0kWmjrsPRlaHWdlO/l8zUEGNXKXVjqGm6juIiiZkJ 8Tbv7qeydO1yY0Vo6pP/2uJ20axbQgGFqFuiiDGQHdc5yBzEgf6N1ZMtxqW2MXvt RduAR7iviKi96V5U8iWK1bmqcUJR3GlmRo/uGXPZIRtoHDX4X2SBHXcRdxwC3H1C nxWPTrN/nup2OmPO/q1B9GHeyWWUF2PV+o/67EADhJ4rIynFz581N4HB4tylbpXK ym+/cGoJFOOomPuWg1ZHo5a4MNIFD+SOInG6/RPgbnTKWOqN3CQ= -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:30 2025 by rpki-client