This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/EW9PhL6aRbh05kS3sIBpq7FmBiM.roa File: EW9PhL6aRbh05kS3sIBpq7FmBiM.roa (raw, json) Hash identifier: uN1/dknkCy944RXhPG3I+7wiH90ev7/uLCyPw78JsGc= Subject key identifier: 11:6F:4F:84:BE:9A:45:B8:74:E6:44:B7:B0:80:69:AB:B1:66:06:23 Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Certificate serial: 0B0F Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/EW9PhL6aRbh05kS3sIBpq7FmBiM.roa Signing time: Mon 27 Oct 2025 02:39:24 +0000 ROA not before: Mon 27 Oct 2025 02:39:24 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 58834 IP address blocks: 203.132.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2831 (0xb0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Validity Not Before: Oct 27 02:39:24 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=116F4F84BE9A45B874E644B7B08069ABB1660623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:1b:70:ca:01:c1:12:b2:78:03:3c:b2:c1: dc:4e:7e:36:e2:f0:65:16:2c:7c:a7:74:c4:39:cc: b7:48:5b:71:1c:1c:73:a1:80:7b:d7:b8:96:c0:46: 35:4f:81:60:5f:24:ff:f4:ab:80:cf:49:40:24:96: 71:f8:c0:03:bc:bf:d1:7c:b6:73:0f:bc:de:ef:f6: 43:aa:40:16:6e:ef:b6:f7:47:99:8b:2d:b2:d8:13: 80:54:e6:e8:c4:10:76:14:de:aa:ee:a0:b3:e5:04: ec:b8:bd:cd:a3:cc:79:ff:54:51:1d:7f:45:69:d7: 8f:9f:9c:91:e4:b9:6a:c7:7b:02:c3:39:0d:5f:05: 61:2b:84:0f:64:41:6a:21:e6:3b:d3:a4:83:bc:86: f7:c4:ae:ba:94:92:d1:54:c2:9d:28:64:85:62:0a: 56:65:e6:03:eb:d0:e7:5a:7b:78:ee:d3:2f:ba:9a: 41:89:ca:7b:28:bc:88:0a:24:db:ca:1b:79:fb:c3: 64:28:a3:54:76:11:5b:70:da:ea:c2:da:08:29:6a: 5e:f6:2f:a7:57:84:1c:1e:3a:ca:6c:13:74:80:97: b9:85:00:95:95:e8:e0:a9:61:f0:5e:35:fa:03:e2: fe:10:6f:52:47:58:33:4e:05:db:f2:7e:5f:be:92: 39:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6F:4F:84:BE:9A:45:B8:74:E6:44:B7:B0:80:69:AB:B1:66:06:23 X509v3 Authority Key Identifier: keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/EW9PhL6aRbh05kS3sIBpq7FmBiM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.132.48.0/21 Signature Algorithm: sha256WithRSAEncryption 12:4d:e6:35:0c:cd:04:2e:9e:47:a5:8e:b2:85:9e:43:7d:53: ba:e9:f7:7b:a8:2f:30:b0:5f:f4:4a:ac:07:b9:16:d4:b1:4c: 84:b4:34:49:85:c0:be:6d:79:b3:f3:e3:1b:7e:8d:e1:a9:dc: e5:8c:15:4e:36:4d:a6:c5:ce:64:f6:65:68:18:8d:d9:e3:a1: 1a:96:ca:a3:19:f3:ff:2d:62:8e:84:f9:60:ea:1d:31:65:37: a1:05:5c:ab:c3:2e:a0:2f:6d:41:e5:14:d9:68:76:c6:33:80: 2e:f3:84:73:58:85:25:9b:62:61:69:2c:bc:dc:e6:77:29:88: e8:36:8a:fa:89:45:06:a1:85:97:02:54:85:03:d3:ee:ad:07: 32:f2:5b:25:fa:8d:4f:c5:fb:02:d9:d6:e7:86:7b:ff:95:98: 0a:db:da:53:0c:05:83:52:66:a5:1e:8b:c9:f1:59:35:5c:2b: 7f:9e:4a:eb:cb:be:97:52:f6:7e:2a:bc:c1:b4:fc:71:9e:7e: 48:3b:bd:5f:94:43:91:2b:32:85:0d:bc:c9:ce:ab:af:07:46: d0:7a:49:ba:e0:63:4f:7a:c5:4a:55:26:2f:b8:1a:b9:d3:01: ec:9f:43:4c:24:78:29:19:43:86:94:79:ab:a4:f0:8b:65:53: aa:2b:de:1e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVC RkM5MDBFREMzNEY4MURBNDgyN0YxRjlGNjNEMDRFMEUyRjc1NjAeFw0yNTEwMjcw MjM5MjRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDExNkY0Rjg0QkU5QTQ1 Qjg3NEU2NDRCN0IwODA2OUFCQjE2NjA2MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3URtwygHBErJ4AzyywdxOfjbi8GUWLHyndMQ5zLdIW3EcHHOh gHvXuJbARjVPgWBfJP/0q4DPSUAklnH4wAO8v9F8tnMPvN7v9kOqQBZu77b3R5mL LbLYE4BU5ujEEHYU3qruoLPlBOy4vc2jzHn/VFEdf0Vp14+fnJHkuWrHewLDOQ1f BWErhA9kQWoh5jvTpIO8hvfErrqUktFUwp0oZIViClZl5gPr0Odae3ju0y+6mkGJ ynsovIgKJNvKG3n7w2Qoo1R2EVtw2urC2ggpal72L6dXhBweOspsE3SAl7mFAJWV 6OCpYfBeNfoD4v4Qb1JHWDNOBdvyfl++kjnhAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUEW9PhL6aRbh05kS3sIBpq7FmBiMwHwYDVR0jBBgwFoAU3r/JAO3DT4HaSCfx +fY9BODi91YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIz LzNyX0pBTzNEVDRIYVNDZngtZlk5Qk9EaTkxWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvM3JfSkFPM0RUNEhhU0NmeC1mWTlCT0RpOTFZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIzL0VXOVBoTDZhUmJoMDVr UzNzSUJwcTdGbUJpTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPLhDAwDQYJKoZIhvcNAQELBQADggEBABJN5jUMzQQunkeljrKFnkN9U7rp93uo LzCwX/RKrAe5FtSxTIS0NEmFwL5tebPz4xt+jeGp3OWMFU42TabFzmT2ZWgYjdnj oRqWyqMZ8/8tYo6E+WDqHTFlN6EFXKvDLqAvbUHlFNlodsYzgC7zhHNYhSWbYmFp LLzc5ncpiOg2ivqJRQahhZcCVIUD0+6tBzLyWyX6jU/F+wLZ1ueGe/+VmArb2lMM BYNSZqUei8nxWTVcK3+eSuvLvpdS9n4qvMG0/HGefkg7vV+UQ5ErMoUNvMnOq68H RtB6SbrgY096xUpVJi+4GrnTAeyfQ0wkeCkZQ4aUeauk8ItlU6or3h4= -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:38 2025 by rpki-client