This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/MrnRyasrkL4bnXPNePaM6nXRCBg.roa File: MrnRyasrkL4bnXPNePaM6nXRCBg.roa (raw, json) Hash identifier: NiEot5E5yo134Xm5jpmCqxxQF/0LLMFHrHJCMd33kw8= Subject key identifier: 32:B9:D1:C9:AB:2B:90:BE:1B:9D:73:CD:78:F6:8C:EA:75:D1:08:18 Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Certificate serial: 0AFD Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/MrnRyasrkL4bnXPNePaM6nXRCBg.roa Signing time: Mon 27 Oct 2025 02:31:38 +0000 ROA not before: Mon 27 Oct 2025 02:31:38 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 58834 IP address blocks: 119.2.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2813 (0xafd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Validity Not Before: Oct 27 02:31:38 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=32B9D1C9AB2B90BE1B9D73CD78F68CEA75D10818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c4:e8:0a:ad:67:91:7c:10:f4:9b:4f:6c:a6: f0:d6:29:73:bb:31:78:75:30:a0:46:37:3e:0e:58: 91:ed:0d:9b:56:2a:66:da:93:54:45:ba:18:e8:59: 75:77:84:84:73:4f:e6:ed:1f:5f:50:a6:8a:11:e8: 9e:de:15:c2:52:8e:7f:6f:b4:e9:b6:31:2e:57:98: 03:9b:52:87:f4:6c:86:bd:ef:93:f2:5e:6e:82:d3: 6c:f6:a0:70:d7:f5:e4:75:e5:0a:1c:8c:2a:62:e9: 1d:28:36:13:3d:79:7c:d2:f4:fb:ed:e9:f3:55:52: 70:77:31:3b:96:b1:1a:f5:ed:37:02:4d:84:e7:2d: 6e:a1:2c:1a:79:a8:48:8d:2d:89:dc:a3:fd:cd:1b: fa:e2:ae:8b:e4:90:7e:1a:f2:71:69:b6:83:5e:ff: 44:c0:2a:85:71:9e:3a:c7:10:cf:94:7e:bd:8a:58: 2e:a8:0c:e1:46:18:8d:9e:13:53:4b:36:e8:a4:e6: 69:26:8d:b0:d4:88:b6:58:fd:a9:64:da:8c:bc:87: c0:0a:5d:a9:ab:10:0b:77:59:97:df:30:f5:b3:20: 7e:d8:b2:34:00:c9:9e:52:a1:34:67:3f:83:13:6d: ac:13:8b:06:c5:4c:2c:ec:a5:14:94:31:66:a9:e4: 59:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B9:D1:C9:AB:2B:90:BE:1B:9D:73:CD:78:F6:8C:EA:75:D1:08:18 X509v3 Authority Key Identifier: keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/MrnRyasrkL4bnXPNePaM6nXRCBg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.2.192.0/20 Signature Algorithm: sha256WithRSAEncryption 12:eb:d1:64:47:a2:b3:b5:17:e8:e6:0d:f3:9f:29:99:1e:29: 4a:17:fa:2a:fc:30:41:f0:07:1b:c4:dc:26:31:e5:98:46:3f: c0:4d:9b:79:45:63:d5:23:3b:79:40:f9:59:ef:29:a7:4f:0d: 88:8b:d6:6b:dc:cd:90:77:67:67:40:38:96:ac:f1:00:9e:3d: c5:66:d5:ac:79:93:3e:18:cb:b9:7a:47:5b:0c:2d:3b:71:62: a9:12:72:c9:59:5d:00:a7:fd:76:19:09:3c:57:3d:9b:68:8c: 57:c3:35:39:43:a6:73:cf:8d:dc:5c:10:ae:5c:e1:b7:25:91: 7a:fb:b4:0e:a6:33:a9:19:f6:bb:ab:70:1b:e5:1a:d9:56:da: 9a:ae:95:45:22:c8:bf:a8:98:fd:12:39:6d:8f:c7:78:04:55: 2b:c8:c8:e3:d7:13:c3:30:cc:9b:36:66:04:81:9f:29:b6:29: 2e:ce:f8:9d:ac:7b:5c:cb:ea:12:20:d0:25:62:a6:98:bc:39: 9f:e0:13:f0:52:30:8f:4a:f0:70:44:f5:69:55:ad:fe:78:66: b6:36:7d:fa:4d:da:72:e6:63:39:b2:08:be:d2:a0:ed:2d:db: 58:09:0f:e1:91:d1:38:31:e6:11:29:d3:c3:29:58:ab:86:41: 79:36:71:20 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVC RkM5MDBFREMzNEY4MURBNDgyN0YxRjlGNjNEMDRFMEUyRjc1NjAeFw0yNTEwMjcw MjMxMzhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDMyQjlEMUM5QUIyQjkw QkUxQjlENzNDRDc4RjY4Q0VBNzVEMTA4MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCxOgKrWeRfBD0m09spvDWKXO7MXh1MKBGNz4OWJHtDZtWKmba k1RFuhjoWXV3hIRzT+btH19QpooR6J7eFcJSjn9vtOm2MS5XmAObUof0bIa975Py Xm6C02z2oHDX9eR15QocjCpi6R0oNhM9eXzS9Pvt6fNVUnB3MTuWsRr17TcCTYTn LW6hLBp5qEiNLYnco/3NG/rirovkkH4a8nFptoNe/0TAKoVxnjrHEM+Ufr2KWC6o DOFGGI2eE1NLNuik5mkmjbDUiLZY/alk2oy8h8AKXamrEAt3WZffMPWzIH7YsjQA yZ5SoTRnP4MTbawTiwbFTCzspRSUMWap5FnrAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUMrnRyasrkL4bnXPNePaM6nXRCBgwHwYDVR0jBBgwFoAU3r/JAO3DT4HaSCfx +fY9BODi91YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIz LzNyX0pBTzNEVDRIYVNDZngtZlk5Qk9EaTkxWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvM3JfSkFPM0RUNEhhU0NmeC1mWTlCT0RpOTFZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIzL01yblJ5YXNya0w0Ym5Y UE5lUGFNNm5YUkNCZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAR3AsAwDQYJKoZIhvcNAQELBQADggEBABLr0WRHorO1F+jmDfOfKZkeKUoX+ir8 MEHwBxvE3CYx5ZhGP8BNm3lFY9UjO3lA+VnvKadPDYiL1mvczZB3Z2dAOJas8QCe PcVm1ax5kz4Yy7l6R1sMLTtxYqkScslZXQCn/XYZCTxXPZtojFfDNTlDpnPPjdxc EK5c4bclkXr7tA6mM6kZ9rurcBvlGtlW2pqulUUiyL+omP0SOW2Px3gEVSvIyOPX E8MwzJs2ZgSBnym2KS7O+J2se1zL6hIg0CVippi8OZ/gE/BSMI9K8HBE9WlVrf54 ZrY2ffpN2nLmYzmyCL7SoO0t21gJD+GR0Tgx5hEp08MpWKuGQXk2cSA= -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:35 2025 by rpki-client