This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/8gJqZBoyYoIMpldq4sHoZ2y88Yc.roa File: 8gJqZBoyYoIMpldq4sHoZ2y88Yc.roa (raw, json) Hash identifier: A5PUZFXjsFs9QK+LXr9/JRSvJmJ+reF3ba8SXabA1/c= Subject key identifier: F2:02:6A:64:1A:32:62:82:0C:A6:57:6A:E2:C1:E8:67:6C:BC:F1:87 Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 214F Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/8gJqZBoyYoIMpldq4sHoZ2y88Yc.roa Signing time: Fri 05 Dec 2025 02:36:40 +0000 ROA not before: Fri 05 Dec 2025 02:36:40 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 24147 IP address blocks: 203.86.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 09:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8527 (0x214f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: Dec 5 02:36:40 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F2026A641A3262820CA6576AE2C1E8676CBCF187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:5c:db:ee:93:52:6a:a9:3d:3d:df:d8:01: 05:5d:67:f9:26:05:b3:de:f3:22:52:54:d4:29:44: 5c:3b:03:a1:29:ce:c6:ee:4c:07:7d:82:53:d8:30: 5e:cb:96:be:bf:59:6d:72:82:a1:4d:d2:b1:44:db: 64:7a:5b:82:e5:4b:87:06:9f:0a:0a:87:db:34:cc: 35:e6:24:9d:f3:87:0b:88:fa:4a:76:99:2a:7c:45: 7c:03:f3:47:eb:dc:70:0e:12:d2:74:d5:ac:de:84: cc:e6:db:88:af:c8:30:8a:b8:a1:79:45:29:c6:3f: b7:9a:93:24:f5:89:b6:2d:61:08:9e:ce:88:63:12: 2f:24:1a:5a:1b:cc:cf:92:57:30:43:68:d7:ea:b8: 71:fb:ff:4b:05:fd:77:38:0a:58:3f:74:8d:58:c5: de:48:ca:6d:d3:47:c3:e5:8b:a6:c3:8c:ff:cc:e0: c2:ff:45:f4:ce:fa:f3:28:ac:f6:e5:5a:2f:ee:79: 91:a8:98:73:9d:e8:39:75:41:ed:74:86:34:b2:8d: 99:ac:1f:b9:c1:13:22:79:8f:95:37:74:31:ce:9c: c3:bf:62:23:9f:31:b4:58:6d:ba:0f:c5:71:9d:bd: f7:45:99:9e:ed:35:55:68:07:49:8b:ae:58:61:51: de:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:02:6A:64:1A:32:62:82:0C:A6:57:6A:E2:C1:E8:67:6C:BC:F1:87 X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/8gJqZBoyYoIMpldq4sHoZ2y88Yc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.86.48.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:0a:6c:05:46:34:29:d1:9f:7e:d6:68:fd:dd:68:48:70:f0: 11:f3:07:ec:c4:e1:84:46:fd:8f:36:3a:29:bd:4d:c6:be:82: 4b:2e:12:3c:e2:ac:3c:79:f3:6c:70:48:54:93:d4:28:1c:9f: 4a:b3:89:4c:e4:f0:4a:21:7f:f5:38:a2:66:0c:d7:b6:4f:91: bc:66:2c:0e:51:44:95:f1:c9:c4:3a:cd:4e:da:74:c8:e9:4e: c4:05:b1:db:5d:ae:da:14:cc:0a:7f:d5:a3:ba:6b:b5:11:ed: 9f:52:92:b8:6f:9d:dc:36:f8:01:2c:a2:8a:c9:21:26:75:ec: db:64:51:c3:d6:f0:9d:77:01:fb:12:d0:1b:13:78:13:28:04: fc:a7:d4:0e:68:a5:a5:5a:32:8e:36:8c:dc:f1:7e:32:4e:1e: 24:37:08:19:27:d0:2c:af:1c:37:20:83:e1:bb:c1:1e:dd:ca: d9:d3:ca:5a:51:33:3d:6e:dc:61:d7:c9:4e:f9:78:6a:e6:34: 0b:32:bf:0a:4d:dc:d6:9d:46:11:ca:c2:e6:a9:db:84:b3:8f: 3f:4b:cc:33:ce:91:d5:26:de:a4:e2:cc:07:a6:cd:d4:6e:4c: c0:59:a1:d4:41:49:d6:5d:1a:6b:22:fc:b7:24:6b:94:66:05: 2a:90:5f:7d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIU8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTEyMDUw MjM2NDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEYyMDI2QTY0MUEzMjYy ODIwQ0E2NTc2QUUyQzFFODY3NkNCQ0YxODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8t1zb7pNSaqk9Pd/YAQVdZ/kmBbPe8yJSVNQpRFw7A6Epzsbu TAd9glPYMF7Llr6/WW1ygqFN0rFE22R6W4LlS4cGnwoKh9s0zDXmJJ3zhwuI+kp2 mSp8RXwD80fr3HAOEtJ01azehMzm24ivyDCKuKF5RSnGP7eakyT1ibYtYQiezohj Ei8kGlobzM+SVzBDaNfquHH7/0sF/Xc4Clg/dI1Yxd5Iym3TR8Pli6bDjP/M4ML/ RfTO+vMorPblWi/ueZGomHOd6Dl1Qe10hjSyjZmsH7nBEyJ5j5U3dDHOnMO/YiOf MbRYbboPxXGdvfdFmZ7tNVVoB0mLrlhhUd5VAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU8gJqZBoyYoIMpldq4sHoZ2y88YcwHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxLzhnSnFaQm95WW9JTXBs ZHE0c0hvWjJ5ODhZYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADLVjAwDQYJKoZIhvcNAQELBQADggEBABwKbAVGNCnRn37WaP3daEhw8BHzB+zE 4YRG/Y82Oim9Tca+gksuEjzirDx582xwSFST1Cgcn0qziUzk8Eohf/U4omYM17ZP kbxmLA5RRJXxycQ6zU7adMjpTsQFsdtdrtoUzAp/1aO6a7UR7Z9Skrhvndw2+AEs oorJISZ17NtkUcPW8J13AfsS0BsTeBMoBPyn1A5opaVaMo42jNzxfjJOHiQ3CBkn 0CyvHDcgg+G7wR7dytnTylpRMz1u3GHXyU75eGrmNAsyvwpN3NadRhHKwuap24Sz jz9LzDPOkdUm3qTizAemzdRuTMBZodRBSdZdGmsi/Lcka5RmBSqQX30= -----END CERTIFICATE-----Generated at Sun Dec 7 08:29:07 2025 by rpki-client