This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/FgobWs3sQ2dJk2kmY2s8-c6R0a0.roa File: FgobWs3sQ2dJk2kmY2s8-c6R0a0.roa (raw, json) Hash identifier: YC5aSzCQUNfMwbsUmC5AYZ5XOu8a6wKsgO4v1O0H3hY= Subject key identifier: 16:0A:1B:5A:CD:EC:43:67:49:93:69:26:63:6B:3C:F9:CE:91:D1:AD Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 2157 Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/FgobWs3sQ2dJk2kmY2s8-c6R0a0.roa Signing time: Fri 05 Dec 2025 02:36:41 +0000 ROA not before: Fri 05 Dec 2025 02:36:41 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 24147 IP address blocks: 203.86.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 09:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8535 (0x2157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: Dec 5 02:36:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=160A1B5ACDEC436749936926636B3CF9CE91D1AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ec:41:25:38:96:71:c3:6e:2f:80:ec:66:7e: 78:18:b8:44:b7:7c:0c:0e:d5:81:bb:d7:1a:53:10: 6b:f8:2a:bd:3b:39:1e:89:f5:65:b0:db:90:27:ba: 03:19:4a:09:1a:56:54:87:b8:05:a8:7a:e6:17:cf: 0d:bc:a2:9b:15:c2:91:dc:d1:0a:4b:38:b8:35:3f: 87:7c:13:b5:3f:3b:2b:72:2a:1b:c4:c8:b4:89:04: 08:af:63:2a:8e:68:0a:95:bb:87:40:92:7e:3d:d1: d6:ab:01:d6:8b:a8:58:da:89:fc:52:73:fc:f7:03: e6:5e:cd:e0:50:78:e0:cf:54:8b:b7:4d:4e:54:02: 22:d8:66:cc:4c:15:f7:86:06:df:28:fd:a3:91:96: 49:b3:e0:7f:1d:37:84:96:aa:87:ec:de:3a:30:7e: 92:90:b1:c7:6f:cd:88:fc:4b:05:c6:10:bb:81:b7: 8f:61:c0:12:9e:9d:ac:37:09:ab:d5:7a:95:6a:29: aa:a2:68:58:09:6b:cc:00:fd:5c:7e:5e:78:91:cc: 20:11:0c:50:1a:b8:3f:5a:da:f2:09:b8:32:e4:a0: fc:af:f5:11:c0:71:29:ee:19:11:ff:33:94:bd:2a: f9:0e:2d:99:7d:60:7c:c1:3d:88:4b:87:89:0e:34: 8f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0A:1B:5A:CD:EC:43:67:49:93:69:26:63:6B:3C:F9:CE:91:D1:AD X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/FgobWs3sQ2dJk2kmY2s8-c6R0a0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.86.54.0/23 Signature Algorithm: sha256WithRSAEncryption 69:4e:4d:fb:87:b8:c8:71:d1:67:cc:fc:2a:37:48:0c:ba:46: ad:72:42:9e:5a:28:46:e7:be:dc:85:ee:6e:32:b1:25:25:2a: 4a:6e:85:07:74:1d:1c:2c:ca:7e:19:20:cf:0f:b4:1d:f1:6a: 03:f1:ba:3e:8e:dc:45:7c:9a:6f:58:6d:ff:44:d4:e3:61:0e: e0:11:6f:bb:9a:bc:10:ca:c8:28:3c:a4:d0:58:2e:c7:c7:62: 02:9d:52:75:c3:b5:ca:2b:95:1b:ec:3a:a0:cb:8d:bc:07:c5: a6:69:9f:84:38:6f:05:fe:28:3f:27:cd:2b:37:bb:f7:26:c6: 9b:5e:db:76:ca:6c:50:49:57:2b:cb:aa:df:3a:80:6b:b4:4d: 5b:4f:5d:7a:3c:df:39:01:96:b0:01:69:f1:4a:d9:39:0f:a0: 90:80:ec:39:ae:48:f2:73:58:21:10:4e:6b:09:0e:1a:09:d3: d3:0b:87:74:21:21:2b:af:a8:50:28:b6:dc:a7:0e:cd:3a:4b: f2:e8:03:52:7e:57:9b:ec:ee:9a:ad:ae:87:80:1a:9a:3c:91: 37:7b:2f:9d:88:d9:14:72:e5:63:19:b7:5b:e3:8b:8a:22:c2: b9:f3:c3:ce:ac:87:23:8a:37:cd:01:3e:55:7b:1b:5c:31:5a: fa:30:75:09 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIVcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTEyMDUw MjM2NDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDE2MEExQjVBQ0RFQzQz Njc0OTkzNjkyNjYzNkIzQ0Y5Q0U5MUQxQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDb7EElOJZxw24vgOxmfngYuES3fAwO1YG71xpTEGv4Kr07OR6J 9WWw25AnugMZSgkaVlSHuAWoeuYXzw28opsVwpHc0QpLOLg1P4d8E7U/OytyKhvE yLSJBAivYyqOaAqVu4dAkn490darAdaLqFjaifxSc/z3A+ZezeBQeODPVIu3TU5U AiLYZsxMFfeGBt8o/aORlkmz4H8dN4SWqofs3jowfpKQscdvzYj8SwXGELuBt49h wBKenaw3CavVepVqKaqiaFgJa8wA/Vx+XniRzCARDFAauD9a2vIJuDLkoPyv9RHA cSnuGRH/M5S9KvkOLZl9YHzBPYhLh4kONI/RAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUFgobWs3sQ2dJk2kmY2s8+c6R0a0wHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxL0Znb2JXczNzUTJkSmsy a21ZMnM4LWM2UjBhMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHLVjYwDQYJKoZIhvcNAQELBQADggEBAGlOTfuHuMhx0WfM/Co3SAy6Rq1yQp5a KEbnvtyF7m4ysSUlKkpuhQd0HRwsyn4ZIM8PtB3xagPxuj6O3EV8mm9Ybf9E1ONh DuARb7uavBDKyCg8pNBYLsfHYgKdUnXDtcorlRvsOqDLjbwHxaZpn4Q4bwX+KD8n zSs3u/cmxpte23bKbFBJVyvLqt86gGu0TVtPXXo83zkBlrABafFK2TkPoJCA7Dmu SPJzWCEQTmsJDhoJ09MLh3QhISuvqFAottynDs06S/LoA1J+V5vs7pqtroeAGpo8 kTd7L52I2RRy5WMZt1vji4oiwrnzw86shyOKN80BPlV7G1wxWvowdQk= -----END CERTIFICATE-----Generated at Sun Dec 7 08:34:11 2025 by rpki-client