This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/TP5iwzOIGJrkaLK_VbSQwX5LiiY.roa File: TP5iwzOIGJrkaLK_VbSQwX5LiiY.roa (raw, json) Hash identifier: 9fF8xSayAIQ4wzITCsmJKy/K8Fv7nR8Q0uKRSdJ+p68= Subject key identifier: 4C:FE:62:C3:33:88:18:9A:E4:68:B2:BF:55:B4:90:C1:7E:4B:8A:26 Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 2150 Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/TP5iwzOIGJrkaLK_VbSQwX5LiiY.roa Signing time: Fri 05 Dec 2025 02:36:40 +0000 ROA not before: Fri 05 Dec 2025 02:36:40 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 24147 IP address blocks: 203.86.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 09:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8528 (0x2150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: Dec 5 02:36:40 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4CFE62C33388189AE468B2BF55B490C17E4B8A26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:16:59:5a:eb:a4:51:a0:46:5c:95:a8:b5:cd: 50:07:4e:14:f2:b4:e2:b2:a2:79:bc:e9:42:6e:7a: 24:e9:9f:6e:e1:40:bf:a2:13:9a:c5:d6:75:cb:bc: 9c:4a:df:5b:7e:af:0a:f1:0a:55:4a:3f:ab:37:b4: 99:ad:e2:df:36:bc:ec:c1:71:f1:e1:49:27:36:af: fe:f3:81:19:00:61:54:9c:eb:75:c6:f7:31:38:5e: 97:dd:15:91:25:cb:5c:38:8c:22:d4:2e:b4:98:c6: 34:10:43:03:be:38:04:9d:b9:ee:96:c5:54:e0:40: 6d:82:33:be:bb:98:ac:75:58:39:66:be:b5:61:88: e7:0f:bc:18:4a:ec:2f:8e:e3:f4:17:26:58:ea:2c: 7f:e4:60:32:5b:81:c5:cc:6d:85:92:f1:3d:77:14: 7d:b4:01:2c:96:b4:eb:ad:d3:e9:da:89:35:e0:51: fd:cf:28:b4:66:89:61:40:a5:7d:83:af:93:1e:b0: e4:ef:d3:b0:6e:21:a8:a9:70:11:33:a9:67:2b:14: ab:8d:b0:00:cd:7e:84:5b:6a:02:50:bc:8f:88:a0: 5c:14:19:e2:ee:ca:0e:e9:7f:6f:67:5d:d1:9b:9b: 82:25:ed:30:12:4c:d0:ae:99:8d:f2:c6:56:97:ee: ab:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FE:62:C3:33:88:18:9A:E4:68:B2:BF:55:B4:90:C1:7E:4B:8A:26 X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/TP5iwzOIGJrkaLK_VbSQwX5LiiY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.86.44.0/24 Signature Algorithm: sha256WithRSAEncryption 79:18:5a:e6:99:8d:b7:5b:57:24:c2:6e:6d:b4:9e:cb:5e:37: e2:a9:4c:94:43:c7:36:51:e2:46:92:2f:a3:98:1b:b6:6b:0e: 1e:43:ad:1f:b5:ec:ca:52:4c:6e:e9:6a:42:ee:8d:db:ad:5b: 6d:64:9e:a6:a6:a9:49:dd:f3:08:06:fb:fd:bd:a9:b5:87:62: 74:57:b6:04:b1:1a:da:61:2a:6b:84:9c:0a:c2:fc:d2:43:a0: 1f:f4:2f:f0:74:01:6c:72:0f:bb:a0:4c:23:f7:82:60:91:22: 99:75:95:56:96:97:e2:3b:0d:7a:72:2f:14:9b:52:cd:da:1d: d2:c1:84:61:b9:9c:0d:b2:f9:a1:b0:0e:17:cb:24:87:91:f8: 29:12:35:6c:7b:d1:a0:9e:07:25:10:33:fa:4b:51:17:95:7e: d5:93:ab:db:64:4f:5b:a6:d2:fc:50:2c:37:d7:ba:d7:cc:c0: 71:72:1a:0d:e7:41:56:10:90:98:8f:88:45:7b:43:28:c1:cb: 90:3c:4e:52:8a:32:e2:42:7b:34:da:54:c3:34:81:a8:e7:b0: 82:21:86:40:5d:b2:8c:15:2b:17:28:59:ce:36:31:2b:54:a7: e5:79:4a:81:cb:48:a9:65:c2:74:97:88:40:c2:c6:6f:d4:f7: 8e:1f:38:32 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIVAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTEyMDUw MjM2NDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDRDRkU2MkMzMzM4ODE4 OUFFNDY4QjJCRjU1QjQ5MEMxN0U0QjhBMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfFlla66RRoEZclai1zVAHThTytOKyonm86UJueiTpn27hQL+i E5rF1nXLvJxK31t+rwrxClVKP6s3tJmt4t82vOzBcfHhSSc2r/7zgRkAYVSc63XG 9zE4XpfdFZEly1w4jCLULrSYxjQQQwO+OASdue6WxVTgQG2CM767mKx1WDlmvrVh iOcPvBhK7C+O4/QXJljqLH/kYDJbgcXMbYWS8T13FH20ASyWtOut0+naiTXgUf3P KLRmiWFApX2Dr5MesOTv07BuIaipcBEzqWcrFKuNsADNfoRbagJQvI+IoFwUGeLu yg7pf29nXdGbm4Il7TASTNCumY3yxlaX7qvjAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUTP5iwzOIGJrkaLK/VbSQwX5LiiYwHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxL1RQNWl3ek9JR0pya2FM S19WYlNRd1g1TGlpWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADLViwwDQYJKoZIhvcNAQELBQADggEBAHkYWuaZjbdbVyTCbm20nsteN+KpTJRD xzZR4kaSL6OYG7ZrDh5DrR+17MpSTG7pakLujdutW21knqamqUnd8wgG+/29qbWH YnRXtgSxGtphKmuEnArC/NJDoB/0L/B0AWxyD7ugTCP3gmCRIpl1lVaWl+I7DXpy LxSbUs3aHdLBhGG5nA2y+aGwDhfLJIeR+CkSNWx70aCeByUQM/pLUReVftWTq9tk T1um0vxQLDfXutfMwHFyGg3nQVYQkJiPiEV7QyjBy5A8TlKKMuJCezTaVMM0gajn sIIhhkBdsowVKxcoWc42MStUp+V5SoHLSKllwnSXiEDCxm/U944fODI= -----END CERTIFICATE-----Generated at Sun Dec 7 08:34:09 2025 by rpki-client