This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/UUOAf8Ue_9lm8TIb1fwsmIEpzrM.roa File: UUOAf8Ue_9lm8TIb1fwsmIEpzrM.roa (raw, json) Hash identifier: +qBaZ6oebJXmsn757Re2+hRwFZXz3lAEeQQy268hqfM= Subject key identifier: 51:43:80:7F:C5:1E:FF:D9:66:F1:32:1B:D5:FC:2C:98:81:29:CE:B3 Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 215C Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/UUOAf8Ue_9lm8TIb1fwsmIEpzrM.roa Signing time: Fri 05 Dec 2025 02:36:42 +0000 ROA not before: Fri 05 Dec 2025 02:36:42 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 24147 IP address blocks: 203.86.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 09:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8540 (0x215c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: Dec 5 02:36:42 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=5143807FC51EFFD966F1321BD5FC2C988129CEB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:61:8e:de:f2:e2:59:56:34:99:43:70:85:80: c9:02:a6:8b:a5:09:45:e1:76:fd:77:3a:09:60:9a: ae:03:ff:fa:f2:21:b4:90:71:e8:19:a5:83:4d:09: c7:bb:ab:9a:5e:e4:e8:82:16:13:f1:5a:80:60:0c: d8:67:c1:bc:55:ff:4d:b9:37:fd:48:4e:60:5e:43: c2:f9:c7:02:a9:7c:20:82:03:f1:82:4b:e9:f3:eb: 9a:ef:8c:02:73:d0:70:37:c9:29:fc:3a:ba:24:6d: 37:f6:d9:7b:f2:b3:fc:bf:f4:28:7f:6c:98:f6:1b: 3c:d0:38:cc:0b:17:fb:36:45:84:c2:49:a1:74:0f: ab:11:81:aa:84:af:03:81:1d:e9:2f:0f:c9:a5:e4: 99:c7:71:7a:83:60:6c:19:b9:b3:67:e2:5e:9e:ac: c6:81:4a:c8:39:33:93:16:6d:71:25:d2:a7:71:d2: e6:fc:5f:c6:ab:02:f5:70:15:80:f4:56:37:01:c2: 0c:c8:38:c3:42:89:29:dc:2c:48:2c:9e:a7:c0:e0: 47:de:39:72:88:2e:b0:d9:97:f9:9e:0f:29:b4:1b: 65:db:7b:ef:6e:6e:3d:f8:c2:67:23:d2:48:99:c7: 5e:95:fc:1b:7f:1e:60:5a:b6:5d:20:3b:79:6f:9a: a5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:43:80:7F:C5:1E:FF:D9:66:F1:32:1B:D5:FC:2C:98:81:29:CE:B3 X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/UUOAf8Ue_9lm8TIb1fwsmIEpzrM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.86.51.0/24 Signature Algorithm: sha256WithRSAEncryption 18:f7:bd:74:b9:3a:f7:40:01:f7:92:88:c2:27:b2:1d:63:91: ce:ba:13:1c:4b:9f:1f:9e:c5:c6:41:2e:13:a4:ad:ea:3b:2c: 8c:3c:83:d8:5d:4d:30:fe:0c:57:1b:99:9e:9b:59:08:21:90: 1f:1d:97:e1:89:9a:64:7f:40:51:7e:02:b7:09:4f:15:66:20: e3:e9:2e:65:c3:00:36:58:48:5e:bb:2a:f7:90:8c:b5:4c:35: c2:05:19:b4:49:c3:06:59:4d:af:04:b4:b8:df:30:d7:b7:ab: 35:08:d8:6f:39:97:2a:24:cd:04:b8:79:9a:25:3d:9e:32:25: 60:9e:42:91:75:7c:b9:38:89:4d:f1:3f:d2:02:98:d9:9c:0e: 71:e7:12:9d:3d:b7:ab:b6:f4:6f:3f:90:ac:f5:30:18:ce:dc: d4:55:a4:7a:92:d0:cd:df:1b:4e:38:f6:cc:d6:60:41:dc:d1: b7:4b:b9:86:b2:2e:68:2b:be:29:35:57:b4:14:31:89:a0:01: af:3c:37:30:3c:50:1b:5a:73:20:59:7d:36:d7:93:28:d5:2f: 58:ff:5b:75:a8:2e:2a:d8:63:12:63:31:1d:89:87:45:06:c8: 60:5a:6b:57:19:e3:27:69:69:95:9d:c6:0a:87:d8:84:50:da: a0:b5:cd:b9 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIVwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTEyMDUw MjM2NDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDUxNDM4MDdGQzUxRUZG RDk2NkYxMzIxQkQ1RkMyQzk4ODEyOUNFQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUYY7e8uJZVjSZQ3CFgMkCpoulCUXhdv13Oglgmq4D//ryIbSQ cegZpYNNCce7q5pe5OiCFhPxWoBgDNhnwbxV/025N/1ITmBeQ8L5xwKpfCCCA/GC S+nz65rvjAJz0HA3ySn8OrokbTf22Xvys/y/9Ch/bJj2GzzQOMwLF/s2RYTCSaF0 D6sRgaqErwOBHekvD8ml5JnHcXqDYGwZubNn4l6erMaBSsg5M5MWbXEl0qdx0ub8 X8arAvVwFYD0VjcBwgzIOMNCiSncLEgsnqfA4EfeOXKILrDZl/meDym0G2Xbe+9u bj34wmcj0kiZx16V/Bt/HmBatl0gO3lvmqXDAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUUUOAf8Ue/9lm8TIb1fwsmIEpzrMwHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxL1VVT0FmOFVlXzlsbThU SWIxZndzbUlFcHpyTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADLVjMwDQYJKoZIhvcNAQELBQADggEBABj3vXS5OvdAAfeSiMInsh1jkc66ExxL nx+excZBLhOkreo7LIw8g9hdTTD+DFcbmZ6bWQghkB8dl+GJmmR/QFF+ArcJTxVm IOPpLmXDADZYSF67KveQjLVMNcIFGbRJwwZZTa8EtLjfMNe3qzUI2G85lyokzQS4 eZolPZ4yJWCeQpF1fLk4iU3xP9ICmNmcDnHnEp09t6u29G8/kKz1MBjO3NRVpHqS 0M3fG0449szWYEHc0bdLuYayLmgrvik1V7QUMYmgAa88NzA8UBtacyBZfTbXkyjV L1j/W3WoLirYYxJjMR2Jh0UGyGBaa1cZ4ydpaZWdxgqH2IRQ2qC1zbk= -----END CERTIFICATE-----Generated at Sun Dec 7 08:30:15 2025 by rpki-client