This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/Ycvv9rk043oNS7icGyXynYMt4XY.roa File: Ycvv9rk043oNS7icGyXynYMt4XY.roa (raw, json) Hash identifier: tqOA/1bpNDXUT7rPK/Q3H7XOiMARr6Gc760M+0Md/hw= Subject key identifier: 61:CB:EF:F6:B9:34:E3:7A:0D:4B:B8:9C:1B:25:F2:9D:83:2D:E1:76 Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 214E Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/Ycvv9rk043oNS7icGyXynYMt4XY.roa Signing time: Fri 05 Dec 2025 02:36:39 +0000 ROA not before: Fri 05 Dec 2025 02:36:39 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 24147 IP address blocks: 203.86.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 09:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8526 (0x214e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: Dec 5 02:36:39 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=61CBEFF6B934E37A0D4BB89C1B25F29D832DE176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7b:ba:a6:d7:f1:b0:8e:66:b6:d3:cc:ff:f7: 87:d1:92:10:a2:39:0c:c9:4b:fe:1d:49:6a:a5:15: fa:15:00:2d:b3:e0:e3:b8:10:83:80:fe:ca:c9:27: 8c:5d:72:7f:b8:82:24:f4:20:9a:89:e1:66:42:e4: e7:c2:67:2f:31:6e:83:77:66:62:25:2c:1e:ae:f7: a3:d2:3e:b3:a7:06:bb:23:30:d0:74:13:55:b4:91: 17:bc:c1:f5:26:0d:9f:b6:dd:19:39:0e:af:9c:ae: db:5e:67:75:87:82:d1:8f:60:d0:4e:1a:bd:a0:df: 2a:91:c4:d4:1c:58:b3:5e:48:fe:4d:2b:54:bf:10: c5:f1:9e:98:10:e5:d0:04:b0:78:18:86:b5:74:49: 8e:88:53:69:19:bf:7c:f1:fa:48:9c:c2:56:73:5d: cc:89:74:84:6f:12:bc:dd:aa:c7:78:c6:0c:8d:c8: a9:5d:d1:b7:09:c5:f2:32:3d:cd:7b:1b:5b:32:e3: 3f:e8:c5:72:47:65:13:e9:40:33:21:97:4d:af:e8: 1f:46:ee:22:96:5e:f9:fb:e9:b2:a0:42:73:94:15: 4e:d7:9c:3f:cc:93:0b:c2:04:2d:f4:90:b3:4a:65: bd:cc:a1:09:e8:7b:c8:4c:b0:10:48:6d:e0:4c:0e: ff:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CB:EF:F6:B9:34:E3:7A:0D:4B:B8:9C:1B:25:F2:9D:83:2D:E1:76 X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/Ycvv9rk043oNS7icGyXynYMt4XY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.86.45.0/24 Signature Algorithm: sha256WithRSAEncryption cd:f5:bf:e3:cd:14:8e:fa:76:f6:d4:f1:2a:d8:b6:13:1c:d8: cb:f1:d0:21:11:39:c6:c2:39:f5:df:35:43:d2:d4:49:99:7b: 9f:fb:1a:96:26:df:b5:31:f4:58:83:54:f1:9f:02:bf:7b:54: eb:fa:d6:d3:8a:ac:d4:48:43:4d:e4:91:bd:8c:6e:5e:dc:6a: 00:e5:fb:16:cc:33:a2:ef:2b:1b:8c:b5:77:2e:14:b4:b7:0d: 83:4a:f9:35:98:03:70:24:c3:4c:41:2b:e2:28:b3:71:76:a1: 6f:b9:ef:52:c4:f2:9e:49:64:1b:a8:91:fe:d7:11:c0:5f:bc: 38:10:c6:36:c8:0d:ad:af:85:1d:2a:08:9b:1d:4b:27:4c:a1: 37:b5:04:65:b0:fc:7a:53:ab:e3:e3:43:e4:d7:36:2d:ad:71: 0e:84:7a:ef:18:d4:cd:d0:b4:d1:4a:56:6e:24:c4:1b:af:a1: 51:ef:64:3c:42:a4:b8:1b:a7:31:75:e9:e2:58:9a:ea:64:b8: 27:b4:ef:ae:d9:73:fd:75:07:50:38:9e:8f:a8:0b:fa:4d:61: d7:46:c0:19:c3:0f:6a:59:30:4d:67:e9:d9:ff:f1:e3:ea:ed: d6:03:9f:b1:c6:d9:8b:35:cc:b8:4a:29:77:ec:5f:76:8a:e7: 40:2d:2b:83 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIU4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTEyMDUw MjM2MzlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDYxQ0JFRkY2QjkzNEUz N0EwRDRCQjg5QzFCMjVGMjlEODMyREUxNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDke7qm1/Gwjma208z/94fRkhCiOQzJS/4dSWqlFfoVAC2z4OO4 EIOA/srJJ4xdcn+4giT0IJqJ4WZC5OfCZy8xboN3ZmIlLB6u96PSPrOnBrsjMNB0 E1W0kRe8wfUmDZ+23Rk5Dq+crtteZ3WHgtGPYNBOGr2g3yqRxNQcWLNeSP5NK1S/ EMXxnpgQ5dAEsHgYhrV0SY6IU2kZv3zx+kicwlZzXcyJdIRvErzdqsd4xgyNyKld 0bcJxfIyPc17G1sy4z/oxXJHZRPpQDMhl02v6B9G7iKWXvn76bKgQnOUFU7XnD/M kwvCBC30kLNKZb3MoQnoe8hMsBBIbeBMDv/LAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUYcvv9rk043oNS7icGyXynYMt4XYwHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxL1ljdnY5cmswNDNvTlM3 aWNHeVh5bllNdDRYWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADLVi0wDQYJKoZIhvcNAQELBQADggEBAM31v+PNFI76dvbU8SrYthMc2Mvx0CER OcbCOfXfNUPS1EmZe5/7GpYm37Ux9FiDVPGfAr97VOv61tOKrNRIQ03kkb2Mbl7c agDl+xbMM6LvKxuMtXcuFLS3DYNK+TWYA3Akw0xBK+Ios3F2oW+571LE8p5JZBuo kf7XEcBfvDgQxjbIDa2vhR0qCJsdSydMoTe1BGWw/HpTq+PjQ+TXNi2tcQ6Eeu8Y 1M3QtNFKVm4kxBuvoVHvZDxCpLgbpzF16eJYmupkuCe0767Zc/11B1A4no+oC/pN YddGwBnDD2pZME1n6dn/8ePq7dYDn7HG2Ys1zLhKKXfsX3aK50AtK4M= -----END CERTIFICATE-----Generated at Sun Dec 7 08:30:20 2025 by rpki-client