This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/brZW4869o68wYk_harYYp5jHKIA.roa File: brZW4869o68wYk_harYYp5jHKIA.roa (raw, json) Hash identifier: Ido/784t5WAytSiF2PqHCSPqeJWwgT1fwZXXJeXeLm4= Subject key identifier: 6E:B6:56:E3:CE:BD:A3:AF:30:62:4F:E1:6A:B6:18:A7:98:C7:28:80 Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 2161 Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/brZW4869o68wYk_harYYp5jHKIA.roa Signing time: Fri 05 Dec 2025 04:12:36 +0000 ROA not before: Fri 05 Dec 2025 04:12:36 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 4847 IP address blocks: 211.102.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 04:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8545 (0x2161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: Dec 5 04:12:36 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=6EB656E3CEBDA3AF30624FE16AB618A798C72880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:be:39:bc:9e:8d:d9:32:72:16:af:f6:f4:c2: 5a:01:a2:ee:23:fd:3a:51:6c:6f:ee:3d:64:a1:ec: 9a:68:20:e2:6e:02:85:2e:de:46:e4:67:7d:3b:76: 13:12:04:18:45:5a:d3:24:92:92:7e:ae:4f:9b:6b: 4f:58:b2:83:b2:45:3b:6f:5a:af:9a:e8:80:39:50: 95:90:29:4d:73:ea:1b:e0:1f:f1:68:93:94:5f:22: b4:36:18:86:9c:75:bc:54:65:03:1a:fd:8c:ad:49: 2a:67:79:7d:92:fd:61:2c:b7:b9:38:18:ab:f1:39: 0c:32:c4:b3:17:78:87:92:6c:9e:29:af:97:a6:d0: be:57:5e:40:3b:11:d7:b9:8a:a1:ff:fe:0d:97:2e: 26:74:2d:cc:04:06:70:32:e8:e5:77:d7:3f:82:8e: b5:fc:75:de:12:e5:2a:6e:d5:d1:87:1b:16:a9:84: 0e:d5:83:1e:c0:e0:50:db:6b:7b:90:67:d7:c6:96: 7d:34:0b:23:0f:76:31:96:bd:f2:bf:37:d5:65:4f: b8:02:3b:5d:03:da:40:c5:65:a4:a3:7c:f7:8b:06: 14:ea:d8:63:fe:0c:12:72:09:b9:50:ea:cc:08:39: 2d:f0:46:62:dc:8d:59:bf:e0:09:bf:7d:f9:6a:d6: f3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B6:56:E3:CE:BD:A3:AF:30:62:4F:E1:6A:B6:18:A7:98:C7:28:80 X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/brZW4869o68wYk_harYYp5jHKIA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.102.248.0/21 Signature Algorithm: sha256WithRSAEncryption 82:65:39:a0:72:de:79:0a:67:7e:49:74:15:20:6a:46:31:fa: 99:d8:a3:29:f5:7b:5c:c2:23:57:a8:ba:28:a0:64:c9:26:7d: 60:c2:0a:cd:2a:31:22:0d:f5:a1:ff:ad:ff:d0:cf:5f:0d:7a: dc:d3:14:10:43:5b:c5:61:ef:2d:94:bb:d8:0a:c7:41:c5:b8: fe:04:3a:08:6f:a6:b8:bc:59:7e:36:4b:65:e3:b2:3b:98:27: ec:0d:a3:f6:31:a4:f8:79:f0:f8:6b:2c:71:1f:66:ae:99:e6: a9:36:c4:33:cb:65:83:e8:88:d4:63:a1:51:9c:dd:38:7f:d7: cb:d6:db:89:fd:1f:ee:7e:bf:dc:30:cd:18:b5:0a:f0:f8:d1: 16:71:46:ec:b8:cd:be:71:53:10:88:36:2f:be:e2:e8:06:01: 41:19:7e:ad:87:77:45:60:b9:54:cb:eb:5c:03:a4:e0:3e:9a: 69:a2:77:cf:ab:86:92:36:84:d3:7d:ce:d1:79:13:84:16:da: a7:76:54:5d:3f:94:c6:6e:20:15:ad:98:3d:ea:77:cc:7c:6a: a8:80:9f:e8:cb:1a:82:68:f8:f6:83:f3:9a:97:fc:62:55:a2: 3a:a1:fd:d2:d2:08:a2:e2:d8:cd:38:25:79:62:1b:26:37:71: 65:53:d7:c1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTEyMDUw NDEyMzZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDZFQjY1NkUzQ0VCREEz QUYzMDYyNEZFMTZBQjYxOEE3OThDNzI4ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPvjm8no3ZMnIWr/b0wloBou4j/TpRbG/uPWSh7JpoIOJuAoUu 3kbkZ307dhMSBBhFWtMkkpJ+rk+ba09YsoOyRTtvWq+a6IA5UJWQKU1z6hvgH/Fo k5RfIrQ2GIacdbxUZQMa/YytSSpneX2S/WEst7k4GKvxOQwyxLMXeIeSbJ4pr5em 0L5XXkA7Ede5iqH//g2XLiZ0LcwEBnAy6OV31z+CjrX8dd4S5Spu1dGHGxaphA7V gx7A4FDba3uQZ9fGln00CyMPdjGWvfK/N9VlT7gCO10D2kDFZaSjfPeLBhTq2GP+ DBJyCblQ6swIOS3wRmLcjVm/4Am/fflq1vNZAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUbrZW4869o68wYk/harYYp5jHKIAwHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxL2JyWlc0ODY5bzY4d1lr X2hhcllZcDVqSEtJQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPTZvgwDQYJKoZIhvcNAQELBQADggEBAIJlOaBy3nkKZ35JdBUgakYx+pnYoyn1 e1zCI1eouiigZMkmfWDCCs0qMSIN9aH/rf/Qz18NetzTFBBDW8Vh7y2Uu9gKx0HF uP4EOghvpri8WX42S2XjsjuYJ+wNo/YxpPh58PhrLHEfZq6Z5qk2xDPLZYPoiNRj oVGc3Th/18vW24n9H+5+v9wwzRi1CvD40RZxRuy4zb5xUxCINi++4ugGAUEZfq2H d0VguVTL61wDpOA+mmmid8+rhpI2hNN9ztF5E4QW2qd2VF0/lMZuIBWtmD3qd8x8 aqiAn+jLGoJo+PaD85qX/GJVojqh/dLSCKLi2M04JXliGyY3cWVT18E= -----END CERTIFICATE-----Generated at Sun Dec 7 04:18:29 2025 by rpki-client