This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/kaoz9S7xzUO_M_x6qQFszkk2co0.roa File: kaoz9S7xzUO_M_x6qQFszkk2co0.roa (raw, json) Hash identifier: HI7lpzJt9+7KuHpTeQx0TmU/8Ex/R5zlewmJi5duL00= Subject key identifier: 91:AA:33:F5:2E:F1:CD:43:BF:33:FC:7A:A9:01:6C:CE:49:36:72:8D Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 215D Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/kaoz9S7xzUO_M_x6qQFszkk2co0.roa Signing time: Fri 05 Dec 2025 02:36:42 +0000 ROA not before: Fri 05 Dec 2025 02:36:42 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 24147 IP address blocks: 203.86.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 09:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8541 (0x215d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: Dec 5 02:36:42 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=91AA33F52EF1CD43BF33FC7AA9016CCE4936728D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:64:55:f1:e0:fb:d2:7e:00:ed:9f:1d:2c:d3: d2:d9:ab:39:d9:74:eb:8a:a6:70:09:a4:2e:05:0d: a6:92:25:31:bc:d6:95:62:6f:b0:ce:c4:18:a3:56: be:c1:34:14:1b:b5:2a:86:83:74:bf:62:d9:00:1e: 8d:b4:da:0b:20:c2:bb:29:7e:32:78:7d:ca:7b:3e: b1:ad:ad:f5:a4:95:eb:65:1b:10:6d:99:83:4f:96: ad:d0:0a:32:8c:de:05:24:30:8c:1f:23:5f:6f:64: b1:20:2f:fb:25:2e:87:6e:39:ae:55:30:cf:d4:57: d6:bc:29:41:98:5f:b4:84:cf:51:f6:7c:ed:9d:cf: 13:b3:4e:da:61:bd:fb:b4:0e:cb:6f:7c:93:8d:37: e4:d8:85:77:75:37:5e:7a:75:45:20:f8:0f:44:e6: 8e:50:53:be:a5:ec:97:f1:8f:d2:87:6c:36:4e:6c: 31:a5:51:eb:c5:84:93:b4:02:00:72:5c:a0:74:3a: 01:44:22:7d:27:00:25:e8:d3:07:b2:8c:dc:ee:b0: c4:3b:b8:ac:d7:a3:3f:45:ab:31:24:8c:72:9a:6e: a9:27:10:a3:d2:95:dc:f8:01:c7:b4:28:c7:c8:95: 44:6a:5e:7e:3f:9e:b6:6f:3c:67:54:9e:e6:99:42: 1c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AA:33:F5:2E:F1:CD:43:BF:33:FC:7A:A9:01:6C:CE:49:36:72:8D X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/kaoz9S7xzUO_M_x6qQFszkk2co0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.86.43.0/24 Signature Algorithm: sha256WithRSAEncryption 84:1a:34:6a:a7:ac:d0:79:34:84:24:10:27:64:37:37:19:8a: c4:38:af:19:bf:9d:e8:74:9c:08:ab:88:ba:3b:af:2c:70:cc: 4d:77:99:f5:29:c3:82:f0:dc:45:09:ae:00:10:d9:12:71:b0: d2:b7:13:b1:51:ac:bf:75:33:28:e7:38:c8:0f:f5:91:68:fc: 83:b9:40:86:16:f0:6a:01:74:ad:d3:81:82:b3:28:9d:41:20: e9:e4:32:3a:a1:d7:b3:8b:78:8a:ac:69:73:40:3f:dc:bb:42: ab:1f:f6:13:4c:51:64:d8:c6:36:0b:5e:b9:93:d6:29:4f:76: 94:2d:db:7f:50:b9:50:5e:47:66:b1:0a:a1:66:6f:6a:ac:01: 85:bf:cc:13:04:0c:91:89:01:94:da:97:64:de:58:cc:7f:3c: 8e:a7:b6:f0:db:59:2d:cb:7a:e6:46:c9:94:3f:0b:88:a3:ac: 4f:3f:28:72:30:a5:72:b2:c1:64:39:c4:02:b1:64:b5:b8:b3: 06:4d:84:1c:91:16:fd:ad:f4:a7:ec:58:74:45:a8:4d:ec:f3: 45:dc:0e:7b:8c:67:fa:a2:7c:4e:d4:aa:47:7b:c1:d7:32:fb: bb:30:49:77:b4:88:c7:84:e0:b0:88:b3:ac:c5:7a:f0:62:27: 05:d5:6d:98 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTEyMDUw MjM2NDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDkxQUEzM0Y1MkVGMUNE NDNCRjMzRkM3QUE5MDE2Q0NFNDkzNjcyOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIZFXx4PvSfgDtnx0s09LZqznZdOuKpnAJpC4FDaaSJTG81pVi b7DOxBijVr7BNBQbtSqGg3S/YtkAHo202gsgwrspfjJ4fcp7PrGtrfWkletlGxBt mYNPlq3QCjKM3gUkMIwfI19vZLEgL/slLoduOa5VMM/UV9a8KUGYX7SEz1H2fO2d zxOzTtphvfu0DstvfJONN+TYhXd1N156dUUg+A9E5o5QU76l7Jfxj9KHbDZObDGl UevFhJO0AgByXKB0OgFEIn0nACXo0weyjNzusMQ7uKzXoz9FqzEkjHKabqknEKPS ldz4Ace0KMfIlURqXn4/nrZvPGdUnuaZQhwfAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUkaoz9S7xzUO/M/x6qQFszkk2co0wHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxL2thb3o5Uzd4elVPX01f eDZxUUZzemtrMmNvMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADLViswDQYJKoZIhvcNAQELBQADggEBAIQaNGqnrNB5NIQkECdkNzcZisQ4rxm/ neh0nAiriLo7ryxwzE13mfUpw4Lw3EUJrgAQ2RJxsNK3E7FRrL91MyjnOMgP9ZFo /IO5QIYW8GoBdK3TgYKzKJ1BIOnkMjqh17OLeIqsaXNAP9y7Qqsf9hNMUWTYxjYL XrmT1ilPdpQt239QuVBeR2axCqFmb2qsAYW/zBMEDJGJAZTal2TeWMx/PI6ntvDb WS3LeuZGyZQ/C4ijrE8/KHIwpXKywWQ5xAKxZLW4swZNhByRFv2t9KfsWHRFqE3s 80XcDnuMZ/qifE7Uqkd7wdcy+7swSXe0iMeE4LCIs6zFevBiJwXVbZg= -----END CERTIFICATE-----Generated at Sun Dec 7 08:34:06 2025 by rpki-client