This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/lBKbeBi7CLkW7Db0v0ETeSgWwUc.roa File: lBKbeBi7CLkW7Db0v0ETeSgWwUc.roa (raw, json) Hash identifier: 9nLXlJXBaQI0FXe5W2VSj//wUkUeHmPkZvcgHoxZIes= Subject key identifier: 94:12:9B:78:18:BB:08:B9:16:EC:36:F4:BF:41:13:79:28:16:C1:47 Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 2159 Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/lBKbeBi7CLkW7Db0v0ETeSgWwUc.roa Signing time: Fri 05 Dec 2025 02:36:42 +0000 ROA not before: Fri 05 Dec 2025 02:36:42 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 24147 IP address blocks: 219.235.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 09:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8537 (0x2159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: Dec 5 02:36:42 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=94129B7818BB08B916EC36F4BF4113792816C147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5b:b1:c6:19:ec:4e:e6:10:4d:68:70:71:11: f1:9f:cc:27:0b:bf:86:b7:4d:a7:87:ac:e4:ad:82: af:0a:83:04:8f:8c:b7:11:22:1c:eb:45:79:9a:39: 16:dd:6a:15:d5:17:54:18:f0:82:9f:15:78:5f:82: b9:4a:9b:c1:2a:c4:6a:d2:ba:3d:ec:39:90:06:68: d1:44:75:7d:89:4d:1a:28:a7:98:89:1e:79:3f:f9: 88:36:fc:a5:24:49:04:c6:65:4d:07:6e:cb:49:13: 0c:6a:04:72:cb:56:ff:cd:95:79:b9:2b:f2:b8:0e: 6f:63:30:1a:57:70:36:b3:61:7e:f4:d1:3e:ea:71: eb:b7:5b:b4:0e:02:49:5d:c1:78:5e:9b:78:d8:ba: f9:43:ee:1e:b6:d0:a9:78:39:4c:b5:c3:3e:99:bd: 20:79:94:c0:d8:77:e3:77:a8:eb:ef:49:3f:e5:6e: 90:a0:c9:5c:d3:6d:48:94:65:ef:80:53:40:ed:b8: ad:7c:17:a9:40:f7:70:79:0b:39:d7:c0:b9:16:d5: df:f4:d4:2c:48:5f:99:28:64:8b:ff:73:da:97:2f: be:26:b8:e5:8d:d5:40:46:48:2d:55:f7:7d:17:cf: ab:b1:ba:c2:e0:93:a7:2e:d4:dc:bc:ad:b5:3a:52: 85:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:12:9B:78:18:BB:08:B9:16:EC:36:F4:BF:41:13:79:28:16:C1:47 X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/lBKbeBi7CLkW7Db0v0ETeSgWwUc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.235.193.0/24 Signature Algorithm: sha256WithRSAEncryption c1:60:ae:c4:78:8b:bb:ec:fe:b7:1f:d5:58:e2:fb:3b:0f:ce: 4d:02:c2:21:cd:8a:7b:ca:3a:23:cf:4f:f1:ba:da:e8:75:da: 46:2d:06:0f:1b:62:7d:6b:a9:4e:5c:36:da:14:c4:f5:68:f7: 3a:3f:f4:99:5c:3f:2c:53:f0:7f:cf:79:a3:ff:48:9e:0b:e3: 51:5d:a5:9d:00:c2:97:6e:93:00:ee:64:ad:a1:e5:41:db:e7: e8:dd:e8:9b:ae:7e:6e:9e:f1:e5:04:e8:92:e8:92:d7:47:20: 08:71:f2:cc:f6:26:fe:e1:11:d2:55:70:a3:71:7d:52:f0:09: 3d:73:7c:14:d2:3d:d9:e9:d8:c7:a3:53:60:11:83:9c:31:27: 90:57:77:d9:cc:0b:7b:28:e1:7a:66:a5:df:96:38:66:83:7f: 91:95:21:5a:b1:c6:d4:80:01:0f:dc:49:15:8e:f4:b9:ad:82: 61:64:52:b3:ec:fe:bd:24:9a:73:be:22:10:68:a8:52:bc:a7: 2f:95:35:bb:1f:1c:aa:b9:20:46:5b:3d:30:b6:a6:e7:46:e6: 12:a1:ba:ad:67:89:48:9d:44:de:1d:1e:54:8e:1b:cb:43:c9: b7:8a:e3:6b:01:af:1b:f3:db:e9:a2:40:4a:77:26:4c:b7:84: 92:f9:80:ff -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIVkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTEyMDUw MjM2NDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDk0MTI5Qjc4MThCQjA4 QjkxNkVDMzZGNEJGNDExMzc5MjgxNkMxNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpW7HGGexO5hBNaHBxEfGfzCcLv4a3TaeHrOStgq8KgwSPjLcR IhzrRXmaORbdahXVF1QY8IKfFXhfgrlKm8EqxGrSuj3sOZAGaNFEdX2JTRoop5iJ Hnk/+Yg2/KUkSQTGZU0HbstJEwxqBHLLVv/NlXm5K/K4Dm9jMBpXcDazYX700T7q ceu3W7QOAkldwXhem3jYuvlD7h620Kl4OUy1wz6ZvSB5lMDYd+N3qOvvST/lbpCg yVzTbUiUZe+AU0DtuK18F6lA93B5CznXwLkW1d/01CxIX5koZIv/c9qXL74muOWN 1UBGSC1V930Xz6uxusLgk6cu1Ny8rbU6UoVrAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUlBKbeBi7CLkW7Db0v0ETeSgWwUcwHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxL2xCS2JlQmk3Q0xrVzdE YjB2MEVUZVNnV3dVYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADb68EwDQYJKoZIhvcNAQELBQADggEBAMFgrsR4i7vs/rcf1Vji+zsPzk0CwiHN invKOiPPT/G62uh12kYtBg8bYn1rqU5cNtoUxPVo9zo/9JlcPyxT8H/PeaP/SJ4L 41FdpZ0AwpdukwDuZK2h5UHb5+jd6Juufm6e8eUE6JLoktdHIAhx8sz2Jv7hEdJV cKNxfVLwCT1zfBTSPdnp2MejU2ARg5wxJ5BXd9nMC3so4Xpmpd+WOGaDf5GVIVqx xtSAAQ/cSRWO9LmtgmFkUrPs/r0kmnO+IhBoqFK8py+VNbsfHKq5IEZbPTC2pudG 5hKhuq1niUidRN4dHlSOG8tDybeK42sBrxvz2+miQEp3Jky3hJL5gP8= -----END CERTIFICATE-----Generated at Sun Dec 7 08:34:10 2025 by rpki-client