This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/nI15WrKjxQOirS2-kGeR1FWVoas.roa File: nI15WrKjxQOirS2-kGeR1FWVoas.roa (raw, json) Hash identifier: aKy6VwHGVk8v13lxjLrefPWr49fFi907wvJu1XZMw3Q= Subject key identifier: 9C:8D:79:5A:B2:A3:C5:03:A2:AD:2D:BE:90:67:91:D4:55:95:A1:AB Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 215A Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/nI15WrKjxQOirS2-kGeR1FWVoas.roa Signing time: Fri 05 Dec 2025 02:36:42 +0000 ROA not before: Fri 05 Dec 2025 02:36:42 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 4847 IP address blocks: 211.102.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 04:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8538 (0x215a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: Dec 5 02:36:42 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=9C8D795AB2A3C503A2AD2DBE906791D45595A1AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:36:d6:ee:ce:ee:28:1a:35:ce:6d:cc:25: 8b:cc:cd:d8:59:42:d6:13:18:e5:15:da:6b:c7:c5: d8:a4:86:b3:f0:20:bb:42:46:ab:86:ab:ef:76:fd: 2f:c2:35:86:3f:2b:ef:6b:e7:6d:5a:c3:51:8b:7d: 76:c6:54:c6:4c:58:41:9b:32:6b:18:27:90:f5:c2: a6:db:b5:e3:e7:98:90:29:b3:98:85:f8:6d:86:1e: e4:08:98:9e:64:d2:28:67:ce:3b:cd:38:d0:88:ce: 57:06:33:07:33:f3:9b:7c:36:b8:e1:8a:00:fb:89: 4d:2d:fd:09:66:89:53:90:97:d2:12:26:88:b6:b5: 1f:92:25:74:3a:d9:12:1a:35:18:35:2c:d4:52:69: 26:76:95:bf:c7:47:ce:ad:fe:a8:78:e6:a5:41:e3: 71:12:01:4c:d0:fe:9e:b1:f1:91:9b:53:0d:b0:ac: 90:16:6b:d1:bb:e6:db:78:35:dd:9b:f7:29:c9:7e: 26:6e:fe:98:6a:c5:70:da:92:9d:cc:99:0a:42:f8: 86:4c:ae:8e:27:9f:79:5a:ff:2f:f1:99:fe:a3:33: 72:24:a1:29:c4:c5:b5:1d:af:02:0e:bf:d9:f5:63: d4:7e:89:8f:e6:08:d1:d0:a5:26:27:bf:8a:6f:c4: b8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8D:79:5A:B2:A3:C5:03:A2:AD:2D:BE:90:67:91:D4:55:95:A1:AB X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/nI15WrKjxQOirS2-kGeR1FWVoas.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.102.240.0/21 Signature Algorithm: sha256WithRSAEncryption 7a:62:42:ec:cb:78:13:cf:24:2a:27:fe:47:be:8d:97:73:2d: 6b:f3:b6:a9:e4:56:6f:4e:ec:ce:79:e0:93:8b:1b:1e:49:f6: 36:b4:94:76:11:6c:39:06:de:19:1a:4a:06:bd:c2:dd:73:96: 6f:10:7a:98:ea:53:d5:9e:6c:9b:16:b8:a3:fb:06:b9:a9:af: dd:c0:2d:3a:3b:17:a5:83:e1:5f:30:2d:92:a2:57:3e:4a:65: 65:9b:3b:57:89:36:2e:73:30:6d:a6:4f:2b:9b:81:35:07:78: 86:c5:1f:df:11:ce:c2:df:dd:3d:ff:3a:1e:19:db:17:26:c6: bb:fe:83:65:b2:5a:db:b2:92:01:5c:03:18:d6:b4:7d:1f:15: d5:34:33:5f:6a:7e:28:e5:2e:bd:86:6b:97:b1:bd:98:5d:96: d8:69:23:b8:3d:2e:88:04:a5:62:32:f0:b7:17:98:15:4e:68: 23:7d:e3:17:c0:04:7f:0e:51:9d:11:4e:72:e5:e1:af:f3:45: 59:c0:82:6b:af:7d:62:81:6c:6f:86:80:b7:fd:d7:7d:96:cd: 9e:a7:cf:65:f9:56:d9:ec:33:9c:be:79:36:48:0a:5f:ae:d7: c3:4f:dc:20:1c:a5:66:ce:d7:9d:da:6d:25:a7:c2:01:d3:fb: ce:32:f1:8d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIVowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTEyMDUw MjM2NDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDlDOEQ3OTVBQjJBM0M1 MDNBMkFEMkRCRTkwNjc5MUQ0NTU5NUExQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4ETbW7s7uKBo1zm3MJYvMzdhZQtYTGOUV2mvHxdikhrPwILtC RquGq+92/S/CNYY/K+9r521aw1GLfXbGVMZMWEGbMmsYJ5D1wqbbtePnmJAps5iF +G2GHuQImJ5k0ihnzjvNONCIzlcGMwcz85t8NrjhigD7iU0t/QlmiVOQl9ISJoi2 tR+SJXQ62RIaNRg1LNRSaSZ2lb/HR86t/qh45qVB43ESAUzQ/p6x8ZGbUw2wrJAW a9G75tt4Nd2b9ynJfiZu/phqxXDakp3MmQpC+IZMro4nn3la/y/xmf6jM3IkoSnE xbUdrwIOv9n1Y9R+iY/mCNHQpSYnv4pvxLg7AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUnI15WrKjxQOirS2+kGeR1FWVoaswHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxL25JMTVXcktqeFFPaXJT Mi1rR2VSMUZXVm9hcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPTZvAwDQYJKoZIhvcNAQELBQADggEBAHpiQuzLeBPPJCon/ke+jZdzLWvztqnk Vm9O7M554JOLGx5J9ja0lHYRbDkG3hkaSga9wt1zlm8QepjqU9WebJsWuKP7Brmp r93ALTo7F6WD4V8wLZKiVz5KZWWbO1eJNi5zMG2mTyubgTUHeIbFH98RzsLf3T3/ Oh4Z2xcmxrv+g2WyWtuykgFcAxjWtH0fFdU0M19qfijlLr2Ga5exvZhdlthpI7g9 LogEpWIy8LcXmBVOaCN94xfABH8OUZ0RTnLl4a/zRVnAgmuvfWKBbG+GgLf9132W zZ6nz2X5VtnsM5y+eTZICl+u18NP3CAcpWbO153abSWnwgHT+84y8Y0= -----END CERTIFICATE-----Generated at Sun Dec 7 04:18:29 2025 by rpki-client