This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/pCrL_f8azLFflthoyXFvQZFYyME.roa File: pCrL_f8azLFflthoyXFvQZFYyME.roa (raw, json) Hash identifier: iZB/Evq3/fIUnwGXoqQ/0e4PUWqj+5FmRlw8Jeazu4A= Subject key identifier: A4:2A:CB:FD:FF:1A:CC:B1:5F:96:D8:68:C9:71:6F:41:91:58:C8:C1 Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 2152 Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/pCrL_f8azLFflthoyXFvQZFYyME.roa Signing time: Fri 05 Dec 2025 02:36:40 +0000 ROA not before: Fri 05 Dec 2025 02:36:40 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 24147 IP address blocks: 203.86.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 09:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8530 (0x2152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: Dec 5 02:36:40 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A42ACBFDFF1ACCB15F96D868C9716F419158C8C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:04:ed:3d:4a:e7:c4:c9:64:83:0d:cb:5d:ca: c5:6e:75:ba:88:11:20:cc:1b:33:1f:34:58:ec:ad: 90:ad:c7:57:62:e0:4a:45:f1:b1:a1:47:81:06:a9: 25:d9:88:36:d3:99:50:7d:4d:fc:34:b7:68:6f:71: b0:56:15:fd:15:b4:ef:20:93:62:6c:a2:3e:c2:07: 8d:61:3f:71:ea:e4:fd:72:62:1c:d5:b9:5d:d8:b9: 46:8b:b1:da:23:77:95:a6:bf:50:4d:de:31:e8:b0: 12:50:0d:b7:8e:db:be:b8:b2:be:86:6b:b4:c1:aa: a4:c3:bc:b7:6f:88:b9:48:bc:77:a6:4d:70:0a:bb: 49:66:bb:3b:f3:75:bd:88:d4:de:3c:f4:32:0e:04: c0:85:26:6f:9c:27:39:26:33:17:f6:06:91:a1:95: 68:52:6f:9b:6b:f2:b4:26:4c:40:52:d1:81:4d:ba: f8:75:4c:7e:2c:85:72:95:96:6f:ad:52:d2:ac:03: 18:79:fe:c8:6b:1a:6e:96:5f:57:03:24:85:28:14: 99:1e:36:b1:db:2c:11:ed:61:7e:76:51:82:74:c0: cd:cc:0a:23:06:40:8c:af:b3:d3:88:5d:b0:ee:7d: 2f:6b:7c:09:c1:36:8f:06:7e:40:67:88:64:01:e6: c2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2A:CB:FD:FF:1A:CC:B1:5F:96:D8:68:C9:71:6F:41:91:58:C8:C1 X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/pCrL_f8azLFflthoyXFvQZFYyME.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.86.53.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:68:f1:38:46:2f:05:c3:63:06:19:a2:f9:fd:3e:38:1a:1b: 30:3d:73:6c:d2:6b:c4:c5:df:d0:81:00:f0:5c:c3:cd:89:8c: 52:6d:e3:60:40:6e:91:77:ac:a9:06:af:96:d3:88:06:28:19: 8d:68:4b:0f:f4:a4:ce:d3:ad:d4:1f:57:0e:2e:48:99:39:4b: bd:0f:cc:e6:c1:2f:e7:d0:c8:cd:ed:bf:28:59:d7:42:88:d9: 18:29:40:8e:a5:cc:ee:4f:15:28:e8:08:9e:dd:b7:53:0e:6d: e2:61:fd:77:4c:94:64:44:fc:17:96:26:77:94:b4:d8:85:d6: 7f:fa:57:4a:19:ee:10:d7:f7:f0:a6:cb:7a:2c:ea:41:e0:99: 4a:8f:5a:55:38:25:95:a3:0e:07:19:48:8a:d6:52:6a:ea:84: 9e:a9:cf:1f:9f:5e:5c:0a:a6:00:fe:b4:b3:72:ce:2e:ed:82: e3:35:a8:bf:6c:1b:2e:01:94:5b:eb:00:95:ba:e1:b3:6f:de: 9a:96:ae:06:3f:30:3c:34:71:9b:32:04:a9:f1:e6:a7:c6:00: 2a:0a:19:c5:09:0c:b2:bf:c5:75:5f:dd:d0:f7:ce:b4:89:da: 9d:2f:56:a1:4d:c9:4c:29:72:2e:42:49:c4:37:8f:32:4f:c4: ed:8b:c7:c4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTEyMDUw MjM2NDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEE0MkFDQkZERkYxQUND QjE1Rjk2RDg2OEM5NzE2RjQxOTE1OEM4QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4BO09SufEyWSDDctdysVudbqIESDMGzMfNFjsrZCtx1di4EpF 8bGhR4EGqSXZiDbTmVB9Tfw0t2hvcbBWFf0VtO8gk2Jsoj7CB41hP3Hq5P1yYhzV uV3YuUaLsdojd5Wmv1BN3jHosBJQDbeO2764sr6Ga7TBqqTDvLdviLlIvHemTXAK u0lmuzvzdb2I1N489DIOBMCFJm+cJzkmMxf2BpGhlWhSb5tr8rQmTEBS0YFNuvh1 TH4shXKVlm+tUtKsAxh5/shrGm6WX1cDJIUoFJkeNrHbLBHtYX52UYJ0wM3MCiMG QIyvs9OIXbDufS9rfAnBNo8GfkBniGQB5sIFAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUpCrL/f8azLFflthoyXFvQZFYyMEwHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxL3BDckxfZjhhekxGZmx0 aG95WEZ2UVpGWXlNRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADLVjUwDQYJKoZIhvcNAQELBQADggEBADto8ThGLwXDYwYZovn9PjgaGzA9c2zS a8TF39CBAPBcw82JjFJt42BAbpF3rKkGr5bTiAYoGY1oSw/0pM7TrdQfVw4uSJk5 S70PzObBL+fQyM3tvyhZ10KI2RgpQI6lzO5PFSjoCJ7dt1MObeJh/XdMlGRE/BeW JneUtNiF1n/6V0oZ7hDX9/Cmy3os6kHgmUqPWlU4JZWjDgcZSIrWUmrqhJ6pzx+f XlwKpgD+tLNyzi7tguM1qL9sGy4BlFvrAJW64bNv3pqWrgY/MDw0cZsyBKnx5qfG ACoKGcUJDLK/xXVf3dD3zrSJ2p0vVqFNyUwpci5CScQ3jzJPxO2Lx8Q= -----END CERTIFICATE-----Generated at Sun Dec 7 08:34:08 2025 by rpki-client