This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/ssO_IzqK4ZwYf3SksKdeQJndwuU.roa File: ssO_IzqK4ZwYf3SksKdeQJndwuU.roa (raw, json) Hash identifier: nK+h2me1yan+kuNYeA2m6/gr4o4V3gAyWDlu2HZlYJs= Subject key identifier: B2:C3:BF:23:3A:8A:E1:9C:18:7F:74:A4:B0:A7:5E:40:99:DD:C2:E5 Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 214A Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/ssO_IzqK4ZwYf3SksKdeQJndwuU.roa Signing time: Fri 05 Dec 2025 02:36:39 +0000 ROA not before: Fri 05 Dec 2025 02:36:39 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 24147 IP address blocks: 203.86.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 09:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8522 (0x214a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: Dec 5 02:36:39 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B2C3BF233A8AE19C187F74A4B0A75E4099DDC2E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:77:a9:4c:33:cb:58:14:b4:53:dd:93:8a: 54:bb:ea:49:62:25:d3:e6:e5:f3:88:45:51:1e:6f: e6:db:e8:2d:f0:ca:1a:2f:9d:de:b7:a3:d6:e3:2c: 11:be:7c:61:67:9f:da:5a:30:6e:2a:67:28:47:f0: 44:41:74:68:14:62:49:dd:50:5e:af:6f:f8:04:f9: e8:b9:6f:ee:f1:f6:1d:c6:45:95:ac:04:30:b4:46: ff:3f:6b:7c:d4:c0:48:e3:28:30:bb:77:f2:97:fd: e9:06:49:f0:bf:f0:ac:04:36:9c:63:88:7d:1c:7c: e0:2a:f2:fa:6f:f6:97:83:4f:aa:28:87:ef:db:d1: bb:af:cb:44:d6:bd:9d:a4:d6:52:c0:00:69:df:05: e7:f1:d9:e0:88:07:a8:96:94:2b:55:c3:ba:16:58: 2a:fd:2a:3f:b0:4b:f8:a6:8b:32:d1:99:f1:9b:a8: b3:4a:e5:c1:11:68:23:c5:3f:e8:5e:e7:40:d4:5d: 87:7b:d3:74:13:8c:6b:91:48:09:d7:f6:27:3e:3f: 76:c3:22:27:f4:50:56:d3:8f:bf:d5:43:91:6e:e9: f8:93:e1:aa:cb:de:d4:9e:89:b1:b0:49:aa:91:b9: 7d:c3:ed:c6:f7:91:dd:6b:d6:ee:5f:83:e0:4c:77: a1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C3:BF:23:3A:8A:E1:9C:18:7F:74:A4:B0:A7:5E:40:99:DD:C2:E5 X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/ssO_IzqK4ZwYf3SksKdeQJndwuU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.86.61.0/24 Signature Algorithm: sha256WithRSAEncryption b9:48:12:ac:2a:95:aa:e2:9d:1e:c7:2c:1d:2e:b0:13:50:a0: 1f:7c:9f:d5:a5:f6:e1:ee:48:76:68:5b:23:85:1b:f1:a8:4c: 82:f9:2a:e8:73:a9:fa:93:8f:d5:2f:08:2c:26:88:72:81:e5: 2e:e2:80:01:08:aa:9a:44:b5:4b:a5:ff:47:9e:f6:2b:ee:2f: 0f:3c:d0:af:24:e5:67:08:69:3b:a6:eb:38:d0:52:ac:8e:e3: d0:64:d7:c2:da:ee:b5:8c:0b:b2:f7:17:86:31:7d:5c:0a:5f: d5:74:4b:ec:14:bc:1e:9d:a8:10:2f:14:34:4f:2f:55:e5:54: 1d:a3:00:f6:67:4c:34:c0:0d:15:f3:d5:c2:4f:a2:5f:9d:fc: b9:a3:4a:eb:dc:40:e0:0f:17:49:5f:c0:31:de:7c:d5:5f:59: bb:e8:73:d0:3d:b2:be:22:64:c3:0d:50:d0:de:4c:40:77:73: e3:ea:00:57:f9:6d:e3:0e:92:62:64:26:83:78:19:7a:16:c8: 4f:c6:09:6e:9b:1f:f4:87:a8:ba:e0:d6:fc:54:f0:b4:8a:43: 01:08:40:e2:0c:f4:0a:b4:ea:84:c0:2f:85:98:36:14:bc:24: aa:67:1b:20:11:9a:54:dd:66:25:ab:b8:8a:b7:66:53:24:28: 9a:89:68:7e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIUowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTEyMDUw MjM2MzlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEIyQzNCRjIzM0E4QUUx OUMxODdGNzRBNEIwQTc1RTQwOTlEREMyRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC75XepTDPLWBS0U92TilS76kliJdPm5fOIRVEeb+bb6C3wyhov nd63o9bjLBG+fGFnn9paMG4qZyhH8ERBdGgUYkndUF6vb/gE+ei5b+7x9h3GRZWs BDC0Rv8/a3zUwEjjKDC7d/KX/ekGSfC/8KwENpxjiH0cfOAq8vpv9peDT6ooh+/b 0buvy0TWvZ2k1lLAAGnfBefx2eCIB6iWlCtVw7oWWCr9Kj+wS/imizLRmfGbqLNK 5cERaCPFP+he50DUXYd703QTjGuRSAnX9ic+P3bDIif0UFbTj7/VQ5Fu6fiT4arL 3tSeibGwSaqRuX3D7cb3kd1r1u5fg+BMd6EPAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUssO/IzqK4ZwYf3SksKdeQJndwuUwHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxL3NzT19JenFLNFp3WWYz U2tzS2RlUUpuZHd1VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADLVj0wDQYJKoZIhvcNAQELBQADggEBALlIEqwqlarinR7HLB0usBNQoB98n9Wl 9uHuSHZoWyOFG/GoTIL5KuhzqfqTj9UvCCwmiHKB5S7igAEIqppEtUul/0ee9ivu Lw880K8k5WcIaTum6zjQUqyO49Bk18La7rWMC7L3F4YxfVwKX9V0S+wUvB6dqBAv FDRPL1XlVB2jAPZnTDTADRXz1cJPol+d/LmjSuvcQOAPF0lfwDHefNVfWbvoc9A9 sr4iZMMNUNDeTEB3c+PqAFf5beMOkmJkJoN4GXoWyE/GCW6bH/SHqLrg1vxU8LSK QwEIQOIM9Aq06oTAL4WYNhS8JKpnGyARmlTdZiWruIq3ZlMkKJqJaH4= -----END CERTIFICATE-----Generated at Sun Dec 7 08:30:20 2025 by rpki-client