This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/tEhPp_yyq9ayqv3EpRZ4RjKHJ5o.roa File: tEhPp_yyq9ayqv3EpRZ4RjKHJ5o.roa (raw, json) Hash identifier: 356MZ4hSc9QARM+D4usymioMmw2yqd58VuqXE0/DBNU= Subject key identifier: B4:48:4F:A7:FC:B2:AB:D6:B2:AA:FD:C4:A5:16:78:46:32:87:27:9A Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 2156 Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/tEhPp_yyq9ayqv3EpRZ4RjKHJ5o.roa Signing time: Fri 05 Dec 2025 02:36:41 +0000 ROA not before: Fri 05 Dec 2025 02:36:41 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 24147 IP address blocks: 203.86.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 09:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8534 (0x2156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: Dec 5 02:36:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B4484FA7FCB2ABD6B2AAFDC4A51678463287279A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:30:4d:77:1c:c3:56:13:3c:9d:79:5c:33:c3: 05:d2:50:38:95:9d:57:af:c7:bd:74:f9:96:30:fe: ab:03:8a:60:3e:e3:38:bd:7f:e7:14:9c:91:c6:3d: 48:aa:de:9f:94:59:30:20:51:cd:54:57:19:83:e0: 0f:dd:04:97:a1:e4:61:50:6f:54:fb:b3:61:b4:5d: 08:bc:74:77:52:ca:37:ad:63:bf:ea:76:ec:2c:37: d7:d6:f6:c6:de:e1:88:e7:62:96:9c:d9:04:f3:62: d7:c2:02:14:d3:22:bb:09:40:b0:a6:f4:6d:3f:5b: 41:93:bf:bd:72:a8:b6:7e:8d:2e:43:e6:e4:c1:2c: bf:b6:f4:46:66:93:8c:b0:1e:c1:96:05:7d:0c:98: 83:28:48:26:7a:ba:cb:1f:c6:5e:08:5c:4d:c4:89: 03:2e:f4:8a:3e:9a:fa:26:d1:97:27:e4:98:7a:24: a5:bc:be:a3:76:63:c2:d2:76:41:c1:df:a8:3d:1b: 8e:9d:77:8f:70:ef:56:15:87:68:50:0a:d6:58:f7: b4:59:f0:c9:d7:37:e2:3e:f9:8c:a0:01:bc:43:02: ac:db:d2:d6:8f:63:89:46:85:f1:0a:a5:d4:62:f2: 5f:42:47:12:08:6b:aa:3b:a1:2c:d7:d7:80:34:c9: 55:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:48:4F:A7:FC:B2:AB:D6:B2:AA:FD:C4:A5:16:78:46:32:87:27:9A X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/tEhPp_yyq9ayqv3EpRZ4RjKHJ5o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.86.62.0/24 Signature Algorithm: sha256WithRSAEncryption 20:5e:b4:88:90:7b:80:8a:18:6a:35:58:03:8f:10:2d:1b:85: af:7a:d8:ca:b1:53:fc:d7:ac:1e:41:95:61:f5:82:70:60:9d: ac:9b:bb:f7:60:01:0c:4d:a8:71:85:c9:90:37:ec:88:6b:66: 65:fe:16:52:6d:74:cc:84:9d:a9:b1:93:b5:a9:1a:43:36:44: 62:a9:17:95:cd:b4:ad:6e:35:a8:ba:41:1d:4c:b5:93:14:42: 22:ad:bc:db:ed:97:77:9a:76:01:77:a0:ab:49:fa:46:b3:cf: 1e:7b:2a:d4:89:a8:de:49:48:b4:34:1e:d4:f9:5e:64:60:4a: 53:b1:0b:0a:27:b3:9d:51:69:8f:b3:20:24:64:1e:5e:d9:b1: b6:3f:95:5c:c2:09:82:11:10:fc:8a:30:77:53:11:9d:c1:d9: 30:99:24:1b:82:44:79:4e:0b:a0:00:25:76:8c:c6:2c:26:fb: 46:a3:78:3d:d0:b9:56:56:6a:8b:9d:ba:02:0c:9f:ca:81:f2: e0:3c:dc:19:0c:0c:b0:33:77:bb:aa:c5:77:6e:6e:1a:fa:b7: 76:19:59:eb:1a:70:f1:fd:c5:55:59:df:06:63:07:d3:8a:1d: 4b:9e:d0:04:ae:7c:c5:10:e1:46:4f:20:34:1b:0f:a2:31:3a: 44:7e:15:58 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTEyMDUw MjM2NDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEI0NDg0RkE3RkNCMkFC RDZCMkFBRkRDNEE1MTY3ODQ2MzI4NzI3OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZME13HMNWEzydeVwzwwXSUDiVnVevx710+ZYw/qsDimA+4zi9 f+cUnJHGPUiq3p+UWTAgUc1UVxmD4A/dBJeh5GFQb1T7s2G0XQi8dHdSyjetY7/q duwsN9fW9sbe4YjnYpac2QTzYtfCAhTTIrsJQLCm9G0/W0GTv71yqLZ+jS5D5uTB LL+29EZmk4ywHsGWBX0MmIMoSCZ6ussfxl4IXE3EiQMu9Io+mvom0Zcn5Jh6JKW8 vqN2Y8LSdkHB36g9G46dd49w71YVh2hQCtZY97RZ8MnXN+I++YygAbxDAqzb0taP Y4lGhfEKpdRi8l9CRxIIa6o7oSzX14A0yVVfAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUtEhPp/yyq9ayqv3EpRZ4RjKHJ5owHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxL3RFaFBwX3l5cTlheXF2 M0VwUlo0UmpLSEo1by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADLVj4wDQYJKoZIhvcNAQELBQADggEBACBetIiQe4CKGGo1WAOPEC0bha962Mqx U/zXrB5BlWH1gnBgnaybu/dgAQxNqHGFyZA37IhrZmX+FlJtdMyEnamxk7WpGkM2 RGKpF5XNtK1uNai6QR1MtZMUQiKtvNvtl3eadgF3oKtJ+kazzx57KtSJqN5JSLQ0 HtT5XmRgSlOxCwons51RaY+zICRkHl7ZsbY/lVzCCYIREPyKMHdTEZ3B2TCZJBuC RHlOC6AAJXaMxiwm+0ajeD3QuVZWaoudugIMn8qB8uA83BkMDLAzd7uqxXdubhr6 t3YZWesacPH9xVVZ3wZjB9OKHUue0ASufMUQ4UZPIDQbD6IxOkR+FVg= -----END CERTIFICATE-----Generated at Sun Dec 7 08:34:10 2025 by rpki-client