This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/ueu3-o23v8rpf8v8o41oSCQ1Dvk.roa File: ueu3-o23v8rpf8v8o41oSCQ1Dvk.roa (raw, json) Hash identifier: igZInox99bT8n28UcWqfLjSneOYm8hFSht3GzKzu3wk= Subject key identifier: B9:EB:B7:FA:8D:B7:BF:CA:E9:7F:CB:FC:A3:8D:68:48:24:35:0E:F9 Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 2154 Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/ueu3-o23v8rpf8v8o41oSCQ1Dvk.roa Signing time: Fri 05 Dec 2025 02:36:41 +0000 ROA not before: Fri 05 Dec 2025 02:36:41 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 24147 IP address blocks: 219.235.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 09:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8532 (0x2154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: Dec 5 02:36:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B9EBB7FA8DB7BFCAE97FCBFCA38D684824350EF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fc:12:f0:24:88:7d:9b:d8:2e:85:a6:6f:96: 27:18:1c:33:14:51:5a:6a:f4:7f:1f:a2:41:38:a3: fe:7a:f0:8d:63:38:fc:0f:40:f5:e2:70:e2:ff:4e: b6:d8:ee:0e:90:b6:30:32:05:f8:c2:f2:14:d2:fe: c3:20:5c:a2:a5:4f:cd:0e:e7:64:ce:62:64:87:6f: 52:1c:ec:9a:cb:c9:86:68:82:1b:88:35:e4:fc:c2: 91:61:0f:16:dd:77:bc:1c:2f:4e:35:60:34:d5:10: 00:5e:03:49:0e:4b:61:91:e1:49:0f:66:e4:51:b7: 12:4b:2f:51:a3:60:ec:b8:8b:92:cc:aa:99:75:59: f2:b1:df:92:97:45:18:44:de:68:f2:8d:db:dd:4f: cc:05:9b:95:44:ab:13:fd:98:41:8d:36:ef:c5:61: 12:2f:7e:22:d6:97:f3:91:9f:64:0b:79:6b:df:bc: d7:36:b1:0f:e7:39:68:8d:10:42:84:4a:ac:23:62: 09:06:05:0e:d6:26:05:92:bd:8f:c3:8c:66:96:19: 20:aa:6a:21:ce:54:58:19:02:df:84:38:5c:9e:7b: bd:b6:62:5d:eb:d3:ce:14:0f:fa:67:9a:cb:85:80: 8e:c1:0e:6d:15:81:99:da:0d:25:ac:3d:3f:1f:a6: eb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EB:B7:FA:8D:B7:BF:CA:E9:7F:CB:FC:A3:8D:68:48:24:35:0E:F9 X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/ueu3-o23v8rpf8v8o41oSCQ1Dvk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.235.192.0/24 Signature Algorithm: sha256WithRSAEncryption 88:4a:25:70:8e:ad:75:56:80:30:92:25:37:d1:00:bf:c2:da: f9:57:d9:d8:73:9b:65:4e:fc:4f:c8:cc:0a:08:24:88:8a:48: 4a:47:40:38:d5:3e:2c:c0:20:1f:0c:fc:64:25:0c:d0:dc:ce: bf:40:a7:61:b3:8e:62:dc:05:6b:82:84:fd:cd:8b:8f:ba:91: 7e:e5:7b:10:59:86:fe:76:a4:6c:b8:80:b8:39:8b:b3:d3:a6: e9:3a:a1:fa:6c:ea:08:7d:5e:a3:5a:22:a7:a2:02:4d:d5:ed: d8:5e:fc:18:f4:39:89:74:42:e2:bc:98:fa:2e:8e:92:88:db: e0:f8:2c:cd:89:6d:44:6f:95:b6:b4:74:d7:2e:97:1a:6c:13: 6f:89:51:69:20:22:5e:1c:20:b8:10:a0:ed:59:52:7e:48:1b: bb:ac:92:99:eb:47:2c:f8:cd:c7:74:b7:54:4a:c0:b8:f8:be: 96:a4:04:05:1e:bf:18:99:df:e6:29:d7:eb:d8:08:96:d2:4b: 44:90:95:62:48:c3:ad:85:7e:91:08:8f:24:32:b8:1c:c7:c5: ba:1f:33:a5:57:15:15:43:ec:5a:ef:86:41:dd:6d:e3:eb:ac: c7:8f:92:11:da:3a:dd:6b:07:59:36:f6:32:a5:20:33:e7:f6: d6:a4:fd:ec -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIVQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTEyMDUw MjM2NDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEI5RUJCN0ZBOERCN0JG Q0FFOTdGQ0JGQ0EzOEQ2ODQ4MjQzNTBFRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCi/BLwJIh9m9guhaZvlicYHDMUUVpq9H8fokE4o/568I1jOPwP QPXicOL/TrbY7g6QtjAyBfjC8hTS/sMgXKKlT80O52TOYmSHb1Ic7JrLyYZoghuI NeT8wpFhDxbdd7wcL041YDTVEABeA0kOS2GR4UkPZuRRtxJLL1GjYOy4i5LMqpl1 WfKx35KXRRhE3mjyjdvdT8wFm5VEqxP9mEGNNu/FYRIvfiLWl/ORn2QLeWvfvNc2 sQ/nOWiNEEKESqwjYgkGBQ7WJgWSvY/DjGaWGSCqaiHOVFgZAt+EOFyee722Yl3r 084UD/pnmsuFgI7BDm0VgZnaDSWsPT8fpuu9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUueu3+o23v8rpf8v8o41oSCQ1DvkwHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxL3VldTMtbzIzdjhycGY4 djhvNDFvU0NRMUR2ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADb68AwDQYJKoZIhvcNAQELBQADggEBAIhKJXCOrXVWgDCSJTfRAL/C2vlX2dhz m2VO/E/IzAoIJIiKSEpHQDjVPizAIB8M/GQlDNDczr9Ap2GzjmLcBWuChP3Ni4+6 kX7lexBZhv52pGy4gLg5i7PTpuk6ofps6gh9XqNaIqeiAk3V7dhe/Bj0OYl0QuK8 mPoujpKI2+D4LM2JbURvlba0dNculxpsE2+JUWkgIl4cILgQoO1ZUn5IG7uskpnr Ryz4zcd0t1RKwLj4vpakBAUevxiZ3+Yp1+vYCJbSS0SQlWJIw62FfpEIjyQyuBzH xbofM6VXFRVD7FrvhkHdbePrrMePkhHaOt1rB1k29jKlIDPn9tak/ew= -----END CERTIFICATE-----Generated at Sun Dec 7 08:34:11 2025 by rpki-client