This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/uvPcsxNmtt46kdqqxXAqUGOYvCU.roa File: uvPcsxNmtt46kdqqxXAqUGOYvCU.roa (raw, json) Hash identifier: tKVZzcxlx8BOSCwt24MCHMHZ4iqxC42SfX0Yuwqd9qc= Subject key identifier: BA:F3:DC:B3:13:66:B6:DE:3A:91:DA:AA:C5:70:2A:50:63:98:BC:25 Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 2153 Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/uvPcsxNmtt46kdqqxXAqUGOYvCU.roa Signing time: Fri 05 Dec 2025 02:36:41 +0000 ROA not before: Fri 05 Dec 2025 02:36:41 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 4808 IP address blocks: 113.208.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 23:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8531 (0x2153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: Dec 5 02:36:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=BAF3DCB31366B6DE3A91DAAAC5702A506398BC25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:c4:15:41:96:9a:29:10:c5:97:58:03:84: ef:4c:54:f8:77:0b:83:b8:b4:f2:82:73:0b:4b:04: 33:c7:26:1d:25:fa:ef:59:40:e7:e1:7d:2a:35:e0: 8f:5d:be:d3:e1:c6:f9:25:ea:92:0f:93:c5:41:0d: 9f:2f:b7:37:30:65:de:19:d2:11:47:3d:f0:3c:8b: b6:f5:28:f2:56:f3:25:1d:fc:6b:78:f1:65:77:81: 80:4e:fd:92:32:dc:2c:a0:f8:db:66:22:94:e4:e7: 09:f6:e0:b2:b8:17:36:49:1e:7e:16:42:69:74:16: fd:e8:84:1e:60:1c:44:74:85:5d:b4:43:9f:8e:e8: 74:01:7c:a5:45:b0:c7:aa:2d:aa:a6:8c:e7:b8:44: b1:3e:7e:da:82:5e:4b:dc:6d:b0:14:5b:43:5f:71: 54:7f:b9:e5:d2:2a:9f:44:f6:38:77:9e:93:a0:9e: 8d:f4:d9:b8:8a:88:58:94:5c:b2:92:06:11:ac:53: 5c:4d:dc:0e:52:34:4f:3a:bf:86:d6:31:42:a0:3c: 7e:a3:98:6b:61:b3:be:e9:ff:0b:18:e1:22:25:44: 54:03:9a:81:ee:31:6c:b3:c8:f2:26:c5:bc:6e:b9: 17:8e:c4:1d:43:6d:bd:28:07:b2:0b:91:22:d7:ab: 47:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F3:DC:B3:13:66:B6:DE:3A:91:DA:AA:C5:70:2A:50:63:98:BC:25 X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/uvPcsxNmtt46kdqqxXAqUGOYvCU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.208.116.0/22 Signature Algorithm: sha256WithRSAEncryption 57:d3:00:c1:50:8d:35:58:c8:73:4b:e8:b8:a5:51:8b:f5:03: 1c:0d:e6:c1:8d:55:d7:22:12:b9:46:a3:9b:c1:4f:18:41:b4: 0d:c6:fc:74:11:d2:52:4e:17:04:f8:4f:3a:e9:99:fc:38:e9: 29:b2:b9:49:34:6b:0f:66:5e:82:d8:d1:6f:ad:1d:50:a6:11: ea:46:82:b8:23:ae:aa:57:f2:11:25:fd:a4:84:9f:84:89:bd: 0c:17:89:36:2a:b9:de:23:fa:b1:ab:25:64:3b:7e:e3:1d:f9: c7:ab:ac:d3:81:3d:e3:e2:cd:c4:b1:c4:c9:34:7a:fb:d2:7d: 66:34:29:89:48:17:5f:3c:fb:e7:83:09:a9:7b:87:ca:c8:50: 50:04:4e:61:84:68:63:74:9d:1b:d3:91:9d:3b:1a:73:72:b7: f6:0f:24:17:6c:24:28:00:22:a8:f4:22:51:00:29:8a:6d:f4: 37:a1:69:aa:b5:f1:bd:62:1c:01:43:fc:4c:a6:18:54:8b:d2: 38:cf:83:ef:88:f4:8b:ab:07:8d:67:ee:d6:cf:e3:6f:cc:0d: ef:7a:1e:89:92:f6:d8:1c:78:77:7f:ff:dc:d8:ef:fd:1d:92: 53:88:39:d4:df:85:13:50:3d:75:18:ab:1d:c8:a5:0d:e2:36: 20:fa:70:64 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTEyMDUw MjM2NDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEJBRjNEQ0IzMTM2NkI2 REUzQTkxREFBQUM1NzAyQTUwNjM5OEJDMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC928QVQZaaKRDFl1gDhO9MVPh3C4O4tPKCcwtLBDPHJh0l+u9Z QOfhfSo14I9dvtPhxvkl6pIPk8VBDZ8vtzcwZd4Z0hFHPfA8i7b1KPJW8yUd/Gt4 8WV3gYBO/ZIy3Cyg+NtmIpTk5wn24LK4FzZJHn4WQml0Fv3ohB5gHER0hV20Q5+O 6HQBfKVFsMeqLaqmjOe4RLE+ftqCXkvcbbAUW0NfcVR/ueXSKp9E9jh3npOgno30 2biKiFiUXLKSBhGsU1xN3A5SNE86v4bWMUKgPH6jmGths77p/wsY4SIlRFQDmoHu MWyzyPImxbxuuReOxB1Dbb0oB7ILkSLXq0edAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUuvPcsxNmtt46kdqqxXAqUGOYvCUwHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxL3V2UGNzeE5tdHQ0Nmtk cXF4WEFxVUdPWXZDVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJx0HQwDQYJKoZIhvcNAQELBQADggEBAFfTAMFQjTVYyHNL6LilUYv1AxwN5sGN VdciErlGo5vBTxhBtA3G/HQR0lJOFwT4Tzrpmfw46SmyuUk0aw9mXoLY0W+tHVCm EepGgrgjrqpX8hEl/aSEn4SJvQwXiTYqud4j+rGrJWQ7fuMd+cerrNOBPePizcSx xMk0evvSfWY0KYlIF188++eDCal7h8rIUFAETmGEaGN0nRvTkZ07GnNyt/YPJBds JCgAIqj0IlEAKYpt9Dehaaq18b1iHAFD/EymGFSL0jjPg++I9IurB41n7tbP42/M De96HomS9tgceHd//9zY7/0dklOIOdTfhRNQPXUYqx3IpQ3iNiD6cGQ= -----END CERTIFICATE-----Generated at Sat Dec 6 23:10:33 2025 by rpki-client