This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/z34wYZAF0BTg_35NeD26SG-T2yQ.roa File: z34wYZAF0BTg_35NeD26SG-T2yQ.roa (raw, json) Hash identifier: 0R5rkpRRDQDX/L982Bs85RVs5FC+cQF5mV7csFDUWE0= Subject key identifier: CF:7E:30:61:90:05:D0:14:E0:FF:7E:4D:78:3D:BA:48:6F:93:DB:24 Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 215F Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/z34wYZAF0BTg_35NeD26SG-T2yQ.roa Signing time: Fri 05 Dec 2025 02:38:33 +0000 ROA not before: Fri 05 Dec 2025 02:38:33 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 24147 IP address blocks: 203.86.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 09:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8543 (0x215f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: Dec 5 02:38:33 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=CF7E30619005D014E0FF7E4D783DBA486F93DB24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fe:4a:91:50:07:e8:d9:46:ad:bc:53:6e:74: 7e:cb:b8:69:59:6d:49:f0:b0:59:89:68:20:f5:79: 4a:82:e8:80:9a:7c:bb:07:1d:7e:f7:63:03:7c:33: 6c:ce:6a:b3:35:06:46:c4:4f:26:1a:2f:e5:95:10: 7f:7d:9e:23:90:de:96:a2:bb:9f:e6:9c:bb:85:ab: eb:47:d0:28:52:3c:9a:5e:85:df:b7:57:21:50:44: 28:bf:74:06:27:64:00:4d:70:1d:43:05:02:fb:c9: 06:cb:2b:00:1e:c2:ce:48:ea:c0:d8:a5:a2:6a:5e: 26:c2:a9:59:fe:f7:27:46:01:05:ad:bf:7c:9b:1c: a1:55:f9:1a:d8:2a:0d:33:b5:8b:e0:77:5d:ee:2b: 4f:69:34:72:b7:ab:af:3c:1d:4c:ad:d4:e3:9c:74: 50:7b:b9:f8:97:67:82:f4:77:3d:0d:5d:fd:db:9c: dd:b5:94:a2:77:26:1b:92:7a:62:3c:e6:95:7d:40: 88:eb:04:01:8e:8c:0e:29:67:5d:6e:08:ca:69:c3: c0:7d:81:8d:cb:93:81:97:26:73:17:c3:c5:d5:fd: d2:a9:12:5a:70:b8:0e:28:86:38:17:4a:c8:a5:94: 9d:d3:ce:15:fc:24:d4:ef:8c:98:b5:1e:c9:b7:01: 9a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7E:30:61:90:05:D0:14:E0:FF:7E:4D:78:3D:BA:48:6F:93:DB:24 X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/z34wYZAF0BTg_35NeD26SG-T2yQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.86.32.0/19 Signature Algorithm: sha256WithRSAEncryption bb:a6:ba:bc:bf:aa:7c:3c:0a:a4:6d:38:65:ec:df:c2:63:e0: 4f:a3:b7:a5:62:29:8d:9a:00:3c:8b:52:f3:7d:41:35:f6:d5: a3:84:09:85:92:f5:65:73:f9:89:b3:8a:ee:71:46:03:f5:b7: d3:0a:2a:01:e5:18:2d:26:3d:77:c5:12:11:8f:d5:1d:ae:22: 04:e7:b2:06:d9:79:6a:ef:a3:65:a1:9e:87:11:8e:82:87:82: e8:c3:c9:fc:f1:b6:9a:a8:a6:f4:f7:f5:2b:3f:d8:c3:50:f5: c4:c1:ca:63:ef:86:65:9b:b5:f6:29:ae:d1:d6:d4:ff:cf:00: 9d:be:f9:b6:1d:d9:d0:e7:d7:06:32:e1:ab:dd:5e:0d:aa:a4: 23:42:08:33:bb:c4:4a:98:33:9b:08:36:a5:ce:55:0a:b8:4d: a9:20:ab:d4:05:60:40:7b:4b:6f:4b:41:5a:a0:40:ef:ea:e9: 26:91:85:23:e0:04:62:2d:25:0b:a0:4f:f7:45:be:a4:e4:de: fe:b9:d3:88:fe:7e:9f:b4:d2:f5:77:55:8d:60:03:cf:5e:d6: 85:43:07:cf:23:ab:e4:1e:e0:11:37:93:ee:b1:74:03:cd:6f: 3b:8b:83:b4:e2:37:3b:30:e0:00:24:85:12:e0:7a:23:27:fc: 68:3d:14:11 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIV8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTEyMDUw MjM4MzNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKENGN0UzMDYxOTAwNUQw MTRFMEZGN0U0RDc4M0RCQTQ4NkY5M0RCMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ/kqRUAfo2UatvFNudH7LuGlZbUnwsFmJaCD1eUqC6ICafLsH HX73YwN8M2zOarM1BkbETyYaL+WVEH99niOQ3paiu5/mnLuFq+tH0ChSPJpehd+3 VyFQRCi/dAYnZABNcB1DBQL7yQbLKwAews5I6sDYpaJqXibCqVn+9ydGAQWtv3yb HKFV+RrYKg0ztYvgd13uK09pNHK3q688HUyt1OOcdFB7ufiXZ4L0dz0NXf3bnN21 lKJ3JhuSemI85pV9QIjrBAGOjA4pZ11uCMppw8B9gY3Lk4GXJnMXw8XV/dKpElpw uA4ohjgXSsillJ3TzhX8JNTvjJi1Hsm3AZoJAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUz34wYZAF0BTg/35NeD26SG+T2yQwHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxL3ozNHdZWkFGMEJUZ18z NU5lRDI2U0ctVDJ5US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAXLViAwDQYJKoZIhvcNAQELBQADggEBALumury/qnw8CqRtOGXs38Jj4E+jt6Vi KY2aADyLUvN9QTX21aOECYWS9WVz+Ymziu5xRgP1t9MKKgHlGC0mPXfFEhGP1R2u IgTnsgbZeWrvo2WhnocRjoKHgujDyfzxtpqopvT39Ss/2MNQ9cTBymPvhmWbtfYp rtHW1P/PAJ2++bYd2dDn1wYy4avdXg2qpCNCCDO7xEqYM5sINqXOVQq4Takgq9QF YEB7S29LQVqgQO/q6SaRhSPgBGItJQugT/dFvqTk3v6504j+fp+00vV3VY1gA89e 1oVDB88jq+Qe4BE3k+6xdAPNbzuLg7TiNzsw4AAkhRLgeiMn/Gg9FBE= -----END CERTIFICATE-----Generated at Sun Dec 7 08:30:20 2025 by rpki-client