This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/386wnswkhWpmZJnCbW_F5WbBGAM.roa File: 386wnswkhWpmZJnCbW_F5WbBGAM.roa (raw, json) Hash identifier: HcSH1OrhUOZlH9wisYiEouS/QW3iJaTLOm4R9qt2y7M= Subject key identifier: DF:CE:B0:9E:CC:24:85:6A:66:64:99:C2:6D:6F:C5:E5:66:C1:18:03 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 050E Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/386wnswkhWpmZJnCbW_F5WbBGAM.roa Signing time: Tue 02 Dec 2025 12:14:38 +0000 ROA not before: Tue 02 Dec 2025 12:14:38 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 8796 IP address blocks: 45.248.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 16:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1294 (0x50e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Dec 2 12:14:38 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DFCEB09ECC24856A666499C26D6FC5E566C11803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8e:10:9f:26:71:36:71:09:64:93:f2:a9:3b: a9:9c:1f:b2:51:0b:0e:33:d5:7d:4c:74:5d:0d:65: 36:13:00:6d:27:64:6c:5f:2d:c8:3d:0a:5e:3b:58: c9:6b:bc:51:9f:2f:a2:35:16:6b:cc:81:49:7c:30: 83:95:ab:83:b4:11:e3:c0:a5:f3:31:bd:02:47:1b: 59:8d:29:dd:59:49:58:2e:da:e9:c8:26:89:b5:e4: 8b:f3:12:09:a3:7f:c5:97:43:6b:c5:4d:6a:9c:f2: 5a:dc:40:d5:79:b6:20:df:02:ba:69:09:b0:2d:38: e7:21:a8:08:bf:87:21:79:52:fd:62:59:21:25:b7: 66:07:cf:2d:54:32:90:59:dc:f9:53:cb:c4:58:35: 4f:26:d6:ce:98:7b:95:18:5c:a7:6e:6d:2b:f5:24: bb:08:f0:53:8c:46:f7:71:44:be:e0:12:46:10:6f: f4:35:6e:e3:58:bd:dd:31:11:e1:e0:1a:2b:00:71: 5c:d9:0c:6a:a7:65:40:02:24:37:1f:8a:09:98:21: 24:ee:f2:dc:e2:85:87:fb:ed:c1:97:02:a7:ac:e1: 91:25:5f:63:42:0d:4e:da:cd:1f:44:6d:68:2c:43: c0:2c:8a:51:bc:3d:47:a7:f6:22:5f:8b:23:6b:77: 8a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CE:B0:9E:CC:24:85:6A:66:64:99:C2:6D:6F:C5:E5:66:C1:18:03 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/386wnswkhWpmZJnCbW_F5WbBGAM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.248.88.0/22 Signature Algorithm: sha256WithRSAEncryption 44:e3:e0:ea:40:75:ec:47:72:9a:1f:16:ac:32:8c:a3:c1:35: fd:9f:83:64:aa:06:11:20:cb:18:ad:0f:a8:90:d9:00:91:ec: de:4c:c7:96:28:6c:17:da:8f:e8:bd:e2:e0:81:b3:b9:be:23: e5:72:7a:26:4b:c2:45:82:74:2e:ea:d4:8b:48:0b:dc:41:a8: 59:ce:4c:d7:48:1a:1b:26:bb:7b:71:4d:26:86:7a:65:db:ca: cb:29:47:4a:14:36:36:7c:4e:9e:ea:42:a5:5b:b7:3e:0f:19: 1d:79:2c:08:24:f5:43:10:f1:65:18:aa:fe:f2:75:aa:8b:66: ce:0b:5d:1d:f2:53:ad:e2:5e:83:a8:f1:c9:0a:2e:06:1b:ca: ef:d6:26:28:6d:5d:58:ca:d4:dd:2a:aa:de:bf:d5:9d:1e:29: 54:28:01:6d:27:c7:58:b3:eb:d5:a4:25:23:bd:30:e1:68:b9: 9c:14:ec:14:db:e2:3b:f2:3a:f6:ee:ee:33:bf:c6:b8:b9:91: b0:62:c1:84:78:c0:c1:9f:a8:7e:50:3f:80:f7:7d:a8:8b:b6: 7b:32:3a:bf:59:96:5a:83:0d:fe:ef:08:e0:70:9f:87:24:c3: b3:7a:f3:95:bd:a6:c5:4a:6c:57:aa:1a:bc:c7:f6:c7:ed:cf: db:1b:7c:5e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzlF RTg1MkZFMTM4Q0RFREM1QjQyRDExQTM0Mjk1RDEwOUFENDkyNTAeFw0yNTEyMDIx MjE0MzhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERGQ0VCMDlFQ0MyNDg1 NkE2NjY0OTlDMjZENkZDNUU1NjZDMTE4MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgjhCfJnE2cQlkk/KpO6mcH7JRCw4z1X1MdF0NZTYTAG0nZGxf Lcg9Cl47WMlrvFGfL6I1FmvMgUl8MIOVq4O0EePApfMxvQJHG1mNKd1ZSVgu2unI Jom15IvzEgmjf8WXQ2vFTWqc8lrcQNV5tiDfArppCbAtOOchqAi/hyF5Uv1iWSEl t2YHzy1UMpBZ3PlTy8RYNU8m1s6Ye5UYXKdubSv1JLsI8FOMRvdxRL7gEkYQb/Q1 buNYvd0xEeHgGisAcVzZDGqnZUACJDcfigmYISTu8tzihYf77cGXAqes4ZElX2NC DU7azR9EbWgsQ8AsilG8PUen9iJfiyNrd4pjAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU386wnswkhWpmZJnCbW/F5WbBGAMwHwYDVR0jBBgwFoAUOe6FL+E4ze3FtC0R o0KV0QmtSSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcx Ni9PZTZGTC1FNHplM0Z0QzBSbzBLVjBRbXRTU1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MTYvMzg2d25zd2toV3Bt WkpuQ2JXX0Y1V2JCR0FNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi34WDANBgkqhkiG9w0BAQsFAAOCAQEAROPg6kB17Edymh8WrDKMo8E1/Z+D ZKoGESDLGK0PqJDZAJHs3kzHlihsF9qP6L3i4IGzub4j5XJ6JkvCRYJ0LurUi0gL 3EGoWc5M10gaGya7e3FNJoZ6ZdvKyylHShQ2NnxOnupCpVu3Pg8ZHXksCCT1QxDx ZRiq/vJ1qotmzgtdHfJTreJeg6jxyQouBhvK79YmKG1dWMrU3Sqq3r/VnR4pVCgB bSfHWLPr1aQlI70w4Wi5nBTsFNviO/I69u7uM7/GuLmRsGLBhHjAwZ+oflA/gPd9 qIu2ezI6v1mWWoMN/u8I4HCfhyTDs3rzlb2mxUpsV6oavMf2x+3P2xt8Xg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:50:11 2025 by rpki-client