This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/R12D_r0eBTrm6460SZjDT_8b94Y.roa File: R12D_r0eBTrm6460SZjDT_8b94Y.roa (raw, json) Hash identifier: G35Xl+R67FEE9Vi1i2N8kiaUmoUrPRlqeS3B36qmhkg= Subject key identifier: 47:5D:83:FE:BD:1E:05:3A:E6:EB:8E:B4:49:98:C3:4F:FF:1B:F7:86 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 050C Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/R12D_r0eBTrm6460SZjDT_8b94Y.roa Signing time: Tue 02 Dec 2025 12:14:37 +0000 ROA not before: Tue 02 Dec 2025 12:14:37 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 395886 IP address blocks: 45.248.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 16:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1292 (0x50c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Dec 2 12:14:37 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=475D83FEBD1E053AE6EB8EB44998C34FFF1BF786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:47:3a:46:9f:c6:2d:d1:8f:02:1f:54:9d: e7:98:c9:34:f6:7e:e0:f2:52:bb:9c:22:b9:2e:b0: 61:69:9f:f2:66:1a:a7:3d:13:8b:b0:49:87:aa:9a: ee:2e:8e:38:46:4c:b6:61:60:fc:a7:20:f0:f2:17: 6b:57:5b:c8:fc:d7:e0:a7:ae:ae:97:4e:81:7c:91: 44:89:eb:96:ee:95:fc:e1:ef:77:01:bd:f2:25:3a: de:60:71:93:1c:04:f8:18:3a:fb:4b:63:c0:75:06: 8f:7f:bc:e5:89:c4:28:52:ca:0e:84:25:b1:3d:72: 19:ac:0b:70:4a:f9:4c:06:30:fa:04:fa:a3:e7:39: 47:d9:61:67:22:35:3e:af:66:c5:c8:6b:53:f1:ad: 5b:41:4a:d8:b0:5d:40:3c:e1:c2:84:76:bb:b9:fa: e2:5f:e9:4c:99:ad:5f:6e:6e:c0:52:f8:c8:24:1a: 01:6c:9b:e0:59:ab:ee:ed:39:99:04:26:bf:b9:65: 44:f3:0f:5d:09:6d:91:b9:91:75:36:8e:2e:6d:6f: 91:72:7d:05:a7:51:a1:51:fb:23:ff:bc:f7:27:65: 2a:3f:1d:19:15:a6:45:31:0a:dd:7e:60:ef:43:eb: 9f:bf:ca:c0:42:d3:94:d9:14:43:a9:7d:64:b5:17: 5e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5D:83:FE:BD:1E:05:3A:E6:EB:8E:B4:49:98:C3:4F:FF:1B:F7:86 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/R12D_r0eBTrm6460SZjDT_8b94Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.248.88.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:41:16:45:5b:97:7b:26:6b:84:dc:31:4a:bc:25:b1:1e:6c: af:20:f7:92:9d:b1:4a:1c:48:d7:04:3d:6c:0b:99:ed:b9:a0: 22:71:68:3f:52:d5:1d:fe:3e:2d:96:b2:82:fa:65:d6:35:c9: 84:47:eb:ac:85:da:41:04:4c:26:37:de:42:20:c9:d7:62:10: e0:a9:cf:0a:b0:93:a7:0e:c7:09:c7:34:c6:b5:a5:c1:ab:ae: 4e:e4:ce:ab:31:50:44:4d:ba:ac:55:66:19:8c:6a:1e:30:5b: 1c:a5:7f:5c:90:f5:36:39:4c:52:54:ee:d2:84:8b:47:fb:11: 9c:19:bd:c0:32:a7:67:8b:bb:75:9c:d7:63:e6:99:02:b1:0b: 68:03:45:f4:c8:0b:0e:33:1a:e5:79:d1:de:ad:b7:db:d9:af: 8e:1c:3d:71:06:31:de:e8:f7:b0:44:10:d3:97:25:f8:49:37: 5b:09:49:d6:f5:de:8b:d7:3a:f6:1b:5a:5b:50:6a:b6:d4:46: ed:ef:b4:3a:67:f4:7f:71:51:14:8b:ec:79:2a:31:be:e4:d8: cd:82:05:c5:cb:d5:0c:77:d6:3a:92:63:01:e7:be:79:9e:61: 72:b5:c4:5c:d6:24:65:63:38:41:c1:97:04:f5:19:c1:b5:8b: 61:d2:c3:e6 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzlF RTg1MkZFMTM4Q0RFREM1QjQyRDExQTM0Mjk1RDEwOUFENDkyNTAeFw0yNTEyMDIx MjE0MzdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQ3NUQ4M0ZFQkQxRTA1 M0FFNkVCOEVCNDQ5OThDMzRGRkYxQkY3ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTekc6Rp/GLdGPAh9UneeYyTT2fuDyUrucIrkusGFpn/JmGqc9 E4uwSYeqmu4ujjhGTLZhYPynIPDyF2tXW8j81+Cnrq6XToF8kUSJ65bulfzh73cB vfIlOt5gcZMcBPgYOvtLY8B1Bo9/vOWJxChSyg6EJbE9chmsC3BK+UwGMPoE+qPn OUfZYWciNT6vZsXIa1PxrVtBStiwXUA84cKEdru5+uJf6UyZrV9ubsBS+MgkGgFs m+BZq+7tOZkEJr+5ZUTzD10JbZG5kXU2ji5tb5FyfQWnUaFR+yP/vPcnZSo/HRkV pkUxCt1+YO9D65+/ysBC05TZFEOpfWS1F16RAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUR12D/r0eBTrm6460SZjDT/8b94YwHwYDVR0jBBgwFoAUOe6FL+E4ze3FtC0R o0KV0QmtSSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcx Ni9PZTZGTC1FNHplM0Z0QzBSbzBLVjBRbXRTU1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MTYvUjEyRF9yMGVCVHJt NjQ2MFNaakRUXzhiOTRZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi34WDANBgkqhkiG9w0BAQsFAAOCAQEAjEEWRVuXeyZrhNwxSrwlsR5sryD3 kp2xShxI1wQ9bAuZ7bmgInFoP1LVHf4+LZaygvpl1jXJhEfrrIXaQQRMJjfeQiDJ 12IQ4KnPCrCTpw7HCcc0xrWlwauuTuTOqzFQRE26rFVmGYxqHjBbHKV/XJD1NjlM UlTu0oSLR/sRnBm9wDKnZ4u7dZzXY+aZArELaANF9MgLDjMa5XnR3q2329mvjhw9 cQYx3uj3sEQQ05cl+Ek3WwlJ1vXei9c69htaW1BqttRG7e+0Omf0f3FRFIvseSox vuTYzYIFxcvVDHfWOpJjAee+eZ5hcrXEXNYkZWM4QcGXBPUZwbWLYdLD5g== -----END CERTIFICATE-----Generated at Sat Dec 6 15:06:40 2025 by rpki-client