This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/tW_VsSzZuKiHEJLpUnxke1pPl9E.roa File: tW_VsSzZuKiHEJLpUnxke1pPl9E.roa (raw, json) Hash identifier: j/7az7CFWtAw79fZxeqq1gH2eSXCHjuh6yUGsvPMD0s= Subject key identifier: B5:6F:D5:B1:2C:D9:B8:A8:87:10:92:E9:52:7C:64:7B:5A:4F:97:D1 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 04FC Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/tW_VsSzZuKiHEJLpUnxke1pPl9E.roa Signing time: Sat 29 Nov 2025 14:28:38 +0000 ROA not before: Sat 29 Nov 2025 14:28:38 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 216047 IP address blocks: 45.248.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 18:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1276 (0x4fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Nov 29 14:28:38 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B56FD5B12CD9B8A8871092E9527C647B5A4F97D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0d:ba:ce:ae:27:fa:ff:6d:a2:7d:26:b6:3f: 19:7c:51:a3:ae:b8:8d:43:ea:29:a5:2c:12:ca:0d: e0:90:79:2d:f5:00:b0:fa:2c:bb:d3:a8:93:fd:d7: d7:c3:7c:b0:2c:25:13:bb:09:20:a8:49:6b:09:22: 5f:7c:a3:58:89:5d:72:1a:8a:d4:23:14:4a:8d:0c: 52:99:57:96:52:0d:be:07:0c:3f:ba:de:59:43:fc: 05:fa:66:2d:e9:54:66:59:98:1e:13:6b:c3:63:76: d6:c7:fa:ce:17:04:bd:09:a0:f7:e8:f3:93:e2:60: 95:ba:35:ea:12:ca:31:7a:d0:8a:3d:e2:b9:77:6c: 23:78:46:2b:17:25:a9:bf:0e:4b:0e:33:0d:3f:db: 8c:5f:04:ee:53:d6:27:e3:7a:b1:a9:27:1e:c6:2d: ac:f5:e6:c6:fc:35:f8:ae:92:5c:f9:b6:a5:a1:df: 8c:89:7d:3c:cb:a5:6a:d8:99:ba:3e:a1:93:d7:37: b2:03:f3:af:ee:39:98:76:d7:de:f9:9f:a6:65:9f: bd:be:41:80:d5:c7:98:97:d9:9a:2f:1e:69:70:17: dd:55:52:73:af:8b:1d:81:b1:39:33:33:71:85:3f: 8f:ac:8a:5f:47:87:9e:e3:57:33:7b:b5:6c:35:8c: b2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6F:D5:B1:2C:D9:B8:A8:87:10:92:E9:52:7C:64:7B:5A:4F:97:D1 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/tW_VsSzZuKiHEJLpUnxke1pPl9E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.248.88.0/22 Signature Algorithm: sha256WithRSAEncryption 43:c5:2c:7b:0b:65:ce:b3:8d:d6:c1:cb:37:4f:2c:2a:1d:0a: e9:8c:61:6c:78:00:f0:f1:e0:9c:6e:a4:76:a7:1a:c6:f0:8b: d2:55:c9:3c:3c:1e:f6:e3:bb:ef:c8:98:9a:80:e1:90:c3:fc: 77:ff:6a:5b:db:63:06:99:6d:21:b0:7c:40:6c:62:3b:ce:04: 51:aa:91:19:53:81:28:b6:f7:7b:ec:03:7d:ce:44:98:d6:99: 50:b6:47:de:bf:74:2b:e8:70:7c:6a:a5:69:f8:00:96:ce:1a: 5d:89:81:79:18:68:eb:00:15:f7:3a:5d:97:a1:bb:e9:f9:88: 8d:ed:ef:e7:fb:dc:17:51:fc:d2:fd:c8:eb:ee:8d:b7:5c:76: 19:90:7b:1a:31:a1:a9:66:38:a7:c0:8c:af:1b:c2:11:d4:64: 6c:fd:5d:0a:33:ea:61:ee:c8:ef:93:e9:bb:68:b6:a0:a9:bf: c9:02:4b:b7:d1:94:c6:a0:a0:9e:fe:0e:cf:f1:d1:06:07:a1: c9:83:6f:23:c8:61:5e:2b:fb:55:30:46:38:b1:54:85:08:06: 50:3a:99:79:42:16:c3:8b:df:b2:bf:ef:a5:3f:bf:41:66:e0: ef:4a:50:e4:82:46:f0:1a:42:98:ed:5a:fe:fb:5e:54:92:a2: 0c:30:0d:6e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzlF RTg1MkZFMTM4Q0RFREM1QjQyRDExQTM0Mjk1RDEwOUFENDkyNTAeFw0yNTExMjkx NDI4MzhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEI1NkZENUIxMkNEOUI4 QTg4NzEwOTJFOTUyN0M2NDdCNUE0Rjk3RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEDbrOrif6/22ifSa2Pxl8UaOuuI1D6imlLBLKDeCQeS31ALD6 LLvTqJP919fDfLAsJRO7CSCoSWsJIl98o1iJXXIaitQjFEqNDFKZV5ZSDb4HDD+6 3llD/AX6Zi3pVGZZmB4Ta8NjdtbH+s4XBL0JoPfo85PiYJW6NeoSyjF60Io94rl3 bCN4RisXJam/DksOMw0/24xfBO5T1ifjerGpJx7GLaz15sb8Nfiuklz5tqWh34yJ fTzLpWrYmbo+oZPXN7ID86/uOZh21975n6Zln72+QYDVx5iX2ZovHmlwF91VUnOv ix2BsTkzM3GFP4+sil9Hh57jVzN7tWw1jLIhAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUtW/VsSzZuKiHEJLpUnxke1pPl9EwHwYDVR0jBBgwFoAUOe6FL+E4ze3FtC0R o0KV0QmtSSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcx Ni9PZTZGTC1FNHplM0Z0QzBSbzBLVjBRbXRTU1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MTYvdFdfVnNTelp1S2lI RUpMcFVueGtlMXBQbDlFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi34WDANBgkqhkiG9w0BAQsFAAOCAQEAQ8UsewtlzrON1sHLN08sKh0K6Yxh bHgA8PHgnG6kdqcaxvCL0lXJPDwe9uO778iYmoDhkMP8d/9qW9tjBpltIbB8QGxi O84EUaqRGVOBKLb3e+wDfc5EmNaZULZH3r90K+hwfGqlafgAls4aXYmBeRho6wAV 9zpdl6G76fmIje3v5/vcF1H80v3I6+6Nt1x2GZB7GjGhqWY4p8CMrxvCEdRkbP1d CjPqYe7I75Ppu2i2oKm/yQJLt9GUxqCgnv4Oz/HRBgehyYNvI8hhXiv7VTBGOLFU hQgGUDqZeUIWw4vfsr/vpT+/QWbg70pQ5IJG8BpCmO1a/vteVJKiDDANbg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:41:21 2025 by rpki-client