This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3379/U920pSevAo0A9h7_80K1YALjgUs.roa File: U920pSevAo0A9h7_80K1YALjgUs.roa (raw, json) Hash identifier: FiOVz3qGUZZUlaVu0vbZuhl2BuArsO723IJDUP3t1mA= Subject key identifier: 53:DD:B4:A5:27:AF:02:8D:00:F6:1E:FF:F3:42:B5:60:02:E3:81:4B Certificate issuer: /CN=2CB237ABE1A66A755DA9545795F1DD229F0E0311 Certificate serial: 026F Authority key identifier: 2C:B2:37:AB:E1:A6:6A:75:5D:A9:54:57:95:F1:DD:22:9F:0E:03:11 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/U920pSevAo0A9h7_80K1YALjgUs.roa Signing time: Mon 27 Oct 2025 02:01:06 +0000 ROA not before: Mon 27 Oct 2025 02:01:06 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 137264 IP address blocks: 165.101.71.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 02:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 623 (0x26f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB237ABE1A66A755DA9545795F1DD229F0E0311 Validity Not Before: Oct 27 02:01:06 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=53DDB4A527AF028D00F61EFFF342B56002E3814B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:43:09:4d:f6:ce:e5:6c:c2:be:16:38:90:4a: 83:7e:d5:e6:e0:0d:45:c5:de:e6:b8:f4:a9:f4:cc: 39:ef:2e:85:bb:f9:cb:38:f1:5a:a0:11:fc:38:7b: 7e:e6:3a:1b:b2:71:8e:56:e0:47:0c:27:2f:70:d8: 9c:45:0a:50:7e:5b:b3:cf:79:e7:82:79:1f:dc:f0: a0:e0:55:8e:f6:ba:88:39:7b:d9:f9:32:5c:0f:9c: 88:ae:18:a5:a2:8c:1e:3c:67:90:41:8d:ee:1b:8e: 60:3b:cd:33:6e:3b:b0:d1:d6:62:70:8d:6b:24:c4: a4:fa:88:d8:45:0a:61:4e:6d:2f:88:35:ab:cd:e7: c0:ea:19:af:85:1d:53:5c:0a:60:d9:ba:d4:87:a9: dd:f2:f1:11:82:5f:d4:dd:ce:aa:b4:34:20:a8:eb: a8:b9:4c:72:8b:6b:d0:a7:41:d5:ad:fc:33:81:66: 4a:b2:40:70:9c:75:67:1f:67:4f:87:9e:c0:61:14: d7:9b:ad:f7:cc:3b:f5:e3:f5:92:0e:7a:be:fb:c1: 7b:1d:de:8c:c7:9b:a9:8d:84:0f:fd:65:ce:16:23: a2:4b:5a:a0:2d:14:25:d9:f0:01:af:7f:d4:33:fd: 6d:d7:01:3f:28:90:d3:5c:a9:7c:a0:1a:85:2f:26: ac:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DD:B4:A5:27:AF:02:8D:00:F6:1E:FF:F3:42:B5:60:02:E3:81:4B X509v3 Authority Key Identifier: keyid:2C:B2:37:AB:E1:A6:6A:75:5D:A9:54:57:95:F1:DD:22:9F:0E:03:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/U920pSevAo0A9h7_80K1YALjgUs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 165.101.71.0/24 Signature Algorithm: sha256WithRSAEncryption 90:02:42:b5:3b:e2:a6:9e:23:1b:93:9d:00:c2:27:c0:a6:5f: cd:38:6d:74:41:be:c5:37:f6:fa:f7:ab:22:ec:f6:5a:b1:e7: 25:f9:4a:b4:c4:7a:ff:75:3d:c1:13:43:01:81:38:86:6b:5c: 0c:99:93:08:ac:b4:64:fb:09:20:89:a2:50:4d:69:b3:d1:d6: 29:51:45:a3:ab:a9:46:75:3b:d6:bc:d1:0a:96:a6:0c:f9:d2: e4:e5:1c:2a:8d:4c:d9:45:b8:a6:a9:b0:f6:b8:f2:cf:e0:95: 92:15:89:27:3d:c1:d0:e5:94:cf:ea:1d:d1:0c:6b:0a:f9:a7: d0:48:f8:73:70:35:fe:00:6e:30:cc:e8:9e:4a:09:5a:a5:9a: 7b:9d:ce:21:d8:83:a1:7b:1b:85:06:a1:2e:54:74:c2:fe:1b: c7:76:a9:b8:34:87:9e:05:3b:93:56:92:cf:5f:7d:ed:42:ec: 64:2d:51:f4:90:8b:ad:e9:17:9d:97:f4:df:9c:f2:58:8a:bf: e1:f2:f2:98:ec:5a:3a:cc:6e:c0:0e:f6:ae:67:be:a7:28:de: 06:b1:6c:28:b1:ad:42:0f:ee:2f:d2:9a:a5:87:f6:f9:93:a4: b6:de:3b:7e:c8:6e:99:17:29:f1:52:56:01:ec:7e:d0:3f:0e: 72:1b:c8:be -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkNC MjM3QUJFMUE2NkE3NTVEQTk1NDU3OTVGMUREMjI5RjBFMDMxMTAeFw0yNTEwMjcw MjAxMDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDUzRERCNEE1MjdBRjAy OEQwMEY2MUVGRkYzNDJCNTYwMDJFMzgxNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLQwlN9s7lbMK+FjiQSoN+1ebgDUXF3ua49Kn0zDnvLoW7+cs4 8VqgEfw4e37mOhuycY5W4EcMJy9w2JxFClB+W7PPeeeCeR/c8KDgVY72uog5e9n5 MlwPnIiuGKWijB48Z5BBje4bjmA7zTNuO7DR1mJwjWskxKT6iNhFCmFObS+INavN 58DqGa+FHVNcCmDZutSHqd3y8RGCX9Tdzqq0NCCo66i5THKLa9CnQdWt/DOBZkqy QHCcdWcfZ0+HnsBhFNebrffMO/Xj9ZIOer77wXsd3ozHm6mNhA/9Zc4WI6JLWqAt FCXZ8AGvf9Qz/W3XAT8okNNcqXygGoUvJqxlAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUU920pSevAo0A9h7/80K1YALjgUswHwYDVR0jBBgwFoAULLI3q+GmanVdqVRX lfHdIp8OAxEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 OS9MTEkzcS1HbWFuVmRxVlJYbGZIZElwOE9BeEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xMSTNxLUdtYW5WZHFWUlhsZkhkSXA4T0F4RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzkvVTkyMHBTZXZBbzBB OWg3XzgwSzFZQUxqZ1VzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAKVlRzANBgkqhkiG9w0BAQsFAAOCAQEAkAJCtTvipp4jG5OdAMInwKZfzTht dEG+xTf2+verIuz2WrHnJflKtMR6/3U9wRNDAYE4hmtcDJmTCKy0ZPsJIImiUE1p s9HWKVFFo6upRnU71rzRCpamDPnS5OUcKo1M2UW4pqmw9rjyz+CVkhWJJz3B0OWU z+od0QxrCvmn0Ej4c3A1/gBuMMzonkoJWqWae53OIdiDoXsbhQahLlR0wv4bx3ap uDSHngU7k1aSz1997ULsZC1R9JCLrekXnZf035zyWIq/4fLymOxaOsxuwA72rme+ pyjeBrFsKLGtQg/uL9KapYf2+ZOktt47fshumRcp8VJWAex+0D8OchvIvg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:47:11 2025 by rpki-client