This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/FeBx-_7s1ofW6i71DqR2XKE2LdQ.roa File: FeBx-_7s1ofW6i71DqR2XKE2LdQ.roa (raw, json) Hash identifier: f7hwp4D0vfgB4KRFRO7L6Uym7zvv4WnBUENVexmh8iY= Subject key identifier: 15:E0:71:FB:FE:EC:D6:87:D6:EA:2E:F5:0E:A4:76:5C:A1:36:2D:D4 Certificate issuer: /CN=43AA7F201331D710A3F06822BE4D472A5207EB09 Certificate serial: 42 Authority key identifier: 43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/FeBx-_7s1ofW6i71DqR2XKE2LdQ.roa Signing time: Thu 04 Dec 2025 05:15:51 +0000 ROA not before: Thu 04 Dec 2025 05:15:51 +0000 ROA not after: Thu 19 Nov 2026 10:13:34 +0000 asID: 0 IP address blocks: 144.79.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 16:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43AA7F201331D710A3F06822BE4D472A5207EB09 Validity Not Before: Dec 4 05:15:51 2025 GMT Not After : Nov 19 10:13:34 2026 GMT Subject: CN=15E071FBFEECD687D6EA2EF50EA4765CA1362DD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:ac:fc:a3:a7:ea:66:f6:0b:e6:de:14:2c: 80:c1:28:63:c0:27:3d:dd:f1:a8:44:31:49:ce:ca: 88:9d:13:7e:ee:35:89:b5:e3:18:2d:eb:c1:3e:93: 0a:0d:26:3d:61:d0:02:84:76:b6:7c:67:f9:b6:20: c6:1e:06:80:98:cb:78:71:07:4f:60:e1:96:fc:5a: 70:9a:e0:60:36:4c:71:ae:61:a4:3c:0a:0c:41:f4: 53:bc:dc:c6:d5:b5:25:b7:df:ac:60:75:82:55:71: b7:06:f5:68:04:cc:2c:2f:f3:9a:3a:7c:bf:95:e6: d6:44:76:e3:16:97:58:d6:39:08:79:63:4c:92:7d: cd:7e:e2:60:05:6c:5f:26:43:d2:02:9b:3d:f5:9e: 47:8b:ba:c1:a0:69:dd:00:57:a1:2f:06:7a:26:d9: 97:8a:68:cc:73:75:3b:5b:1b:cb:27:18:18:aa:64: 66:3a:41:be:2c:c2:71:0f:21:5d:04:19:d2:23:fa: 03:fc:d8:9b:9c:94:0f:ba:cd:d2:a5:df:cf:d5:ba: ba:70:b3:17:ba:42:b3:07:5e:99:7d:8d:10:13:42: a4:fc:93:8e:35:f5:5e:3c:56:27:e6:ab:98:28:30: 9d:70:50:9e:13:74:d0:e1:91:c7:bb:23:68:0d:6e: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E0:71:FB:FE:EC:D6:87:D6:EA:2E:F5:0E:A4:76:5C:A1:36:2D:D4 X509v3 Authority Key Identifier: keyid:43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/FeBx-_7s1ofW6i71DqR2XKE2LdQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 144.79.10.0/23 Signature Algorithm: sha256WithRSAEncryption 69:0f:b1:19:66:5a:37:ae:ab:ba:dd:2c:af:84:f5:aa:38:ab: 45:4b:a5:2d:71:6b:e7:7e:f9:f5:c6:e0:be:4d:6c:ae:e6:c9: 2e:1e:ae:af:2a:36:39:53:26:0c:7e:0f:af:d4:57:90:7f:1b: 29:e4:8c:df:34:ad:6e:ad:e6:83:3b:6e:56:c8:60:0b:89:82: 9c:1a:67:53:7c:71:e7:3a:5a:4a:47:c8:2b:db:c1:9b:b2:8b: bc:80:34:1c:f4:83:f9:80:dd:42:57:a4:7b:40:46:d2:b0:59: 0c:7b:cb:e0:66:7a:11:0f:5c:5a:85:69:3a:99:68:b8:c4:0d: 02:13:9e:b9:ba:1e:39:1a:11:4a:85:69:e4:99:fe:92:36:38: ea:28:d4:2e:08:17:00:29:72:13:7f:7a:9b:95:9a:58:f6:b9: cb:d1:e0:39:06:63:1c:76:16:b9:2f:56:3e:91:f0:2f:1d:11: 16:17:86:62:b6:4b:a8:78:d9:a8:2e:f1:f8:f7:48:37:dc:82: 45:d5:17:fa:3f:22:3b:c5:89:b4:c7:83:bb:3d:61:34:4e:04: 46:f1:65:de:ad:7b:bc:0a:19:e5:a6:bd:a3:de:d0:59:de:10: df:b1:9e:19:0e:9c:fa:c2:cb:a4:12:5e:f0:bb:bf:ee:b3:37: 37:bf:3a:4f -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0M0FB N0YyMDEzMzFENzEwQTNGMDY4MjJCRTRENDcyQTUyMDdFQjA5MB4XDTI1MTIwNDA1 MTU1MVoXDTI2MTExOTEwMTMzNFowMzExMC8GA1UEAxMoMTVFMDcxRkJGRUVDRDY4 N0Q2RUEyRUY1MEVBNDc2NUNBMTM2MkRENDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKHCrPyjp+pm9gvm3hQsgMEoY8AnPd3xqEQxSc7KiJ0Tfu41ibXj GC3rwT6TCg0mPWHQAoR2tnxn+bYgxh4GgJjLeHEHT2DhlvxacJrgYDZMca5hpDwK DEH0U7zcxtW1JbffrGB1glVxtwb1aATMLC/zmjp8v5Xm1kR24xaXWNY5CHljTJJ9 zX7iYAVsXyZD0gKbPfWeR4u6waBp3QBXoS8GeibZl4pozHN1O1sbyycYGKpkZjpB vizCcQ8hXQQZ0iP6A/zYm5yUD7rN0qXfz9W6unCzF7pCswdemX2NEBNCpPyTjjX1 XjxWJ+armCgwnXBQnhN00OGRx7sjaA1uDhsCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQV4HH7/uzWh9bqLvUOpHZcoTYt1DAfBgNVHSMEGDAWgBRDqn8gEzHXEKPwaCK+ TUcqUgfrCTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDEx L1E2cF9JQk14MXhDajhHZ2l2azFIS2xJSDZ3ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUTZwX0lCTXgxeENqOEdnaXZrMUhLbElINndrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxMS9GZUJ4LV83czFvZlc2 aTcxRHFSMlhLRTJMZFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBkE8KMA0GCSqGSIb3DQEBCwUAA4IBAQBpD7EZZlo3rqu63SyvhPWqOKtFS6Ut cWvnfvn1xuC+TWyu5skuHq6vKjY5UyYMfg+v1FeQfxsp5IzfNK1ureaDO25WyGAL iYKcGmdTfHHnOlpKR8gr28Gbsou8gDQc9IP5gN1CV6R7QEbSsFkMe8vgZnoRD1xa hWk6mWi4xA0CE565uh45GhFKhWnkmf6SNjjqKNQuCBcAKXITf3qblZpY9rnL0eA5 BmMcdha5L1Y+kfAvHREWF4ZitkuoeNmoLvH490g33IJF1Rf6PyI7xYm0x4O7PWE0 TgRG8WXerXu8Chnlpr2j3tBZ3hDfsZ4ZDpz6wsukEl7wu7/uszc3vzpP -----END CERTIFICATE-----Generated at Sat Dec 6 13:57:37 2025 by rpki-client