This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/3I2mYclKxrMAKQwkc-Lh7fH_HWA.roa File: 3I2mYclKxrMAKQwkc-Lh7fH_HWA.roa (raw, json) Hash identifier: MUbHqMWDF2mVWWtfz+nAtPeV2UeApkC0xJ1Rt014+E4= Subject key identifier: DC:8D:A6:61:C9:4A:C6:B3:00:29:0C:24:73:E2:E1:ED:F1:FF:1D:60 Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 2285 Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/3I2mYclKxrMAKQwkc-Lh7fH_HWA.roa Signing time: Thu 25 Dec 2025 05:40:41 +0000 ROA not before: Thu 25 Dec 2025 05:40:41 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 4847 IP address blocks: 2403:9b00:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 21:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8837 (0x2285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Dec 25 05:40:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DC8DA661C94AC6B300290C2473E2E1EDF1FF1D60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6e:0f:f4:b7:ef:98:25:ee:7e:9b:25:8c:0c: cb:7f:46:c0:9b:0a:da:88:a8:d6:67:26:4d:78:2a: 44:f9:8a:ed:72:8e:73:64:21:62:e6:81:d8:5d:89: d4:60:cf:a1:23:4b:8c:24:b6:9d:4f:b7:0a:38:bd: 74:46:a4:88:f3:4a:cb:48:ea:9e:95:36:da:14:16: 16:89:90:dc:15:c8:04:ad:a3:03:e1:3e:aa:a3:93: e2:74:63:79:56:73:f5:02:a5:02:2c:6b:7c:e0:7c: 59:41:e9:fd:04:23:1d:d8:af:da:16:14:64:22:4c: 20:69:98:b1:4b:76:48:b5:b3:ba:dc:31:b3:f8:eb: 9e:c1:c7:d4:02:c5:39:02:eb:6e:1e:78:c6:e6:d7: 5b:24:cd:a1:a2:79:fa:60:2c:9f:d2:ee:05:93:18: 74:a2:77:d9:b7:15:96:f9:4e:75:9b:5b:17:bd:5b: bd:f5:6e:7b:3a:e2:57:be:ff:d6:c8:5d:5c:84:88: 4b:df:b7:5f:c8:dd:86:ae:7e:e3:74:48:5b:2a:d3: 00:c3:0f:36:47:60:a2:f4:60:10:6a:e6:3e:e9:ec: ef:39:7d:83:d9:85:c3:83:c3:71:69:5e:46:79:f4: da:f8:50:5d:13:07:c5:eb:f0:89:f0:e6:14:81:20: bf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8D:A6:61:C9:4A:C6:B3:00:29:0C:24:73:E2:E1:ED:F1:FF:1D:60 X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/3I2mYclKxrMAKQwkc-Lh7fH_HWA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:9b00:2000::/48 Signature Algorithm: sha256WithRSAEncryption 4b:6a:8c:eb:b9:1b:65:74:9a:e9:24:bb:72:50:b8:a8:9a:9f: 59:61:fd:a3:fb:fb:ae:f6:96:24:d5:fb:25:37:86:eb:ab:fe: cc:a3:f4:e8:75:7c:18:89:90:ae:30:a7:de:7d:bc:d7:a0:e8: f7:4b:d8:49:64:2e:f1:77:71:28:da:2e:a8:c3:5d:ab:d8:ac: 33:45:df:c5:e3:c9:e8:d5:d6:01:0f:4d:46:fb:7c:19:02:f9: 27:0d:eb:71:56:f4:a1:6e:b2:ca:d0:23:ed:2d:4f:ee:24:b9: 87:8e:77:fb:fd:43:46:7b:66:5e:79:ec:45:ce:b7:95:54:e2: a7:9d:cd:ac:99:72:1d:32:1a:86:15:5b:01:9b:e4:09:0f:ed: 82:cb:46:e0:0f:f9:e1:ca:36:cc:be:bb:68:4f:9a:b4:90:47: 77:df:d6:73:65:52:b3:fb:84:e5:c3:48:7e:37:9f:cf:15:f9: ea:89:df:e8:46:32:22:6a:05:95:78:43:17:34:4f:4b:97:2b: a1:c7:bc:22:ab:40:a4:1f:09:19:88:27:b2:f1:b6:f7:91:b8: 1f:a8:6f:a4:7a:33:1e:4f:79:e7:55:a7:67:0c:2c:35:82:df: 02:65:0c:6a:6d:9e:5b:94:6d:6a:ab:db:01:f4:4b:8a:0b:c0: be:cb:33:88 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICIoUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNTEyMjUw NTQwNDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERDOERBNjYxQzk0QUM2 QjMwMDI5MEMyNDczRTJFMUVERjFGRjFENjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTbg/0t++YJe5+myWMDMt/RsCbCtqIqNZnJk14KkT5iu1yjnNk IWLmgdhdidRgz6EjS4wktp1Ptwo4vXRGpIjzSstI6p6VNtoUFhaJkNwVyAStowPh Pqqjk+J0Y3lWc/UCpQIsa3zgfFlB6f0EIx3Yr9oWFGQiTCBpmLFLdki1s7rcMbP4 657Bx9QCxTkC624eeMbm11skzaGiefpgLJ/S7gWTGHSid9m3FZb5TnWbWxe9W731 bns64le+/9bIXVyEiEvft1/I3YaufuN0SFsq0wDDDzZHYKL0YBBq5j7p7O85fYPZ hcODw3FpXkZ59Nr4UF0TB8Xr8Inw5hSBIL+1AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU3I2mYclKxrMAKQwkc+Lh7fH/HWAwHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxLzNJMm1ZY2xLeHJNQUtR d2tjLUxoN2ZIX0hXQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAkA5sAIAAwDQYJKoZIhvcNAQELBQADggEBAEtqjOu5G2V0mukku3JQuKian1lh /aP7+672liTV+yU3huur/syj9Oh1fBiJkK4wp959vNeg6PdL2ElkLvF3cSjaLqjD XavYrDNF38XjyejV1gEPTUb7fBkC+ScN63FW9KFussrQI+0tT+4kuYeOd/v9Q0Z7 Zl557EXOt5VU4qedzayZch0yGoYVWwGb5AkP7YLLRuAP+eHKNsy+u2hPmrSQR3ff 1nNlUrP7hOXDSH43n88V+eqJ3+hGMiJqBZV4Qxc0T0uXK6HHvCKrQKQfCRmIJ7Lx tveRuB+ob6R6Mx5PeedVp2cMLDWC3wJlDGptnluUbWqr2wH0S4oLwL7LM4g= -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:14 2026 by rpki-client