This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/olUeB1CNDHKjVnVWT_T_eISPt7w.roa File: olUeB1CNDHKjVnVWT_T_eISPt7w.roa (raw, json) Hash identifier: n7mLwZ3pkgroxWqSR24q10qT35N3F/fhVMaqIENpHN4= Subject key identifier: A2:55:1E:07:50:8D:0C:72:A3:56:75:56:4F:F4:FF:78:84:8F:B7:BC Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 2289 Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/olUeB1CNDHKjVnVWT_T_eISPt7w.roa Signing time: Thu 25 Dec 2025 05:41:44 +0000 ROA not before: Thu 25 Dec 2025 05:41:44 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 17621 IP address blocks: 2403:9b00:2400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 21:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8841 (0x2289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Dec 25 05:41:44 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A2551E07508D0C72A35675564FF4FF78848FB7BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:19:b2:e6:1b:93:1b:74:6e:8f:6a:64:74: 75:20:9b:f4:b7:e5:7c:84:f8:c8:ec:69:27:82:e0: 0a:c0:7b:48:0b:fb:21:e0:1d:3c:34:6c:b5:0a:0c: 00:ff:4b:89:39:25:29:0c:62:a2:e8:32:23:56:b7: 04:9a:ce:77:49:9c:00:f9:e8:b4:b3:0b:5d:e5:0f: 0c:4e:61:11:7f:81:09:0d:3f:e9:ce:4d:7e:32:1b: db:20:da:14:19:2d:3a:44:45:78:00:77:15:85:24: 60:b4:5b:28:01:00:06:5d:dd:91:68:72:4d:c4:9e: 8a:4d:94:cd:dc:6f:de:d2:e9:9e:31:05:5a:94:18: 9c:22:d6:e3:b4:7e:d0:b2:8a:0c:b9:71:7d:85:e5: 58:b6:7f:42:05:16:1d:07:8f:13:c4:f8:36:f8:2e: 6b:2c:4d:b1:50:2f:58:62:ba:a1:0f:a5:9b:2f:2e: 8b:bc:e9:d2:27:05:c6:e0:94:69:84:62:a2:98:77: 7d:c6:d7:77:f2:12:01:b5:85:9e:d5:3c:e3:ab:80: 2d:ee:00:6f:b3:f5:46:98:9e:fa:1f:14:47:0f:2a: 06:77:d1:61:46:8a:54:8e:cb:0d:7f:60:4c:f2:b5: 0a:d5:63:bb:b1:45:82:0d:13:d5:3c:4c:49:66:a4: 79:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:55:1E:07:50:8D:0C:72:A3:56:75:56:4F:F4:FF:78:84:8F:B7:BC X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/olUeB1CNDHKjVnVWT_T_eISPt7w.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:9b00:2400::/48 Signature Algorithm: sha256WithRSAEncryption 90:65:db:33:a0:f8:f5:d4:81:f3:ed:9e:04:b7:92:b4:19:a9: c8:0b:e4:4c:a5:68:59:ea:e2:dd:83:9d:55:09:5f:da:dd:0b: 8a:a2:e8:23:39:9e:e3:76:1b:b3:a0:24:84:95:95:6a:df:6d: d6:06:c0:0b:40:63:0f:01:a6:8a:d4:6a:08:fb:16:06:b1:c5: b4:5f:13:26:8c:fa:72:05:14:f5:d8:c0:a8:fa:44:72:8d:e6: d0:dc:a7:06:e7:e5:60:c1:f4:ef:b9:8f:04:1b:b7:6b:53:b7: e0:a8:63:fc:7c:00:de:7b:87:00:86:00:ce:89:cd:6a:d3:65: f1:a0:41:3c:8b:5e:41:82:14:8a:20:49:1b:8a:ff:cc:30:54: 44:90:11:25:90:4d:f7:1e:64:48:03:b0:bf:20:92:84:1f:e7: 19:c7:1c:04:9e:3d:8b:16:98:62:38:96:72:4c:80:d6:54:f5: d8:e2:81:16:a5:6b:4e:26:0b:69:39:68:2b:0e:09:4b:4d:b0: de:7a:0c:29:d3:81:88:93:56:8d:e2:b6:ba:54:91:d1:fc:f0: ca:98:4d:85:df:9b:e3:27:07:08:7a:d5:01:5c:df:9f:98:d9: 98:4a:f4:03:16:54:57:4b:c7:f2:44:38:dc:09:02:65:3e:d0: 62:95:60:86 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICIokwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNTEyMjUw NTQxNDRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEEyNTUxRTA3NTA4RDBD NzJBMzU2NzU1NjRGRjRGRjc4ODQ4RkI3QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzPRmy5huTG3Ruj2pkdHUgm/S35XyE+MjsaSeC4ArAe0gL+yHg HTw0bLUKDAD/S4k5JSkMYqLoMiNWtwSazndJnAD56LSzC13lDwxOYRF/gQkNP+nO TX4yG9sg2hQZLTpERXgAdxWFJGC0WygBAAZd3ZFock3EnopNlM3cb97S6Z4xBVqU GJwi1uO0ftCyigy5cX2F5Vi2f0IFFh0HjxPE+Db4LmssTbFQL1hiuqEPpZsvLou8 6dInBcbglGmEYqKYd33G13fyEgG1hZ7VPOOrgC3uAG+z9UaYnvofFEcPKgZ30WFG ilSOyw1/YEzytQrVY7uxRYINE9U8TElmpHnpAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUolUeB1CNDHKjVnVWT/T/eISPt7wwHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxL29sVWVCMUNOREhLalZu VldUX1RfZUlTUHQ3dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAkA5sAJAAwDQYJKoZIhvcNAQELBQADggEBAJBl2zOg+PXUgfPtngS3krQZqcgL 5EylaFnq4t2DnVUJX9rdC4qi6CM5nuN2G7OgJISVlWrfbdYGwAtAYw8BporUagj7 FgaxxbRfEyaM+nIFFPXYwKj6RHKN5tDcpwbn5WDB9O+5jwQbt2tTt+CoY/x8AN57 hwCGAM6JzWrTZfGgQTyLXkGCFIogSRuK/8wwVESQESWQTfceZEgDsL8gkoQf5xnH HASePYsWmGI4lnJMgNZU9djigRala04mC2k5aCsOCUtNsN56DCnTgYiTVo3itrpU kdH88MqYTYXfm+MnBwh61QFc35+Y2ZhK9AMWVFdLx/JEONwJAmU+0GKVYIY= -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:33 2026 by rpki-client