This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/IgqrEFqmyqPtW7m9D1zkbCYEuoU.roa File: IgqrEFqmyqPtW7m9D1zkbCYEuoU.roa (raw, json) Hash identifier: h63VIgyRr0JFg7bgnKznu1XoMFsXtS2riA5Zh4XwTyI= Subject key identifier: 22:0A:AB:10:5A:A6:CA:A3:ED:5B:B9:BD:0F:5C:E4:6C:26:04:BA:85 Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054 Certificate serial: 2097 Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/IgqrEFqmyqPtW7m9D1zkbCYEuoU.roa Signing time: Sat 13 Sep 2025 03:09:55 +0000 ROA not before: Sat 13 Sep 2025 03:09:55 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 56282 IP address blocks: 211.155.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 02:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8343 (0x2097) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054 Validity Not Before: Sep 13 03:09:55 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=220AAB105AA6CAA3ED5BB9BD0F5CE46C2604BA85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:50:1d:83:dd:f8:e8:44:eb:bb:1d:bc:93: da:62:f2:1a:9c:87:9f:7a:14:eb:e1:29:e5:ff:41: 2d:83:f9:05:9d:2c:2f:29:12:cd:f8:08:8e:e8:b4: 0e:f0:1d:d0:4f:c9:6a:41:87:8c:68:f3:05:5a:6b: d3:12:b0:25:cf:39:7c:b3:65:fd:66:53:45:c1:2b: 9c:eb:99:b2:1d:71:ea:16:2f:f0:ff:ee:3d:84:43: c3:13:f2:9c:5c:44:56:56:ab:bd:97:e8:ec:f7:26: 5a:f6:0d:6f:67:6c:91:9d:15:ed:5b:fe:6c:77:02: 30:b8:91:81:ac:94:98:c2:cd:e9:94:94:a3:9c:23: dc:13:83:a5:9d:70:04:da:69:0c:87:17:87:b3:16: d7:5f:6c:81:83:61:1d:b7:19:58:67:af:0a:34:6e: aa:96:24:76:a6:99:a8:c0:19:44:f0:75:3a:1d:fb: 93:93:b0:52:1c:6a:89:b4:38:37:7b:70:31:4c:86: ac:09:69:0a:d7:c7:ff:5a:3a:c7:e2:79:20:ca:d6: 2a:6b:5e:27:25:84:bb:16:08:ea:74:6d:d7:15:68: 3c:4a:c1:9a:57:f8:d7:66:0f:e8:88:e5:74:5f:6e: dc:0f:90:b8:4d:a5:42:41:49:5a:03:b9:eb:6a:74: a3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0A:AB:10:5A:A6:CA:A3:ED:5B:B9:BD:0F:5C:E4:6C:26:04:BA:85 X509v3 Authority Key Identifier: keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/IgqrEFqmyqPtW7m9D1zkbCYEuoU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.155.88.0/21 Signature Algorithm: sha256WithRSAEncryption 57:41:f5:d7:a2:f3:11:9d:51:c0:ee:bd:17:7c:ff:1f:ce:a4: 65:95:61:54:e8:73:10:a0:76:a7:bd:eb:53:51:32:3e:66:7b: 93:be:8c:7d:e9:18:46:df:0a:27:31:ac:2b:2c:97:3c:36:9a: 4c:4b:82:f5:30:bd:22:16:dc:dd:12:d4:f7:56:cb:62:4b:08: 5d:b2:8e:38:f7:3a:a7:04:fb:ac:1f:d4:7a:28:4e:dd:f6:69: d2:e0:1f:75:1b:e6:3f:15:84:df:91:a3:3f:c6:9c:c3:e1:47: f9:d0:dc:1d:43:d8:95:c9:30:bd:a1:17:63:b6:f2:55:45:2b: b8:54:52:be:a7:3d:1c:93:3c:32:c3:40:f8:28:b0:23:47:f1: a3:e6:d9:90:fe:6b:cb:bd:56:50:1e:70:59:f6:5b:78:cd:e0: 2a:14:29:c1:6a:24:6a:ab:15:83:43:7f:27:5c:84:d5:aa:45: a7:35:2d:3d:d7:34:79:05:b0:83:2d:52:8b:6e:42:57:83:d0: b6:3d:00:22:94:70:12:90:68:e1:3a:51:24:a2:fe:37:97:81: 51:19:79:f3:23:6d:c7:fe:bf:fb:ea:33:a2:c6:98:ef:f6:c7: 7b:35:b7:e4:3d:af:1b:61:9d:5a:31:b0:d2:51:26:70:ec:ea: e9:c7:ce:67 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODNF NzdGMzdCM0I5Mzg1MDgzNUJBQTMwRUU4RkMxMkQ1NUY4NzA1NDAeFw0yNTA5MTMw MzA5NTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDIyMEFBQjEwNUFBNkNB QTNFRDVCQjlCRDBGNUNFNDZDMjYwNEJBODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2bVAdg9346ETrux28k9pi8hqch596FOvhKeX/QS2D+QWdLC8p Es34CI7otA7wHdBPyWpBh4xo8wVaa9MSsCXPOXyzZf1mU0XBK5zrmbIdceoWL/D/ 7j2EQ8MT8pxcRFZWq72X6Oz3Jlr2DW9nbJGdFe1b/mx3AjC4kYGslJjCzemUlKOc I9wTg6WdcATaaQyHF4ezFtdfbIGDYR23GVhnrwo0bqqWJHammajAGUTwdTod+5OT sFIcaom0ODd7cDFMhqwJaQrXx/9aOsfieSDK1iprXiclhLsWCOp0bdcVaDxKwZpX +NdmD+iI5XRfbtwPkLhNpUJBSVoDuetqdKMRAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUIgqrEFqmyqPtW7m9D1zkbCYEuoUwHwYDVR0jBBgwFoAUg+d/N7O5OFCDW6ow 7o/BLVX4cFQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYx L2ctZF9ON081T0ZDRFc2b3c3b19CTFZYNGNGUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZy1kX043TzVPRkNEVzZvdzdvX0JMVlg0Y0ZRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYxL0lncXJFRnFteXFQdFc3 bTlEMXprYkNZRXVvVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPTm1gwDQYJKoZIhvcNAQELBQADggEBAFdB9dei8xGdUcDuvRd8/x/OpGWVYVTo cxCgdqe961NRMj5me5O+jH3pGEbfCicxrCsslzw2mkxLgvUwvSIW3N0S1PdWy2JL CF2yjjj3OqcE+6wf1HooTt32adLgH3Ub5j8VhN+Roz/GnMPhR/nQ3B1D2JXJML2h F2O28lVFK7hUUr6nPRyTPDLDQPgosCNH8aPm2ZD+a8u9VlAecFn2W3jN4CoUKcFq JGqrFYNDfydchNWqRac1LT3XNHkFsIMtUotuQleD0LY9ACKUcBKQaOE6USSi/jeX gVEZefMjbcf+v/vqM6LGmO/2x3s1t+Q9rxthnVoxsNJRJnDs6unHzmc= -----END CERTIFICATE-----Generated at Sun Dec 7 01:36:53 2025 by rpki-client