This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/YsL8BF1549T5kZXzgMw1VPRGKK4.roa File: YsL8BF1549T5kZXzgMw1VPRGKK4.roa (raw, json) Hash identifier: mzVI4FNd8+eX9KIqFwa8jtLVfq/7l+Xw5p+ygy5IEwo= Subject key identifier: 62:C2:FC:04:5D:79:E3:D4:F9:91:95:F3:80:CC:35:54:F4:46:28:AE Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Certificate serial: 14BD Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/YsL8BF1549T5kZXzgMw1VPRGKK4.roa Signing time: Thu 11 Sep 2025 06:10:10 +0000 ROA not before: Thu 11 Sep 2025 06:10:10 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 23853 IP address blocks: 2404:7600:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 16:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5309 (0x14bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Validity Not Before: Sep 11 06:10:10 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=62C2FC045D79E3D4F99195F380CC3554F44628AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:51:8e:21:7d:ae:05:9e:b5:60:2a:e8:9a:ee: 84:e0:80:51:be:50:cc:b0:c9:6a:26:9c:de:77:b7: b4:eb:7a:ca:ec:b3:3d:ab:db:1b:cc:60:22:93:ff: fb:05:b0:eb:ee:35:18:f8:a2:36:87:9b:b1:a8:d6: 93:16:9d:c3:22:09:e4:48:19:4b:97:9a:cc:ba:f1: d4:34:cd:da:a0:2b:c3:68:45:7d:9f:79:af:4e:de: c1:03:8b:dd:27:34:98:7f:46:0c:b2:a0:5f:6c:59: 90:33:2b:71:91:70:9f:ec:f2:6d:7f:97:f9:e3:1a: f3:08:9b:0b:82:7b:b7:76:cf:f5:2a:f0:d3:ba:31: f3:90:bf:92:89:eb:46:82:df:28:6a:ee:ab:7a:eb: 62:15:23:67:9f:a8:3d:0a:1b:d3:a5:bd:7c:32:ac: 45:68:0f:80:92:cd:b8:d1:89:10:0e:9d:4a:67:4c: 73:22:f4:7e:68:99:66:be:c3:e1:91:ff:ad:62:20: 30:84:df:31:57:0c:fb:51:53:75:da:fb:ca:d9:59: e2:01:5a:0a:41:1c:fe:8c:1c:13:6e:75:3f:d7:ae: 3d:1d:7e:3f:c6:b7:28:fe:e4:98:28:47:4b:fe:69: 7e:0f:1d:60:06:e1:44:1f:2b:74:23:47:8d:9a:90: 89:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C2:FC:04:5D:79:E3:D4:F9:91:95:F3:80:CC:35:54:F4:46:28:AE X509v3 Authority Key Identifier: keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/YsL8BF1549T5kZXzgMw1VPRGKK4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:7600:100::/48 Signature Algorithm: sha256WithRSAEncryption ad:af:a1:da:f0:c5:3b:2a:be:fd:0a:ee:f4:20:48:3e:64:f0: 2d:de:7a:54:fe:46:c9:f4:a2:1c:25:df:32:7b:2e:c1:49:48: d5:e5:38:0d:db:a0:a4:4c:1d:36:f2:17:fe:05:ac:7f:ba:05: 79:7a:d6:89:24:fe:a6:96:4c:d0:fb:ca:c1:f7:3d:9b:62:d6: 1c:63:9c:f3:33:2e:0a:d8:1e:25:0f:00:e2:17:76:77:29:f5: 89:e4:db:4b:bc:f8:d9:da:80:c6:f1:85:1c:91:0e:54:5b:50: c7:75:8b:a4:e1:42:94:2d:86:f1:9c:45:70:3e:75:8f:f5:35: 1f:4d:28:eb:70:ac:b9:3f:d6:06:39:1d:39:01:72:b1:f1:82: 4e:0b:ae:01:1f:4e:80:4a:4f:05:17:9f:19:8d:76:28:80:96: 8d:fd:56:e5:05:b2:76:e8:6c:1f:6c:91:11:8c:cc:c1:7b:c6: ea:b7:15:5e:a5:90:ed:4e:d4:e9:a6:9a:79:9b:03:00:dc:c0: d3:c4:ac:f2:91:76:f5:e9:f2:5e:61:a6:89:28:02:cf:df:3a: 6e:fe:8b:f4:5b:be:ad:9b:72:60:9f:f1:c3:86:94:94:b5:e4: ae:a0:90:3b:71:c7:48:af:a0:0f:15:0e:4a:d8:07:b2:31:1b: 29:b4:43:1c -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTgy NEM1NTUyMjhCMjhCNjk4RERFNzdCQzFBREQwRTI4MDdCODZCOTAeFw0yNTA5MTEw NjEwMTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDYyQzJGQzA0NUQ3OUUz RDRGOTkxOTVGMzgwQ0MzNTU0RjQ0NjI4QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcUY4hfa4FnrVgKuia7oTggFG+UMywyWomnN53t7Tresrssz2r 2xvMYCKT//sFsOvuNRj4ojaHm7Go1pMWncMiCeRIGUuXmsy68dQ0zdqgK8NoRX2f ea9O3sEDi90nNJh/RgyyoF9sWZAzK3GRcJ/s8m1/l/njGvMImwuCe7d2z/Uq8NO6 MfOQv5KJ60aC3yhq7qt662IVI2efqD0KG9OlvXwyrEVoD4CSzbjRiRAOnUpnTHMi 9H5omWa+w+GR/61iIDCE3zFXDPtRU3Xa+8rZWeIBWgpBHP6MHBNudT/Xrj0dfj/G tyj+5JgoR0v+aX4PHWAG4UQfK3QjR42akIlJAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUYsL8BF1549T5kZXzgMw1VPRGKK4wHwYDVR0jBBgwFoAUmCTFVSKLKLaY3ed7 wa3Q4oB7hrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjUv bUNURlZTS0xLTGFZM2VkN3dhM1E0b0I3aHJrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tQ1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9Zc0w4QkYxNTQ5VDVrWlh6 Z013MVZQUkdLSzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA JAR2AAEAMA0GCSqGSIb3DQEBCwUAA4IBAQCtr6Ha8MU7Kr79Cu70IEg+ZPAt3npU /kbJ9KIcJd8yey7BSUjV5TgN26CkTB028hf+Bax/ugV5etaJJP6mlkzQ+8rB9z2b YtYcY5zzMy4K2B4lDwDiF3Z3KfWJ5NtLvPjZ2oDG8YUckQ5UW1DHdYuk4UKULYbx nEVwPnWP9TUfTSjrcKy5P9YGOR05AXKx8YJOC64BH06ASk8FF58ZjXYogJaN/Vbl BbJ26GwfbJERjMzBe8bqtxVepZDtTtTpppp5mwMA3MDTxKzykXb16fJeYaaJKALP 3zpu/ov0W76tm3Jgn/HDhpSUteSuoJA7ccdIr6APFQ5K2AeyMRsptEMc -----END CERTIFICATE-----Generated at Sun Dec 7 13:30:12 2025 by rpki-client