This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/767/QUjpb2PHqAsPRMRmDUR6dOTkD4I.roa File: QUjpb2PHqAsPRMRmDUR6dOTkD4I.roa (raw, json) Hash identifier: hAtFMsHJ0LfZzNF2K21kK4rZXig8l9wnM0FQUeiDYAk= Subject key identifier: 41:48:E9:6F:63:C7:A8:0B:0F:44:C4:66:0D:44:7A:74:E4:E4:0F:82 Certificate issuer: /CN=FEE0C827CE296202006EB4ED2B6595DCE0E97C7B Certificate serial: 186D Authority key identifier: FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/QUjpb2PHqAsPRMRmDUR6dOTkD4I.roa Signing time: Tue 20 May 2025 07:43:23 +0000 ROA not before: Tue 20 May 2025 07:43:23 +0000 ROA not after: Thu 09 Apr 2026 06:40:47 +0000 asID: 4808 IP address blocks: 43.224.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 01:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6253 (0x186d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEE0C827CE296202006EB4ED2B6595DCE0E97C7B Validity Not Before: May 20 07:43:23 2025 GMT Not After : Apr 9 06:40:47 2026 GMT Subject: CN=4148E96F63C7A80B0F44C4660D447A74E4E40F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:da:3e:bf:34:50:5f:5e:5c:1e:00:f4:1b: 21:e1:91:4f:aa:50:e0:2e:a5:aa:1f:61:d6:7d:39: e7:91:64:82:42:12:3d:29:62:f8:3f:3f:97:4b:ce: dd:55:60:0c:d8:aa:fd:b6:9b:0c:6a:d7:27:25:31: a0:1a:1a:81:bb:ef:d1:65:d2:4d:d9:f3:70:ba:43: f0:58:2b:39:43:7f:6c:26:8d:05:68:e8:9e:ca:8d: dd:85:42:31:3e:e8:06:10:2b:69:80:a0:20:8b:bb: 37:0b:aa:d5:2b:a9:4e:ca:08:bb:0e:9d:28:96:9c: 4d:b3:a3:da:a1:4a:81:99:8d:22:99:bd:f6:8c:3b: 6e:da:de:ac:45:a1:20:68:30:8e:71:0e:00:af:0b: 7f:56:04:a3:55:46:09:20:1d:ea:f9:95:55:9f:b3: ab:f1:71:cd:09:e0:a4:a9:83:58:bf:64:77:ae:79: aa:02:94:6f:62:34:30:3b:9f:73:97:41:36:63:17: df:a4:f8:8e:ff:1c:10:c5:86:77:35:06:35:72:41: 67:40:cc:77:f9:45:8d:e7:ae:09:4f:01:c2:2d:65: 42:21:e2:50:6f:8e:13:58:7a:5d:24:ef:2e:b0:03: 55:d7:47:a4:57:ac:1c:57:08:a4:1c:53:17:b0:a9: db:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:48:E9:6F:63:C7:A8:0B:0F:44:C4:66:0D:44:7A:74:E4:E4:0F:82 X509v3 Authority Key Identifier: keyid:FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/QUjpb2PHqAsPRMRmDUR6dOTkD4I.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.224.240.0/24 Signature Algorithm: sha256WithRSAEncryption 33:bd:d1:1d:ef:41:8a:a1:8b:97:d8:e7:e3:b4:49:ab:ee:0c: 18:20:3a:a8:5e:4a:0a:ad:ac:1e:70:08:e5:4c:71:e0:df:03: 2e:82:10:24:41:ca:38:c7:e6:ca:8b:39:45:dc:bc:51:68:6a: 6b:0e:24:12:e0:63:a9:b8:77:4c:87:57:4e:60:9e:f0:f2:02: c6:11:fe:b4:86:cf:b1:31:f4:17:4a:df:d9:6f:b3:62:61:7e: 40:4d:2d:0a:43:0c:3d:16:a9:97:88:5d:6a:e3:4d:12:fb:5b: fb:44:84:95:14:15:17:7c:50:41:eb:3f:8c:67:20:9b:77:62: f5:3d:22:75:85:6c:17:60:76:00:08:6a:c8:ca:c6:66:bb:b4: 78:f7:e8:e6:19:a6:d2:de:6c:96:26:83:5f:53:d4:cf:ff:b0: b9:1b:b2:0c:4c:a4:bf:4a:dd:4c:f0:c4:c3:be:61:cb:2f:e2: cd:c0:05:6d:1c:a3:fd:05:67:99:5b:10:2c:12:67:7a:2c:9f: e1:2f:32:a9:1b:14:ca:05:09:8b:8a:30:15:b5:7d:76:a4:12: 1c:78:b1:cd:bf:d8:f7:c4:4e:39:c4:9c:0c:96:69:73:3c:cb: 70:1a:06:c0:4e:16:cd:1d:7e:38:95:5e:67:11:70:ba:43:90: e6:4a:c2:c5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkVF MEM4MjdDRTI5NjIwMjAwNkVCNEVEMkI2NTk1RENFMEU5N0M3QjAeFw0yNTA1MjAw NzQzMjNaFw0yNjA0MDkwNjQwNDdaMDMxMTAvBgNVBAMTKDQxNDhFOTZGNjNDN0E4 MEIwRjQ0QzQ2NjBENDQ3QTc0RTRFNDBGODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD3to+vzRQX15cHgD0GyHhkU+qUOAupaofYdZ9OeeRZIJCEj0p Yvg/P5dLzt1VYAzYqv22mwxq1yclMaAaGoG779Fl0k3Z83C6Q/BYKzlDf2wmjQVo 6J7Kjd2FQjE+6AYQK2mAoCCLuzcLqtUrqU7KCLsOnSiWnE2zo9qhSoGZjSKZvfaM O27a3qxFoSBoMI5xDgCvC39WBKNVRgkgHer5lVWfs6vxcc0J4KSpg1i/ZHeueaoC lG9iNDA7n3OXQTZjF9+k+I7/HBDFhnc1BjVyQWdAzHf5RY3nrglPAcItZUIh4lBv jhNYel0k7y6wA1XXR6RXrBxXCKQcUxewqdvfAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUQUjpb2PHqAsPRMRmDUR6dOTkD4IwHwYDVR0jBBgwFoAU/uDIJ84pYgIAbrTt K2WV3ODpfHswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzY3 L191RElKODRwWWdJQWJyVHRLMldWM09EcGZIcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvX3VESUo4NHBZZ0lBYnJUdEsyV1YzT0RwZkhzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzY3L1FVanBiMlBIcUFzUFJN Um1EVVI2ZE9Ua0Q0SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr4PAwDQYJKoZIhvcNAQELBQADggEBADO90R3vQYqhi5fY5+O0SavuDBggOqhe SgqtrB5wCOVMceDfAy6CECRByjjH5sqLOUXcvFFoamsOJBLgY6m4d0yHV05gnvDy AsYR/rSGz7Ex9BdK39lvs2JhfkBNLQpDDD0WqZeIXWrjTRL7W/tEhJUUFRd8UEHr P4xnIJt3YvU9InWFbBdgdgAIasjKxma7tHj36OYZptLebJYmg19T1M//sLkbsgxM pL9K3UzwxMO+Ycsv4s3ABW0co/0FZ5lbECwSZ3osn+EvMqkbFMoFCYuKMBW1fXak Ehx4sc2/2PfETjnEnAyWaXM8y3AaBsBOFs0dfjiVXmcRcLpDkOZKwsU= -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:14 2025 by rpki-client