This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/kt3KP6njqvetzyj3kLMfdnQjyPo.roa File: kt3KP6njqvetzyj3kLMfdnQjyPo.roa (raw, json) Hash identifier: 6LcB7o10Vg5IOl1SUTM44qPttfZSLsCeegE8Rhza2ac= Subject key identifier: 92:DD:CA:3F:A9:E3:AA:F7:AD:CF:28:F7:90:B3:1F:76:74:23:C8:FA Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 239C Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/kt3KP6njqvetzyj3kLMfdnQjyPo.roa Signing time: Wed 03 Dec 2025 07:56:18 +0000 ROA not before: Wed 03 Dec 2025 07:56:18 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 135377 IP address blocks: 101.237.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 16:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9116 (0x239c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Dec 3 07:56:18 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=92DDCA3FA9E3AAF7ADCF28F790B31F767423C8FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:05:a3:71:37:d9:3a:09:6c:1a:6a:74:98:fb: c0:58:ca:f1:51:70:8a:3e:de:5c:3f:0c:06:0e:72: 2b:46:da:85:b8:03:21:8b:56:d9:d9:61:82:64:41: 83:1b:c1:6d:e9:fe:3a:8b:78:93:d5:f5:44:c0:38: 54:70:a3:a0:82:87:23:6e:1d:d2:66:37:98:dd:06: 9f:13:54:b6:fb:1f:03:f4:33:ee:51:3a:78:3d:29: 00:3e:98:5d:cf:e9:db:7e:0d:93:d1:a9:fa:b9:37: c7:fc:bd:ec:03:39:82:9e:c3:c1:ea:1f:41:9d:16: ee:12:62:47:94:6d:a7:2c:43:37:4e:d9:69:75:8f: 91:41:fc:04:5d:5d:4c:f8:9a:25:31:0e:21:16:cb: da:5d:26:d5:42:4f:30:fe:db:f8:4f:f0:08:f1:f3: 32:4f:1d:a6:17:05:87:1c:a4:aa:9f:fb:f7:53:49: 17:eb:9b:f3:50:c2:ce:33:d4:85:8b:bf:92:1b:5d: 86:54:05:85:da:4e:30:eb:f0:6d:56:9b:a3:05:fc: 58:55:8f:05:ec:f3:8b:43:f4:42:cb:6c:4d:d2:64: 73:f7:74:ec:3d:55:4a:12:1c:6f:23:80:c1:eb:64: 9b:5a:c2:55:d9:88:13:58:19:2a:ce:3a:d9:80:94: 93:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DD:CA:3F:A9:E3:AA:F7:AD:CF:28:F7:90:B3:1F:76:74:23:C8:FA X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/kt3KP6njqvetzyj3kLMfdnQjyPo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.237.253.0/24 Signature Algorithm: sha256WithRSAEncryption 37:7e:eb:ee:b4:a1:2c:af:cf:42:6d:68:b9:c7:cf:ee:90:85: 73:5a:2f:bb:4b:a0:81:bc:40:99:4e:81:31:37:ab:9d:4e:af: 4b:24:bc:6b:8e:c8:75:b3:4e:88:1c:5e:7b:89:4a:ec:b2:e1: 6c:fb:77:92:34:5e:94:03:20:91:6f:88:81:3b:90:0d:9f:97: 22:8b:09:24:eb:06:b7:c3:dc:63:5b:7a:b5:89:25:76:30:4b: b0:6d:43:83:1a:d9:7e:75:0b:26:c5:29:5a:3a:10:4c:7a:5d: d5:28:5f:99:67:66:e6:f7:20:95:d6:1d:bb:cd:89:5f:28:d5: 07:6d:9d:9c:ab:10:23:2f:26:4d:c7:51:29:a2:a5:c9:35:c5: 31:3d:4c:69:1b:d7:e1:22:99:3c:26:7e:9c:31:67:b5:37:ea: 21:11:6c:b8:4c:6f:5c:f3:3d:0b:6d:74:dc:8d:ac:3a:22:69: 75:f7:8d:95:ed:4b:86:c4:25:a3:d6:6e:99:3d:c3:48:c5:bf: 51:9b:b0:cb:c6:7b:f5:ee:f7:b0:67:af:18:de:ef:f3:d8:83: b2:2b:e1:89:da:c2:a3:a7:99:c0:a6:6d:99:fa:d2:4f:22:ff: 9a:61:d5:ef:09:81:4d:f1:ba:d5:07:48:21:b5:d9:a9:98:c8: 24:16:e3:21 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICI5wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTEyMDMw NzU2MThaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDkyRERDQTNGQTlFM0FB RjdBRENGMjhGNzkwQjMxRjc2NzQyM0M4RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvBaNxN9k6CWwaanSY+8BYyvFRcIo+3lw/DAYOcitG2oW4AyGL VtnZYYJkQYMbwW3p/jqLeJPV9UTAOFRwo6CChyNuHdJmN5jdBp8TVLb7HwP0M+5R Ong9KQA+mF3P6dt+DZPRqfq5N8f8vewDOYKew8HqH0GdFu4SYkeUbacsQzdO2Wl1 j5FB/ARdXUz4miUxDiEWy9pdJtVCTzD+2/hP8Ajx8zJPHaYXBYccpKqf+/dTSRfr m/NQws4z1IWLv5IbXYZUBYXaTjDr8G1Wm6MF/FhVjwXs84tD9ELLbE3SZHP3dOw9 VUoSHG8jgMHrZJtawlXZiBNYGSrOOtmAlJNXAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUkt3KP6njqvetzyj3kLMfdnQjyPowHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L2t0M0tQNm5qcXZldHp5 ajNrTE1mZG5RanlQby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABl7f0wDQYJKoZIhvcNAQELBQADggEBADd+6+60oSyvz0JtaLnHz+6QhXNaL7tL oIG8QJlOgTE3q51Or0skvGuOyHWzTogcXnuJSuyy4Wz7d5I0XpQDIJFviIE7kA2f lyKLCSTrBrfD3GNberWJJXYwS7BtQ4Ma2X51CybFKVo6EEx6XdUoX5lnZub3IJXW HbvNiV8o1QdtnZyrECMvJk3HUSmipck1xTE9TGkb1+EimTwmfpwxZ7U36iERbLhM b1zzPQttdNyNrDoiaXX3jZXtS4bEJaPWbpk9w0jFv1GbsMvGe/Xu97Bnrxje7/PY g7Ir4YnawqOnmcCmbZn60k8i/5ph1e8JgU3xutUHSCG12amYyCQW4yE= -----END CERTIFICATE-----Generated at Sat Dec 6 13:56:50 2025 by rpki-client