This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/qGCRtaC9RTGZIn2ELPINUnQn0Ak.roa File: qGCRtaC9RTGZIn2ELPINUnQn0Ak.roa (raw, json) Hash identifier: y5zE+QUy+A92yr8m0SA7X7JH/kHTZ9L309NMDYSg9uM= Subject key identifier: A8:60:91:B5:A0:BD:45:31:99:22:7D:84:2C:F2:0D:52:74:27:D0:09 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 23A5 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/qGCRtaC9RTGZIn2ELPINUnQn0Ak.roa Signing time: Thu 04 Dec 2025 06:42:13 +0000 ROA not before: Thu 04 Dec 2025 06:42:13 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 139327 IP address blocks: 42.240.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 21:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9125 (0x23a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Dec 4 06:42:13 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A86091B5A0BD453199227D842CF20D527427D009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:87:f5:33:5c:85:1e:fb:f5:3e:d6:a9:0a:62: 63:2b:a1:9b:90:7a:14:30:00:00:4c:fd:cc:f5:a9: 70:08:3c:c0:81:50:f1:a2:25:53:9f:6d:22:9b:26: ab:61:5c:6b:88:19:10:ac:df:df:e7:13:e0:42:52: f4:65:b0:e1:48:84:92:8b:78:ca:12:5b:61:c2:b4: 71:ea:e2:06:89:84:b9:84:01:5e:f2:89:f5:e7:38: 0d:c4:d9:ed:bb:66:d2:eb:c9:e0:d9:b3:16:c1:45: 20:fe:2c:06:ad:69:0f:9f:bf:04:cb:b0:1d:ae:79: c9:7d:7a:c7:f2:cd:ee:9c:0e:65:4a:fe:f6:fe:3f: a4:30:cb:e7:23:e3:47:63:bd:f0:b1:d6:45:1c:50: 84:9e:7b:b0:c2:9a:a4:67:dc:d7:7c:83:ae:b8:7b: d4:06:ce:fa:50:3d:2d:cf:79:b4:e2:97:4d:f1:d7: d3:dc:ee:c8:9f:de:15:7e:6f:95:8c:a1:b8:1e:6d: 39:f2:d6:a1:bf:74:d4:47:6b:f2:50:37:6b:8c:eb: 79:cc:76:96:d7:e7:1e:6b:66:5c:bd:20:44:68:5e: 77:7f:88:18:50:6c:cf:dc:03:d2:52:e6:0f:7b:db: 28:3e:38:31:c8:3f:c7:c8:88:2f:14:b3:9d:b0:ec: cb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:60:91:B5:A0:BD:45:31:99:22:7D:84:2C:F2:0D:52:74:27:D0:09 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/qGCRtaC9RTGZIn2ELPINUnQn0Ak.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.240.255.0/24 Signature Algorithm: sha256WithRSAEncryption 66:fd:ef:ad:9a:2b:3a:d5:19:4e:db:5a:e3:5c:0d:31:dd:39: 06:b3:4a:42:64:3b:9f:33:6b:7d:50:f3:da:32:c4:41:93:3f: 34:df:be:76:a0:05:4a:2f:85:cf:87:d1:d6:c9:90:e8:9b:78: 51:73:d8:62:7b:18:99:7b:25:36:1b:c0:95:f9:eb:2d:d8:f7: ac:81:96:d4:54:b4:57:14:22:7e:ed:24:f1:90:76:73:82:f6: 39:35:7d:72:b3:63:b4:0a:a8:cf:fb:1c:d2:e9:66:dd:f5:8a: 0a:42:0c:d5:db:12:b3:25:ba:70:4b:3c:ae:2f:eb:ba:fe:28: b4:e3:52:36:01:ce:86:e4:7b:3c:c3:83:66:23:0e:d2:cc:13: f6:f5:0a:89:6c:8f:78:b3:f0:6b:2b:aa:c3:a7:7c:24:5b:34: df:12:b0:4d:a0:10:92:6f:b7:1b:23:56:ce:1c:c7:ca:93:aa: 3f:db:2d:91:ed:33:c9:18:4a:dd:71:eb:07:dd:06:b7:0a:9c: 5c:c0:9f:04:5b:21:80:f9:7d:41:45:dc:ae:c5:e8:06:ac:9c: 3c:44:c1:95:36:01:af:b3:c3:dd:8a:3b:0f:d4:cd:74:c0:a0: 66:b4:da:ab:bf:2f:bc:39:37:d2:af:21:11:51:65:e5:12:0b: 33:b1:e0:93 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICI6UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTEyMDQw NjQyMTNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEE4NjA5MUI1QTBCRDQ1 MzE5OTIyN0Q4NDJDRjIwRDUyNzQyN0QwMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVh/UzXIUe+/U+1qkKYmMroZuQehQwAABM/cz1qXAIPMCBUPGi JVOfbSKbJqthXGuIGRCs39/nE+BCUvRlsOFIhJKLeMoSW2HCtHHq4gaJhLmEAV7y ifXnOA3E2e27ZtLryeDZsxbBRSD+LAataQ+fvwTLsB2uecl9esfyze6cDmVK/vb+ P6Qwy+cj40djvfCx1kUcUISee7DCmqRn3Nd8g664e9QGzvpQPS3PebTil03x19Pc 7sif3hV+b5WMobgebTny1qG/dNRHa/JQN2uM63nMdpbX5x5rZly9IERoXnd/iBhQ bM/cA9JS5g972yg+ODHIP8fIiC8Us52w7MsnAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUqGCRtaC9RTGZIn2ELPINUnQn0AkwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L3FHQ1J0YUM5UlRHWklu MkVMUElOVW5RbjBBay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAq8P8wDQYJKoZIhvcNAQELBQADggEBAGb9762aKzrVGU7bWuNcDTHdOQazSkJk O58za31Q89oyxEGTPzTfvnagBUovhc+H0dbJkOibeFFz2GJ7GJl7JTYbwJX56y3Y 96yBltRUtFcUIn7tJPGQdnOC9jk1fXKzY7QKqM/7HNLpZt31igpCDNXbErMlunBL PK4v67r+KLTjUjYBzobkezzDg2YjDtLME/b1Colsj3iz8GsrqsOnfCRbNN8SsE2g EJJvtxsjVs4cx8qTqj/bLZHtM8kYSt1x6wfdBrcKnFzAnwRbIYD5fUFF3K7F6Aas nDxEwZU2Aa+zw92KOw/UzXTAoGa02qu/L7w5N9KvIRFRZeUSCzOx4JM= -----END CERTIFICATE-----Generated at Sat Dec 6 20:13:33 2025 by rpki-client