This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/x_MZff6dAggOQr9dg-AeXLf4eq4.roa File: x_MZff6dAggOQr9dg-AeXLf4eq4.roa (raw, json) Hash identifier: osVrp4f8Epebety5QPqFJRX0yLzq8kxgvn5jMWutHTQ= Subject key identifier: C7:F3:19:7D:FE:9D:02:08:0E:42:BF:5D:83:E0:1E:5C:B7:F8:7A:AE Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22A5 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/x_MZff6dAggOQr9dg-AeXLf4eq4.roa Signing time: Fri 19 Dec 2025 03:03:47 +0000 ROA not before: Fri 19 Dec 2025 03:03:47 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63689 IP address blocks: 202.160.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8869 (0x22a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:03:47 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C7F3197DFE9D02080E42BF5D83E01E5CB7F87AAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:f6:87:bd:1e:30:0c:70:5a:bc:04:99:e6: 03:5e:01:a8:35:be:30:3f:84:5c:28:3b:ea:16:25: c7:6c:ff:29:88:ee:c9:21:75:7e:9e:51:82:85:76: 11:17:fb:56:03:71:9c:69:58:57:fd:32:56:9a:4c: 70:61:e5:00:28:a5:c8:f0:e6:c0:7a:39:2d:96:ea: 5f:5f:8f:40:1e:26:91:8a:69:8e:51:41:4b:7b:8d: 99:86:3a:39:11:1e:37:85:a4:61:11:0e:37:98:71: 5f:47:4c:6a:48:f1:ac:e1:0e:50:89:5b:12:01:63: 4d:34:d2:99:25:72:06:9b:49:5c:f2:1a:9c:06:76: ea:bf:f9:97:b4:35:94:e9:e0:15:df:1c:5b:ab:7b: 57:14:b2:e9:7f:17:e4:a3:e1:0c:e6:d8:18:9d:1a: 03:d5:de:6d:03:c4:e4:7a:1a:dc:cc:72:4c:1d:e6: a1:81:0f:7d:0c:a5:52:ed:79:ac:63:ee:df:2b:e1: ce:e8:96:08:d7:42:f1:d2:44:97:f3:81:92:22:ec: b0:57:88:39:e4:0d:e9:9a:d6:b2:b9:fc:13:d2:53: 21:46:ef:81:6f:54:b1:5f:0d:6f:52:e9:16:c9:3c: 41:91:65:dd:74:71:a8:c4:e7:9a:60:fa:a2:cc:41: 5a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F3:19:7D:FE:9D:02:08:0E:42:BF:5D:83:E0:1E:5C:B7:F8:7A:AE X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/x_MZff6dAggOQr9dg-AeXLf4eq4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.143.0/24 Signature Algorithm: sha256WithRSAEncryption b8:9b:51:e5:75:ec:1f:3e:d6:71:8e:e6:55:1f:8a:19:fd:dd: 24:66:52:d7:a0:2d:1c:bb:c2:76:d9:5a:4f:64:12:5e:1e:76: ce:22:ac:c6:17:74:be:7b:40:46:73:37:3d:4b:4b:8a:97:e0: 4f:50:fe:81:25:f7:52:1f:54:c3:ba:80:a0:c5:7b:a2:0f:04: 4c:4d:32:08:f5:a9:2f:8d:45:e3:a3:c9:34:ad:85:c9:73:6c: 01:24:c8:a4:41:ca:73:a7:3b:0b:21:ca:0a:59:93:d0:56:c6: 42:8b:ea:34:61:df:15:74:23:5c:4f:92:0b:a4:ef:22:ef:4f: 3f:49:bf:90:7c:20:81:c6:ca:d6:2d:bb:1f:5f:7c:aa:87:d1: 8c:e9:27:15:61:38:49:ae:dd:f1:7e:ac:c8:b9:e1:53:4c:4e: a9:81:72:ce:5b:a9:34:40:8a:a2:ac:2d:51:bd:25:7d:4e:07: 0f:5e:34:e7:b9:d3:7b:af:9a:55:56:76:a1:7f:05:94:aa:b1: 87:7b:d9:3f:10:79:2c:6f:3e:e6:f7:83:a3:de:5a:97:8c:c0: 5f:3b:99:36:3c:f7:2a:b8:c8:6b:01:e1:9c:7c:e0:bf:83:76: f2:84:4d:7b:54:8f:65:5a:ff:ee:a6:c1:52:ef:d9:54:8b:83: 09:6e:d7:8e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIqUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzAzNDdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEM3RjMxOTdERkU5RDAy MDgwRTQyQkY1RDgzRTAxRTVDQjdGODdBQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrTfaHvR4wDHBavASZ5gNeAag1vjA/hFwoO+oWJcds/ymI7skh dX6eUYKFdhEX+1YDcZxpWFf9MlaaTHBh5QAopcjw5sB6OS2W6l9fj0AeJpGKaY5R QUt7jZmGOjkRHjeFpGERDjeYcV9HTGpI8azhDlCJWxIBY0000pklcgabSVzyGpwG duq/+Ze0NZTp4BXfHFure1cUsul/F+Sj4Qzm2BidGgPV3m0DxOR6GtzMckwd5qGB D30MpVLteaxj7t8r4c7olgjXQvHSRJfzgZIi7LBXiDnkDema1rK5/BPSUyFG74Fv VLFfDW9S6RbJPEGRZd10cajE55pg+qLMQVrHAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUx/MZff6dAggOQr9dg+AeXLf4eq4wHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcveF9NWmZmNmRBZ2dP UXI5ZGctQWVYTGY0ZXE0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMqgjzANBgkqhkiG9w0BAQsFAAOCAQEAuJtR5XXsHz7WcY7mVR+KGf3dJGZS 16AtHLvCdtlaT2QSXh52ziKsxhd0vntARnM3PUtLipfgT1D+gSX3Uh9Uw7qAoMV7 og8ETE0yCPWpL41F46PJNK2FyXNsASTIpEHKc6c7CyHKClmT0FbGQovqNGHfFXQj XE+SC6TvIu9PP0m/kHwggcbK1i27H198qofRjOknFWE4Sa7d8X6syLnhU0xOqYFy zlupNECKoqwtUb0lfU4HD14057nTe6+aVVZ2oX8FlKqxh3vZPxB5LG8+5veDo95a l4zAXzuZNjz3KrjIawHhnHzgv4N28oRNe1SPZVr/7qbBUu/ZVIuDCW7Xjg== -----END CERTIFICATE-----Generated at Sun Dec 21 20:02:14 2025 by rpki-client