This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/R87B-PvoyYd62QUFIW7doHGdguk.roa File: R87B-PvoyYd62QUFIW7doHGdguk.roa (raw, json) Hash identifier: DYE35VJQrxD/0egh5G8UXq9hhgSCQw5ye2zZjx25/qs= Subject key identifier: 47:CE:C1:F8:FB:E8:C9:87:7A:D9:05:05:21:6E:DD:A0:71:9D:82:E9 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 23CE Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/R87B-PvoyYd62QUFIW7doHGdguk.roa Signing time: Mon 15 Dec 2025 12:20:25 +0000 ROA not before: Mon 15 Dec 2025 12:20:25 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 137718 IP address blocks: 101.96.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 07:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9166 (0x23ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Dec 15 12:20:25 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=47CEC1F8FBE8C9877AD90505216EDDA0719D82E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3a:81:ae:95:93:10:50:b2:27:1a:16:29:a6: 64:82:98:e7:7c:5d:9a:e6:03:ff:bc:f4:7e:e9:12: 78:7c:fa:bb:3c:77:9f:12:2d:ab:35:ae:fa:67:ce: b4:94:91:eb:10:89:48:06:5b:0f:c6:3f:7e:e7:8d: 99:71:6e:35:0e:a4:eb:66:39:a5:71:39:11:e8:19: c3:f1:b0:8b:5c:60:72:2b:8b:7b:5c:af:2a:20:45: b7:49:2d:c5:d8:b5:5e:9c:ca:5c:57:7e:03:02:d0: 8f:8e:90:39:02:7e:5e:36:92:e2:31:f9:c3:33:e3: e6:a9:67:b4:d8:46:2c:11:ea:33:47:e6:94:91:61: 1e:30:3b:9b:45:04:cd:7e:f9:67:bd:49:22:33:3d: 7f:76:55:83:00:4a:46:97:c5:5f:7b:f6:77:79:dd: d1:cc:cd:5d:37:c5:8e:9c:82:ba:b2:04:04:6d:01: 92:91:22:44:f6:b5:e7:16:b8:4a:0e:4f:ab:e1:d7: fc:40:14:d8:01:67:11:f0:6b:1a:93:5f:f7:14:12: f7:40:58:e5:57:0c:03:79:d9:64:6b:16:40:0b:4e: f4:1c:b7:bc:da:c8:98:c0:61:2c:9d:e5:8d:16:06: d9:e0:b2:9d:d0:75:c8:d3:ca:ba:e5:3f:5d:e6:49: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CE:C1:F8:FB:E8:C9:87:7A:D9:05:05:21:6E:DD:A0:71:9D:82:E9 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/R87B-PvoyYd62QUFIW7doHGdguk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.96.192.0/18 Signature Algorithm: sha256WithRSAEncryption 52:2e:0d:da:ce:1d:8f:06:33:b7:39:16:94:fb:3d:7a:7b:f8: 1f:bf:47:24:e6:e0:90:b3:28:b9:8a:cc:eb:31:1a:18:7b:5e: fd:f7:5f:25:40:ce:42:68:cc:db:c7:cd:d6:9b:fb:7c:8c:66: f0:cb:a3:00:60:19:b9:9a:f9:42:d7:a4:66:29:e3:0b:1a:1b: 53:4e:da:c7:33:79:a2:2f:ec:f0:20:6a:32:67:cb:07:0d:be: 24:5b:75:ac:6f:30:b5:f1:b7:15:4b:69:00:f3:1b:b6:24:db: 97:8d:88:d5:a6:f6:7d:cd:7b:02:f4:d5:71:3a:86:7e:34:71: 93:7d:e4:42:23:2a:6d:7c:6e:24:21:ec:b9:46:1d:db:45:45: d1:a8:4b:8b:89:f3:ba:3e:3f:70:99:7a:a0:d4:40:12:dc:43: 91:92:ed:2a:23:e2:dc:fa:ac:ea:0d:1c:b1:03:98:57:1f:82: 54:4e:47:47:56:2e:95:ed:5f:f8:3a:e6:9f:18:e6:bb:a3:df: 7d:2c:37:d0:68:83:a2:53:ef:99:62:99:b1:ad:2a:eb:33:45: bd:ab:9c:2f:28:fb:af:41:09:4f:d5:5e:4e:c8:57:c9:d3:3d: 12:3c:f7:56:cc:db:cf:02:3d:38:38:1a:dd:0f:65:05:2d:5e: 6d:6d:10:37 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICI84wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTEyMTUx MjIwMjVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQ3Q0VDMUY4RkJFOEM5 ODc3QUQ5MDUwNTIxNkVEREEwNzE5RDgyRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5OoGulZMQULInGhYppmSCmOd8XZrmA/+89H7pEnh8+rs8d58S Las1rvpnzrSUkesQiUgGWw/GP37njZlxbjUOpOtmOaVxORHoGcPxsItcYHIri3tc ryogRbdJLcXYtV6cylxXfgMC0I+OkDkCfl42kuIx+cMz4+apZ7TYRiwR6jNH5pSR YR4wO5tFBM1++We9SSIzPX92VYMASkaXxV979nd53dHMzV03xY6cgrqyBARtAZKR IkT2tecWuEoOT6vh1/xAFNgBZxHwaxqTX/cUEvdAWOVXDAN52WRrFkALTvQct7za yJjAYSyd5Y0WBtngsp3QdcjTyrrlP13mSWwlAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUR87B+PvoyYd62QUFIW7doHGdgukwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvUjg3Qi1Qdm95WWQ2 MlFVRklXN2RvSEdkZ3VrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBmVgwDANBgkqhkiG9w0BAQsFAAOCAQEAUi4N2s4djwYztzkWlPs9env4H79H JObgkLMouYrM6zEaGHte/fdfJUDOQmjM28fN1pv7fIxm8MujAGAZuZr5QtekZinj CxobU07axzN5oi/s8CBqMmfLBw2+JFt1rG8wtfG3FUtpAPMbtiTbl42I1ab2fc17 AvTVcTqGfjRxk33kQiMqbXxuJCHsuUYd20VF0ahLi4nzuj4/cJl6oNRAEtxDkZLt KiPi3Pqs6g0csQOYVx+CVE5HR1Yule1f+Drmnxjmu6PffSw30GiDolPvmWKZsa0q 6zNFvaucLyj7r0EJT9VeTshXydM9Ejz3VszbzwI9ODga3Q9lBS1ebW0QNw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:38:47 2025 by rpki-client