This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/JH59vsuM7iVdRg5FXev-wuRuSL0.roa File: JH59vsuM7iVdRg5FXev-wuRuSL0.roa (raw, json) Hash identifier: jeX+I+V1mk5JmsgCoNjkTJdev2zvTaXiYrNcYR6tSDM= Subject key identifier: 24:7E:7D:BE:CB:8C:EE:25:5D:46:0E:45:5D:EB:FE:C2:E4:6E:48:BD Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 180C Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JH59vsuM7iVdRg5FXev-wuRuSL0.roa Signing time: Sun 07 Dec 2025 09:26:03 +0000 ROA not before: Sun 07 Dec 2025 09:26:03 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 211392 IP address blocks: 45.250.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6156 (0x180c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Dec 7 09:26:03 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=247E7DBECB8CEE255D460E455DEBFEC2E46E48BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:ab:13:c4:8f:e5:86:b8:5a:98:ad:73:a9: 24:0a:fc:a4:18:a9:a6:77:fc:31:ea:f9:9d:f2:ec: f2:83:ac:7f:f9:6b:f6:c9:58:bf:a9:59:ec:97:db: 47:ed:24:d6:f6:a0:fd:6b:e0:05:39:a7:f8:6e:99: 38:64:e3:7a:79:ae:34:3a:12:82:92:df:f5:df:41: 94:91:dc:07:9d:d8:5f:a7:7e:fc:a6:8e:73:1c:da: 44:ca:d8:7f:96:13:a6:c9:5b:36:dc:08:7f:83:aa: 6e:ee:9c:4b:04:65:32:fa:7e:a4:c8:44:96:d7:64: e7:a0:37:8f:ea:91:08:8c:d4:40:ce:93:9f:0f:6d: 70:1e:24:dc:2c:d1:23:b3:d9:6a:c7:80:af:9a:39: ea:c5:a2:ac:c6:cd:a5:f1:bc:c0:0c:87:c6:82:83: 04:77:67:84:9a:19:7f:10:6a:93:9e:2f:2a:03:75: 31:fa:63:7c:1e:bf:5a:7e:bf:84:05:11:c6:7e:5c: 9d:47:2d:fe:d9:84:c9:0c:0c:33:e5:97:a6:78:90: 71:f5:d6:68:40:a8:0e:91:93:a2:ba:b9:c9:c1:1d: 33:8c:ff:3b:1f:10:c6:af:b7:db:70:12:2c:8f:e8: 47:a5:ae:3f:a8:09:ab:e2:5e:90:27:5e:f1:60:ef: 09:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7E:7D:BE:CB:8C:EE:25:5D:46:0E:45:5D:EB:FE:C2:E4:6E:48:BD X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JH59vsuM7iVdRg5FXev-wuRuSL0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.250.152.0/22 Signature Algorithm: sha256WithRSAEncryption 46:56:50:71:49:30:6c:2b:52:25:3e:65:8f:58:8a:6b:0f:08: bc:16:7c:a5:8c:67:cd:be:32:0f:38:ec:05:11:ca:b4:d9:f2: 4c:80:fb:d1:04:85:6d:fc:02:87:06:f6:ab:ca:ee:3e:38:2e: 29:7a:dc:06:f0:cb:7b:7e:65:96:45:b8:1c:a0:fb:f5:88:2b: 4a:95:76:cd:0b:16:46:45:21:da:06:dd:0f:0c:75:8d:40:10: 46:f3:f7:f6:2f:19:8d:32:e5:85:59:33:83:eb:c2:62:37:18: 0c:7e:59:5f:fd:14:25:aa:8b:95:c3:70:99:94:10:dc:67:cf: 7c:d8:0d:32:cd:5f:30:86:b9:24:db:1a:74:39:2c:d8:b1:6a: c6:5c:51:b5:db:88:92:c3:55:7a:72:e2:6b:63:f8:51:e5:c5: f0:96:91:67:27:e3:46:60:e3:46:4e:87:6f:c5:c1:2d:34:79: 5c:6e:5c:ae:79:14:79:79:0e:81:b2:06:f4:02:31:23:1a:8a: 19:c1:c4:ad:8e:cf:97:fb:41:57:b9:61:5f:c1:d8:82:5f:65: 89:77:85:ac:13:64:2a:ff:7d:ae:c0:17:03:0a:bd:fa:ea:1c: b6:27:ba:53:30:2b:76:dd:43:05:82:70:a2:6f:80:0e:1f:c9: 14:82:c7:40 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGAwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTEyMDcw OTI2MDNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDI0N0U3REJFQ0I4Q0VF MjU1RDQ2MEU0NTVERUJGRUMyRTQ2RTQ4QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAeasTxI/lhrhamK1zqSQK/KQYqaZ3/DHq+Z3y7PKDrH/5a/bJ WL+pWeyX20ftJNb2oP1r4AU5p/humThk43p5rjQ6EoKS3/XfQZSR3Aed2F+nfvym jnMc2kTK2H+WE6bJWzbcCH+Dqm7unEsEZTL6fqTIRJbXZOegN4/qkQiM1EDOk58P bXAeJNws0SOz2WrHgK+aOerFoqzGzaXxvMAMh8aCgwR3Z4SaGX8QapOeLyoDdTH6 Y3wev1p+v4QFEcZ+XJ1HLf7ZhMkMDDPll6Z4kHH11mhAqA6Rk6K6ucnBHTOM/zsf EMavt9twEiyP6Eelrj+oCaviXpAnXvFg7wltAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUJH59vsuM7iVdRg5FXev+wuRuSL0wHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvSkg1OXZzdU03aVZk Umc1Rlhldi13dVJ1U0wwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi36mDANBgkqhkiG9w0BAQsFAAOCAQEARlZQcUkwbCtSJT5lj1iKaw8IvBZ8 pYxnzb4yDzjsBRHKtNnyTID70QSFbfwChwb2q8ruPjguKXrcBvDLe35llkW4HKD7 9YgrSpV2zQsWRkUh2gbdDwx1jUAQRvP39i8ZjTLlhVkzg+vCYjcYDH5ZX/0UJaqL lcNwmZQQ3GfPfNgNMs1fMIa5JNsadDks2LFqxlxRtduIksNVenLia2P4UeXF8JaR ZyfjRmDjRk6Hb8XBLTR5XG5crnkUeXkOgbIG9AIxIxqKGcHErY7Pl/tBV7lhX8HY gl9liXeFrBNkKv99rsAXAwq9+uoctie6UzArdt1DBYJwom+ADh/JFILHQA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:08:00 2025 by rpki-client