This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/V4Vovn4ywsX7EpFsCP-glDaiwVs.roa File: V4Vovn4ywsX7EpFsCP-glDaiwVs.roa (raw, json) Hash identifier: nCegXRubvX/CUyOdArbV6bSZa60dJyzLi0VHmTSzAjc= Subject key identifier: 57:85:68:BE:7E:32:C2:C5:FB:12:91:6C:08:FF:A0:94:36:A2:C1:5B Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0C52 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/V4Vovn4ywsX7EpFsCP-glDaiwVs.roa Signing time: Wed 17 Dec 2025 02:14:56 +0000 ROA not before: Wed 17 Dec 2025 02:14:56 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9808 IP address blocks: 223.161.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 07:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3154 (0xc52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Dec 17 02:14:56 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=578568BE7E32C2C5FB12916C08FFA09436A2C15B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7e:49:3d:e0:88:a5:19:9a:c0:49:ac:5f:22: 44:95:33:7e:fd:f5:f7:8e:d6:02:7d:b7:22:89:a8: 06:cb:5e:ce:32:08:df:24:0f:51:d9:3d:1c:65:0f: 0c:18:45:88:1d:66:e1:50:ee:53:f2:d6:42:6e:f2: 96:6b:34:c7:51:a8:5e:fe:2c:45:c5:1e:05:f9:cb: c5:90:b8:ad:48:1f:29:2b:cd:0d:ef:3f:02:8e:b7: a4:5d:5d:b8:0f:c1:b6:89:fb:36:a2:38:bd:de:05: 94:f4:71:6d:e9:22:79:79:83:9d:a8:8f:4c:42:68: a4:70:6d:f4:8e:ac:87:8b:55:a4:3d:61:e8:0d:e7: 29:7c:0f:28:a9:f2:23:dc:c7:29:2c:40:be:e7:9b: 72:62:a9:14:0f:91:ab:45:1e:07:ab:e9:ef:9f:82: b5:07:a8:d7:b9:51:9a:90:11:94:8a:fb:c4:af:1f: a1:57:37:29:e3:cb:19:dd:6a:69:5f:b3:42:46:e8: 13:37:96:12:57:49:ff:8e:30:b4:a6:51:f3:82:6f: a6:77:c4:bb:1c:78:aa:c2:51:1b:1e:83:88:a6:51: a1:a8:97:3e:4e:03:7b:10:44:21:e7:1a:90:fe:07: f6:52:24:3f:9a:76:c1:5f:c5:c0:37:70:9a:0e:3b: ed:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:85:68:BE:7E:32:C2:C5:FB:12:91:6C:08:FF:A0:94:36:A2:C1:5B X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/V4Vovn4ywsX7EpFsCP-glDaiwVs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.161.242.0/23 Signature Algorithm: sha256WithRSAEncryption 25:1d:54:b1:48:96:42:d6:40:4d:a2:9a:75:a8:7b:3c:f4:18: 96:45:31:26:60:83:a4:90:d5:9b:8b:a0:73:c5:e5:c8:69:db: 5e:13:37:4a:18:df:6e:85:11:9f:08:8e:a3:2b:09:26:83:45: 6a:0e:15:83:f4:dd:ba:91:e5:f7:ec:2b:b6:3e:90:10:32:8b: 62:43:05:71:07:cf:54:3c:f8:2d:0c:b8:21:bb:07:ab:19:e1: 09:ee:f2:4b:1d:1a:44:f8:ea:24:43:df:e0:6e:0d:ec:6c:d4: 47:1a:bb:b7:4a:b8:11:54:5a:a7:9b:bc:47:c2:e2:f7:7e:81: 88:3f:ff:a9:b0:1b:09:89:7d:e3:72:2e:f5:25:10:16:56:5e: 41:44:03:0e:77:bd:81:bd:13:99:2b:be:5b:2d:45:a2:52:a0: 35:da:39:4a:6e:dd:05:e9:be:10:d6:8b:97:27:31:c3:e1:20: e8:f6:fe:5c:30:39:d5:4e:54:ac:1e:75:9e:f5:c3:83:bd:39: 50:13:20:7f:ec:fb:ef:50:c4:4d:97:71:92:69:6a:4d:0a:99: df:f7:ee:fa:e1:2d:16:6b:1a:ae:1f:79:ce:6e:c6:cd:d4:71: 69:d4:2c:ea:70:05:0d:16:20:bc:44:0a:c1:71:96:15:27:0e: 20:9a:36:24 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICDFIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTEyMTcw MjE0NTZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDU3ODU2OEJFN0UzMkMy QzVGQjEyOTE2QzA4RkZBMDk0MzZBMkMxNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlfkk94IilGZrASaxfIkSVM3799feO1gJ9tyKJqAbLXs4yCN8k D1HZPRxlDwwYRYgdZuFQ7lPy1kJu8pZrNMdRqF7+LEXFHgX5y8WQuK1IHykrzQ3v PwKOt6RdXbgPwbaJ+zaiOL3eBZT0cW3pInl5g52oj0xCaKRwbfSOrIeLVaQ9YegN 5yl8Dyip8iPcxyksQL7nm3JiqRQPkatFHger6e+fgrUHqNe5UZqQEZSK+8SvH6FX Nynjyxndamlfs0JG6BM3lhJXSf+OMLSmUfOCb6Z3xLsceKrCURseg4imUaGolz5O A3sQRCHnGpD+B/ZSJD+adsFfxcA3cJoOO+19AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUV4Vovn4ywsX7EpFsCP+glDaiwVswHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9WNFZvdm40eXdzWDdFcEZz Q1AtZ2xEYWl3VnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 36HyMA0GCSqGSIb3DQEBCwUAA4IBAQAlHVSxSJZC1kBNopp1qHs89BiWRTEmYIOk kNWbi6BzxeXIadteEzdKGN9uhRGfCI6jKwkmg0VqDhWD9N26keX37Cu2PpAQMoti QwVxB89UPPgtDLghuwerGeEJ7vJLHRpE+OokQ9/gbg3sbNRHGru3SrgRVFqnm7xH wuL3foGIP/+psBsJiX3jci71JRAWVl5BRAMOd72BvROZK75bLUWiUqA12jlKbt0F 6b4Q1ouXJzHD4SDo9v5cMDnVTlSsHnWe9cODvTlQEyB/7PvvUMRNl3GSaWpNCpnf 9+764S0WaxquH3nObsbN1HFp1CzqcAUNFiC8RArBcZYVJw4gmjYk -----END CERTIFICATE-----Generated at Sun Dec 21 04:20:08 2025 by rpki-client