This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/c4KCiWRCuIG1XDEYQYSJTUN-Ijk.roa File: c4KCiWRCuIG1XDEYQYSJTUN-Ijk.roa (raw, json) Hash identifier: Q1i7f9GdESVaOj4GbJxZa7iYoMiEdPeKvbQEvHlQoDA= Subject key identifier: 73:82:82:89:64:42:B8:81:B5:5C:31:18:41:84:89:4D:43:7E:22:39 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0C50 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/c4KCiWRCuIG1XDEYQYSJTUN-Ijk.roa Signing time: Wed 17 Dec 2025 02:14:19 +0000 ROA not before: Wed 17 Dec 2025 02:14:19 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 56045 IP address blocks: 223.161.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 07:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3152 (0xc50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Dec 17 02:14:19 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=738282896442B881B55C31184184894D437E2239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4f:42:15:12:89:05:3f:95:ed:1d:98:e3:a8: 83:a0:d7:77:b1:16:db:24:7f:88:af:ae:1c:b2:58: 3e:78:07:d2:be:5e:54:50:79:8d:42:d1:91:cf:0d: 5c:18:8a:87:32:50:84:e2:95:6c:0d:57:d4:a6:fd: 95:2f:da:0f:1c:0a:c9:02:d0:7d:2a:46:fd:01:55: 6e:53:ed:f7:9f:88:5d:ce:1f:24:ac:9b:1d:c7:a1: 7e:52:dc:6d:6c:ac:d8:a6:78:a5:73:f3:9b:39:d7: 33:86:2a:9b:e6:3d:ef:f0:bc:ad:9b:b0:ce:87:fb: 9f:76:00:87:79:89:a7:64:92:d8:c1:34:a1:f7:34: cf:20:03:de:cf:9a:9d:bb:27:0a:30:eb:a3:f9:35: d5:f5:29:70:8c:93:92:8a:9a:07:75:b5:98:0c:19: ae:71:39:df:10:94:d1:3b:ef:20:13:c3:4b:4d:10: 0c:9b:7e:6f:af:17:6b:5b:6a:b6:2a:84:10:02:e2: 6b:0b:d4:59:e4:53:d8:f8:1c:94:9e:09:df:69:31: c9:13:fe:20:30:e0:0e:b3:17:d9:cb:67:5c:47:88: 71:74:bc:64:3e:bf:e1:92:a9:36:cd:46:3f:5f:51: d3:f7:b1:35:e9:80:a4:5b:de:7c:d5:86:9b:db:bd: 1f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:82:82:89:64:42:B8:81:B5:5C:31:18:41:84:89:4D:43:7E:22:39 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/c4KCiWRCuIG1XDEYQYSJTUN-Ijk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.161.240.0/23 Signature Algorithm: sha256WithRSAEncryption 38:58:ba:93:81:00:cd:ab:93:65:0b:09:a0:2f:cd:86:34:d0: 7c:82:7f:67:d4:11:2c:b7:2e:e2:6c:13:c7:0c:31:65:0d:bf: 89:a1:d0:0e:63:7b:ea:c2:b1:a7:0e:da:3b:e0:b4:e0:d1:af: e3:64:4d:2e:be:90:99:a6:f3:69:38:2d:56:d8:3c:14:db:d1: 5a:d0:d7:c7:b2:21:46:58:af:3c:8d:67:b7:78:ec:02:22:de: 85:da:de:80:b3:8b:a5:f7:38:f6:7f:74:4d:51:17:93:fa:dc: ad:98:3d:18:9e:76:23:0c:85:e9:22:88:28:ea:9a:82:be:aa: 98:b7:fd:5f:c6:97:5d:5f:35:8e:93:e6:c5:78:bf:36:a6:8f: 58:93:1a:4b:0e:ae:6a:b6:38:c2:a1:10:1b:33:5b:d5:b9:6b: 27:ee:56:a7:11:38:e3:27:9c:ad:29:10:ac:ea:f0:5f:53:7c: a1:24:f9:0a:9b:30:59:3d:8b:5e:69:84:40:0d:57:e3:5f:79: 00:2b:f0:06:26:4f:4f:ee:a8:4e:e9:c4:1d:90:c1:db:ef:fd: ae:e6:aa:07:6b:21:44:ba:a7:3c:b7:49:48:8c:65:b6:5c:95: db:6b:4a:a8:7f:05:64:b5:78:16:0d:eb:84:3c:5d:c6:32:db: e5:7d:f1:d0 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICDFAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTEyMTcw MjE0MTlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDczODI4Mjg5NjQ0MkI4 ODFCNTVDMzExODQxODQ4OTRENDM3RTIyMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtT0IVEokFP5XtHZjjqIOg13exFtskf4ivrhyyWD54B9K+XlRQ eY1C0ZHPDVwYiocyUITilWwNV9Sm/ZUv2g8cCskC0H0qRv0BVW5T7fefiF3OHySs mx3HoX5S3G1srNimeKVz85s51zOGKpvmPe/wvK2bsM6H+592AId5iadkktjBNKH3 NM8gA97Pmp27Jwow66P5NdX1KXCMk5KKmgd1tZgMGa5xOd8QlNE77yATw0tNEAyb fm+vF2tbarYqhBAC4msL1FnkU9j4HJSeCd9pMckT/iAw4A6zF9nLZ1xHiHF0vGQ+ v+GSqTbNRj9fUdP3sTXpgKRb3nzVhpvbvR8JAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUc4KCiWRCuIG1XDEYQYSJTUN+IjkwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9jNEtDaVdSQ3VJRzFYREVZ UVlTSlRVTi1Jamsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 36HwMA0GCSqGSIb3DQEBCwUAA4IBAQA4WLqTgQDNq5NlCwmgL82GNNB8gn9n1BEs ty7ibBPHDDFlDb+JodAOY3vqwrGnDto74LTg0a/jZE0uvpCZpvNpOC1W2DwU29Fa 0NfHsiFGWK88jWe3eOwCIt6F2t6As4ul9zj2f3RNUReT+tytmD0YnnYjDIXpIogo 6pqCvqqYt/1fxpddXzWOk+bFeL82po9YkxpLDq5qtjjCoRAbM1vVuWsn7lanETjj J5ytKRCs6vBfU3yhJPkKmzBZPYteaYRADVfjX3kAK/AGJk9P7qhO6cQdkMHb7/2u 5qoHayFEuqc8t0lIjGW2XJXba0qofwVktXgWDeuEPF3GMtvlffHQ -----END CERTIFICATE-----Generated at Sun Dec 21 04:19:53 2025 by rpki-client