This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/daOgo1YsCVFH__njfKZqxYZc5qg.roa File: daOgo1YsCVFH__njfKZqxYZc5qg.roa (raw, json) Hash identifier: 4bShhZ3IXvlgL1c2G92FwqY10vrGXWv+Y5uhOUJX/4k= Subject key identifier: 75:A3:A0:A3:56:2C:09:51:47:FF:F9:E3:7C:A6:6A:C5:86:5C:E6:A8 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0C4C Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/daOgo1YsCVFH__njfKZqxYZc5qg.roa Signing time: Wed 17 Dec 2025 02:12:32 +0000 ROA not before: Wed 17 Dec 2025 02:12:32 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 56045 IP address blocks: 223.160.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 07:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3148 (0xc4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Dec 17 02:12:32 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=75A3A0A3562C095147FFF9E37CA66AC5865CE6A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7e:9c:34:df:b3:60:8c:c4:f4:06:fa:80:d7: a0:40:31:fc:40:32:e1:f9:0d:bf:2f:cb:5a:40:5c: fb:b4:b8:47:58:81:93:60:77:9d:a3:20:d0:bd:02: 72:12:b6:88:fc:ab:97:12:dd:76:f5:47:83:16:51: 03:57:50:09:be:97:3c:55:77:a7:01:41:ed:20:83: 8b:19:e9:2d:75:73:ad:09:62:d0:46:d2:c6:36:d0: 03:6f:67:14:c9:a6:77:04:2c:f8:c6:e8:e5:01:b1: ca:49:e2:b2:26:d9:2a:6b:f5:ec:5d:30:bf:9c:3f: 87:3f:91:80:8d:26:92:fc:42:bc:fb:28:30:05:4b: 20:d6:02:9f:4f:bc:47:49:68:4f:db:60:40:97:85: 4e:e9:de:ac:13:ff:61:7b:59:68:60:fd:87:25:67: 62:14:92:99:1c:00:38:d6:f2:ca:80:9f:42:cf:e6: dd:a5:4e:84:2b:c0:fe:ad:22:6e:9c:c8:a0:3c:6f: dc:5f:97:83:cf:2c:29:01:e1:31:aa:e5:76:eb:68: 43:b6:79:50:7c:b2:dc:64:53:81:21:fa:a4:5c:3b: f3:1c:43:3e:de:f1:03:f9:59:5b:31:de:1e:63:22: 27:91:5d:66:19:00:e5:66:66:a8:04:78:75:38:46: 62:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A3:A0:A3:56:2C:09:51:47:FF:F9:E3:7C:A6:6A:C5:86:5C:E6:A8 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/daOgo1YsCVFH__njfKZqxYZc5qg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.216.0/22 Signature Algorithm: sha256WithRSAEncryption 38:e9:6f:d8:1c:34:66:f8:7e:2f:8c:5a:a7:5a:27:82:98:dc: 96:a4:20:ae:c4:a9:2c:6c:ce:0b:69:14:e3:ad:a1:cb:5b:12: 7f:00:1b:42:75:1c:d3:d2:1f:41:62:a1:ae:21:33:f0:f6:47: 27:53:a1:29:42:b8:2b:a8:be:c0:74:fc:17:f4:3c:cb:e9:78: 03:12:2c:34:a9:c9:62:d0:a3:08:de:6e:3e:36:ff:89:ee:64: 36:f7:e2:2f:b6:e4:92:8e:ce:97:68:7a:b5:ed:ca:94:93:09: 80:20:f8:23:f8:28:c7:79:1b:f0:db:88:7b:51:af:12:0a:4e: a6:a5:cc:cf:c7:fc:a3:b2:d2:d4:03:e4:fc:ed:39:3b:b6:6e: 84:03:61:c1:d0:32:d2:a5:4e:bb:34:c1:78:8c:c2:c5:1c:c2: c4:b8:ad:52:3e:09:37:b4:28:49:04:8f:f2:66:bd:38:e7:f8: 22:9c:16:e3:29:2e:90:18:6f:0e:3e:71:46:a7:f5:d1:ae:ba: 06:ca:dc:7e:15:a1:0e:f0:9d:2e:85:e6:61:41:46:59:4d:fa: 46:fe:e1:fd:84:ba:e1:36:be:3c:e3:6b:35:c4:34:62:7a:9f: 6e:e7:82:66:d8:97:58:71:83:8e:6f:48:cf:80:76:14:ba:43: a7:8f:fc:74 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICDEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTEyMTcw MjEyMzJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDc1QTNBMEEzNTYyQzA5 NTE0N0ZGRjlFMzdDQTY2QUM1ODY1Q0U2QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhfpw037NgjMT0BvqA16BAMfxAMuH5Db8vy1pAXPu0uEdYgZNg d52jINC9AnIStoj8q5cS3Xb1R4MWUQNXUAm+lzxVd6cBQe0gg4sZ6S11c60JYtBG 0sY20ANvZxTJpncELPjG6OUBscpJ4rIm2Spr9exdML+cP4c/kYCNJpL8Qrz7KDAF SyDWAp9PvEdJaE/bYECXhU7p3qwT/2F7WWhg/YclZ2IUkpkcADjW8sqAn0LP5t2l ToQrwP6tIm6cyKA8b9xfl4PPLCkB4TGq5XbraEO2eVB8stxkU4Eh+qRcO/McQz7e 8QP5WVsx3h5jIieRXWYZAOVmZqgEeHU4RmLLAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUdaOgo1YsCVFH//njfKZqxYZc5qgwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9kYU9nbzFZc0NWRkhfX25q ZktacXhZWmM1cWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC 36DYMA0GCSqGSIb3DQEBCwUAA4IBAQA46W/YHDRm+H4vjFqnWieCmNyWpCCuxKks bM4LaRTjraHLWxJ/ABtCdRzT0h9BYqGuITPw9kcnU6EpQrgrqL7AdPwX9DzL6XgD Eiw0qcli0KMI3m4+Nv+J7mQ29+IvtuSSjs6XaHq17cqUkwmAIPgj+CjHeRvw24h7 Ua8SCk6mpczPx/yjstLUA+T87Tk7tm6EA2HB0DLSpU67NMF4jMLFHMLEuK1SPgk3 tChJBI/yZr045/ginBbjKS6QGG8OPnFGp/XRrroGytx+FaEO8J0uheZhQUZZTfpG /uH9hLrhNr4842s1xDRiep9u54Jm2JdYcYOOb0jPgHYUukOnj/x0 -----END CERTIFICATE-----Generated at Sun Dec 21 04:22:35 2025 by rpki-client