This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/m77NKwaXPnVXcT4jxd7Vk_PfAuU.roa File: m77NKwaXPnVXcT4jxd7Vk_PfAuU.roa (raw, json) Hash identifier: uxoD6np/O5KWwVVH1lpj3cvUh2sHi2aY5eGdt+ZlMP8= Subject key identifier: 9B:BE:CD:2B:06:97:3E:75:57:71:3E:23:C5:DE:D5:93:F3:DF:02:E5 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0C4E Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/m77NKwaXPnVXcT4jxd7Vk_PfAuU.roa Signing time: Wed 17 Dec 2025 02:13:19 +0000 ROA not before: Wed 17 Dec 2025 02:13:19 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9808 IP address blocks: 223.160.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 07:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3150 (0xc4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Dec 17 02:13:19 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=9BBECD2B06973E7557713E23C5DED593F3DF02E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:0e:47:4a:a1:d7:39:aa:8b:dd:9b:cc:d2: 36:08:42:17:40:36:2b:e4:dc:9d:ad:1a:81:9b:52: 10:66:20:b6:b5:9a:9c:37:5d:e7:29:4a:2b:98:d7: 8b:f9:d5:e2:54:9c:fb:d3:f7:aa:78:2f:0c:de:65: 9e:4a:c8:d1:68:b5:f8:88:9f:2c:d8:86:e4:0c:1b: 5c:d0:ab:46:fa:3a:41:94:6e:2d:be:89:95:40:ec: 54:46:81:15:d5:0b:47:87:4a:ee:28:8f:61:27:ab: 5e:70:38:cf:19:ff:dd:2f:73:7b:c9:dd:48:9a:c8: 9f:7e:eb:67:c6:f2:e2:99:34:8d:2c:7d:15:08:1d: 1b:8d:c3:f3:f4:83:1a:90:be:4a:79:a2:93:5c:e9: da:fb:ab:36:a2:98:11:d9:66:67:01:1b:da:ea:96: 23:61:12:16:30:b9:fa:ca:03:f0:43:4e:6e:18:c6: c2:02:85:cf:f7:29:6e:55:e5:60:19:b1:0b:6e:34: 86:47:fb:8f:92:c0:eb:8e:a6:4b:76:9f:f3:0e:0f: 1d:13:e8:83:fd:6f:02:f0:cd:94:e8:ed:14:8b:3b: bd:c4:be:c4:f3:f2:90:4c:fe:b8:1d:dd:b8:d3:bf: e3:55:3c:70:87:cb:2a:a4:18:a6:6e:da:77:ba:ed: 46:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BE:CD:2B:06:97:3E:75:57:71:3E:23:C5:DE:D5:93:F3:DF:02:E5 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/m77NKwaXPnVXcT4jxd7Vk_PfAuU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.220.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:e8:39:7a:79:c8:aa:be:23:6e:46:8f:9a:88:4a:3c:d4:f3: fa:85:59:b3:dc:cd:2c:dd:68:34:f0:66:66:d4:e7:89:4e:3d: 7d:68:7f:a5:f5:bd:c8:f9:9e:ca:72:8d:0f:c7:c4:1c:4e:0e: 35:cb:36:4d:4f:15:16:47:2c:90:67:83:75:b2:2f:b3:e0:5f: c5:f0:f2:72:93:5b:dc:dd:02:ae:59:aa:8c:20:3d:98:77:64: 5f:94:00:b5:a9:ff:7f:33:1d:ef:74:43:fe:44:46:61:42:67: 0d:e7:05:fb:03:44:dd:69:3d:df:3e:59:b5:13:4c:a7:f6:d7: 7a:be:bf:d5:16:46:01:92:91:2b:43:8f:1c:98:10:e5:44:df: d0:76:c2:0a:93:d0:97:53:db:23:f1:ba:62:d6:dc:21:bd:54: f5:da:82:45:5c:d0:39:68:0e:47:6d:75:bb:96:03:c4:1b:be: 2b:8a:1c:3a:c3:68:65:fe:9a:0c:a8:6d:69:7b:07:53:a3:30: b3:f2:ca:33:28:86:a9:c9:00:ae:46:6e:d0:f5:2b:63:89:55: 7d:04:0d:9f:cf:1e:ec:9c:1e:7a:fb:9d:e0:4e:96:9f:bb:95: 61:c0:b6:d2:f1:60:6d:61:ea:d0:f9:ce:87:1e:4b:16:fc:9d: 63:f0:5f:b0 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICDE4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTEyMTcw MjEzMTlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDlCQkVDRDJCMDY5NzNF NzU1NzcxM0UyM0M1REVENTkzRjNERjAyRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkiw5HSqHXOaqL3ZvM0jYIQhdANivk3J2tGoGbUhBmILa1mpw3 XecpSiuY14v51eJUnPvT96p4LwzeZZ5KyNFotfiInyzYhuQMG1zQq0b6OkGUbi2+ iZVA7FRGgRXVC0eHSu4oj2Enq15wOM8Z/90vc3vJ3UiayJ9+62fG8uKZNI0sfRUI HRuNw/P0gxqQvkp5opNc6dr7qzaimBHZZmcBG9rqliNhEhYwufrKA/BDTm4YxsIC hc/3KW5V5WAZsQtuNIZH+4+SwOuOpkt2n/MODx0T6IP9bwLwzZTo7RSLO73EvsTz 8pBM/rgd3bjTv+NVPHCHyyqkGKZu2ne67Ua5AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUm77NKwaXPnVXcT4jxd7Vk/PfAuUwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9tNzdOS3dhWFBuVlhjVDRq eGQ3VmtfUGZBdVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC 36DcMA0GCSqGSIb3DQEBCwUAA4IBAQAO6Dl6eciqviNuRo+aiEo81PP6hVmz3M0s 3Wg08GZm1OeJTj19aH+l9b3I+Z7Kco0Px8QcTg41yzZNTxUWRyyQZ4N1si+z4F/F 8PJyk1vc3QKuWaqMID2Yd2RflAC1qf9/Mx3vdEP+REZhQmcN5wX7A0TdaT3fPlm1 E0yn9td6vr/VFkYBkpErQ48cmBDlRN/QdsIKk9CXU9sj8bpi1twhvVT12oJFXNA5 aA5HbXW7lgPEG74rihw6w2hl/poMqG1pewdTozCz8sozKIapyQCuRm7Q9StjiVV9 BA2fzx7snB56+53gTpafu5VhwLbS8WBtYerQ+c6HHksW/J1j8F+w -----END CERTIFICATE-----Generated at Sun Dec 21 04:21:18 2025 by rpki-client