This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/UgW99oa8FvERx8BX7lrm-6FWEOE.roa File: UgW99oa8FvERx8BX7lrm-6FWEOE.roa (raw, json) Hash identifier: w1HTgwfnTWC81wVgKs+vXq8ga2BzDZ9rHWI5XJm9mvk= Subject key identifier: 52:05:BD:F6:86:BC:16:F1:11:C7:C0:57:EE:5A:E6:FB:A1:56:10:E1 Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Certificate serial: 06DD Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/UgW99oa8FvERx8BX7lrm-6FWEOE.roa Signing time: Thu 11 Dec 2025 07:12:10 +0000 ROA not before: Thu 11 Dec 2025 07:12:10 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9812 IP address blocks: 2400:6600::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 21:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1757 (0x6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Validity Not Before: Dec 11 07:12:10 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=5205BDF686BC16F111C7C057EE5AE6FBA15610E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2f:cd:d5:bd:04:a2:13:94:fe:01:46:3a:24: 98:d3:39:39:65:01:f5:a4:85:8b:54:f3:19:8c:4f: 98:eb:cf:e4:15:d3:95:42:ff:83:68:c9:00:82:1f: fa:11:65:ce:48:b7:b5:7e:4b:b9:ff:ce:be:33:a9: 4c:24:05:4f:71:aa:40:88:4e:75:03:6f:25:20:33: e4:93:22:a5:09:32:75:96:6d:41:86:41:5d:3c:cc: 77:3e:40:a1:6a:41:3a:21:92:4e:f2:e4:d0:d5:b7: 98:04:92:55:16:eb:d9:15:10:65:33:67:2b:83:b0: 1d:1b:30:e8:e5:45:d3:19:a2:08:31:da:8a:be:a4: b4:83:4a:d0:e0:e8:6b:56:58:18:b0:c4:23:91:a1: 0f:fe:e2:47:e7:3d:c6:20:cb:0e:5b:e9:96:7d:80: 9f:5a:0d:47:6a:71:91:95:07:31:87:77:15:f8:e6: 19:1e:40:3f:b7:5e:2b:25:45:9c:cc:12:ac:e3:da: a8:05:4a:16:d1:c6:e1:5c:d8:64:1f:8c:e1:72:9d: 3a:2f:a8:8e:bf:f9:17:fe:84:82:61:51:33:32:c7: 0a:86:af:ea:30:c2:51:bd:a1:5d:28:cb:a6:50:fe: 1d:df:e9:8c:8e:43:12:36:9b:20:01:05:5f:52:6e: 24:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:05:BD:F6:86:BC:16:F1:11:C7:C0:57:EE:5A:E6:FB:A1:56:10:E1 X509v3 Authority Key Identifier: keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/UgW99oa8FvERx8BX7lrm-6FWEOE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:6600::/32 Signature Algorithm: sha256WithRSAEncryption 8e:aa:c8:ab:64:71:ce:b8:36:31:5c:59:43:38:b1:e7:a6:b0: ce:3a:ab:ac:1c:07:b1:91:8d:ec:13:f5:2d:ff:12:93:a3:6b: 22:6c:34:86:d2:7d:7b:0a:4b:76:a1:f1:30:aa:f9:8f:03:5d: 7b:46:ba:7d:fc:84:af:4c:1d:fe:38:e2:ec:c7:72:ef:cb:57: 1e:1e:df:9e:82:95:71:b9:d6:fd:b7:7b:45:c7:ed:d5:0c:4c: 95:54:ee:47:9e:06:b0:e6:88:68:70:b8:36:6a:cb:58:51:a9: 6b:c4:0d:f7:d8:66:aa:e5:4f:27:65:89:45:d9:eb:12:5e:87: 0f:6c:c9:25:90:30:6d:9d:ed:fd:fc:96:45:d4:1a:a7:f4:8b: db:3f:99:20:ca:94:8b:47:e5:7f:b9:a8:45:67:ef:9a:ef:10: 2e:d6:21:39:ad:d5:34:df:33:1f:e3:04:54:fb:c3:c7:f4:eb: 36:66:04:26:b4:1c:f4:fe:c3:94:68:90:e0:c2:2a:23:e0:41: 44:3e:fa:47:51:5e:5e:82:b2:a7:6b:70:e8:49:e5:20:70:5c: cc:9d:4e:ad:e5:c8:60:aa:1f:af:7e:c2:57:72:a1:1a:8c:aa: 7c:94:e5:00:a9:bf:0c:54:a5:b4:f2:ff:46:8e:b2:01:5a:6f: bb:d7:bc:4a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNTEyMTEw NzEyMTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDUyMDVCREY2ODZCQzE2 RjExMUM3QzA1N0VFNUFFNkZCQTE1NjEwRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsL83VvQSiE5T+AUY6JJjTOTllAfWkhYtU8xmMT5jrz+QV05VC /4NoyQCCH/oRZc5It7V+S7n/zr4zqUwkBU9xqkCITnUDbyUgM+STIqUJMnWWbUGG QV08zHc+QKFqQTohkk7y5NDVt5gEklUW69kVEGUzZyuDsB0bMOjlRdMZoggx2oq+ pLSDStDg6GtWWBiwxCORoQ/+4kfnPcYgyw5b6ZZ9gJ9aDUdqcZGVBzGHdxX45hke QD+3XislRZzMEqzj2qgFShbRxuFc2GQfjOFynTovqI6/+Rf+hIJhUTMyxwqGr+ow wlG9oV0oy6ZQ/h3f6YyOQxI2myABBV9SbiQHAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUUgW99oa8FvERx8BX7lrm+6FWEOEwHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi9VZ1c5OW9hOEZ2RVJ4OEJY N2xybS02RldFT0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA JABmADANBgkqhkiG9w0BAQsFAAOCAQEAjqrIq2Rxzrg2MVxZQzix56awzjqrrBwH sZGN7BP1Lf8Sk6NrImw0htJ9ewpLdqHxMKr5jwNde0a6ffyEr0wd/jji7Mdy78tX Hh7fnoKVcbnW/bd7Rcft1QxMlVTuR54GsOaIaHC4NmrLWFGpa8QN99hmquVPJ2WJ RdnrEl6HD2zJJZAwbZ3t/fyWRdQap/SL2z+ZIMqUi0flf7moRWfvmu8QLtYhOa3V NN8zH+MEVPvDx/TrNmYEJrQc9P7DlGiQ4MIqI+BBRD76R1FeXoKyp2tw6EnlIHBc zJ1OreXIYKofr37CV3KhGoyqfJTlAKm/DFSltPL/Ro6yAVpvu9e8Sg== -----END CERTIFICATE-----Generated at Thu Dec 18 20:53:53 2025 by rpki-client