This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1008/GFoY3c0huT5AcgeDD1txw4ZsUJY.roa File: GFoY3c0huT5AcgeDD1txw4ZsUJY.roa (raw, json) Hash identifier: S8dj+GBLsvU8XOwcrIiwuCkqZCbtLR2H2LVR4IXCQTs= Subject key identifier: 18:5A:18:DD:CD:21:B9:3E:40:72:07:83:0F:5B:71:C3:86:6C:50:96 Certificate issuer: /CN=0C253A719E8A44FC18E105B95AA2348B5DCED595 Certificate serial: 1B19 Authority key identifier: 0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/GFoY3c0huT5AcgeDD1txw4ZsUJY.roa Signing time: Wed 24 Dec 2025 08:04:31 +0000 ROA not before: Wed 24 Dec 2025 08:04:31 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 37963 IP address blocks: 103.52.72.0/22 maxlen: 24 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 6937 (0x1b19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C253A719E8A44FC18E105B95AA2348B5DCED595 Validity Not Before: Dec 24 08:04:31 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=185A18DDCD21B93E407207830F5B71C3866C5096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:40:56:5a:bc:e7:1b:8e:20:72:ac:01:4c:d6: 68:a6:d7:ef:bc:f3:ba:43:5b:3b:7d:4e:3e:61:b2: f4:38:1e:73:66:2b:d1:43:a0:61:53:ff:42:8f:00: 51:ee:1e:60:f8:a1:fb:3a:7d:b7:6d:6f:16:82:ad: 2d:38:73:93:1d:a7:9a:76:ac:bf:1e:4b:08:16:a4: 61:6f:0f:09:57:2f:6b:f4:ef:cd:b7:43:de:e0:0f: 19:6d:22:fc:4b:27:f9:77:56:13:61:56:01:8b:26: 30:4a:7f:4f:40:8d:54:09:6a:3e:4e:9c:f0:d4:f1: 27:b5:56:dd:d4:50:d0:61:ac:24:33:51:54:bf:35: 89:eb:0c:b7:c0:33:80:61:62:6e:d6:fe:6c:58:c2: ec:54:c0:f8:2a:2c:13:49:4b:5b:ba:47:ba:05:2f: 31:a6:3f:f5:fc:9a:5e:59:cd:14:76:9f:df:d0:b0: 2c:66:ce:9b:c5:a4:2b:40:3b:58:05:18:01:1e:d2: c0:33:50:88:50:e1:a0:87:6c:b9:20:e4:9f:d0:5c: fe:c4:3f:a8:2b:5f:db:ee:97:25:48:1f:9a:38:43: 5f:9b:89:ce:8a:6c:4e:9b:bd:6d:70:8a:92:2c:d4: 2f:e3:6a:7b:ec:01:df:9e:29:38:26:b5:69:8b:1c: a8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5A:18:DD:CD:21:B9:3E:40:72:07:83:0F:5B:71:C3:86:6C:50:96 X509v3 Authority Key Identifier: keyid:0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/GFoY3c0huT5AcgeDD1txw4ZsUJY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.52.72.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:90:ca:78:d7:73:ba:82:7f:87:e4:4b:f5:59:99:01:63:0f: 72:78:b5:1d:8a:e5:bd:9f:21:55:3a:90:2a:38:ef:38:0c:09: 7a:83:e0:b9:cf:dd:ee:18:9f:8a:a8:99:90:6c:97:60:e7:ba: 8a:b1:5d:a5:a0:d7:89:cf:ba:3c:13:fe:a0:5e:4b:e0:3f:b0: 3e:0b:73:99:6b:3f:af:84:59:74:2a:49:42:26:9f:57:82:ec: d1:f1:f6:89:b3:df:d6:ad:42:94:b3:5b:18:18:b3:14:30:c9: 5e:f9:f7:f0:28:ba:f5:e5:80:10:56:7c:a0:b6:38:8a:02:5d: 00:c0:a9:30:57:24:1e:8a:31:58:92:40:3e:7f:39:43:0f:ff: e8:c3:ad:34:53:56:07:cf:f5:12:93:64:1d:26:f7:9c:42:f7: d5:bf:d2:66:f6:b5:8d:ad:0f:10:a7:eb:09:da:80:34:66:79: 43:a6:66:d0:3b:e8:f8:6a:c1:e4:d3:7c:62:5c:a1:19:97:cd: 21:00:1d:b4:e4:85:f4:ad:58:56:ca:07:9f:88:56:26:0c:f1: 11:0a:42:8c:c9:9f:61:54:1f:3e:cf:2f:4e:f8:b7:0d:c7:be: d6:4f:9b:be:e4:fd:37:e8:08:a9:8b:48:d6:9f:72:3c:ff:d7: 20:4d:87:e1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGxkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEMy NTNBNzE5RThBNDRGQzE4RTEwNUI5NUFBMjM0OEI1RENFRDU5NTAeFw0yNTEyMjQw ODA0MzFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDE4NUExOEREQ0QyMUI5 M0U0MDcyMDc4MzBGNUI3MUMzODY2QzUwOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgQFZavOcbjiByrAFM1mim1++887pDWzt9Tj5hsvQ4HnNmK9FD oGFT/0KPAFHuHmD4ofs6fbdtbxaCrS04c5Mdp5p2rL8eSwgWpGFvDwlXL2v07823 Q97gDxltIvxLJ/l3VhNhVgGLJjBKf09AjVQJaj5OnPDU8Se1Vt3UUNBhrCQzUVS/ NYnrDLfAM4BhYm7W/mxYwuxUwPgqLBNJS1u6R7oFLzGmP/X8ml5ZzRR2n9/QsCxm zpvFpCtAO1gFGAEe0sAzUIhQ4aCHbLkg5J/QXP7EP6grX9vulyVIH5o4Q1+bic6K bE6bvW1wipIs1C/janvsAd+eKTgmtWmLHKh7AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUGFoY3c0huT5AcgeDD1txw4ZsUJYwHwYDVR0jBBgwFoAUDCU6cZ6KRPwY4QW5 WqI0i13O1ZUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTAw OC9EQ1U2Y1o2S1JQd1k0UVc1V3FJMGkxM08xWlUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RDVTZjWjZLUlB3WTRRVzVXcUkwaTEzTzFaVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwMDgvR0ZvWTNjMGh1VDVB Y2dlREQxdHh3NFpzVUpZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmc0SDANBgkqhkiG9w0BAQsFAAOCAQEAj5DKeNdzuoJ/h+RL9VmZAWMPcni1 HYrlvZ8hVTqQKjjvOAwJeoPguc/d7hifiqiZkGyXYOe6irFdpaDXic+6PBP+oF5L 4D+wPgtzmWs/r4RZdCpJQiafV4Ls0fH2ibPf1q1ClLNbGBizFDDJXvn38Ci69eWA EFZ8oLY4igJdAMCpMFckHooxWJJAPn85Qw//6MOtNFNWB8/1EpNkHSb3nEL31b/S Zva1ja0PEKfrCdqANGZ5Q6Zm0Dvo+GrB5NN8YlyhGZfNIQAdtOSF9K1YVsoHn4hW JgzxEQpCjMmfYVQfPs8vTvi3Dce+1k+bvuT9N+gIqYtI1p9yPP/XIE2H4Q== -----END CERTIFICATE-----Generated at Sat Jan 3 06:50:18 2026 by rpki-client