This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1008/ljHKtUvHDkf9lBkanIoc-YuHVB4.roa
File: ljHKtUvHDkf9lBkanIoc-YuHVB4.roa (raw, json)
Hash identifier: yVBKihHdvHcmNN6jWu6AQcR8iBGZilDk4RxvxP/Hxu8=
Subject key identifier: 96:31:CA:B5:4B:C7:0E:47:FD:94:19:1A:9C:8A:1C:F9:8B:87:54:1E
Certificate issuer: /CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Certificate serial: 1B1A
Authority key identifier: 0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/ljHKtUvHDkf9lBkanIoc-YuHVB4.roa
Signing time: Wed 24 Dec 2025 08:04:31 +0000
ROA not before: Wed 24 Dec 2025 08:04:31 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 37963
IP address blocks: 103.52.76.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6938 (0x1b1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Validity
Not Before: Dec 24 08:04:31 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=9631CAB54BC70E47FD94191A9C8A1CF98B87541E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:f7:41:bf:54:13:c6:d3:21:d4:31:fe:10:
9c:dd:c2:7f:10:63:02:82:69:37:3f:28:be:c6:3b:
d3:ce:c9:ab:ea:cf:9b:fe:21:3b:11:eb:a5:72:a1:
09:3c:77:4e:ca:c5:29:54:27:f1:f0:01:1c:6a:43:
d0:4d:ca:f8:20:dc:79:83:96:69:ba:1b:42:04:d9:
5e:34:03:3b:90:20:03:88:4e:eb:88:88:73:a3:58:
49:af:bb:ba:62:10:60:c2:42:da:4a:3f:69:60:e7:
58:40:bc:18:c0:52:2b:1d:d9:90:ad:c8:a0:5f:b2:
25:17:21:10:c7:1d:1f:b5:c8:cf:7c:4e:b6:a8:f7:
f8:2e:d3:65:4b:66:49:df:2d:96:4b:e1:1e:7b:42:
f6:87:8c:a0:fe:64:36:f6:bf:8d:81:e0:13:85:8b:
45:ac:aa:9e:95:58:f5:d8:5a:de:d4:e0:31:68:e2:
9a:4d:4a:39:be:4d:d4:4f:9a:6c:25:6f:8d:6e:c4:
7b:c7:7a:9e:f1:60:da:ee:3f:83:57:e6:c7:b5:a5:
ee:51:fb:ea:bd:39:1c:5d:9b:aa:b5:fe:2a:1f:8e:
a3:83:f7:33:54:8c:0a:50:17:45:35:8f:cf:8f:e9:
06:cf:f3:00:42:fe:7a:e7:91:58:1e:5a:61:03:5e:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:31:CA:B5:4B:C7:0E:47:FD:94:19:1A:9C:8A:1C:F9:8B:87:54:1E
X509v3 Authority Key Identifier:
keyid:0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/ljHKtUvHDkf9lBkanIoc-YuHVB4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.52.76.0/22
Signature Algorithm: sha256WithRSAEncryption
26:c5:55:c5:ca:0d:3f:fd:09:df:f9:47:04:6e:84:08:74:71:
cc:54:e1:c8:ef:30:8e:ca:d4:e1:fb:ef:16:ab:11:4f:a2:11:
23:a5:e6:59:80:4f:b6:c9:cf:85:fc:b9:11:f0:10:e1:ef:ff:
88:d4:7c:c5:a6:c5:9b:49:38:95:7d:d0:e9:fc:11:16:6d:1a:
c0:62:1d:8e:5d:b8:a5:e5:77:b0:af:a0:6c:3a:cd:0e:16:71:
8b:fd:a3:af:69:26:33:12:00:f3:80:07:4d:23:29:74:b4:6f:
c1:43:dd:0d:09:91:a4:d8:80:4e:d7:ed:79:f1:c5:5a:02:aa:
98:b5:3e:5c:b4:de:dd:11:2a:3d:86:bf:23:f9:89:d5:44:f9:
1c:41:4c:ed:b9:9c:1a:34:58:48:43:67:0c:c3:09:dd:ca:49:
ba:ef:fe:c3:0b:e7:a4:ea:b1:e7:50:ee:e1:31:b8:9c:57:e6:
90:1f:14:1a:e0:50:ab:35:9b:90:c6:aa:c7:82:42:f4:cc:7d:
4f:75:b7:ac:0a:41:cd:40:ed:c9:c8:b7:c6:9b:a3:8d:f1:e6:
cb:e8:db:a1:99:fc:a7:57:a9:28:fc:9f:a6:c9:fc:77:5a:15:
af:82:b1:33:ef:f5:51:2a:0c:e7:e9:97:dc:b4:74:d2:df:8c:
f4:54:8f:d0
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICGxowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEMy
NTNBNzE5RThBNDRGQzE4RTEwNUI5NUFBMjM0OEI1RENFRDU5NTAeFw0yNTEyMjQw
ODA0MzFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDk2MzFDQUI1NEJDNzBF
NDdGRDk0MTkxQTlDOEExQ0Y5OEI4NzU0MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+TPdBv1QTxtMh1DH+EJzdwn8QYwKCaTc/KL7GO9POyavqz5v+
ITsR66VyoQk8d07KxSlUJ/HwARxqQ9BNyvgg3HmDlmm6G0IE2V40AzuQIAOITuuI
iHOjWEmvu7piEGDCQtpKP2lg51hAvBjAUisd2ZCtyKBfsiUXIRDHHR+1yM98Trao
9/gu02VLZknfLZZL4R57QvaHjKD+ZDb2v42B4BOFi0Wsqp6VWPXYWt7U4DFo4ppN
Sjm+TdRPmmwlb41uxHvHep7xYNruP4NX5se1pe5R++q9ORxdm6q1/iofjqOD9zNU
jApQF0U1j8+P6QbP8wBC/nrnkVgeWmEDXuktAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUljHKtUvHDkf9lBkanIoc+YuHVB4wHwYDVR0jBBgwFoAUDCU6cZ6KRPwY4QW5
WqI0i13O1ZUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTAw
OC9EQ1U2Y1o2S1JQd1k0UVc1V3FJMGkxM08xWlUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0RDVTZjWjZLUlB3WTRRVzVXcUkwaTEzTzFaVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwMDgvbGpIS3RVdkhEa2Y5
bEJrYW5Jb2MtWXVIVkI0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmc0TDANBgkqhkiG9w0BAQsFAAOCAQEAJsVVxcoNP/0J3/lHBG6ECHRxzFTh
yO8wjsrU4fvvFqsRT6IRI6XmWYBPtsnPhfy5EfAQ4e//iNR8xabFm0k4lX3Q6fwR
Fm0awGIdjl24peV3sK+gbDrNDhZxi/2jr2kmMxIA84AHTSMpdLRvwUPdDQmRpNiA
TtftefHFWgKqmLU+XLTe3REqPYa/I/mJ1UT5HEFM7bmcGjRYSENnDMMJ3cpJuu/+
wwvnpOqx51Du4TG4nFfmkB8UGuBQqzWbkMaqx4JC9Mx9T3W3rApBzUDtyci3xpuj
jfHmy+jboZn8p1epKPyfpsn8d1oVr4KxM+/1USoM5+mX3LR00t+M9FSP0A==
-----END CERTIFICATE-----
Generated at Sat Jan 3 06:49:03 2026 by rpki-client