This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1008/x_nQ0DoJuzm99lv6JwnfgqcQQlI.roa
File: x_nQ0DoJuzm99lv6JwnfgqcQQlI.roa (raw, json)
Hash identifier: KKLN3wj6w6+GZPg4mWY+9cSane2EnXX2A3ZYmL8Aiyg=
Subject key identifier: C7:F9:D0:D0:3A:09:BB:39:BD:F6:5B:FA:27:09:DF:82:A7:10:42:52
Certificate issuer: /CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Certificate serial: 1B1F
Authority key identifier: 0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/x_nQ0DoJuzm99lv6JwnfgqcQQlI.roa
Signing time: Thu 25 Dec 2025 02:28:46 +0000
ROA not before: Thu 25 Dec 2025 02:28:46 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 37963
IP address blocks: 103.49.76.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6943 (0x1b1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Validity
Not Before: Dec 25 02:28:46 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=C7F9D0D03A09BB39BDF65BFA2709DF82A7104252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:55:9d:0b:64:d9:98:81:cd:b0:a7:64:ef:
e3:81:55:16:b5:9a:3d:d5:f2:e3:aa:51:55:95:44:
08:52:74:b3:d3:02:c3:30:08:7b:f1:99:2b:d1:df:
2e:d1:dd:40:69:f4:b3:d2:22:e2:43:9f:ba:46:a9:
39:48:ad:f8:bc:de:40:30:bd:27:f4:73:0d:79:72:
b7:c1:b1:33:83:8e:9f:1b:ec:13:c2:b9:3b:bd:ee:
ac:39:6f:0d:57:10:e4:88:1c:8f:2b:90:f4:5d:11:
72:5f:72:b7:5b:af:22:65:31:fc:4a:5b:35:2e:22:
7d:15:ca:f9:cd:c9:94:9e:26:1a:37:ed:db:51:ff:
b3:78:c0:f6:fd:1f:06:f0:12:fb:81:6b:03:39:e1:
8a:fa:31:98:2f:f0:a1:18:f4:e2:55:09:46:a5:79:
a1:f8:06:6e:6d:51:55:27:d9:09:79:5b:53:ee:ad:
2c:29:0d:48:8b:12:a3:ad:1c:74:02:71:87:49:1e:
7a:04:10:8b:35:14:09:78:9f:cf:5d:7c:09:0b:87:
e0:c0:d7:40:d0:24:0f:2f:75:c7:91:3c:85:76:51:
fc:b2:12:84:63:4e:29:56:b8:56:9f:b3:fb:7e:c6:
09:7c:9b:97:74:de:90:86:c3:1d:9e:77:44:b5:00:
9e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F9:D0:D0:3A:09:BB:39:BD:F6:5B:FA:27:09:DF:82:A7:10:42:52
X509v3 Authority Key Identifier:
keyid:0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/x_nQ0DoJuzm99lv6JwnfgqcQQlI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.76.0/22
Signature Algorithm: sha256WithRSAEncryption
62:f4:bf:e3:25:e9:61:23:b0:a5:6e:94:4b:f9:1d:3a:b0:b7:
05:b0:06:6d:ef:3f:49:75:2e:5f:39:74:18:a4:ed:a0:f8:21:
b3:98:60:9e:b0:99:36:d4:82:ed:78:8f:18:20:2f:4c:2d:e1:
a3:23:52:3a:27:72:57:fa:eb:7d:44:ff:e5:8a:46:41:0a:49:
08:ea:a6:cf:8d:80:d1:67:73:36:0a:18:a1:ae:9d:6e:f7:e0:
de:fa:93:24:62:67:40:74:9d:0a:91:ef:1f:29:dc:ac:e4:55:
c3:6e:c9:0c:60:dc:a9:6b:d6:d4:fe:87:69:4c:a3:a9:1c:fa:
28:c8:70:be:cb:6d:84:67:78:79:b9:36:1a:fe:48:e7:92:19:
0c:ca:79:49:b4:b3:01:cf:4e:c6:56:ee:6f:cc:5b:37:a1:4a:
61:72:fd:f2:81:73:3f:ce:d6:55:6b:e6:21:7e:c3:39:a8:6b:
d2:58:bb:39:fd:9a:b9:8f:6f:2d:46:11:a2:07:fb:bb:a8:06:
23:ca:01:3d:5f:d9:89:d7:8d:e4:86:41:7f:3e:90:da:13:2f:
22:21:04:6a:66:e7:50:55:10:b3:5d:8d:0e:2c:96:9d:8a:05:
ba:aa:dc:83:38:f0:07:ad:14:b4:bd:d3:92:ad:66:c5:85:d6:
56:a6:52:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 06:52:17 2026 by rpki-client