This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/-iy0OfWmm4sK8gctXAufL-wDtCc.roa File: -iy0OfWmm4sK8gctXAufL-wDtCc.roa (raw, json) Hash identifier: 4otYiIX48WqvxsAPLwpqO5fQGadfGqv1SPVBnVUHT4w= Subject key identifier: FA:2C:B4:39:F5:A6:9B:8B:0A:F2:07:2D:5C:0B:9F:2F:EC:03:B4:27 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22C2 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/-iy0OfWmm4sK8gctXAufL-wDtCc.roa Signing time: Fri 19 Dec 2025 03:07:14 +0000 ROA not before: Fri 19 Dec 2025 03:07:14 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63689 IP address blocks: 103.204.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8898 (0x22c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:07:14 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=FA2CB439F5A69B8B0AF2072D5C0B9F2FEC03B427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:54:51:b9:93:8a:dd:db:f7:f1:07:82:e9:8a: 88:66:aa:d1:98:36:68:12:0a:50:be:d3:1d:16:1a: 34:eb:05:e2:5f:9e:68:84:46:97:18:c3:d1:60:a8: 5e:a4:0e:8c:ea:03:5a:cc:da:5e:af:6a:2f:3a:34: 6d:58:4d:ad:9a:f1:11:dc:8e:95:64:88:d8:d4:a8: d2:4e:2b:22:a1:cb:50:4c:0e:c4:e2:a7:55:e9:14: 97:ea:e2:a4:c5:bd:31:21:3e:a3:60:c9:8c:cf:0c: 0e:46:f3:9c:66:3d:ec:8c:d2:4e:81:48:0e:76:04: b8:a8:7e:5e:ce:b2:b4:a5:ed:25:68:8e:b3:70:ff: b3:01:d8:5a:82:77:ce:73:8a:9c:de:d3:65:38:1e: 6b:58:10:06:81:68:2c:26:5f:16:30:13:ec:73:0a: a0:eb:a2:54:af:34:28:04:35:54:74:57:c0:c4:a2: a3:2e:ad:52:67:c9:45:ab:ce:39:a0:51:66:20:c8: 52:55:01:81:36:f4:ef:a8:a1:b1:9c:cc:c5:72:95: 63:aa:98:ee:7a:19:88:a0:bc:26:c7:78:60:ae:a0: 5e:21:23:b3:a2:7e:6e:9e:51:66:2b:89:ea:93:fc: 19:98:76:4d:2d:08:2b:3e:55:71:26:b9:31:53:dd: bc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2C:B4:39:F5:A6:9B:8B:0A:F2:07:2D:5C:0B:9F:2F:EC:03:B4:27 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/-iy0OfWmm4sK8gctXAufL-wDtCc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.204.74.0/23 Signature Algorithm: sha256WithRSAEncryption 89:d0:8c:55:cc:31:92:db:c8:24:05:04:e4:b4:11:f0:a9:4c: b4:22:6a:ce:8b:96:91:ff:94:03:b9:36:30:f3:29:cc:36:47: 33:a5:be:26:30:a9:da:56:b6:87:ac:33:78:4c:1d:6b:7c:8f: 07:6d:d1:c7:c2:f1:7a:dd:be:ed:4b:de:e2:9f:f8:9c:7d:c4: 98:90:08:6b:8a:12:9d:e4:54:07:a1:5a:f2:d0:7c:f2:08:8e: 24:64:07:a7:80:6e:c2:29:ce:66:7d:ea:44:19:fe:f8:e8:64: 8a:73:99:b1:ad:c9:4f:ad:61:43:44:9f:f5:c9:9e:c9:31:5d: 0d:c5:89:10:9e:85:5c:ef:3c:7b:85:da:f8:d4:d3:5d:93:e7: 54:52:b3:95:ea:ca:95:5f:1a:fc:03:f9:04:c4:0d:dd:b4:da: 3b:71:15:62:ed:6d:fa:b3:f0:b8:ae:59:b9:37:c4:50:b4:9b: ce:6a:83:af:05:63:8a:e3:cf:2c:a6:b2:5b:dc:93:7a:5e:58: d1:e4:87:f6:80:25:2c:9b:69:f6:7b:d5:ac:a7:d8:18:fd:42: d8:1c:34:3b:9d:ab:43:eb:74:ea:f5:24:c8:ed:46:be:a3:49: cf:c4:63:9e:bc:ef:41:b7:5f:3b:15:a6:45:5f:f0:bd:98:77: 75:a6:5f:a7 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIsIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzA3MTRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEZBMkNCNDM5RjVBNjlC OEIwQUYyMDcyRDVDMEI5RjJGRUMwM0I0MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmVFG5k4rd2/fxB4LpiohmqtGYNmgSClC+0x0WGjTrBeJfnmiE RpcYw9FgqF6kDozqA1rM2l6vai86NG1YTa2a8RHcjpVkiNjUqNJOKyKhy1BMDsTi p1XpFJfq4qTFvTEhPqNgyYzPDA5G85xmPeyM0k6BSA52BLiofl7OsrSl7SVojrNw /7MB2FqCd85zipze02U4HmtYEAaBaCwmXxYwE+xzCqDrolSvNCgENVR0V8DEoqMu rVJnyUWrzjmgUWYgyFJVAYE29O+oobGczMVylWOqmO56GYigvCbHeGCuoF4hI7Oi fm6eUWYrieqT/BmYdk0tCCs+VXEmuTFT3bwDAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU+iy0OfWmm4sK8gctXAufL+wDtCcwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvLWl5ME9mV21tNHNL OGdjdFhBdWZMLXdEdENjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWfMSjANBgkqhkiG9w0BAQsFAAOCAQEAidCMVcwxktvIJAUE5LQR8KlMtCJq zouWkf+UA7k2MPMpzDZHM6W+JjCp2la2h6wzeEwda3yPB23Rx8Lxet2+7Uve4p/4 nH3EmJAIa4oSneRUB6Fa8tB88giOJGQHp4BuwinOZn3qRBn++OhkinOZsa3JT61h Q0Sf9cmeyTFdDcWJEJ6FXO88e4Xa+NTTXZPnVFKzlerKlV8a/AP5BMQN3bTaO3EV Yu1t+rPwuK5ZuTfEULSbzmqDrwVjiuPPLKayW9yTel5Y0eSH9oAlLJtp9nvVrKfY GP1C2Bw0O52rQ+t06vUkyO1GvqNJz8RjnrzvQbdfOxWmRV/wvZh3daZfpw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:02:43 2025 by rpki-client