This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/0VYABK3RitrSAO2kTOjGnnAVEF8.roa File: 0VYABK3RitrSAO2kTOjGnnAVEF8.roa (raw, json) Hash identifier: cIfC6ib8OCJXHsu56eLTXKtx9NjxtHpfR9rCNAdg7E0= Subject key identifier: D1:56:00:04:AD:D1:8A:DA:D2:00:ED:A4:4C:E8:C6:9E:70:15:10:5F Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22C9 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/0VYABK3RitrSAO2kTOjGnnAVEF8.roa Signing time: Fri 19 Dec 2025 03:10:58 +0000 ROA not before: Fri 19 Dec 2025 03:10:58 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63689 IP address blocks: 103.90.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8905 (0x22c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:10:58 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=D1560004ADD18ADAD200EDA44CE8C69E7015105F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:61:c6:d7:81:91:51:b1:d0:cf:e1:0f:c0:ba: 88:67:85:eb:80:44:c3:7d:11:79:5a:a6:cd:64:7b: 72:be:77:17:9a:3e:f3:74:29:3b:18:70:49:4e:7e: 31:61:34:52:ef:d7:12:1f:75:b8:eb:20:3e:f0:aa: 42:f7:f6:7d:fd:f4:ac:b4:a6:3c:3c:06:c6:9a:c5: 8c:a6:df:77:b5:0b:5c:c8:b3:61:45:da:68:8d:9a: 58:0c:db:1e:6e:19:2c:84:96:5b:93:14:5c:8e:38: ec:a5:b2:a4:e2:53:25:93:28:e3:eb:a1:88:3c:0e: 52:89:09:2a:00:e5:20:29:ec:e0:e8:a6:9c:b1:9f: ca:30:5a:e4:f0:43:b0:e8:67:b6:e4:43:72:57:49: 53:18:ee:b8:80:09:b2:01:52:0c:6b:99:b1:e8:bd: 50:e2:fe:df:1a:c0:52:7a:36:dc:b5:98:ae:a7:fa: c9:30:cb:1b:90:d6:fd:6d:e3:70:95:f6:4a:de:5f: ec:88:8f:c5:7e:f6:6c:97:3e:eb:8a:65:a3:cf:57: 11:e3:9f:d4:eb:75:34:34:ba:21:2d:4e:98:e9:88: c8:a9:62:e8:0b:9c:37:f4:75:d2:bc:3d:4b:12:5b: d0:c4:8b:e6:70:bf:ad:33:92:47:c6:43:26:9f:ec: 13:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:56:00:04:AD:D1:8A:DA:D2:00:ED:A4:4C:E8:C6:9E:70:15:10:5F X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/0VYABK3RitrSAO2kTOjGnnAVEF8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.90.57.0/24 Signature Algorithm: sha256WithRSAEncryption b0:69:91:bc:d1:d9:96:d3:24:28:53:ba:67:f7:6a:89:6d:25: b7:ca:0e:f0:ec:99:29:5d:cb:08:e9:7f:71:6a:c2:38:71:da: da:35:2e:21:e2:0b:f7:3e:02:0a:aa:6f:ca:69:77:66:91:06: e0:e2:38:cd:80:65:c5:49:43:1c:f0:ef:0f:1d:b4:c8:a0:23: 10:d0:92:0e:13:a8:e6:a6:a0:5f:2f:01:e6:7c:57:f7:7c:12: 5b:56:5b:db:e6:7c:fa:3d:87:bd:02:04:15:b4:5d:84:ed:99: be:35:9b:71:5d:fb:0c:40:1f:81:a4:ad:34:cd:36:c3:eb:77: 75:8d:fd:e2:93:b7:c5:7e:f9:bc:9a:1a:0b:8a:10:da:c2:c5: 42:da:14:ff:e6:4a:69:02:43:14:86:66:b1:db:a2:91:8d:f8: d5:e3:e5:18:aa:57:ae:dc:00:61:1d:d7:0e:ad:11:9c:61:e3: d0:32:4b:b9:29:f4:62:36:87:e8:77:95:c3:0d:aa:3a:21:8a: 07:85:9b:8b:1e:ce:88:2d:1d:3c:c0:7b:0e:17:13:83:5b:f0: 53:91:19:c2:5d:df:d3:4d:f5:df:67:28:64:66:bd:41:88:0f: d2:3d:b6:3c:ec:20:dc:75:e7:86:7d:d3:1e:b5:6b:79:34:c2: eb:b0:22:d8 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIskwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzEwNThaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEQxNTYwMDA0QUREMThB REFEMjAwRURBNDRDRThDNjlFNzAxNTEwNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNYcbXgZFRsdDP4Q/AuohnheuARMN9EXlaps1ke3K+dxeaPvN0 KTsYcElOfjFhNFLv1xIfdbjrID7wqkL39n399Ky0pjw8BsaaxYym33e1C1zIs2FF 2miNmlgM2x5uGSyElluTFFyOOOylsqTiUyWTKOProYg8DlKJCSoA5SAp7ODoppyx n8owWuTwQ7DoZ7bkQ3JXSVMY7riACbIBUgxrmbHovVDi/t8awFJ6Nty1mK6n+skw yxuQ1v1t43CV9kreX+yIj8V+9myXPuuKZaPPVxHjn9TrdTQ0uiEtTpjpiMipYugL nDf0ddK8PUsSW9DEi+Zwv60zkkfGQyaf7BNrAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU0VYABK3RitrSAO2kTOjGnnAVEF8wHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvMFZZQUJLM1JpdHJT QU8ya1RPakdubkFWRUY4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdaOTANBgkqhkiG9w0BAQsFAAOCAQEAsGmRvNHZltMkKFO6Z/dqiW0lt8oO 8OyZKV3LCOl/cWrCOHHa2jUuIeIL9z4CCqpvyml3ZpEG4OI4zYBlxUlDHPDvDx20 yKAjENCSDhOo5qagXy8B5nxX93wSW1Zb2+Z8+j2HvQIEFbRdhO2ZvjWbcV37DEAf gaStNM02w+t3dY394pO3xX75vJoaC4oQ2sLFQtoU/+ZKaQJDFIZmsduikY341ePl GKpXrtwAYR3XDq0RnGHj0DJLuSn0YjaH6HeVww2qOiGKB4Wbix7OiC0dPMB7DhcT g1vwU5EZwl3f003132coZGa9QYgP0j22POwg3HXnhn3THrVreTTC67Ai2A== -----END CERTIFICATE-----Generated at Sun Dec 21 19:59:17 2025 by rpki-client