This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/7yRUwN7KenczKt4LqqHH-mluzyQ.roa File: 7yRUwN7KenczKt4LqqHH-mluzyQ.roa (raw, json) Hash identifier: LsJGuHjff3a7/OUvJcZ2dmqjSJ9wwq2ZwZ/Ahj/la0g= Subject key identifier: EF:24:54:C0:DE:CA:7A:77:33:2A:DE:0B:AA:A1:C7:FA:69:6E:CF:24 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22C0 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/7yRUwN7KenczKt4LqqHH-mluzyQ.roa Signing time: Fri 19 Dec 2025 03:07:14 +0000 ROA not before: Fri 19 Dec 2025 03:07:14 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 59033 IP address blocks: 103.204.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8896 (0x22c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:07:14 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=EF2454C0DECA7A77332ADE0BAAA1C7FA696ECF24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:d0:5a:14:55:91:36:c2:94:72:24:94:ec: 7e:05:f1:3b:1d:0b:24:b1:f4:28:22:19:2d:02:49: c0:db:0a:af:bb:25:86:88:94:67:4e:b3:b6:2c:e6: d8:fa:2c:a4:5b:c6:9b:b8:c5:8a:89:8c:3a:a9:0e: 55:7a:a3:2b:32:aa:f9:27:83:12:86:a7:f3:11:47: 55:95:64:2d:7d:38:a2:75:b2:12:b1:b6:ed:18:01: 47:e5:77:88:a4:48:52:e1:63:59:1c:7b:eb:8f:e9: b7:3e:42:0f:a5:a7:44:18:9d:ad:73:ec:b3:7a:1f: de:55:e6:6b:41:c9:4a:fe:40:5d:24:7f:04:83:1c: 04:db:5f:1d:37:e7:0b:d5:25:12:9c:96:d8:8f:15: b3:4c:ff:6c:74:a6:0e:de:f4:77:94:8f:0f:37:ed: a7:61:e3:92:7e:72:e7:01:2c:17:07:c5:be:a8:ad: ef:ac:ae:e7:d8:2a:a7:5e:3e:9d:a3:36:d8:6a:56: e7:ed:9c:84:ad:33:44:b9:44:9d:cc:e0:37:ce:61: ce:4c:a4:47:8b:dc:3f:ff:fe:80:ed:fc:27:41:8d: e8:91:84:56:17:37:f8:77:92:8f:bd:f5:a0:83:c2: b7:8d:21:0c:e3:5d:5e:62:40:c2:5a:74:8f:4b:4d: cb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:24:54:C0:DE:CA:7A:77:33:2A:DE:0B:AA:A1:C7:FA:69:6E:CF:24 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/7yRUwN7KenczKt4LqqHH-mluzyQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.204.74.0/24 Signature Algorithm: sha256WithRSAEncryption ab:b4:7d:2f:d5:33:81:a1:ff:56:c9:f9:5d:69:d9:91:92:91: 0e:d8:68:c0:73:b7:bf:70:9d:10:4a:8b:fa:f0:49:99:06:7b: bd:6c:e8:2a:a4:aa:23:ae:34:35:32:94:29:7e:08:5c:a6:83: f4:60:b3:6b:59:83:9c:d2:8e:87:87:50:dd:b7:c4:aa:26:dc: 55:0f:c9:77:20:79:f6:71:b3:44:93:04:89:03:48:2b:3b:48: 75:b6:76:3b:d0:eb:15:13:d9:61:20:89:6e:8d:72:24:a2:f0: ea:df:81:a7:d4:87:d5:ab:45:cf:9f:1d:18:d3:25:79:00:7a: 8b:47:e8:9e:36:b1:32:8e:74:bd:3f:3c:31:7b:63:44:99:12: b2:07:20:56:c3:a8:d1:cb:2c:d9:a4:fa:e3:59:ac:f9:87:d8: ce:61:ae:63:18:d3:a8:63:f0:67:b1:1f:4f:f6:fd:24:ff:a4: 74:b4:bb:c9:7d:c1:79:3a:52:70:dc:31:8c:ef:05:4f:91:47: 42:a2:ec:e9:28:ae:31:de:de:fe:dd:fb:1e:26:75:3b:0e:56: fe:20:7f:66:07:72:88:34:7c:3f:ec:c2:21:f5:48:a9:e1:12: 7e:ea:7a:4a:ad:0d:9a:af:5d:90:4c:ee:87:43:a2:99:db:79: 3b:ce:5a:19 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIsAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzA3MTRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEVGMjQ1NEMwREVDQTdB NzczMzJBREUwQkFBQTFDN0ZBNjk2RUNGMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAwNBaFFWRNsKUciSU7H4F8TsdCySx9CgiGS0CScDbCq+7JYaI lGdOs7Ys5tj6LKRbxpu4xYqJjDqpDlV6oysyqvkngxKGp/MRR1WVZC19OKJ1shKx tu0YAUfld4ikSFLhY1kce+uP6bc+Qg+lp0QYna1z7LN6H95V5mtByUr+QF0kfwSD HATbXx035wvVJRKcltiPFbNM/2x0pg7e9HeUjw837adh45J+cucBLBcHxb6ore+s rufYKqdePp2jNthqVuftnIStM0S5RJ3M4DfOYc5MpEeL3D///oDt/CdBjeiRhFYX N/h3ko+99aCDwreNIQzjXV5iQMJadI9LTctJAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU7yRUwN7KenczKt4LqqHH+mluzyQwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvN3lSVXdON0tlbmN6 S3Q0THFxSEgtbWx1enlRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfMSjANBgkqhkiG9w0BAQsFAAOCAQEAq7R9L9UzgaH/Vsn5XWnZkZKRDtho wHO3v3CdEEqL+vBJmQZ7vWzoKqSqI640NTKUKX4IXKaD9GCza1mDnNKOh4dQ3bfE qibcVQ/JdyB59nGzRJMEiQNIKztIdbZ2O9DrFRPZYSCJbo1yJKLw6t+Bp9SH1atF z58dGNMleQB6i0fonjaxMo50vT88MXtjRJkSsgcgVsOo0css2aT641ms+YfYzmGu YxjTqGPwZ7EfT/b9JP+kdLS7yX3BeTpScNwxjO8FT5FHQqLs6SiuMd7e/t37HiZ1 Ow5W/iB/ZgdyiDR8P+zCIfVIqeESfup6Sq0Nmq9dkEzuh0Oimdt5O85aGQ== -----END CERTIFICATE-----Generated at Sun Dec 21 20:03:54 2025 by rpki-client