This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/8Gz4cjjfainrmfmq2kguQlkzf4k.roa File: 8Gz4cjjfainrmfmq2kguQlkzf4k.roa (raw, json) Hash identifier: B9hi55pf1OmyB2ssl0i4SSa2G7lvvrdXiIFACA1V2Vo= Subject key identifier: F0:6C:F8:72:38:DF:6A:29:EB:99:F9:AA:DA:48:2E:42:59:33:7F:89 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22C4 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/8Gz4cjjfainrmfmq2kguQlkzf4k.roa Signing time: Fri 19 Dec 2025 03:07:15 +0000 ROA not before: Fri 19 Dec 2025 03:07:15 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 59033 IP address blocks: 103.204.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8900 (0x22c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:07:15 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F06CF87238DF6A29EB99F9AADA482E4259337F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:8c:4e:01:a9:98:7c:0f:eb:9a:ad:d2:05: b1:c9:d0:99:f8:04:6d:c2:33:9a:4a:c7:23:0f:4a: be:8b:31:16:28:ed:bc:7a:73:1b:03:34:82:85:98: eb:af:93:2e:ed:42:e6:77:d1:e4:64:fb:bf:96:0a: 61:c1:ca:af:06:5a:08:c8:be:c9:e1:13:c5:56:18: e4:f7:48:a2:11:67:49:1b:05:46:12:c4:56:ec:ec: d0:8a:b8:8c:36:f8:1e:c2:16:3d:a3:66:d0:01:f0: 67:ad:bd:83:1e:a9:78:da:99:61:66:86:08:e2:ec: 02:e4:4f:85:65:1a:69:6b:98:1e:0b:6f:c6:94:fd: 36:29:f6:83:d7:6e:c4:16:84:68:f1:2f:5a:89:5f: af:95:40:72:a1:cd:56:b0:66:fc:b9:78:fa:53:86: af:89:56:bf:6e:61:35:54:44:e0:3e:8c:a0:ee:3e: 0c:d3:c2:96:2e:09:a9:9e:2f:48:8a:0b:36:6a:5c: 4b:4c:82:28:9a:38:ae:52:19:78:0a:a5:ed:c3:27: 43:79:7c:68:10:bc:c6:15:72:ae:9e:7f:01:a8:1e: 81:d7:9c:ea:ac:08:41:65:2a:95:2c:de:bd:ac:54: ad:3e:0c:62:60:69:b6:77:10:5c:85:2a:c8:98:37: bc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6C:F8:72:38:DF:6A:29:EB:99:F9:AA:DA:48:2E:42:59:33:7F:89 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/8Gz4cjjfainrmfmq2kguQlkzf4k.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.204.72.0/24 Signature Algorithm: sha256WithRSAEncryption b4:03:b1:35:08:5a:26:7f:12:10:58:f7:3c:72:66:6a:fb:00: 91:37:1a:2d:68:53:13:a9:8f:48:ad:15:ed:63:6e:09:27:2f: fa:1a:0c:f8:6a:49:3f:cc:0d:55:20:b4:15:78:48:bb:f4:f0: e3:aa:92:10:3c:c0:54:52:25:98:39:ee:c1:c1:ce:68:71:d5: de:32:4a:02:b8:06:62:77:a5:a9:0d:48:fb:4c:48:36:f1:d1: 13:47:2e:67:16:d6:5c:5a:12:ee:c3:6c:fd:a7:44:b1:99:5a: 60:40:22:c2:71:c2:ae:d8:b0:6e:11:fd:1f:16:f1:a6:f8:6c: ed:4c:54:3a:f3:b7:da:ae:bb:e2:88:62:c6:6c:0c:1c:85:aa: d3:e7:0c:6a:8a:4a:99:c7:66:d7:97:33:78:f6:a2:a3:b0:ce: bf:48:c9:83:a3:50:88:a0:0d:18:af:d9:66:4d:1f:18:45:12: 0c:c4:1a:b4:ac:84:fd:35:9b:0a:4b:77:e1:25:50:f2:96:64: 4b:34:9e:4f:43:02:42:9f:30:e6:c0:5f:47:3e:33:8b:12:a3: c0:43:6b:c5:38:4a:01:83:e9:58:e7:0f:7a:46:41:26:0c:0f: ca:9d:69:2e:5e:f6:14:2f:35:a2:f8:c4:f2:7a:8c:b0:17:d2: 5b:b7:24:a5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIsQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzA3MTVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEYwNkNGODcyMzhERjZB MjlFQjk5RjlBQURBNDgyRTQyNTkzMzdGODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8H4xOAamYfA/rmq3SBbHJ0Jn4BG3CM5pKxyMPSr6LMRYo7bx6 cxsDNIKFmOuvky7tQuZ30eRk+7+WCmHByq8GWgjIvsnhE8VWGOT3SKIRZ0kbBUYS xFbs7NCKuIw2+B7CFj2jZtAB8GetvYMeqXjamWFmhgji7ALkT4VlGmlrmB4Lb8aU /TYp9oPXbsQWhGjxL1qJX6+VQHKhzVawZvy5ePpThq+JVr9uYTVUROA+jKDuPgzT wpYuCameL0iKCzZqXEtMgiiaOK5SGXgKpe3DJ0N5fGgQvMYVcq6efwGoHoHXnOqs CEFlKpUs3r2sVK0+DGJgabZ3EFyFKsiYN7wpAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU8Gz4cjjfainrmfmq2kguQlkzf4kwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvOEd6NGNqamZhaW5y bWZtcTJrZ3VRbGt6ZjRrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfMSDANBgkqhkiG9w0BAQsFAAOCAQEAtAOxNQhaJn8SEFj3PHJmavsAkTca LWhTE6mPSK0V7WNuCScv+hoM+GpJP8wNVSC0FXhIu/Tw46qSEDzAVFIlmDnuwcHO aHHV3jJKArgGYnelqQ1I+0xINvHRE0cuZxbWXFoS7sNs/adEsZlaYEAiwnHCrtiw bhH9Hxbxpvhs7UxUOvO32q674ohixmwMHIWq0+cMaopKmcdm15czePaio7DOv0jJ g6NQiKANGK/ZZk0fGEUSDMQatKyE/TWbCkt34SVQ8pZkSzSeT0MCQp8w5sBfRz4z ixKjwENrxThKAYPpWOcPekZBJgwPyp1pLl72FC81ovjE8nqMsBfSW7ckpQ== -----END CERTIFICATE-----Generated at Sun Dec 21 20:03:56 2025 by rpki-client