This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/8k0jzcxtKVCD6SqKYqjphOM1Htg.roa File: 8k0jzcxtKVCD6SqKYqjphOM1Htg.roa (raw, json) Hash identifier: 6Na2j2s4Y3Ljx9pGGoYgsbePV5JgCTVgaDtSdxvzR1k= Subject key identifier: F2:4D:23:CD:CC:6D:29:50:83:E9:2A:8A:62:A8:E9:84:E3:35:1E:D8 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22A0 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/8k0jzcxtKVCD6SqKYqjphOM1Htg.roa Signing time: Fri 19 Dec 2025 03:03:47 +0000 ROA not before: Fri 19 Dec 2025 03:03:47 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63689 IP address blocks: 202.160.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8864 (0x22a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:03:47 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F24D23CDCC6D295083E92A8A62A8E984E3351ED8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:4b:7c:4c:52:a4:ee:0e:13:71:10:bd:70:be: 1b:7d:f3:8e:85:3c:cf:a1:02:d9:2f:e9:a2:5f:6a: fa:b4:47:ac:87:ee:ec:2c:d2:f8:03:0b:11:21:0c: 33:2a:57:40:75:85:bd:92:52:99:ac:a9:59:95:1e: 62:24:73:a1:d9:d3:9c:e0:99:13:f0:07:4b:55:a2: 49:f9:6b:f1:1e:7d:fc:fe:2e:8a:88:0a:27:f1:53: be:2c:27:d8:ed:57:7a:5e:ea:9a:00:12:d4:a1:bb: c0:4a:a0:96:59:c9:36:f0:10:c1:05:c4:83:84:2e: c4:a5:0b:fd:c0:db:67:cb:90:f3:9b:9f:52:c5:56: 09:e3:19:a4:d4:66:e0:12:df:dd:35:51:58:4d:4f: 5c:89:96:9b:ba:55:e1:e1:4a:ff:a4:2f:32:d7:55: dd:bf:d4:21:43:b4:b3:4f:d2:96:55:66:e0:79:d3: 6a:ae:30:24:65:34:1c:69:81:c2:1b:0a:70:e7:c7: da:83:7d:55:53:9d:e3:ff:36:1c:9b:0e:94:c1:47: ee:31:3f:75:7d:55:ac:00:79:3b:c4:e0:95:bd:ef: 03:29:af:29:e5:1b:f9:a0:98:c3:bf:6a:69:36:16: a5:18:d8:ba:cf:db:b7:1d:bb:a4:61:1e:c4:ab:88: 91:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4D:23:CD:CC:6D:29:50:83:E9:2A:8A:62:A8:E9:84:E3:35:1E:D8 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/8k0jzcxtKVCD6SqKYqjphOM1Htg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.142.0/24 Signature Algorithm: sha256WithRSAEncryption 39:eb:f8:1c:5d:2d:27:24:6a:b6:fc:ad:d5:a3:db:06:53:7b: 5a:2d:d0:1b:3c:b5:56:d4:91:d1:2e:11:aa:a2:42:8d:5a:ef: 0d:51:94:e2:d1:16:95:95:19:ec:3d:80:bc:db:44:d4:31:46: 78:cb:be:5c:89:e8:dc:d5:94:c9:b3:bc:a4:97:25:2b:8c:86: b0:00:1f:04:71:a8:d4:44:c9:b4:a0:10:55:f9:83:48:9d:d5: 3e:72:79:af:4b:42:94:c0:80:01:26:c2:d9:80:41:bd:75:fe: eb:bd:2c:7a:43:ac:1d:b5:d9:f6:d2:3e:05:47:10:71:fc:cd: 3a:46:95:d9:25:03:7d:b8:a7:73:63:7a:e2:60:c6:46:1a:50: 62:38:8d:48:c2:ae:3b:03:8d:cb:9f:49:25:40:5d:8e:eb:24: d4:8a:85:e4:8f:29:26:a1:e5:2d:65:02:bf:fc:16:83:89:6a: b2:fa:63:01:09:43:f4:97:03:85:08:3f:40:09:57:e1:88:5d: 4a:9b:24:2a:c3:15:a3:d0:57:90:6d:f7:dc:6e:e5:88:d3:84: c2:fb:93:9c:9e:6a:91:bd:a1:b0:de:2d:59:6c:17:d8:63:2b: 9f:ac:3e:f2:39:3b:f4:2a:bc:bd:03:d4:d1:e3:14:24:56:4c: a0:e0:1f:45 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzAzNDdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEYyNEQyM0NEQ0M2RDI5 NTA4M0U5MkE4QTYyQThFOTg0RTMzNTFFRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD9S3xMUqTuDhNxEL1wvht9846FPM+hAtkv6aJfavq0R6yH7uws 0vgDCxEhDDMqV0B1hb2SUpmsqVmVHmIkc6HZ05zgmRPwB0tVokn5a/Eeffz+LoqI CifxU74sJ9jtV3pe6poAEtShu8BKoJZZyTbwEMEFxIOELsSlC/3A22fLkPObn1LF VgnjGaTUZuAS3901UVhNT1yJlpu6VeHhSv+kLzLXVd2/1CFDtLNP0pZVZuB502qu MCRlNBxpgcIbCnDnx9qDfVVTneP/NhybDpTBR+4xP3V9VawAeTvE4JW97wMprynl G/mgmMO/amk2FqUY2LrP27cdu6RhHsSriJHLAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU8k0jzcxtKVCD6SqKYqjphOM1HtgwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvOGswanpjeHRLVkNE NlNxS1lxanBoT00xSHRnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMqgjjANBgkqhkiG9w0BAQsFAAOCAQEAOev4HF0tJyRqtvyt1aPbBlN7Wi3Q Gzy1VtSR0S4RqqJCjVrvDVGU4tEWlZUZ7D2AvNtE1DFGeMu+XIno3NWUybO8pJcl K4yGsAAfBHGo1ETJtKAQVfmDSJ3VPnJ5r0tClMCAASbC2YBBvXX+670sekOsHbXZ 9tI+BUcQcfzNOkaV2SUDfbinc2N64mDGRhpQYjiNSMKuOwONy59JJUBdjusk1IqF 5I8pJqHlLWUCv/wWg4lqsvpjAQlD9JcDhQg/QAlX4YhdSpskKsMVo9BXkG333G7l iNOEwvuTnJ5qkb2hsN4tWWwX2GMrn6w+8jk79Cq8vQPU0eMUJFZMoOAfRQ== -----END CERTIFICATE-----Generated at Sun Dec 21 20:02:42 2025 by rpki-client