This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/EDSiJ5ZM3d3j_bAY4bdjdmuVUV8.roa File: EDSiJ5ZM3d3j_bAY4bdjdmuVUV8.roa (raw, json) Hash identifier: M5g9Np/jXDWeYuF/EmhC1PtFkELZNfX3kcLJTnKoWu4= Subject key identifier: 10:34:A2:27:96:4C:DD:DD:E3:FD:B0:18:E1:B7:63:76:6B:95:51:5F Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22B0 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/EDSiJ5ZM3d3j_bAY4bdjdmuVUV8.roa Signing time: Fri 19 Dec 2025 03:03:49 +0000 ROA not before: Fri 19 Dec 2025 03:03:49 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 59033 IP address blocks: 202.160.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8880 (0x22b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:03:49 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=1034A227964CDDDDE3FDB018E1B763766B95515F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:de:42:c3:8c:ae:f9:7a:bd:2f:52:85:ec:e7: 96:72:1a:b2:0a:f6:1e:cc:30:59:0e:a7:f4:de:68: f2:d2:f5:e5:89:f8:f1:46:57:09:73:35:c1:b5:72: 07:30:67:0e:7e:28:b1:46:63:5a:e6:b6:d8:f1:21: 9e:3f:8a:53:93:fb:4f:1d:d1:4e:a2:15:62:66:6c: 60:39:3c:32:59:0b:1a:7f:ab:b3:f9:57:78:bf:04: 3a:9e:5e:11:d5:83:b8:9c:b5:c6:c4:c6:80:8e:bd: 93:24:c4:75:2c:73:66:75:c9:47:56:f7:07:ad:1b: 81:98:ab:69:e0:be:1c:03:e6:d7:4a:c7:24:af:da: b5:8c:22:71:af:ae:94:41:d6:62:3f:54:7e:af:86: d6:85:d0:37:df:1c:df:de:30:83:49:d9:b6:10:91: 05:f6:24:b0:37:da:80:1b:73:b7:c6:a8:b3:f4:64: 89:b1:80:14:32:b0:b4:c6:91:7d:e5:0c:90:69:97: 6d:9f:31:d9:32:86:6e:f8:9d:dc:fd:a3:55:f1:b3: a8:ab:e3:24:e9:fa:3d:e0:13:ad:0a:81:1c:94:d1: ec:ec:37:ae:82:3f:9e:ae:fa:60:f3:c8:ac:3b:75: 69:62:6d:fd:7c:b9:67:54:62:60:bb:83:d8:24:20: dc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:34:A2:27:96:4C:DD:DD:E3:FD:B0:18:E1:B7:63:76:6B:95:51:5F X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/EDSiJ5ZM3d3j_bAY4bdjdmuVUV8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.142.0/24 Signature Algorithm: sha256WithRSAEncryption c2:d5:42:2d:b2:7a:2b:34:3a:34:e3:03:2b:bd:27:ec:09:35: 76:9c:58:3a:47:5e:b2:c8:68:d6:b2:1d:d7:75:22:a5:6b:65: f6:66:c8:8b:24:53:aa:95:38:ea:d5:ce:03:04:92:b4:ce:98: 6e:07:d1:2a:1d:5f:39:66:73:55:68:7b:be:06:57:81:05:5f: 54:5e:36:87:3f:42:09:9a:ac:e4:1a:84:2a:80:5e:11:57:e3: d3:c6:cf:22:a4:c7:a5:eb:de:0c:2d:d3:2c:5d:4c:6b:74:a3: 6c:b0:20:87:8b:b7:9b:a1:85:40:aa:ce:8e:60:04:6e:af:5f: 66:82:2d:95:96:2a:ff:51:15:7a:97:43:14:8c:d4:79:71:e1: a5:ac:3b:3c:08:00:ea:88:b5:7b:b0:fe:a3:f2:46:2e:78:58: 7b:bd:88:16:a9:c5:ef:ab:2a:9e:5d:7d:8e:e8:55:36:ca:5a: 68:2c:a1:d6:a0:e7:a2:28:25:de:18:de:3d:62:85:8b:87:fa: a6:b3:b7:6c:99:a1:4b:89:c7:d5:b3:60:ff:e4:99:4e:08:70: a1:e4:a1:dc:32:24:43:7a:89:fb:0e:95:28:59:91:40:8c:d8: 86:d9:53:f4:ad:14:c5:e2:39:23:ce:bb:cb:9d:df:9b:4a:8e: 14:06:bf:d4 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIrAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzAzNDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDEwMzRBMjI3OTY0Q0RE RERFM0ZEQjAxOEUxQjc2Mzc2NkI5NTUxNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ3kLDjK75er0vUoXs55ZyGrIK9h7MMFkOp/TeaPLS9eWJ+PFG VwlzNcG1cgcwZw5+KLFGY1rmttjxIZ4/ilOT+08d0U6iFWJmbGA5PDJZCxp/q7P5 V3i/BDqeXhHVg7ictcbExoCOvZMkxHUsc2Z1yUdW9wetG4GYq2ngvhwD5tdKxySv 2rWMInGvrpRB1mI/VH6vhtaF0DffHN/eMINJ2bYQkQX2JLA32oAbc7fGqLP0ZImx gBQysLTGkX3lDJBpl22fMdkyhm74ndz9o1Xxs6ir4yTp+j3gE60KgRyU0ezsN66C P56u+mDzyKw7dWlibf18uWdUYmC7g9gkINwRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUEDSiJ5ZM3d3j/bAY4bdjdmuVUV8wHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvRURTaUo1Wk0zZDNq X2JBWTRiZGpkbXVWVVY4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMqgjjANBgkqhkiG9w0BAQsFAAOCAQEAwtVCLbJ6KzQ6NOMDK70n7Ak1dpxY Okdessho1rId13UipWtl9mbIiyRTqpU46tXOAwSStM6YbgfRKh1fOWZzVWh7vgZX gQVfVF42hz9CCZqs5BqEKoBeEVfj08bPIqTHpeveDC3TLF1Ma3SjbLAgh4u3m6GF QKrOjmAEbq9fZoItlZYq/1EVepdDFIzUeXHhpaw7PAgA6oi1e7D+o/JGLnhYe72I FqnF76sqnl19juhVNspaaCyh1qDnoigl3hjePWKFi4f6prO3bJmhS4nH1bNg/+SZ TghwoeSh3DIkQ3qJ+w6VKFmRQIzYhtlT9K0UxeI5I867y53fm0qOFAa/1A== -----END CERTIFICATE-----Generated at Sun Dec 21 20:02:41 2025 by rpki-client