This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/Hb0dM-yCIX1t4USczCwJoPHXU3g.roa File: Hb0dM-yCIX1t4USczCwJoPHXU3g.roa (raw, json) Hash identifier: Ql2mFsSSYxvI8zp/k8oXtNMnsVqOvpP3C62NBE8EwY8= Subject key identifier: 1D:BD:1D:33:EC:82:21:7D:6D:E1:44:9C:CC:2C:09:A0:F1:D7:53:78 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22B3 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/Hb0dM-yCIX1t4USczCwJoPHXU3g.roa Signing time: Fri 19 Dec 2025 03:07:11 +0000 ROA not before: Fri 19 Dec 2025 03:07:11 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 59033 IP address blocks: 103.204.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8883 (0x22b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:07:11 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=1DBD1D33EC82217D6DE1449CCC2C09A0F1D75378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:20:40:01:f0:a0:f4:e5:c5:81:4e:74:94:c1: 8d:a0:5f:7b:49:7b:69:6b:bc:dd:17:c7:d6:1b:f3: 49:9d:3f:9b:00:c2:7d:3b:98:34:44:53:bd:cf:f4: a9:f2:bd:4e:6f:f6:22:87:9a:cb:b1:e2:dc:c3:45: 22:55:90:f8:5d:cf:ef:df:11:01:7d:b2:3f:46:72: f8:c1:e1:ec:98:62:3d:b0:d8:a2:bb:b4:2c:a8:5b: 5a:18:dc:ab:12:44:19:f8:ac:dd:4f:0c:25:a4:2f: c2:12:05:09:0c:4d:c7:9f:85:46:ca:94:b1:1e:f3: 85:f9:25:ec:34:fa:11:08:42:a9:fb:ab:96:72:fb: 73:c2:23:c7:ee:67:f6:0e:dd:da:27:2e:3b:90:6a: a4:88:9e:fc:57:d2:a8:90:31:1b:c4:26:b7:81:ca: d8:c4:87:93:8f:7f:51:4b:2d:78:46:a9:33:b3:64: d6:14:c8:c8:a3:13:8d:ef:80:a9:75:5e:89:b9:01: fd:32:4b:48:85:55:2c:0b:de:3a:1f:bb:7d:7d:71: 21:c1:f7:71:61:c6:a2:44:b1:b5:07:fe:fc:c9:fe: d5:52:1e:b5:68:1a:a6:50:1d:aa:a7:61:69:9f:da: 38:fb:ef:0a:83:5f:59:70:14:92:1f:ea:37:6f:f8: 74:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BD:1D:33:EC:82:21:7D:6D:E1:44:9C:CC:2C:09:A0:F1:D7:53:78 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/Hb0dM-yCIX1t4USczCwJoPHXU3g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.204.75.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:13:34:7c:ed:0e:d5:bc:7b:50:13:b1:c2:02:e8:6d:3a:ee: b1:9b:4d:dc:00:0a:cf:74:4f:48:d1:2f:c7:b1:78:6d:51:3a: 4a:e9:32:e8:86:b6:30:dc:1e:f5:5b:8c:ba:bb:d8:65:ee:0e: 76:d3:f9:76:ec:cc:ed:49:77:64:31:82:6a:ef:04:2b:6c:1a: e6:64:e0:5a:44:af:3e:9f:d9:68:40:15:3c:39:9b:d9:26:fa: 25:aa:be:7d:fe:57:e7:f0:c1:86:1e:d2:2b:31:d5:34:d4:42: 21:f3:6b:12:67:c4:75:c9:7c:36:b1:ae:f5:e4:b3:7c:f4:4d: b4:5b:50:35:b7:33:99:14:63:e2:c9:6e:14:a0:1b:7f:aa:3c: c5:db:72:40:50:49:a8:25:5d:20:13:b9:4a:a8:2c:40:1a:5c: 8d:ec:1c:1a:f1:25:a6:f3:c8:67:1e:c6:f5:ec:28:99:4e:05: 9a:48:81:b6:57:50:94:db:e0:c4:21:d2:b1:8a:a1:c0:1d:81: 58:fd:21:96:7c:74:ab:5c:8f:70:b5:14:1d:14:f5:ce:63:33: 99:6a:d3:72:37:42:1b:94:0f:7a:d5:8f:1f:19:78:7e:a6:a0: 7f:af:74:5c:70:d6:1c:6a:86:b4:f3:f3:1e:b2:dc:d3:28:a7: a9:fe:a0:3f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIrMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzA3MTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDFEQkQxRDMzRUM4MjIx N0Q2REUxNDQ5Q0NDMkMwOUEwRjFENzUzNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcIEAB8KD05cWBTnSUwY2gX3tJe2lrvN0Xx9Yb80mdP5sAwn07 mDREU73P9KnyvU5v9iKHmsux4tzDRSJVkPhdz+/fEQF9sj9GcvjB4eyYYj2w2KK7 tCyoW1oY3KsSRBn4rN1PDCWkL8ISBQkMTcefhUbKlLEe84X5Jew0+hEIQqn7q5Zy +3PCI8fuZ/YO3donLjuQaqSInvxX0qiQMRvEJreBytjEh5OPf1FLLXhGqTOzZNYU yMijE43vgKl1Xom5Af0yS0iFVSwL3jofu319cSHB93FhxqJEsbUH/vzJ/tVSHrVo GqZQHaqnYWmf2jj77wqDX1lwFJIf6jdv+HRXAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUHb0dM+yCIX1t4USczCwJoPHXU3gwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvSGIwZE0teUNJWDF0 NFVTY3pDd0pvUEhYVTNnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfMSzANBgkqhkiG9w0BAQsFAAOCAQEAnRM0fO0O1bx7UBOxwgLobTrusZtN 3AAKz3RPSNEvx7F4bVE6Suky6Ia2MNwe9VuMurvYZe4OdtP5duzM7Ul3ZDGCau8E K2wa5mTgWkSvPp/ZaEAVPDmb2Sb6Jaq+ff5X5/DBhh7SKzHVNNRCIfNrEmfEdcl8 NrGu9eSzfPRNtFtQNbczmRRj4sluFKAbf6o8xdtyQFBJqCVdIBO5SqgsQBpcjewc GvElpvPIZx7G9ewomU4FmkiBtldQlNvgxCHSsYqhwB2BWP0hlnx0q1yPcLUUHRT1 zmMzmWrTcjdCG5QPetWPHxl4fqagf690XHDWHGqGtPPzHrLc0yinqf6gPw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:06:49 2025 by rpki-client