This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/LNEEtEejf0H6qNkNBWSUHSrFKpM.roa File: LNEEtEejf0H6qNkNBWSUHSrFKpM.roa (raw, json) Hash identifier: wWP+Q9kdk0rB1AXcRBE7mXXvuEBPeMTvx88XygUlnmg= Subject key identifier: 2C:D1:04:B4:47:A3:7F:41:FA:A8:D9:0D:05:64:94:1D:2A:C5:2A:93 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22C3 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LNEEtEejf0H6qNkNBWSUHSrFKpM.roa Signing time: Fri 19 Dec 2025 03:07:14 +0000 ROA not before: Fri 19 Dec 2025 03:07:14 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 132168 IP address blocks: 103.204.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8899 (0x22c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:07:14 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2CD104B447A37F41FAA8D90D0564941D2AC52A93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:41:33:02:f3:7a:33:a9:60:12:ac:00:06: af:a6:f7:84:5f:c9:d5:14:e5:72:a9:9e:88:99:82: 64:c1:61:85:05:e6:31:31:ec:1d:86:cb:7d:09:4e: 40:4d:2f:47:df:d6:9f:d5:63:ac:29:5d:53:96:c8: 66:93:68:47:8b:ce:cd:48:63:75:95:b3:50:33:cd: 5a:45:a5:ca:6b:d9:da:05:a6:f3:e5:c8:c8:c0:9d: 8b:57:bd:bc:c2:a0:7e:1e:b2:e7:be:3c:e1:fa:16: 2b:41:b4:df:89:07:6d:07:a7:ef:c1:1a:12:ff:b0: 73:7f:c5:5b:ad:ed:ef:80:86:ed:eb:df:88:db:d9: 9b:b4:87:3f:01:57:dc:7a:72:20:72:cb:a8:f1:5a: a2:00:fe:4e:e9:b7:c3:09:9c:33:f3:6a:9a:ad:7e: 96:d5:54:2d:3a:27:27:98:08:fb:91:81:ca:77:92: e8:eb:fb:aa:45:4a:f0:f2:cd:b4:e8:8d:ea:36:78: 5a:04:f7:c2:23:43:fa:8f:a0:56:73:f3:bd:df:ad: e0:a8:1d:3e:35:f8:c8:d1:11:3c:8a:13:94:bb:21: 03:3a:ba:a6:8e:d8:1d:60:b2:16:a0:64:d2:ba:44: b7:74:36:e3:6d:fb:61:49:15:bf:f5:88:02:98:0a: bc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D1:04:B4:47:A3:7F:41:FA:A8:D9:0D:05:64:94:1D:2A:C5:2A:93 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LNEEtEejf0H6qNkNBWSUHSrFKpM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.204.74.0/24 Signature Algorithm: sha256WithRSAEncryption 54:71:e0:96:e7:f6:9f:e0:8c:48:a0:87:08:ad:2b:fe:e3:41: 05:b5:14:5b:ab:0f:51:2e:93:68:36:08:f1:f1:2b:5c:3c:0b: 89:f8:c8:17:74:e5:a8:5e:01:ff:c8:0e:60:6d:17:81:2a:3d: 34:57:b6:15:91:ef:41:f3:ca:6e:34:d3:c2:33:fe:37:b3:a5: 0e:b3:f0:d6:e5:96:37:d0:b2:43:5a:b1:55:10:54:dd:15:cd: fe:70:7a:62:88:6b:db:78:f3:9f:c0:9c:75:bc:63:ce:bb:98: 28:07:2d:85:fd:5c:a4:4b:2d:ba:4d:f8:07:9d:14:7a:57:5c: aa:10:2d:59:cf:e1:d8:68:93:b2:b4:79:c8:b2:3a:fd:66:ab: 0a:73:a1:31:5b:df:27:fa:fd:a2:4d:67:86:45:06:00:d9:91: 75:d9:9e:20:ed:59:a5:02:6f:16:98:18:4c:e9:37:a0:74:49: 47:dc:e2:41:72:a6:62:67:0e:06:14:64:9d:b1:ce:97:62:88: 14:e2:dc:04:1e:9b:4d:92:20:8b:a2:a5:44:58:d3:06:90:0c: 86:ca:82:d0:45:e3:b4:1b:3e:8b:f1:c5:be:2d:c3:1e:1f:a6: 33:74:33:e9:2b:4a:49:3d:71:77:c5:a2:b8:30:af:e1:33:ce: b5:18:f6:bc -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIsMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzA3MTRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDJDRDEwNEI0NDdBMzdG NDFGQUE4RDkwRDA1NjQ5NDFEMkFDNTJBOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH+kEzAvN6M6lgEqwABq+m94RfydUU5XKpnoiZgmTBYYUF5jEx 7B2Gy30JTkBNL0ff1p/VY6wpXVOWyGaTaEeLzs1IY3WVs1AzzVpFpcpr2doFpvPl yMjAnYtXvbzCoH4esue+POH6FitBtN+JB20Hp+/BGhL/sHN/xVut7e+Ahu3r34jb 2Zu0hz8BV9x6ciByy6jxWqIA/k7pt8MJnDPzapqtfpbVVC06JyeYCPuRgcp3kujr +6pFSvDyzbTojeo2eFoE98IjQ/qPoFZz873freCoHT41+MjRETyKE5S7IQM6uqaO 2B1gshagZNK6RLd0NuNt+2FJFb/1iAKYCrx/AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQULNEEtEejf0H6qNkNBWSUHSrFKpMwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvTE5FRXRFZWpmMEg2 cU5rTkJXU1VIU3JGS3BNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfMSjANBgkqhkiG9w0BAQsFAAOCAQEAVHHgluf2n+CMSKCHCK0r/uNBBbUU W6sPUS6TaDYI8fErXDwLifjIF3TlqF4B/8gOYG0XgSo9NFe2FZHvQfPKbjTTwjP+ N7OlDrPw1uWWN9CyQ1qxVRBU3RXN/nB6Yohr23jzn8CcdbxjzruYKActhf1cpEst uk34B50UeldcqhAtWc/h2GiTsrR5yLI6/WarCnOhMVvfJ/r9ok1nhkUGANmRddme IO1ZpQJvFpgYTOk3oHRJR9ziQXKmYmcOBhRknbHOl2KIFOLcBB6bTZIgi6KlRFjT BpAMhsqC0EXjtBs+i/HFvi3DHh+mM3Qz6StKST1xd8WiuDCv4TPOtRj2vA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:00:08 2025 by rpki-client