This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/PgLDDgm4bzHog-yfAr4F_vaVZVc.roa File: PgLDDgm4bzHog-yfAr4F_vaVZVc.roa (raw, json) Hash identifier: +BVtEegMBXyywDHeYrR8SECfBVbgKswTmd1H8bfV7Mk= Subject key identifier: 3E:02:C3:0E:09:B8:6F:31:E8:83:EC:9F:02:BE:05:FE:F6:95:65:57 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22B1 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/PgLDDgm4bzHog-yfAr4F_vaVZVc.roa Signing time: Fri 19 Dec 2025 03:03:50 +0000 ROA not before: Fri 19 Dec 2025 03:03:50 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 132168 IP address blocks: 202.160.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8881 (0x22b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:03:50 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=3E02C30E09B86F31E883EC9F02BE05FEF6956557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:16:f1:d9:b0:34:c2:c9:34:40:9e:15:72:19: 72:69:ab:b8:d7:68:bf:08:18:3f:22:68:02:2e:eb: 0f:3d:5f:9b:64:b5:47:ac:5c:f1:97:07:d8:29:c2: 21:9e:34:2d:5d:37:b2:4a:dc:d1:4c:f9:b7:b0:d4: 4b:25:7c:c2:e4:c5:72:58:43:c3:47:70:67:71:aa: 5e:37:93:10:41:3c:03:36:d9:53:b7:b4:c1:36:ab: e7:86:d2:31:18:c9:97:c8:84:50:69:f7:ba:6b:7b: 06:c6:be:3f:42:d3:66:2e:61:9d:db:7e:cb:a6:98: 89:cf:a5:6b:4d:69:4b:f1:cd:7e:be:7d:12:89:79: 0a:0d:96:6e:ee:8f:0d:49:fa:dc:8d:04:c4:cb:f7: 2e:1f:9c:e2:b6:e3:78:71:de:8c:ec:75:5a:e5:4d: c3:0c:af:bc:81:b6:8e:f3:13:a9:8e:b4:bf:6b:31: b2:3a:68:50:2b:c1:86:df:f4:fb:8e:d8:dc:15:eb: 7f:82:d7:77:c6:82:61:02:21:de:68:8c:9e:9f:01: 08:b2:1d:17:bc:0a:bc:9c:b1:36:79:06:c1:ef:ef: a2:54:76:e2:63:16:c6:28:27:c8:e4:8f:e2:d5:ec: bf:5a:30:b4:47:19:69:17:f5:9e:37:67:6d:eb:cd: 3e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:02:C3:0E:09:B8:6F:31:E8:83:EC:9F:02:BE:05:FE:F6:95:65:57 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/PgLDDgm4bzHog-yfAr4F_vaVZVc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.142.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:ef:64:bc:4f:4c:98:a7:ba:ec:c7:82:ca:d2:78:8c:fa:77: cd:c0:63:b9:5e:af:69:9e:2e:48:e2:90:11:23:32:72:c7:1d: 99:34:72:23:3f:2a:41:fb:c6:30:b9:a3:08:a7:ba:ba:25:3b: e3:32:51:e5:8a:eb:6b:0d:8a:bf:15:39:f2:b9:df:20:7b:93: 52:78:d4:0d:e8:e5:de:b2:6e:de:da:69:6a:0f:7c:52:b4:63: 4a:9c:2b:ca:76:af:47:1c:49:9d:4f:17:67:b0:48:d0:9c:1d: b7:6e:9a:44:91:8b:e4:84:c6:33:db:11:92:8c:1c:fa:a2:4f: 5c:49:5e:9b:99:71:61:de:73:91:e1:ab:67:89:12:2f:bf:45: 90:9f:17:be:a4:98:a8:02:96:88:c4:cf:d1:ea:31:9c:19:a3: 4d:b4:a6:c5:71:cc:d8:96:20:83:34:9b:a6:ef:97:5b:24:58: ab:73:7e:b8:a6:41:91:be:ec:f0:46:e5:b5:ad:84:dd:27:00: 85:fb:55:c9:29:a7:5c:bc:c1:6b:de:f1:51:ea:08:e8:a6:6f: 4c:68:54:9a:25:09:d1:4c:3a:12:6c:ff:b8:14:18:99:5e:4b: 1d:3b:75:6f:a7:04:a8:f7:b5:19:6c:95:47:94:f1:60:8f:3f: de:f9:d2:b8 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIrEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzAzNTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDNFMDJDMzBFMDlCODZG MzFFODgzRUM5RjAyQkUwNUZFRjY5NTY1NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoFvHZsDTCyTRAnhVyGXJpq7jXaL8IGD8iaAIu6w89X5tktUes XPGXB9gpwiGeNC1dN7JK3NFM+bew1EslfMLkxXJYQ8NHcGdxql43kxBBPAM22VO3 tME2q+eG0jEYyZfIhFBp97prewbGvj9C02YuYZ3bfsummInPpWtNaUvxzX6+fRKJ eQoNlm7ujw1J+tyNBMTL9y4fnOK243hx3ozsdVrlTcMMr7yBto7zE6mOtL9rMbI6 aFArwYbf9PuO2NwV63+C13fGgmECId5ojJ6fAQiyHRe8CrycsTZ5BsHv76JUduJj FsYoJ8jkj+LV7L9aMLRHGWkX9Z43Z23rzT7PAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUPgLDDgm4bzHog+yfAr4F/vaVZVcwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvUGdMRERnbTRiekhv Zy15ZkFyNEZfdmFWWlZjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMqgjjANBgkqhkiG9w0BAQsFAAOCAQEAbe9kvE9MmKe67MeCytJ4jPp3zcBj uV6vaZ4uSOKQESMycscdmTRyIz8qQfvGMLmjCKe6uiU74zJR5Yrraw2KvxU58rnf IHuTUnjUDejl3rJu3tppag98UrRjSpwrynavRxxJnU8XZ7BI0Jwdt26aRJGL5ITG M9sRkowc+qJPXElem5lxYd5zkeGrZ4kSL79FkJ8XvqSYqAKWiMTP0eoxnBmjTbSm xXHM2JYggzSbpu+XWyRYq3N+uKZBkb7s8Eblta2E3ScAhftVySmnXLzBa97xUeoI 6KZvTGhUmiUJ0Uw6Emz/uBQYmV5LHTt1b6cEqPe1GWyVR5TxYI8/3vnSuA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:06:23 2025 by rpki-client