This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/QP9HMZKCo0ClrOaUe5i9qoEqACA.roa File: QP9HMZKCo0ClrOaUe5i9qoEqACA.roa (raw, json) Hash identifier: wF/mwaxTougksH32x3t72zydtsoyUIUV8xuijtEQveA= Subject key identifier: 40:FF:47:31:92:82:A3:40:A5:AC:E6:94:7B:98:BD:AA:81:2A:00:20 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22B5 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/QP9HMZKCo0ClrOaUe5i9qoEqACA.roa Signing time: Fri 19 Dec 2025 03:07:12 +0000 ROA not before: Fri 19 Dec 2025 03:07:12 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63689 IP address blocks: 103.204.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8885 (0x22b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:07:12 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=40FF47319282A340A5ACE6947B98BDAA812A0020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:54:7a:37:48:92:f0:b7:f6:ad:7a:dc:17: 7a:af:6a:15:7e:f3:58:3d:f9:51:50:47:4c:8a:43: 7f:5a:a6:bc:02:75:3c:c9:66:b4:85:dc:70:2a:4b: 59:ad:98:c5:b8:a8:04:56:c6:ca:92:fe:45:0f:47: 64:89:31:f4:d4:8f:8e:6d:8c:d2:6b:b1:54:dd:27: be:18:8e:e5:ad:1f:be:13:c4:20:ab:d5:77:c1:c5: 89:39:eb:e6:5c:2c:b8:6c:84:db:be:2e:cf:ae:cb: 22:94:49:af:0c:4f:08:b7:60:d5:fb:ea:59:41:9c: 62:11:fd:54:9e:f1:bb:9c:ba:03:84:20:9b:4b:8e: 08:b8:0c:ea:1e:a6:5e:8e:61:8b:d6:59:83:69:fa: 59:0b:32:63:ef:12:8f:1f:3d:3d:6a:83:02:be:76: 83:22:fc:25:a9:5f:fd:4c:cc:d7:a3:45:d7:c4:60: 33:1b:17:34:be:ed:98:0d:ad:46:76:86:09:da:ed: d0:8f:69:62:9e:c6:e8:54:6d:b2:c9:3c:f3:b8:61: a7:60:60:d9:51:04:a6:bb:04:86:0d:02:7d:e7:af: e1:ff:86:78:3c:51:70:a6:eb:1b:e5:e8:22:52:bb: 91:43:3d:a5:f6:39:ef:ad:7d:ce:3e:65:64:93:0b: 6c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FF:47:31:92:82:A3:40:A5:AC:E6:94:7B:98:BD:AA:81:2A:00:20 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/QP9HMZKCo0ClrOaUe5i9qoEqACA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.204.74.0/24 Signature Algorithm: sha256WithRSAEncryption 59:38:73:f2:ea:79:c5:49:52:d7:36:85:a4:d2:ad:c4:9e:38: 51:bc:ac:11:70:22:7d:28:d4:ac:cd:36:24:65:a8:f8:c8:65: 18:2b:34:3c:3d:bf:8e:f0:26:9e:b5:ed:e8:ae:5e:ef:87:2d: 8e:ce:47:a1:7d:05:00:49:42:ee:50:7e:30:d8:45:2f:60:10: 38:76:3a:cd:02:cd:90:b3:df:3e:5b:76:21:06:e7:1f:28:35: 82:71:c7:1e:1a:ce:bb:24:b6:90:1d:f1:cf:bd:9a:4b:26:40: db:60:11:29:81:ed:e5:d3:bb:1f:ce:62:5e:96:a6:0e:01:5a: 95:71:e1:a1:3c:3a:e0:a0:37:6c:93:ea:b1:94:04:fa:a5:ed: 5c:ff:54:7c:3d:ae:e3:8e:d0:12:4b:6f:f9:ed:fe:1e:ef:8a: 78:56:37:c1:26:a9:0c:eb:4e:74:6f:1d:80:7c:c5:6c:af:d0: 22:9c:14:9a:72:21:6a:eb:7d:1b:0f:db:f3:63:ed:52:da:d6: 15:56:e3:3d:ea:a7:67:02:72:99:63:37:84:3c:59:44:0b:4a: 44:88:82:09:fb:69:9a:38:a7:b7:e0:67:4c:4f:d2:35:12:55: ba:b8:57:0a:e1:ba:6d:6e:bb:f4:b0:23:52:5f:b8:19:86:c5: cc:31:ae:d6 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIrUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzA3MTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQwRkY0NzMxOTI4MkEz NDBBNUFDRTY5NDdCOThCREFBODEyQTAwMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAGlR6N0iS8Lf2rXrcF3qvahV+81g9+VFQR0yKQ39aprwCdTzJ ZrSF3HAqS1mtmMW4qARWxsqS/kUPR2SJMfTUj45tjNJrsVTdJ74YjuWtH74TxCCr 1XfBxYk56+ZcLLhshNu+Ls+uyyKUSa8MTwi3YNX76llBnGIR/VSe8bucugOEIJtL jgi4DOoepl6OYYvWWYNp+lkLMmPvEo8fPT1qgwK+doMi/CWpX/1MzNejRdfEYDMb FzS+7ZgNrUZ2hgna7dCPaWKexuhUbbLJPPO4YadgYNlRBKa7BIYNAn3nr+H/hng8 UXCm6xvl6CJSu5FDPaX2Oe+tfc4+ZWSTC2wDAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUQP9HMZKCo0ClrOaUe5i9qoEqACAwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvUVA5SE1aS0NvMENs ck9hVWU1aTlxb0VxQUNBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfMSjANBgkqhkiG9w0BAQsFAAOCAQEAWThz8up5xUlS1zaFpNKtxJ44Ubys EXAifSjUrM02JGWo+MhlGCs0PD2/jvAmnrXt6K5e74ctjs5HoX0FAElC7lB+MNhF L2AQOHY6zQLNkLPfPlt2IQbnHyg1gnHHHhrOuyS2kB3xz72aSyZA22ARKYHt5dO7 H85iXpamDgFalXHhoTw64KA3bJPqsZQE+qXtXP9UfD2u447QEktv+e3+Hu+KeFY3 wSapDOtOdG8dgHzFbK/QIpwUmnIhaut9Gw/b82PtUtrWFVbjPeqnZwJymWM3hDxZ RAtKRIiCCftpmjint+BnTE/SNRJVurhXCuG6bW679LAjUl+4GYbFzDGu1g== -----END CERTIFICATE-----Generated at Sun Dec 21 20:02:44 2025 by rpki-client