This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/ROox4MfWthmGsUcBwZ2V4kzG_AA.roa File: ROox4MfWthmGsUcBwZ2V4kzG_AA.roa (raw, json) Hash identifier: wyNvZF5MUvsGcRoWbXUg9dAfVx/Avb5lwR2ltbiIYjA= Subject key identifier: 44:EA:31:E0:C7:D6:B6:19:86:B1:47:01:C1:9D:95:E2:4C:C6:FC:00 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22A1 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/ROox4MfWthmGsUcBwZ2V4kzG_AA.roa Signing time: Fri 19 Dec 2025 03:03:47 +0000 ROA not before: Fri 19 Dec 2025 03:03:47 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 59033 IP address blocks: 202.160.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8865 (0x22a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:03:47 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=44EA31E0C7D6B61986B14701C19D95E24CC6FC00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fd:8b:81:89:d8:4e:ab:30:5c:b5:ee:00:c2: cf:e2:61:f8:19:4c:8c:60:70:ac:2a:09:7e:12:c6: 85:3e:fc:fc:de:0b:e2:87:70:b4:94:6b:08:d0:a3: 1f:48:fa:5c:22:f3:0f:a7:b3:1d:ba:7e:d7:ff:ee: fc:11:d2:00:35:88:cb:e0:75:1a:49:b0:47:d0:23: 10:ad:d9:c4:66:b2:9f:5c:44:29:9e:3f:7a:b4:a6: 19:85:c7:92:04:2d:d9:32:5a:ba:57:75:3d:a4:21: c1:b2:73:c9:45:a1:9c:b9:fd:53:44:bd:0a:2a:29: 1c:20:1b:30:eb:4d:16:c1:93:58:91:59:71:da:83: c5:c3:2f:6b:1f:ba:6f:a9:ad:1c:82:3f:c0:ce:6d: f8:86:25:d5:32:c7:93:a3:46:3e:36:77:f1:99:04: 80:1e:3b:c4:f0:de:2d:d6:f7:c7:26:70:c8:88:38: 83:2b:84:7c:f2:aa:12:d5:ae:3b:ce:9d:62:28:20: 4b:b2:d4:6a:a6:1e:b1:8c:28:cc:3b:a6:21:4e:69: 83:d0:a8:d6:d4:d5:bf:64:e9:f3:4b:55:ed:be:3d: b1:ca:39:e6:ca:73:ed:24:26:af:02:5a:76:35:45: 8f:01:28:bf:a5:8c:57:e2:2c:f1:9f:66:14:d1:2a: 8a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EA:31:E0:C7:D6:B6:19:86:B1:47:01:C1:9D:95:E2:4C:C6:FC:00 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/ROox4MfWthmGsUcBwZ2V4kzG_AA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.143.0/24 Signature Algorithm: sha256WithRSAEncryption 59:c0:a0:a0:66:a5:a4:df:b4:a8:8b:9c:d2:dd:d7:75:e7:9c: 35:08:27:66:ca:f8:05:0a:f6:da:46:5b:bc:84:d1:6e:03:0c: aa:df:31:7e:c6:ac:87:f0:05:85:c8:ff:54:9e:3d:bb:cb:13: f8:8b:ea:72:47:a9:57:b0:2a:1e:66:64:18:cd:64:5f:d0:13: fc:ef:8b:51:ee:ac:94:50:44:e4:d8:de:fe:ac:fa:20:ab:c6: cf:bd:a3:d1:7e:20:e5:d8:3d:13:b9:8e:e4:5c:c5:53:b6:41: 69:16:4f:28:1e:ef:a8:7f:4b:c6:01:48:43:96:0b:68:b0:47: 2a:5e:99:ac:4f:00:91:3a:b5:40:69:00:10:bc:d7:5c:3f:fc: f4:43:2a:7d:48:bb:19:4d:64:ff:b2:66:56:7c:20:93:43:99: fe:83:8d:c3:6d:7d:f1:ef:84:cb:27:af:bc:3a:f6:d6:e5:7c: 95:3a:89:c6:bb:ae:6d:23:9d:a7:3c:4e:34:74:95:a9:43:cc: e2:7b:75:91:72:11:63:f8:66:bf:ee:b3:bc:d6:f2:7e:cf:a7: 73:f1:8f:94:e9:6d:78:f6:40:03:3b:8c:e0:83:b5:cf:cb:f8: d2:fc:e3:8d:13:62:f7:42:77:24:cd:e6:db:2a:75:15:0c:c1: ba:9a:9b:2f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIqEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzAzNDdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQ0RUEzMUUwQzdENkI2 MTk4NkIxNDcwMUMxOUQ5NUUyNENDNkZDMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ/YuBidhOqzBcte4Aws/iYfgZTIxgcKwqCX4SxoU+/PzeC+KH cLSUawjQox9I+lwi8w+nsx26ftf/7vwR0gA1iMvgdRpJsEfQIxCt2cRmsp9cRCme P3q0phmFx5IELdkyWrpXdT2kIcGyc8lFoZy5/VNEvQoqKRwgGzDrTRbBk1iRWXHa g8XDL2sfum+prRyCP8DObfiGJdUyx5OjRj42d/GZBIAeO8Tw3i3W98cmcMiIOIMr hHzyqhLVrjvOnWIoIEuy1GqmHrGMKMw7piFOaYPQqNbU1b9k6fNLVe2+PbHKOebK c+0kJq8CWnY1RY8BKL+ljFfiLPGfZhTRKopxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUROox4MfWthmGsUcBwZ2V4kzG/AAwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvUk9veDRNZld0aG1H c1VjQndaMlY0a3pHX0FBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMqgjzANBgkqhkiG9w0BAQsFAAOCAQEAWcCgoGalpN+0qIuc0t3XdeecNQgn Zsr4BQr22kZbvITRbgMMqt8xfsash/AFhcj/VJ49u8sT+IvqckepV7AqHmZkGM1k X9AT/O+LUe6slFBE5Nje/qz6IKvGz72j0X4g5dg9E7mO5FzFU7ZBaRZPKB7vqH9L xgFIQ5YLaLBHKl6ZrE8AkTq1QGkAELzXXD/89EMqfUi7GU1k/7JmVnwgk0OZ/oON w2198e+EyyevvDr21uV8lTqJxruubSOdpzxONHSVqUPM4nt1kXIRY/hmv+6zvNby fs+nc/GPlOltePZAAzuM4IO1z8v40vzjjRNi90J3JM3m2yp1FQzBupqbLw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:00:58 2025 by rpki-client