This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/Ths2y0mVqAFtzt7kWiVW2iU1QVM.roa File: Ths2y0mVqAFtzt7kWiVW2iU1QVM.roa (raw, json) Hash identifier: 3w1DUzH73KRmxIPL4YvyUMw8pTcGCL70vqYVYRRUXf0= Subject key identifier: 4E:1B:36:CB:49:95:A8:01:6D:CE:DE:E4:5A:25:56:DA:25:35:41:53 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22B4 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/Ths2y0mVqAFtzt7kWiVW2iU1QVM.roa Signing time: Fri 19 Dec 2025 03:07:12 +0000 ROA not before: Fri 19 Dec 2025 03:07:12 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 132168 IP address blocks: 103.204.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8884 (0x22b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:07:12 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4E1B36CB4995A8016DCEDEE45A2556DA25354153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4f:4d:89:bb:fb:bc:06:db:4d:49:b2:ff:4a: 60:93:d8:87:73:eb:b1:c7:09:21:d6:28:17:34:0b: a7:87:10:4c:47:96:5d:d2:be:d3:57:ba:bb:26:cc: 05:21:05:51:c5:c4:d6:5d:f0:af:eb:9d:d3:b9:93: 48:1d:7f:e5:6a:84:a5:bd:34:af:de:2a:e3:6c:42: 54:d9:31:a3:4a:ac:a6:55:23:92:12:76:9c:39:6c: 54:eb:0e:19:8c:6d:71:48:0a:b6:6e:c2:07:d5:1b: a3:e6:24:3e:2c:c7:15:6e:8b:98:f2:2e:0f:1d:81: 7c:54:57:bd:80:13:be:6d:57:e8:bf:c2:f7:ce:d6: 1d:24:98:95:ee:78:67:87:aa:87:d1:b4:f6:9d:48: e7:a4:ad:f3:09:63:41:8d:7b:92:e4:d2:22:74:37: ea:e4:85:0d:c4:12:8a:97:a6:9b:25:12:e2:51:34: 14:2c:ec:12:9f:ea:41:96:8a:c8:25:a3:32:e9:dc: 9a:3f:12:5c:1b:7c:8e:f3:df:3c:f8:8f:54:80:08: 7c:34:85:cf:78:0e:cd:f9:f5:b5:ff:7d:77:48:ac: c9:92:50:68:66:cf:bf:38:89:5d:5e:4a:f0:3e:99: 81:03:ef:e2:09:90:4b:58:dd:e0:50:0b:73:24:84: 1c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1B:36:CB:49:95:A8:01:6D:CE:DE:E4:5A:25:56:DA:25:35:41:53 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/Ths2y0mVqAFtzt7kWiVW2iU1QVM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.204.75.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:59:a3:af:35:ce:6d:e2:4c:43:6d:cc:ae:da:df:42:d0:64: 54:a5:90:28:8d:67:91:88:8d:b8:e6:8f:6c:46:c1:ca:63:b9: 99:f7:df:11:48:83:82:51:3e:91:d9:94:4e:a2:95:46:86:81: fc:c0:2c:01:2d:de:b1:1c:56:c8:10:20:94:f1:3b:d2:cc:d6: 7b:96:e6:d2:1f:37:47:76:f3:82:00:34:14:b7:5e:27:b1:c7: 66:e6:ab:32:5d:68:b7:c3:49:45:81:c4:da:f8:c3:36:6c:5f: 10:11:14:df:2b:55:61:81:8b:4d:09:4b:80:92:15:7f:23:d7: 4d:8a:f1:b3:ed:0d:06:1f:84:6d:f2:a4:9f:86:67:58:77:9b: 89:ea:9b:ea:33:49:21:34:fa:49:ec:ee:fd:78:36:95:81:5a: 00:54:f5:c2:35:1c:ae:ca:4c:e3:ef:c1:92:72:03:5b:99:02: e5:20:c1:51:2c:77:c5:9d:3c:77:e1:db:37:0f:42:8a:9a:30: be:d7:0d:aa:95:9f:d3:ce:1d:bd:fe:15:1e:65:83:bd:05:0d: 44:34:b3:5f:54:88:f1:d9:97:1f:37:42:10:83:98:92:11:dc: 2e:23:b5:64:34:d9:4f:46:a6:6d:53:a7:a7:ed:e5:4b:aa:7a: 62:b6:27:1e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIrQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzA3MTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDRFMUIzNkNCNDk5NUE4 MDE2RENFREVFNDVBMjU1NkRBMjUzNTQxNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbT02Ju/u8BttNSbL/SmCT2Idz67HHCSHWKBc0C6eHEExHll3S vtNXursmzAUhBVHFxNZd8K/rndO5k0gdf+VqhKW9NK/eKuNsQlTZMaNKrKZVI5IS dpw5bFTrDhmMbXFICrZuwgfVG6PmJD4sxxVui5jyLg8dgXxUV72AE75tV+i/wvfO 1h0kmJXueGeHqofRtPadSOekrfMJY0GNe5Lk0iJ0N+rkhQ3EEoqXppslEuJRNBQs 7BKf6kGWisglozLp3Jo/ElwbfI7z3zz4j1SACHw0hc94Ds359bX/fXdIrMmSUGhm z784iV1eSvA+mYED7+IJkEtY3eBQC3MkhBwxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUThs2y0mVqAFtzt7kWiVW2iU1QVMwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvVGhzMnkwbVZxQUZ0 enQ3a1dpVlcyaVUxUVZNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfMSzANBgkqhkiG9w0BAQsFAAOCAQEAnFmjrzXObeJMQ23MrtrfQtBkVKWQ KI1nkYiNuOaPbEbBymO5mfffEUiDglE+kdmUTqKVRoaB/MAsAS3esRxWyBAglPE7 0szWe5bm0h83R3bzggA0FLdeJ7HHZuarMl1ot8NJRYHE2vjDNmxfEBEU3ytVYYGL TQlLgJIVfyPXTYrxs+0NBh+EbfKkn4ZnWHebieqb6jNJITT6Sezu/Xg2lYFaAFT1 wjUcrspM4+/BknIDW5kC5SDBUSx3xZ08d+HbNw9CipowvtcNqpWf084dvf4VHmWD vQUNRDSzX1SI8dmXHzdCEIOYkhHcLiO1ZDTZT0ambVOnp+3lS6p6YrYnHg== -----END CERTIFICATE-----Generated at Sun Dec 21 20:01:14 2025 by rpki-client