This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/Vh0ij5UQauig5d292lDiV6hG2KY.roa File: Vh0ij5UQauig5d292lDiV6hG2KY.roa (raw, json) Hash identifier: wwH+g5c7hFurifmhOBED8cyiQttsSmo7uiDgNIlZXe0= Subject key identifier: 56:1D:22:8F:95:10:6A:E8:A0:E5:DD:BD:DA:50:E2:57:A8:46:D8:A6 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22A8 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/Vh0ij5UQauig5d292lDiV6hG2KY.roa Signing time: Fri 19 Dec 2025 03:03:48 +0000 ROA not before: Fri 19 Dec 2025 03:03:48 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 59033 IP address blocks: 202.160.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8872 (0x22a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:03:48 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=561D228F95106AE8A0E5DDBDDA50E257A846D8A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:48:5b:c3:92:34:c5:b0:08:6d:dc:99:32:af: c8:91:38:08:ef:df:99:65:28:f4:17:be:e6:9c:04: f0:2c:25:7e:da:2e:64:4d:a3:84:e8:84:70:15:5e: c2:32:4f:30:15:6c:d5:0f:21:4c:f1:d9:5d:1a:38: f7:28:8c:82:cf:17:9b:43:78:6a:eb:9a:9a:8c:43: 7f:fd:f1:13:49:df:c1:a9:9e:83:98:1f:55:d6:0d: ab:d4:51:04:21:18:a2:a8:02:a2:3b:e0:ab:31:d0: 4b:ad:f4:71:2c:7a:22:9a:b6:83:92:3f:ac:de:34: 5b:21:09:02:b9:ac:a9:13:2c:5f:c6:fb:0a:17:f9: 48:82:87:68:e5:e5:97:f6:f9:7a:4e:1f:35:c6:1b: 57:7f:ce:1f:25:e2:f4:02:41:86:22:e0:17:6c:fd: d6:e5:55:90:e6:7b:55:ea:55:75:56:15:0c:2f:06: ec:bc:6c:39:4f:29:c3:06:e7:6c:7b:d3:b2:63:ab: a2:ab:d7:d4:c7:28:f6:ea:7c:6a:32:82:52:2a:a8: 6f:27:80:66:66:79:7f:06:f0:cd:af:b3:d7:12:70: 17:7a:0e:58:31:69:87:71:58:7a:a8:f6:0c:ef:ed: ef:0f:fa:77:2d:86:8a:4b:32:d4:36:71:e9:5b:99: b0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1D:22:8F:95:10:6A:E8:A0:E5:DD:BD:DA:50:E2:57:A8:46:D8:A6 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/Vh0ij5UQauig5d292lDiV6hG2KY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.140.0/23 Signature Algorithm: sha256WithRSAEncryption 31:ec:da:41:29:bc:b0:d3:ad:b3:3a:eb:4e:f8:3b:d7:09:34: 94:b5:2b:c9:7a:d3:18:ea:63:d8:0f:76:47:0b:3f:ae:e0:27: 39:7a:d5:e1:73:93:83:83:e4:dd:7b:5d:fb:6f:c8:b6:db:65: 70:ea:29:63:dd:4c:1f:93:01:5e:3e:a4:d0:f1:d7:cf:6a:ec: 9d:63:f4:e0:ec:f3:80:fc:7f:62:ce:02:89:20:b8:06:97:3e: 5f:f6:af:c8:21:09:db:3c:88:41:ab:c8:4e:f5:bf:36:d8:2e: 19:4e:ea:b6:51:a0:94:02:c0:65:ce:12:64:ca:3c:88:84:33: bd:92:85:54:74:11:0a:d1:27:e5:8a:2a:59:bf:26:ae:5b:01: 96:2c:6e:f2:25:e9:4f:cc:7e:10:7a:dd:45:ae:a0:80:f2:8c: d5:ca:2a:ed:43:69:a3:14:cf:c5:54:27:89:39:1c:f7:3b:d7: 6b:2e:24:6b:f5:ce:8e:86:d8:c6:dc:7d:0c:83:fb:dd:0b:55: bc:13:8c:43:65:2f:1e:a5:fe:6f:ea:24:09:2f:c7:40:ec:1c: 0d:1d:34:db:0b:5a:94:4d:f2:83:a9:b7:2c:09:f5:7a:b9:2f: 1d:d8:1c:6a:7d:5a:3d:d9:54:b9:64:00:8f:c7:65:d9:eb:c6: 40:48:11:0e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIqgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzAzNDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDU2MUQyMjhGOTUxMDZB RThBMEU1RERCRERBNTBFMjU3QTg0NkQ4QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpSFvDkjTFsAht3Jkyr8iROAjv35llKPQXvuacBPAsJX7aLmRN o4TohHAVXsIyTzAVbNUPIUzx2V0aOPcojILPF5tDeGrrmpqMQ3/98RNJ38GpnoOY H1XWDavUUQQhGKKoAqI74Ksx0Eut9HEseiKatoOSP6zeNFshCQK5rKkTLF/G+woX +UiCh2jl5Zf2+XpOHzXGG1d/zh8l4vQCQYYi4Bds/dblVZDme1XqVXVWFQwvBuy8 bDlPKcMG52x707Jjq6Kr19THKPbqfGoyglIqqG8ngGZmeX8G8M2vs9cScBd6Dlgx aYdxWHqo9gzv7e8P+ncthopLMtQ2celbmbAzAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUVh0ij5UQauig5d292lDiV6hG2KYwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvVmgwaWo1VVFhdWln NWQyOTJsRGlWNmhHMktZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAcqgjDANBgkqhkiG9w0BAQsFAAOCAQEAMezaQSm8sNOtszrrTvg71wk0lLUr yXrTGOpj2A92Rws/ruAnOXrV4XOTg4Pk3Xtd+2/ItttlcOopY91MH5MBXj6k0PHX z2rsnWP04OzzgPx/Ys4CiSC4Bpc+X/avyCEJ2zyIQavITvW/NtguGU7qtlGglALA Zc4SZMo8iIQzvZKFVHQRCtEn5YoqWb8mrlsBlixu8iXpT8x+EHrdRa6ggPKM1coq 7UNpoxTPxVQniTkc9zvXay4ka/XOjobYxtx9DIP73QtVvBOMQ2UvHqX+b+okCS/H QOwcDR002wtalE3yg6m3LAn1erkvHdgcan1aPdlUuWQAj8dl2evGQEgRDg== -----END CERTIFICATE-----Generated at Sun Dec 21 20:00:52 2025 by rpki-client