This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/_7GISxTQd_ZP17ZFvMd8pYVEaMs.roa File: _7GISxTQd_ZP17ZFvMd8pYVEaMs.roa (raw, json) Hash identifier: oZ+IcrJB89B3vMqDcOQW/OxKHeZLEUx6Uj10eD9vY/M= Subject key identifier: FF:B1:88:4B:14:D0:77:F6:4F:D7:B6:45:BC:C7:7C:A5:85:44:68:CB Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22C8 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/_7GISxTQd_ZP17ZFvMd8pYVEaMs.roa Signing time: Fri 19 Dec 2025 03:10:58 +0000 ROA not before: Fri 19 Dec 2025 03:10:58 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 59033 IP address blocks: 103.90.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8904 (0x22c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:10:58 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=FFB1884B14D077F64FD7B645BCC77CA5854468CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:c3:61:d4:8b:07:b5:ae:8a:82:56:27:66: e0:99:e0:7a:06:41:e9:1e:34:02:a8:22:04:67:34: df:a4:30:a0:6c:91:d5:36:48:58:5c:f1:09:fa:4c: a6:63:59:f4:28:12:4d:75:7a:57:9e:6f:f8:9a:63: 43:70:7b:76:55:82:64:34:b4:2d:ce:1c:43:3e:42: 3e:51:4b:63:2c:8d:d2:fc:2f:89:b9:d3:d4:e7:44: 4a:d7:0c:c6:88:9a:36:0f:43:67:a1:54:6a:76:88: 70:0c:18:2b:e0:ab:a1:a2:ec:54:31:15:81:06:a5: 31:9b:70:d0:b7:78:1d:6d:9d:d5:2d:71:f5:5e:fa: 47:30:90:c9:5a:f1:be:1a:fc:54:b9:b8:5e:1a:51: e8:4c:21:87:e1:38:b9:b4:44:53:36:92:25:16:98: 0f:d3:72:c0:29:ab:f1:c1:a8:13:5f:e4:da:58:0c: 28:87:07:99:de:9a:cc:3d:c3:b9:04:e7:eb:fd:9f: d5:4e:c4:4a:d7:da:db:dc:8b:02:6f:d0:f7:8e:43: 9a:59:17:c1:68:17:77:70:51:5a:0a:a5:aa:e1:fa: f1:d3:d6:38:12:2b:ae:06:20:f0:c9:67:3c:a5:f8: ff:30:80:b5:63:66:d2:d0:9b:77:58:62:3a:6c:cf: 36:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B1:88:4B:14:D0:77:F6:4F:D7:B6:45:BC:C7:7C:A5:85:44:68:CB X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/_7GISxTQd_ZP17ZFvMd8pYVEaMs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.90.56.0/24 Signature Algorithm: sha256WithRSAEncryption c7:95:f3:34:0f:aa:9a:59:d8:f4:83:d0:78:06:fc:ae:58:4e: 86:5e:54:a4:b2:3f:ff:4c:9c:f5:57:8f:bf:2b:00:10:42:ef: f4:9d:eb:a9:c5:3c:3a:59:60:4f:84:eb:12:5f:87:1b:af:35: 75:2b:d3:af:8a:62:e6:27:05:0d:ae:50:c9:81:8f:0f:69:d9: e7:2d:22:d6:32:d4:f3:4a:ab:f8:53:cf:31:57:f6:5a:fe:2f: 38:99:5b:a3:ee:1b:98:ba:f8:5d:88:1d:24:2e:f9:a2:d7:cc: 72:9c:4e:77:50:32:b0:c8:c6:ee:e8:ed:ee:c9:b4:d9:08:0b: 4a:4b:a3:46:3b:93:d7:97:2d:3f:06:61:3d:da:5e:7c:e6:f5: 22:28:89:77:76:48:f1:d2:f2:20:06:b9:7e:b9:da:57:23:02: aa:27:1d:0b:c9:ec:aa:ba:6a:bf:85:ac:e8:a3:73:c5:72:61: 11:74:0a:8f:4d:d6:a0:d4:44:7c:21:94:6f:3e:90:18:f6:3b: 85:4e:6a:9d:90:73:45:e3:10:2b:c9:87:53:55:b6:99:4b:7c: 42:ba:65:24:59:ad:f9:21:04:14:bb:31:4b:43:6e:b3:91:20: be:2f:fc:df:a4:25:c0:a8:19:07:36:89:fc:b9:d4:af:8f:d4: 08:09:24:3f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIsgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzEwNThaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEZGQjE4ODRCMTREMDc3 RjY0RkQ3QjY0NUJDQzc3Q0E1ODU0NDY4Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC15cNh1IsHta6KglYnZuCZ4HoGQekeNAKoIgRnNN+kMKBskdU2 SFhc8Qn6TKZjWfQoEk11eleeb/iaY0Nwe3ZVgmQ0tC3OHEM+Qj5RS2MsjdL8L4m5 09TnRErXDMaImjYPQ2ehVGp2iHAMGCvgq6Gi7FQxFYEGpTGbcNC3eB1tndUtcfVe +kcwkMla8b4a/FS5uF4aUehMIYfhOLm0RFM2kiUWmA/TcsApq/HBqBNf5NpYDCiH B5nemsw9w7kE5+v9n9VOxErX2tvciwJv0PeOQ5pZF8FoF3dwUVoKparh+vHT1jgS K64GIPDJZzyl+P8wgLVjZtLQm3dYYjpszzahAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU/7GISxTQd/ZP17ZFvMd8pYVEaMswHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvXzdHSVN4VFFkX1pQ MTdaRnZNZDhwWVZFYU1zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdaODANBgkqhkiG9w0BAQsFAAOCAQEAx5XzNA+qmlnY9IPQeAb8rlhOhl5U pLI//0yc9VePvysAEELv9J3rqcU8OllgT4TrEl+HG681dSvTr4pi5icFDa5QyYGP D2nZ5y0i1jLU80qr+FPPMVf2Wv4vOJlbo+4bmLr4XYgdJC75otfMcpxOd1AysMjG 7ujt7sm02QgLSkujRjuT15ctPwZhPdpefOb1IiiJd3ZI8dLyIAa5frnaVyMCqicd C8nsqrpqv4Ws6KNzxXJhEXQKj03WoNREfCGUbz6QGPY7hU5qnZBzReMQK8mHU1W2 mUt8QrplJFmt+SEEFLsxS0Nus5Egvi/836QlwKgZBzaJ/LnUr4/UCAkkPw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:06:22 2025 by rpki-client