This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/a1w8bYzCjWZsOCzsxhaPYl04oKo.roa File: a1w8bYzCjWZsOCzsxhaPYl04oKo.roa (raw, json) Hash identifier: uozoemR2qS2h7pNCOEEH/Bs6+OwHySALBCvoMsjHPv4= Subject key identifier: 6B:5C:3C:6D:8C:C2:8D:66:6C:38:2C:EC:C6:16:8F:62:5D:38:A0:AA Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22A7 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/a1w8bYzCjWZsOCzsxhaPYl04oKo.roa Signing time: Fri 19 Dec 2025 03:03:48 +0000 ROA not before: Fri 19 Dec 2025 03:03:48 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 132168 IP address blocks: 202.160.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8871 (0x22a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:03:48 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=6B5C3C6D8CC28D666C382CECC6168F625D38A0AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:0f:a5:f8:b7:9f:2d:75:6e:92:c1:48:53: 13:95:f7:75:ad:85:86:c6:cd:2f:8a:c0:5e:b0:69: 32:ab:2b:03:6d:31:70:39:4e:a8:de:73:26:66:10: 9d:63:d1:5e:6a:26:55:65:6e:e8:f6:df:45:19:b7: ca:b3:cc:a6:e6:e4:92:96:a2:d5:6d:15:d1:96:5d: f8:f6:66:0c:0e:48:54:ae:e2:50:1c:50:ce:4f:d6: ce:04:2f:3e:bd:59:ff:25:7d:c4:f6:13:03:f8:03: 9c:f5:9b:19:d0:dc:73:db:77:ce:12:fb:05:19:ca: 3f:5f:8b:49:2e:ca:c6:5e:5a:39:b7:ed:99:ff:b0: 3b:7b:b4:7b:b5:f1:37:bd:5f:c8:0c:b9:83:49:49: a7:d5:4c:a4:90:cb:32:cb:3e:8f:b8:e0:a8:80:f2: 72:60:f3:82:33:0e:2d:96:de:a3:1d:03:bc:f9:71: 49:bc:d8:96:bd:77:5f:1a:d1:9f:32:fb:58:7b:2e: ec:7a:1f:9b:96:7a:41:93:a3:33:38:21:4f:1e:23: 3e:67:ee:22:07:6f:1d:1d:34:f1:e3:64:7a:27:93: e6:30:4c:04:9f:1a:5d:8f:1c:9b:9b:35:1a:b8:58: ba:f8:67:27:1f:30:b3:62:ac:9e:f1:29:0b:9e:dc: 0f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5C:3C:6D:8C:C2:8D:66:6C:38:2C:EC:C6:16:8F:62:5D:38:A0:AA X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/a1w8bYzCjWZsOCzsxhaPYl04oKo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.140.0/23 Signature Algorithm: sha256WithRSAEncryption 37:4e:bb:3b:35:a7:cd:80:23:37:d5:6b:86:a4:a8:ca:50:ac: 8e:60:14:77:ad:43:e7:77:a5:20:35:56:81:74:3b:ca:d6:37: 43:c6:8c:0b:62:d6:d7:c5:79:90:79:9a:12:0a:77:4f:b2:95: a5:cf:99:a0:34:ac:01:25:80:71:f0:b9:b9:8b:be:5f:8d:6b: da:72:07:dc:54:37:ae:6b:9f:31:d9:cc:d8:57:72:e5:93:cc: b5:ea:84:e8:b3:10:f7:02:7a:ea:88:19:36:16:e5:03:c6:8c: 9e:d7:8b:f4:d8:0b:a8:60:7d:02:56:c8:bf:24:63:9d:c9:c1: 04:9b:6c:d4:4e:af:b2:53:c9:9b:50:17:79:30:42:2c:1a:a4: 77:04:fa:e5:a1:97:0b:02:07:77:c6:19:0d:8a:16:8c:d0:92: ca:2c:c5:d7:30:f4:4e:5b:ab:4c:27:15:01:38:72:ef:8e:a8: 14:a5:54:dc:ae:fc:d7:ed:d1:0b:80:9f:4a:17:c3:8f:17:23: 3a:dd:c2:57:4c:2c:60:9e:46:1b:4b:d3:35:aa:b7:92:36:e7: 11:8a:71:ee:3d:ae:3f:72:db:a7:44:79:aa:12:0f:0a:59:0e: 4e:fb:7e:84:42:94:6f:a4:4f:b8:7e:df:05:99:18:ae:da:ca: 58:b7:78:e0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIqcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzAzNDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDZCNUMzQzZEOENDMjhE NjY2QzM4MkNFQ0M2MTY4RjYyNUQzOEEwQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIuQ+l+LefLXVuksFIUxOV93WthYbGzS+KwF6waTKrKwNtMXA5 TqjecyZmEJ1j0V5qJlVlbuj230UZt8qzzKbm5JKWotVtFdGWXfj2ZgwOSFSu4lAc UM5P1s4ELz69Wf8lfcT2EwP4A5z1mxnQ3HPbd84S+wUZyj9fi0kuysZeWjm37Zn/ sDt7tHu18Te9X8gMuYNJSafVTKSQyzLLPo+44KiA8nJg84IzDi2W3qMdA7z5cUm8 2Ja9d18a0Z8y+1h7Lux6H5uWekGTozM4IU8eIz5n7iIHbx0dNPHjZHonk+YwTASf Gl2PHJubNRq4WLr4ZycfMLNirJ7xKQue3A/XAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUa1w8bYzCjWZsOCzsxhaPYl04oKowHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvYTF3OGJZekNqV1pz T0N6c3hoYVBZbDA0b0tvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAcqgjDANBgkqhkiG9w0BAQsFAAOCAQEAN067OzWnzYAjN9VrhqSoylCsjmAU d61D53elIDVWgXQ7ytY3Q8aMC2LW18V5kHmaEgp3T7KVpc+ZoDSsASWAcfC5uYu+ X41r2nIH3FQ3rmufMdnM2Fdy5ZPMteqE6LMQ9wJ66ogZNhblA8aMnteL9NgLqGB9 AlbIvyRjncnBBJts1E6vslPJm1AXeTBCLBqkdwT65aGXCwIHd8YZDYoWjNCSyizF 1zD0TlurTCcVAThy746oFKVU3K781+3RC4CfShfDjxcjOt3CV0wsYJ5GG0vTNaq3 kjbnEYpx7j2uP3Lbp0R5qhIPClkOTvt+hEKUb6RPuH7fBZkYrtrKWLd44A== -----END CERTIFICATE-----Generated at Sun Dec 21 20:03:17 2025 by rpki-client