This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/aqb3qtdu2T-fl8H3bxeILFsYPms.roa File: aqb3qtdu2T-fl8H3bxeILFsYPms.roa (raw, json) Hash identifier: ibOwF/3zDNra+/IAt33danMPrABjlroxBtWlMZzaGp8= Subject key identifier: 6A:A6:F7:AA:D7:6E:D9:3F:9F:97:C1:F7:6F:17:88:2C:5B:18:3E:6B Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22B6 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/aqb3qtdu2T-fl8H3bxeILFsYPms.roa Signing time: Fri 19 Dec 2025 03:07:12 +0000 ROA not before: Fri 19 Dec 2025 03:07:12 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 59033 IP address blocks: 103.204.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8886 (0x22b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:07:12 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=6AA6F7AAD76ED93F9F97C1F76F17882C5B183E6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:b2:4f:82:cc:51:24:57:12:23:8c:db:ff: 59:8a:e8:09:97:f6:f8:b5:74:b6:f0:97:f0:b2:cd: d2:1a:98:6b:b8:c9:59:6a:f0:63:7a:e4:ee:ea:0a: 0a:5c:4d:8e:d6:78:4b:6e:91:36:cd:10:1c:1b:1f: 93:a0:94:7c:06:e5:f7:51:8a:45:7c:3a:1d:71:9c: 2d:1b:51:a3:22:09:29:a6:84:79:2d:13:7c:d2:e8: 71:3e:f6:6a:68:d5:48:aa:66:56:dd:91:ac:61:65: ec:76:1e:c7:5f:e8:4d:e9:43:f7:e3:7c:2d:dd:53: 8c:cc:89:be:06:d9:8d:74:d3:83:55:42:3d:70:c6: 19:31:bd:54:01:da:44:6e:5d:7e:18:d4:2d:7f:7a: 1e:03:52:d6:85:67:55:95:f6:03:0c:a5:55:78:07: 03:7c:80:5a:c3:dc:28:47:46:90:fa:ac:9d:68:cc: a1:be:83:d4:43:60:d8:8f:52:1e:6c:9d:bc:a6:d4: 0c:23:e5:b3:0a:dd:81:92:1f:85:3a:6b:ce:27:e9: f5:5c:b3:5b:90:9f:c3:56:e4:f8:15:6b:c8:15:7d: 17:3e:28:9e:d1:58:db:22:6c:c6:f0:a6:40:86:a3: 02:04:43:b9:09:20:f9:5a:67:47:77:c2:9d:89:96: a3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A6:F7:AA:D7:6E:D9:3F:9F:97:C1:F7:6F:17:88:2C:5B:18:3E:6B X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/aqb3qtdu2T-fl8H3bxeILFsYPms.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.204.73.0/24 Signature Algorithm: sha256WithRSAEncryption 28:aa:f1:72:50:d1:66:81:64:bf:00:d7:99:3a:0a:28:65:f2: 4e:74:05:f8:5f:a0:b4:e7:84:25:2e:a8:a5:66:10:c1:8c:bf: 20:45:47:64:a7:1b:b3:0a:73:ea:e6:9d:99:8a:7c:b7:d6:23: 9e:c2:7d:86:a5:f7:9c:19:9c:eb:98:e7:f6:f5:32:7b:f8:ef: 32:9d:b7:1a:e0:b9:08:52:9d:89:84:e6:b7:9c:f7:98:47:2e: 6d:20:12:ca:82:71:f9:a7:cb:01:b3:1a:b9:ba:73:01:6b:57: d4:ce:f9:e1:72:c8:2a:8c:54:ed:70:46:ca:69:16:e9:ca:4b: d0:4d:62:ef:26:e3:d1:87:62:96:c8:b0:ea:b8:b6:78:dd:4b: 88:0a:8e:6a:6a:2f:0f:eb:c1:89:ff:30:a3:49:cf:95:a5:13: 82:77:d0:b3:c3:cf:24:12:5d:ba:86:71:01:04:b7:6c:34:82: df:d6:17:03:b1:07:91:15:a8:21:63:21:23:5b:ee:90:17:14: 10:64:89:61:9e:9e:f8:6d:c5:32:89:40:4b:5e:d3:65:97:63: 3a:64:4b:d5:6b:d1:94:9c:b1:e6:94:33:c7:b2:a7:4a:8c:bc: 7d:7a:14:60:69:b3:97:38:c9:55:6f:fe:51:26:37:81:50:2e: b5:c4:f6:ac -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIrYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzA3MTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDZBQTZGN0FBRDc2RUQ5 M0Y5Rjk3QzFGNzZGMTc4ODJDNUIxODNFNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxILJPgsxRJFcSI4zb/1mK6AmX9vi1dLbwl/CyzdIamGu4yVlq 8GN65O7qCgpcTY7WeEtukTbNEBwbH5OglHwG5fdRikV8Oh1xnC0bUaMiCSmmhHkt E3zS6HE+9mpo1UiqZlbdkaxhZex2Hsdf6E3pQ/fjfC3dU4zMib4G2Y1004NVQj1w xhkxvVQB2kRuXX4Y1C1/eh4DUtaFZ1WV9gMMpVV4BwN8gFrD3ChHRpD6rJ1ozKG+ g9RDYNiPUh5snbym1Awj5bMK3YGSH4U6a84n6fVcs1uQn8NW5PgVa8gVfRc+KJ7R WNsibMbwpkCGowIEQ7kJIPlaZ0d3wp2JlqP5AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUaqb3qtdu2T+fl8H3bxeILFsYPmswHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvYXFiM3F0ZHUyVC1m bDhIM2J4ZUlMRnNZUG1zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfMSTANBgkqhkiG9w0BAQsFAAOCAQEAKKrxclDRZoFkvwDXmToKKGXyTnQF +F+gtOeEJS6opWYQwYy/IEVHZKcbswpz6uadmYp8t9YjnsJ9hqX3nBmc65jn9vUy e/jvMp23GuC5CFKdiYTmt5z3mEcubSASyoJx+afLAbMaubpzAWtX1M754XLIKoxU 7XBGymkW6cpL0E1i7ybj0Ydilsiw6ri2eN1LiAqOamovD+vBif8wo0nPlaUTgnfQ s8PPJBJduoZxAQS3bDSC39YXA7EHkRWoIWMhI1vukBcUEGSJYZ6e+G3FMolAS17T ZZdjOmRL1WvRlJyx5pQzx7KnSoy8fXoUYGmzlzjJVW/+USY3gVAutcT2rA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:06:21 2025 by rpki-client