This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/btsJdk9Ky07EbpdP0q9eIX6N8qY.roa File: btsJdk9Ky07EbpdP0q9eIX6N8qY.roa (raw, json) Hash identifier: pYfEms1G7CyS4fUTtU729qj7Am3onL1u/1y20oGT7Y4= Subject key identifier: 6E:DB:09:76:4F:4A:CB:4E:C4:6E:97:4F:D2:AF:5E:21:7E:8D:F2:A6 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22BA Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/btsJdk9Ky07EbpdP0q9eIX6N8qY.roa Signing time: Fri 19 Dec 2025 03:07:13 +0000 ROA not before: Fri 19 Dec 2025 03:07:13 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 59033 IP address blocks: 103.204.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8890 (0x22ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:07:13 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=6EDB09764F4ACB4EC46E974FD2AF5E217E8DF2A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:23:07:99:38:05:b6:4b:7a:53:bf:54:0c: cc:a5:e8:af:74:1a:99:f0:35:14:12:d7:1d:c2:99: f4:c9:0e:b4:d7:4e:b2:88:d0:92:7e:48:a0:75:51: 10:1e:31:b6:e7:9a:1e:21:1e:b0:f3:28:6d:df:db: 42:df:0b:01:42:63:9f:f6:15:cb:bc:17:0b:4b:df: da:99:34:04:04:af:e7:61:1e:a8:88:f4:93:76:35: c6:c6:c0:91:23:20:d5:c5:d4:b8:6b:d6:5a:4c:14: 96:af:82:57:e4:86:55:c5:1d:ab:d1:d1:cd:fc:2b: 08:18:ac:a1:02:e2:59:3d:49:81:f7:48:fc:7b:7c: 0f:d6:18:11:62:87:1a:50:7e:67:d8:43:37:d5:ce: df:80:05:62:93:0a:e4:d0:6d:92:97:14:ed:5c:1b: 32:f8:c4:61:4c:e4:89:4e:a8:34:44:63:ec:a5:04: b7:62:99:cb:9b:27:da:3a:03:f0:72:60:e7:f0:33: e9:a7:81:78:ec:15:17:a6:2e:3e:c2:11:10:66:85: 19:47:d8:0d:07:42:7f:58:53:9d:10:ba:95:f9:48: de:ea:0b:67:e9:ae:3c:62:b5:7e:b0:48:23:94:59: c2:d6:0f:e7:b7:e1:93:15:32:41:76:37:d5:a4:ce: 34:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DB:09:76:4F:4A:CB:4E:C4:6E:97:4F:D2:AF:5E:21:7E:8D:F2:A6 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/btsJdk9Ky07EbpdP0q9eIX6N8qY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.204.72.0/23 Signature Algorithm: sha256WithRSAEncryption 85:b7:bc:29:b6:2a:0a:d7:8d:19:30:bc:7a:72:56:55:3a:79: 7f:e0:e1:80:9d:c0:41:b7:48:52:61:aa:af:76:28:5c:37:67: f3:3a:92:93:ff:8a:82:4c:26:74:1c:18:19:df:d6:fc:31:78: 13:25:04:0e:cc:4a:b6:9f:14:64:f5:ed:bc:d7:9c:65:7f:f9: 45:3d:6f:be:ef:cc:5a:ed:05:c5:b4:27:c2:d6:e1:2e:bc:18: d0:62:0d:e5:56:e1:e4:c0:4e:24:82:72:d8:23:6e:77:54:ca: 8c:93:d9:62:cd:5e:c6:55:72:b8:fb:86:7f:29:9c:50:90:67: e3:e5:87:65:9b:a9:17:d1:80:e8:10:f8:28:78:c0:5f:55:8b: be:0d:5f:89:7a:a0:c6:25:19:2d:10:c4:5f:26:8f:73:d7:6b: 3e:44:f9:d0:61:39:43:cb:bd:73:02:40:ae:37:1e:76:88:40: c9:ad:67:48:df:e4:1b:33:d8:00:36:73:64:24:81:84:5a:b0: b0:24:ed:69:d5:a0:8b:dd:32:eb:fd:19:29:38:c6:f0:30:e8: 55:b7:4c:73:a9:d2:b8:36:a8:f0:c5:c5:cf:00:e6:68:7e:f5: e6:85:00:94:8c:df:5d:c4:b4:3c:0b:f2:10:a9:91:5b:ce:c8: 56:a5:12:a0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIrowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzA3MTNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDZFREIwOTc2NEY0QUNC NEVDNDZFOTc0RkQyQUY1RTIxN0U4REYyQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFUyMHmTgFtkt6U79UDMyl6K90GpnwNRQS1x3CmfTJDrTXTrKI 0JJ+SKB1URAeMbbnmh4hHrDzKG3f20LfCwFCY5/2Fcu8FwtL39qZNAQEr+dhHqiI 9JN2NcbGwJEjINXF1Lhr1lpMFJavglfkhlXFHavR0c38KwgYrKEC4lk9SYH3SPx7 fA/WGBFihxpQfmfYQzfVzt+ABWKTCuTQbZKXFO1cGzL4xGFM5IlOqDREY+ylBLdi mcubJ9o6A/ByYOfwM+mngXjsFRemLj7CERBmhRlH2A0HQn9YU50QupX5SN7qC2fp rjxitX6wSCOUWcLWD+e34ZMVMkF2N9WkzjQJAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUbtsJdk9Ky07EbpdP0q9eIX6N8qYwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvYnRzSmRrOUt5MDdF YnBkUDBxOWVJWDZOOHFZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWfMSDANBgkqhkiG9w0BAQsFAAOCAQEAhbe8KbYqCteNGTC8enJWVTp5f+Dh gJ3AQbdIUmGqr3YoXDdn8zqSk/+KgkwmdBwYGd/W/DF4EyUEDsxKtp8UZPXtvNec ZX/5RT1vvu/MWu0FxbQnwtbhLrwY0GIN5Vbh5MBOJIJy2CNud1TKjJPZYs1exlVy uPuGfymcUJBn4+WHZZupF9GA6BD4KHjAX1WLvg1fiXqgxiUZLRDEXyaPc9drPkT5 0GE5Q8u9cwJArjcedohAya1nSN/kGzPYADZzZCSBhFqwsCTtadWgi90y6/0ZKTjG 8DDoVbdMc6nSuDao8MXFzwDmaH715oUAlIzfXcS0PAvyEKmRW87IVqUSoA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:06:26 2025 by rpki-client