This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/fxD1ek0joWOW2B0gJGzopWzNXaM.roa File: fxD1ek0joWOW2B0gJGzopWzNXaM.roa (raw, json) Hash identifier: FYnUpGNBJ+tEzaf1bkctwvQuw3GLc85i8AuLVmHuC5E= Subject key identifier: 7F:10:F5:7A:4D:23:A1:63:96:D8:1D:20:24:6C:E8:A5:6C:CD:5D:A3 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22AA Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/fxD1ek0joWOW2B0gJGzopWzNXaM.roa Signing time: Fri 19 Dec 2025 03:03:48 +0000 ROA not before: Fri 19 Dec 2025 03:03:48 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 132168 IP address blocks: 202.160.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8874 (0x22aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:03:48 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7F10F57A4D23A16396D81D20246CE8A56CCD5DA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b2:b1:05:39:f4:bb:22:46:1c:a4:49:73:c4: 7a:f1:15:95:b0:37:61:89:72:8e:21:69:97:b3:11: 00:ef:bc:83:9c:2b:3e:c5:86:e1:de:1d:d1:7f:ad: e7:6c:06:02:17:f2:68:5c:a2:0e:91:24:ae:1e:d8: 70:71:46:f0:81:cc:45:c6:61:fb:e4:c7:58:63:24: 2c:19:ca:6e:4a:f2:c2:0b:8b:36:61:ed:71:c2:7d: ce:64:f2:6f:ec:19:fb:aa:a7:da:54:ce:4a:5e:b7: f0:46:1a:ff:2a:5f:3f:fc:14:56:b8:97:94:68:cc: 27:44:92:53:81:f9:18:42:24:b6:c1:19:f2:52:de: 7a:d5:66:64:9a:57:56:ef:26:d6:18:10:db:9f:34: 00:d9:a6:ee:86:1f:3c:6b:0a:1b:b2:33:e0:cb:30: 9d:7e:bb:52:6b:e9:f1:96:5d:3e:66:e8:43:fe:73: fd:1e:9d:e6:9e:18:30:37:58:1c:64:aa:dd:23:69: a9:a1:eb:ed:ed:c1:82:0f:3e:09:a6:3a:36:be:c4: f0:8d:d7:df:47:bf:6b:33:52:7a:cc:d1:e2:9b:33: d8:0f:7d:d6:98:a1:90:75:ed:3d:7b:0a:5c:db:a6: 58:58:7b:0c:2c:6d:a5:ab:5f:f4:dd:60:a1:0a:6b: ee:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:10:F5:7A:4D:23:A1:63:96:D8:1D:20:24:6C:E8:A5:6C:CD:5D:A3 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/fxD1ek0joWOW2B0gJGzopWzNXaM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.143.0/24 Signature Algorithm: sha256WithRSAEncryption 74:18:27:84:cf:59:c5:39:2c:07:b8:0e:e4:af:ee:9b:7b:4c: 0b:c1:c7:4e:9b:5b:db:05:e1:48:ba:3d:e8:3d:3b:6a:43:b0: b5:54:7e:26:ac:9c:55:0b:3a:43:6c:f2:2f:ec:71:9d:ef:b4: ca:1c:50:ea:e3:f5:74:8f:18:4f:f8:bd:08:72:18:07:c1:02: 75:22:16:cd:28:49:a8:ba:a1:06:70:70:ff:6e:f0:bb:52:11: 7e:1f:ef:5b:e7:73:12:ff:b4:2b:bf:8f:8c:fd:7f:6b:f7:1d: 04:19:ee:5d:77:9c:20:65:76:a3:6e:e0:c9:c9:af:50:70:06: 54:c5:91:96:aa:1e:42:f9:51:30:db:4c:d1:c8:59:ba:b1:7b: 9d:b4:34:98:26:bf:12:8e:a0:5d:73:89:2b:d3:f1:8d:52:87: 5a:7e:ea:c8:df:8a:f1:00:81:77:17:f0:b2:05:dd:34:f0:aa: c9:88:ae:26:bc:c5:25:9c:8b:8d:1c:b7:9f:0a:4f:2b:55:c1: 0e:03:97:2f:76:48:64:7b:79:76:89:73:e9:c9:57:fd:16:74: 42:e5:ed:cb:bc:6b:22:9c:df:46:9d:98:6b:29:52:d7:18:c6: 75:2f:47:ca:eb:ac:6d:d9:e8:ca:d7:c4:2b:c5:f0:a8:f5:b1: f5:51:c0:e1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzAzNDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDdGMTBGNTdBNEQyM0Ex NjM5NkQ4MUQyMDI0NkNFOEE1NkNDRDVEQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVsrEFOfS7IkYcpElzxHrxFZWwN2GJco4haZezEQDvvIOcKz7F huHeHdF/redsBgIX8mhcog6RJK4e2HBxRvCBzEXGYfvkx1hjJCwZym5K8sILizZh 7XHCfc5k8m/sGfuqp9pUzkpet/BGGv8qXz/8FFa4l5RozCdEklOB+RhCJLbBGfJS 3nrVZmSaV1bvJtYYENufNADZpu6GHzxrChuyM+DLMJ1+u1Jr6fGWXT5m6EP+c/0e neaeGDA3WBxkqt0jaamh6+3twYIPPgmmOja+xPCN199Hv2szUnrM0eKbM9gPfdaY oZB17T17ClzbplhYewwsbaWrX/TdYKEKa+4pAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUfxD1ek0joWOW2B0gJGzopWzNXaMwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvZnhEMWVrMGpvV09X MkIwZ0pHem9wV3pOWGFNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMqgjzANBgkqhkiG9w0BAQsFAAOCAQEAdBgnhM9ZxTksB7gO5K/um3tMC8HH Tptb2wXhSLo96D07akOwtVR+JqycVQs6Q2zyL+xxne+0yhxQ6uP1dI8YT/i9CHIY B8ECdSIWzShJqLqhBnBw/27wu1IRfh/vW+dzEv+0K7+PjP1/a/cdBBnuXXecIGV2 o27gycmvUHAGVMWRlqoeQvlRMNtM0chZurF7nbQ0mCa/Eo6gXXOJK9PxjVKHWn7q yN+K8QCBdxfwsgXdNPCqyYiuJrzFJZyLjRy3nwpPK1XBDgOXL3ZIZHt5dolz6clX /RZ0QuXty7xrIpzfRp2YaylS1xjGdS9HyuusbdnoytfEK8XwqPWx9VHA4Q== -----END CERTIFICATE-----Generated at Sun Dec 21 20:00:16 2025 by rpki-client