This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/qB52H9WizTq0P8q9PapqGH6QoUA.roa File: qB52H9WizTq0P8q9PapqGH6QoUA.roa (raw, json) Hash identifier: /EMhIZnhwrjnGoFZxOtq0TZkNqLBr6qy4N9eCHzatGM= Subject key identifier: A8:1E:76:1F:D5:A2:CD:3A:B4:3F:CA:BD:3D:AA:6A:18:7E:90:A1:40 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22B9 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/qB52H9WizTq0P8q9PapqGH6QoUA.roa Signing time: Fri 19 Dec 2025 03:07:13 +0000 ROA not before: Fri 19 Dec 2025 03:07:13 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63689 IP address blocks: 103.204.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8889 (0x22b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:07:13 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A81E761FD5A2CD3AB43FCABD3DAA6A187E90A140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:41:96:ed:11:01:3e:5d:5a:2b:9c:72:e2:85: c7:6a:66:e1:b0:03:12:c2:b5:a3:01:2a:2e:be:56: 0a:c2:cf:39:47:45:81:fe:80:63:4d:b4:72:f9:48: 24:d5:5e:fe:f3:8d:7b:df:6c:1b:4c:98:41:fb:a1: 7d:18:41:2f:b3:e5:0b:98:ad:62:d4:23:e7:a7:19: e1:f1:71:d7:ca:be:3a:c3:2e:06:46:1e:3d:8d:24: ac:45:bf:a0:bf:d4:a0:52:b8:fd:62:f7:0b:69:1f: 34:53:be:30:f0:10:6d:c9:22:17:0f:1d:d5:42:7e: c6:53:4a:ab:fa:32:5f:e7:14:3d:7a:86:82:79:ea: 7c:5b:9b:e6:cb:46:48:3f:10:cc:d7:c1:56:a3:2b: 37:0f:bc:ee:f2:7f:a0:6e:37:0e:2e:29:1c:fa:c9: 00:56:75:4d:94:a2:8d:3b:89:cb:7a:6c:29:d1:96: e5:5f:59:cd:c6:9c:fe:84:3c:dc:88:28:6a:40:c7: 24:d5:7e:f6:ab:01:f7:84:ce:50:86:de:57:de:65: e3:c6:fe:76:5f:99:52:10:6d:2a:d9:03:b2:c8:59: 6d:cd:e7:f4:10:37:5f:f7:23:79:71:98:3b:a9:6b: ff:1c:c0:ea:18:df:0a:5d:ea:b7:5b:3b:fd:2b:8b: 8e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1E:76:1F:D5:A2:CD:3A:B4:3F:CA:BD:3D:AA:6A:18:7E:90:A1:40 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/qB52H9WizTq0P8q9PapqGH6QoUA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.204.72.0/23 Signature Algorithm: sha256WithRSAEncryption 44:96:7a:c7:39:7d:bc:5f:bb:b7:6e:5d:fb:c4:04:aa:0d:2d: a5:be:2b:96:5a:d6:f0:15:b1:ee:9c:4c:8f:c5:82:28:b4:33: e1:db:5e:b0:b5:5e:59:8b:5a:74:86:d7:23:85:d9:6f:94:03: a7:75:9c:38:ba:03:e8:f4:f1:9f:fc:7f:3c:fb:d3:9b:27:05: bf:ce:22:97:ac:0b:32:9b:3f:72:00:2c:e1:6f:8c:0c:24:bd: 4a:d7:55:f8:87:aa:20:0b:0a:53:3a:dc:96:37:49:e5:ee:17: a8:75:87:0e:85:ee:c1:3f:1a:42:87:dd:56:46:cb:b7:cb:e0: 78:25:74:b0:73:1d:07:9c:1f:84:45:a6:dd:b1:96:b3:3a:e3: 3f:62:03:a3:00:25:a2:26:fa:94:48:2d:42:c8:3e:f3:31:34: 38:ce:2a:a0:32:ff:cf:10:00:c6:07:93:1a:48:ca:91:ff:6b: db:0f:b8:17:f2:76:40:34:5b:04:63:01:d6:93:8b:ff:78:86: e5:eb:1b:2a:ab:7e:d8:6f:d9:7f:a7:3f:03:93:a8:fa:e5:a0: d2:2a:16:ce:1d:51:41:7b:ef:ad:36:94:7c:45:06:d0:c0:3f: 51:bd:b2:e0:48:90:99:fd:f4:16:7f:fc:f1:66:b3:da:36:20: 1b:73:0f:c1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIrkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzA3MTNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEE4MUU3NjFGRDVBMkNE M0FCNDNGQ0FCRDNEQUE2QTE4N0U5MEExNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLQZbtEQE+XVornHLihcdqZuGwAxLCtaMBKi6+VgrCzzlHRYH+ gGNNtHL5SCTVXv7zjXvfbBtMmEH7oX0YQS+z5QuYrWLUI+enGeHxcdfKvjrDLgZG Hj2NJKxFv6C/1KBSuP1i9wtpHzRTvjDwEG3JIhcPHdVCfsZTSqv6Ml/nFD16hoJ5 6nxbm+bLRkg/EMzXwVajKzcPvO7yf6BuNw4uKRz6yQBWdU2Uoo07ict6bCnRluVf Wc3GnP6EPNyIKGpAxyTVfvarAfeEzlCG3lfeZePG/nZfmVIQbSrZA7LIWW3N5/QQ N1/3I3lxmDupa/8cwOoY3wpd6rdbO/0ri45jAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUqB52H9WizTq0P8q9PapqGH6QoUAwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvcUI1Mkg5V2l6VHEw UDhxOVBhcHFHSDZRb1VBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWfMSDANBgkqhkiG9w0BAQsFAAOCAQEARJZ6xzl9vF+7t25d+8QEqg0tpb4r llrW8BWx7pxMj8WCKLQz4dtesLVeWYtadIbXI4XZb5QDp3WcOLoD6PTxn/x/PPvT mycFv84il6wLMps/cgAs4W+MDCS9StdV+IeqIAsKUzrcljdJ5e4XqHWHDoXuwT8a QofdVkbLt8vgeCV0sHMdB5wfhEWm3bGWszrjP2IDowAloib6lEgtQsg+8zE0OM4q oDL/zxAAxgeTGkjKkf9r2w+4F/J2QDRbBGMB1pOL/3iG5esbKqt+2G/Zf6c/A5Oo +uWg0ioWzh1RQXvvrTaUfEUG0MA/Ub2y4EiQmf30Fn/88Waz2jYgG3MPwQ== -----END CERTIFICATE-----Generated at Sun Dec 21 20:00:57 2025 by rpki-client