This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/rd0SEfXsjT7YGEER_eyN8B_mwi8.roa File: rd0SEfXsjT7YGEER_eyN8B_mwi8.roa (raw, json) Hash identifier: RpROi9F8sfw3AixWe6OLLqgnVHGMME68lIx7/IRndEE= Subject key identifier: AD:DD:12:11:F5:EC:8D:3E:D8:18:41:11:FD:EC:8D:F0:1F:E6:C2:2F Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22B8 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/rd0SEfXsjT7YGEER_eyN8B_mwi8.roa Signing time: Fri 19 Dec 2025 03:07:12 +0000 ROA not before: Fri 19 Dec 2025 03:07:12 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63689 IP address blocks: 103.204.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8888 (0x22b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:07:12 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=ADDD1211F5EC8D3ED8184111FDEC8DF01FE6C22F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:dd:fc:c6:f7:9d:6b:0e:70:fd:92:93:7a: a3:29:cc:d1:35:b6:06:6c:79:43:97:f3:0f:5f:c2: 0e:7a:0e:38:f1:e0:6e:25:5c:f1:98:b8:60:c8:27: 80:ca:5e:59:31:1e:3e:f0:e9:7a:99:c5:4d:ac:40: 88:d3:c6:6b:b2:81:44:13:a0:06:f9:8e:07:2d:71: 94:67:0d:0a:cd:89:69:7a:37:c2:54:b9:85:ca:01: 1c:5e:84:ca:d4:90:30:9f:3a:d1:48:7b:cc:9b:a6: af:c8:14:84:63:32:10:d1:51:3e:69:17:a8:0d:97: 7e:24:62:49:05:11:46:a1:be:f9:3f:3a:6c:57:19: 40:d6:66:71:0a:c5:fc:e4:61:9e:f2:e5:cf:b6:d4: d2:94:16:04:76:73:fc:23:6c:27:fa:d3:a2:4c:20: 17:d1:60:79:ac:32:81:ff:a2:b3:70:35:2a:72:96: 02:d3:d2:2c:a1:11:f0:d4:e1:15:fd:9a:31:12:82: b5:0a:66:4a:96:26:a7:98:d6:f7:1c:01:9e:40:b1: b1:a5:a1:d6:0d:9a:43:35:73:a4:ef:c6:cd:f7:65: d7:ef:de:03:fe:44:10:32:32:01:95:b3:8a:dc:97: 6b:f9:ca:49:e7:7a:8b:56:18:5c:56:6e:02:e2:0d: 97:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DD:12:11:F5:EC:8D:3E:D8:18:41:11:FD:EC:8D:F0:1F:E6:C2:2F X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/rd0SEfXsjT7YGEER_eyN8B_mwi8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.204.73.0/24 Signature Algorithm: sha256WithRSAEncryption 31:56:65:c3:69:bf:00:94:70:d9:15:3a:a3:25:a3:3c:19:84: 6c:7a:95:d4:f1:61:64:92:5e:d1:de:0f:21:d2:a8:5b:a6:a3: 37:b9:84:d9:62:3b:84:e0:50:c4:b7:da:ae:29:e9:13:27:a4: 72:3a:5a:d0:0a:5f:ce:11:5d:42:28:6f:54:3a:de:98:7b:b0: 37:f2:b8:ad:b7:0d:b7:27:51:e7:c7:e1:c5:df:77:46:c4:c6: c7:3f:6e:3b:ad:77:52:1c:2b:87:ca:c7:6c:34:67:c2:57:1a: b9:47:92:4e:f1:7d:28:56:24:db:71:ae:89:b0:36:11:c2:48: 54:29:34:cd:44:f9:b1:bc:42:39:ca:bf:19:00:c9:77:e3:87: 1e:a9:d1:f0:3e:dc:52:e9:a9:cc:48:39:61:f7:23:17:dc:42: 38:5c:9b:6f:c7:be:72:15:ab:b6:8a:9e:e4:b8:bb:e8:b8:6a: 83:11:34:b0:fd:73:82:92:38:3a:c2:0c:3f:42:e4:3c:ca:a7: bb:b4:f6:0b:06:97:24:ad:c3:fb:ec:51:7d:6e:37:fd:f8:92: a6:ec:95:e3:24:f4:6d:8c:08:07:a8:37:7c:5e:6c:d3:e5:37: a5:63:76:78:84:1d:12:71:5e:c8:ed:e6:d9:7e:e7:24:0b:18: ab:86:76:e0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzA3MTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEFEREQxMjExRjVFQzhE M0VEODE4NDExMUZERUM4REYwMUZFNkMyMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4ct38xvedaw5w/ZKTeqMpzNE1tgZseUOX8w9fwg56Djjx4G4l XPGYuGDIJ4DKXlkxHj7w6XqZxU2sQIjTxmuygUQToAb5jgctcZRnDQrNiWl6N8JU uYXKARxehMrUkDCfOtFIe8ybpq/IFIRjMhDRUT5pF6gNl34kYkkFEUahvvk/OmxX GUDWZnEKxfzkYZ7y5c+21NKUFgR2c/wjbCf606JMIBfRYHmsMoH/orNwNSpylgLT 0iyhEfDU4RX9mjESgrUKZkqWJqeY1vccAZ5AsbGlodYNmkM1c6Tvxs33Zdfv3gP+ RBAyMgGVs4rcl2v5yknneotWGFxWbgLiDZcrAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUrd0SEfXsjT7YGEER/eyN8B/mwi8wHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvcmQwU0VmWHNqVDdZ R0VFUl9leU44Ql9td2k4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfMSTANBgkqhkiG9w0BAQsFAAOCAQEAMVZlw2m/AJRw2RU6oyWjPBmEbHqV 1PFhZJJe0d4PIdKoW6ajN7mE2WI7hOBQxLfarinpEyekcjpa0ApfzhFdQihvVDre mHuwN/K4rbcNtydR58fhxd93RsTGxz9uO613Uhwrh8rHbDRnwlcauUeSTvF9KFYk 23GuibA2EcJIVCk0zUT5sbxCOcq/GQDJd+OHHqnR8D7cUumpzEg5YfcjF9xCOFyb b8e+chWrtoqe5Li76LhqgxE0sP1zgpI4OsIMP0LkPMqnu7T2CwaXJK3D++xRfW43 /fiSpuyV4yT0bYwIB6g3fF5s0+U3pWN2eIQdEnFeyO3m2X7nJAsYq4Z24A== -----END CERTIFICATE-----Generated at Sun Dec 21 20:00:12 2025 by rpki-client