This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/reat5sp0PSNKd4l3UQ1bKKkD3O8.roa File: reat5sp0PSNKd4l3UQ1bKKkD3O8.roa (raw, json) Hash identifier: oE0v9kukUtOhWc52K/3SY9wTp/sF2i1k6k+vbMS9hrk= Subject key identifier: AD:E6:AD:E6:CA:74:3D:23:4A:77:89:77:51:0D:5B:28:A9:03:DC:EF Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22AD Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/reat5sp0PSNKd4l3UQ1bKKkD3O8.roa Signing time: Fri 19 Dec 2025 03:03:49 +0000 ROA not before: Fri 19 Dec 2025 03:03:49 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 59033 IP address blocks: 202.160.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8877 (0x22ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:03:49 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=ADE6ADE6CA743D234A778977510D5B28A903DCEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:ce:4c:44:fb:f8:8a:51:0d:ed:d6:0e:b8: 65:34:8f:64:61:0a:56:7c:a7:a5:a6:cf:19:19:02: 3a:bc:0c:13:bb:37:a3:68:29:53:bd:c1:92:b1:80: 5a:45:34:25:cc:83:89:9a:96:f0:3f:72:e9:42:5c: d5:85:13:f9:f5:9d:49:7a:82:9a:dd:07:99:a6:60: 14:25:6a:0e:e7:07:8a:f4:3d:af:fa:05:f2:b3:1f: 9e:35:32:bb:89:67:8c:5a:5f:35:f7:7f:7c:ee:b0: 28:86:24:d8:46:d6:c3:41:91:ab:3b:92:d7:1c:e1: d1:b7:63:b2:9e:08:8e:b9:fa:f3:cd:e7:52:00:7b: 5e:2a:74:b4:3a:0b:ea:f7:25:7e:3b:70:5a:dc:3f: 7f:f9:93:c2:2c:a3:e6:a5:21:f3:53:5f:52:08:bf: 28:b3:a3:a6:cd:84:1b:88:2a:e0:34:e8:a3:90:c4: e8:88:19:89:87:97:09:c9:e0:4d:a1:61:78:b1:c1: 18:97:20:90:ca:56:0b:ed:3d:41:cc:aa:eb:4e:97: 4b:ab:07:a1:36:90:34:bd:38:f9:32:7a:65:52:68: ee:50:53:d8:7a:02:bf:e7:f9:39:97:88:01:a4:32: b8:fe:a5:5b:6d:c9:fd:fe:40:f5:f2:2e:78:83:8a: a2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E6:AD:E6:CA:74:3D:23:4A:77:89:77:51:0D:5B:28:A9:03:DC:EF X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/reat5sp0PSNKd4l3UQ1bKKkD3O8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.140.0/24 Signature Algorithm: sha256WithRSAEncryption a0:9f:10:06:36:dd:2b:45:2b:d8:47:f6:41:f9:fb:60:1a:2e: 13:b7:8b:98:40:0a:6c:b4:28:a8:eb:04:e9:bf:02:86:4f:ee: df:6b:3d:66:71:88:63:f5:33:7d:bf:f9:74:21:a0:dd:ff:8c: cd:0d:22:50:35:e2:7f:9b:eb:80:6f:e3:66:30:ca:5c:69:86: ff:f4:ba:a5:a2:95:5d:d2:4b:40:9a:73:e0:b8:44:82:bc:4a: 0b:36:c1:46:60:25:52:dd:fe:5d:31:cd:11:0c:61:94:21:84: f7:dc:c9:27:78:54:96:06:ce:7d:b0:18:d6:7d:56:28:88:c9: 65:7d:42:80:d4:b2:d6:b8:2a:e9:a6:37:04:36:17:92:fc:fa: 65:a1:1c:1f:69:82:b0:1d:02:2e:2f:ac:da:57:43:ec:a8:81: 78:69:b2:5c:3a:4a:d9:19:31:16:89:cd:a6:1f:44:42:8e:eb: 4e:ea:0c:78:07:4f:47:26:40:a2:96:dc:9c:7d:09:16:eb:c9: 5c:e4:77:66:24:7a:a9:9f:90:23:85:33:86:73:68:2e:90:4c: ba:1e:22:04:bc:59:69:05:c8:68:9b:a7:3f:53:8a:4f:ae:e5: a9:dd:fa:7b:91:fa:c2:d7:69:06:3a:ab:c0:20:97:d2:09:ff: eb:0a:6f:ee -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIq0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzAzNDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEFERTZBREU2Q0E3NDNE MjM0QTc3ODk3NzUxMEQ1QjI4QTkwM0RDRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCips5MRPv4ilEN7dYOuGU0j2RhClZ8p6WmzxkZAjq8DBO7N6No KVO9wZKxgFpFNCXMg4malvA/culCXNWFE/n1nUl6gprdB5mmYBQlag7nB4r0Pa/6 BfKzH541MruJZ4xaXzX3f3zusCiGJNhG1sNBkas7ktcc4dG3Y7KeCI65+vPN51IA e14qdLQ6C+r3JX47cFrcP3/5k8Iso+alIfNTX1IIvyizo6bNhBuIKuA06KOQxOiI GYmHlwnJ4E2hYXixwRiXIJDKVgvtPUHMqutOl0urB6E2kDS9OPkyemVSaO5QU9h6 Ar/n+TmXiAGkMrj+pVttyf3+QPXyLniDiqKXAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUreat5sp0PSNKd4l3UQ1bKKkD3O8wHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvcmVhdDVzcDBQU05L ZDRsM1VRMWJLS2tEM084LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMqgjDANBgkqhkiG9w0BAQsFAAOCAQEAoJ8QBjbdK0Ur2Ef2Qfn7YBouE7eL mEAKbLQoqOsE6b8Chk/u32s9ZnGIY/Uzfb/5dCGg3f+MzQ0iUDXif5vrgG/jZjDK XGmG//S6paKVXdJLQJpz4LhEgrxKCzbBRmAlUt3+XTHNEQxhlCGE99zJJ3hUlgbO fbAY1n1WKIjJZX1CgNSy1rgq6aY3BDYXkvz6ZaEcH2mCsB0CLi+s2ldD7KiBeGmy XDpK2RkxFonNph9EQo7rTuoMeAdPRyZAopbcnH0JFuvJXOR3ZiR6qZ+QI4UzhnNo LpBMuh4iBLxZaQXIaJunP1OKT67lqd36e5H6wtdpBjqrwCCX0gn/6wpv7g== -----END CERTIFICATE-----Generated at Sun Dec 21 20:01:18 2025 by rpki-client