This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/rflQDRBzJO_v3452zU3lxZTBoKQ.roa File: rflQDRBzJO_v3452zU3lxZTBoKQ.roa (raw, json) Hash identifier: d8imA656s3d1c/RCylvcOAgJ+9LTOWF/h/Z1EUr21QY= Subject key identifier: AD:F9:50:0D:10:73:24:EF:EF:DF:8E:76:CD:4D:E5:C5:94:C1:A0:A4 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22AC Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/rflQDRBzJO_v3452zU3lxZTBoKQ.roa Signing time: Fri 19 Dec 2025 03:03:49 +0000 ROA not before: Fri 19 Dec 2025 03:03:49 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63689 IP address blocks: 202.160.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8876 (0x22ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:03:49 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=ADF9500D107324EFEFDF8E76CD4DE5C594C1A0A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:df:47:a3:5a:a3:57:d7:ff:05:d8:7a:ad: 09:93:6f:06:a0:3a:f7:29:ce:68:e9:e1:38:7f:55: 18:73:89:aa:f5:1c:ef:5f:7b:85:9f:8b:f1:33:8c: 88:3a:3a:2f:33:5a:44:9f:03:1a:03:93:dc:af:99: f7:3f:ae:66:38:56:ea:bf:68:e6:d0:0d:34:a3:ab: fe:8d:6f:78:61:95:52:ab:a9:ed:38:f6:11:06:2d: 22:58:85:f5:03:89:f5:0e:60:8c:64:bd:54:4a:5c: 8c:4c:56:ae:19:80:8c:9f:18:02:e4:e4:4b:77:1c: ac:cf:24:52:a9:97:15:64:23:4c:56:e8:93:9f:a2: eb:b6:56:a2:f9:0c:f7:c0:e4:b2:df:22:47:71:fd: 77:42:20:71:94:3b:10:e2:c0:5b:88:f9:8d:d6:04: 21:c7:7d:7e:fc:84:77:91:27:60:cb:7a:23:15:16: 67:31:11:00:b1:f2:06:07:e4:ba:38:98:a0:cf:1a: e3:c4:bd:85:5d:9f:ff:f4:89:c9:48:f0:26:ed:c7: a7:65:c9:ae:da:0d:a8:08:97:1c:79:8f:9e:9f:e9: 81:84:69:14:44:39:91:e7:63:c3:ef:6b:5c:99:d6: e4:dd:37:39:88:ae:3d:35:29:d4:53:00:7d:59:3f: 20:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F9:50:0D:10:73:24:EF:EF:DF:8E:76:CD:4D:E5:C5:94:C1:A0:A4 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/rflQDRBzJO_v3452zU3lxZTBoKQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.140.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:54:10:7b:0c:24:06:06:83:c8:ac:68:28:b0:54:d9:24:44: 41:f2:6a:d1:da:07:0e:9d:b0:0e:58:b1:b8:1f:2a:c4:4d:1b: 14:e4:25:ed:3a:54:b0:d5:29:6f:5f:2f:7d:4f:69:9d:6a:cf: 91:34:58:32:aa:9e:dd:e5:c7:e6:c5:93:66:50:a1:85:fe:66: c7:cc:26:cd:ab:26:7d:90:2c:11:aa:1c:64:34:46:04:65:3c: c5:d0:cb:3e:df:5b:82:6d:be:65:f0:82:ec:3d:37:a0:50:f8: 69:de:1c:f7:d2:c8:2f:1b:e3:f2:a4:36:6b:4a:e4:6d:39:20: cd:ef:5a:f5:3a:c7:8a:ed:08:8a:80:fa:d4:91:99:c7:66:0e: 8e:5b:21:7d:e8:4e:ca:77:e4:c7:9f:ef:85:07:63:70:b9:6d: 52:c9:fa:32:93:2e:5d:90:82:f7:b6:a2:1f:af:84:ec:3f:51: 86:05:58:38:d9:9c:b1:f6:7a:04:a7:67:c1:cd:73:e1:3e:af: 2d:02:a8:c7:16:64:22:f8:fb:9f:8f:66:c6:5f:44:ed:59:78: a2:4c:1b:35:8d:b0:b7:5c:7d:2f:1b:8d:9f:c9:86:a9:d0:1a: 0f:d0:ef:40:ef:8b:f8:73:c6:ae:84:5e:f6:65:a8:11:52:64: 2f:d4:a2:4d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIqwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzAzNDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEFERjk1MDBEMTA3MzI0 RUZFRkRGOEU3NkNENERFNUM1OTRDMUEwQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCTN9Ho1qjV9f/Bdh6rQmTbwagOvcpzmjp4Th/VRhziar1HO9f e4Wfi/EzjIg6Oi8zWkSfAxoDk9yvmfc/rmY4Vuq/aObQDTSjq/6Nb3hhlVKrqe04 9hEGLSJYhfUDifUOYIxkvVRKXIxMVq4ZgIyfGALk5Et3HKzPJFKplxVkI0xW6JOf ouu2VqL5DPfA5LLfIkdx/XdCIHGUOxDiwFuI+Y3WBCHHfX78hHeRJ2DLeiMVFmcx EQCx8gYH5Lo4mKDPGuPEvYVdn//0iclI8Cbtx6dlya7aDagIlxx5j56f6YGEaRRE OZHnY8Pva1yZ1uTdNzmIrj01KdRTAH1ZPyCxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUrflQDRBzJO/v3452zU3lxZTBoKQwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvcmZsUURSQnpKT192 MzQ1MnpVM2x4WlRCb0tRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMqgjDANBgkqhkiG9w0BAQsFAAOCAQEAalQQewwkBgaDyKxoKLBU2SREQfJq 0doHDp2wDlixuB8qxE0bFOQl7TpUsNUpb18vfU9pnWrPkTRYMqqe3eXH5sWTZlCh hf5mx8wmzasmfZAsEaocZDRGBGU8xdDLPt9bgm2+ZfCC7D03oFD4ad4c99LILxvj 8qQ2a0rkbTkgze9a9TrHiu0IioD61JGZx2YOjlshfehOynfkx5/vhQdjcLltUsn6 MpMuXZCC97aiH6+E7D9RhgVYONmcsfZ6BKdnwc1z4T6vLQKoxxZkIvj7n49mxl9E 7Vl4okwbNY2wt1x9LxuNn8mGqdAaD9DvQO+L+HPGroRe9mWoEVJkL9SiTQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:59:22 2025 by rpki-client