This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/ssyUI5-9FjqUaUolrULaDc_RqIM.roa File: ssyUI5-9FjqUaUolrULaDc_RqIM.roa (raw, json) Hash identifier: Ccm57T/e0ZwEzVWEzSJnF9KRjHXdDzInoemsznbGZKo= Subject key identifier: B2:CC:94:23:9F:BD:16:3A:94:69:4A:25:AD:42:DA:0D:CF:D1:A8:83 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22A2 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/ssyUI5-9FjqUaUolrULaDc_RqIM.roa Signing time: Fri 19 Dec 2025 03:03:47 +0000 ROA not before: Fri 19 Dec 2025 03:03:47 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 59033 IP address blocks: 202.160.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8866 (0x22a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:03:47 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B2CC94239FBD163A94694A25AD42DA0DCFD1A883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ee:bb:3e:5a:03:36:ae:71:b2:6f:1f:1d:ce: eb:84:88:79:0c:f1:90:a0:ca:27:55:ce:5c:d7:f0: 1d:7d:3b:f5:85:7d:ac:f7:b0:d6:a5:e2:65:e5:8f: f8:3e:5c:4c:89:a7:d6:a1:63:70:f3:b6:e4:a6:38: 11:39:05:98:df:39:e2:31:01:1c:aa:bd:a7:12:b0: 68:af:8a:7b:d1:b4:c8:28:9f:ec:64:31:d5:26:7f: a9:c2:47:25:37:c3:25:f2:02:3d:12:04:2b:8d:6e: 17:39:48:54:6a:55:79:3d:6a:82:08:ff:cf:70:a0: 0b:00:0b:ab:c0:fa:7b:23:57:22:8f:82:58:6b:4d: 12:d3:c0:59:79:c9:3d:a7:00:99:ab:2b:2c:67:8f: 58:9c:d9:e0:c5:11:3d:b6:ca:70:40:3b:06:3a:6a: 64:0e:17:94:f2:ef:6e:41:29:82:95:84:e0:df:80: ea:d6:ad:4e:7b:ea:3d:3d:8c:6a:2b:2b:dc:c5:71: fe:5b:6f:65:44:3f:0f:e7:d1:a0:1b:f9:e9:fd:61: bf:de:fc:d8:7c:96:26:48:19:8f:f8:de:7c:77:25: 7b:94:f8:87:53:1a:43:1e:b8:89:01:10:2e:b7:79: 9a:f3:35:2e:ca:b8:97:4d:74:bf:38:f7:b3:1f:a4: 96:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CC:94:23:9F:BD:16:3A:94:69:4A:25:AD:42:DA:0D:CF:D1:A8:83 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/ssyUI5-9FjqUaUolrULaDc_RqIM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.142.0/23 Signature Algorithm: sha256WithRSAEncryption 86:5c:d6:fa:33:25:9b:d7:1c:2b:4e:1b:77:91:97:5f:23:d6: e1:8c:ed:cc:c8:32:b0:73:c9:04:40:6d:e2:98:4a:17:ca:53: f9:a6:4b:64:d2:cc:a6:8f:a4:de:78:e3:84:af:ae:c8:66:f4: e8:33:67:d9:f5:14:de:e7:be:7a:58:47:27:01:42:c6:70:d1: 8b:05:75:e3:cf:48:71:92:70:a5:e0:18:63:97:2a:e8:ad:83: 17:cb:da:6c:0b:1b:7a:be:3b:7d:e5:b9:3c:54:c0:ef:20:64: f6:a0:2b:3a:ee:0f:88:f3:b2:95:db:38:24:00:80:ab:33:9c: 36:ab:c9:4d:30:61:70:81:8a:2f:6c:5f:b0:52:76:e6:98:4e: e6:73:f1:fd:c8:07:b0:85:bd:cc:37:a5:53:44:51:0f:7f:11: 1b:21:86:f9:4d:fd:cc:a9:a6:3d:0a:f2:04:84:fc:01:bd:2c: 1a:a4:c7:4e:1c:f3:dc:e4:2a:26:d4:ca:28:4c:1d:0b:02:84: 35:a9:b4:81:ce:21:94:67:6c:a0:76:40:6f:5a:4f:0b:75:d6: 24:b9:62:0f:dc:4c:a2:fc:ae:4c:f4:17:9d:26:79:9c:74:ee: 40:a2:81:99:4f:cd:95:5b:15:df:48:e7:12:0e:14:8b:6f:9a: 43:76:6e:8d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIqIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzAzNDdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEIyQ0M5NDIzOUZCRDE2 M0E5NDY5NEEyNUFENDJEQTBEQ0ZEMUE4ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+7rs+WgM2rnGybx8dzuuEiHkM8ZCgyidVzlzX8B19O/WFfaz3 sNal4mXlj/g+XEyJp9ahY3DztuSmOBE5BZjfOeIxARyqvacSsGivinvRtMgon+xk MdUmf6nCRyU3wyXyAj0SBCuNbhc5SFRqVXk9aoII/89woAsAC6vA+nsjVyKPglhr TRLTwFl5yT2nAJmrKyxnj1ic2eDFET22ynBAOwY6amQOF5Ty725BKYKVhODfgOrW rU576j09jGorK9zFcf5bb2VEPw/n0aAb+en9Yb/e/Nh8liZIGY/43nx3JXuU+IdT GkMeuIkBEC63eZrzNS7KuJdNdL8497MfpJa1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUssyUI5+9FjqUaUolrULaDc/RqIMwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvc3N5VUk1LTlGanFV YVVvbHJVTGFEY19ScUlNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAcqgjjANBgkqhkiG9w0BAQsFAAOCAQEAhlzW+jMlm9ccK04bd5GXXyPW4Yzt zMgysHPJBEBt4phKF8pT+aZLZNLMpo+k3njjhK+uyGb06DNn2fUU3ue+elhHJwFC xnDRiwV1489IcZJwpeAYY5cq6K2DF8vabAsber47feW5PFTA7yBk9qArOu4PiPOy lds4JACAqzOcNqvJTTBhcIGKL2xfsFJ25phO5nPx/cgHsIW9zDelU0RRD38RGyGG +U39zKmmPQryBIT8Ab0sGqTHThzz3OQqJtTKKEwdCwKENam0gc4hlGdsoHZAb1pP C3XWJLliD9xMovyuTPQXnSZ5nHTuQKKBmU/NlVsV30jnEg4Ui2+aQ3ZujQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:58:25 2025 by rpki-client