This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/xW8vv6fqZ9SECn2ZunAJxJoki-U.roa File: xW8vv6fqZ9SECn2ZunAJxJoki-U.roa (raw, json) Hash identifier: ReXyyij76FEjNZ/6io65Gb5PM+yZQYTeA0MYli8K7+M= Subject key identifier: C5:6F:2F:BF:A7:EA:67:D4:84:0A:7D:99:BA:70:09:C4:9A:24:8B:E5 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22C1 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/xW8vv6fqZ9SECn2ZunAJxJoki-U.roa Signing time: Fri 19 Dec 2025 03:07:14 +0000 ROA not before: Fri 19 Dec 2025 03:07:14 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63689 IP address blocks: 103.204.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8897 (0x22c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:07:14 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C56F2FBFA7EA67D4840A7D99BA7009C49A248BE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:b2:a7:f7:23:64:db:ab:a5:a7:47:8f:70: f9:75:3e:72:c3:ae:ea:7a:88:0d:1c:3d:e0:fd:8d: 79:2e:9d:07:94:4f:5d:8e:e3:d9:76:2f:2d:de:48: 12:92:87:64:46:14:39:58:1f:16:94:da:77:9d:f6: e7:43:54:43:bf:25:2a:b8:42:5e:9a:ad:06:f9:8a: d0:0d:10:d2:2b:bb:3a:38:38:21:ac:82:0f:6b:bc: 10:aa:2e:0c:78:56:de:c1:e1:68:50:fb:f7:3e:51: ee:60:ad:d2:01:2c:09:77:cb:b9:c1:dd:d0:10:af: 65:48:1a:cc:25:98:b0:5a:ab:cb:40:c2:ca:1a:cb: 1d:c2:7b:75:33:29:dc:24:f3:18:9b:f7:76:21:b7: fc:12:bb:42:2e:01:78:7d:d9:d8:25:dc:6d:fc:70: 60:6d:ec:24:28:eb:8c:8c:c1:de:e2:b9:d7:01:c9: a2:6a:c7:34:43:a1:44:f3:70:14:89:82:dd:ad:97: 7f:a6:b1:5f:cf:86:56:4e:2b:97:e5:79:29:bd:21: 72:d0:dc:67:3e:03:78:26:eb:43:34:bb:c5:fa:e5: 99:c9:8f:72:8a:6d:8e:94:72:16:76:7f:b2:b2:ff: 34:0a:45:d1:e3:e1:db:d3:67:15:19:2a:c4:c1:9f: 74:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6F:2F:BF:A7:EA:67:D4:84:0A:7D:99:BA:70:09:C4:9A:24:8B:E5 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/xW8vv6fqZ9SECn2ZunAJxJoki-U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.204.75.0/24 Signature Algorithm: sha256WithRSAEncryption 33:1c:2e:3e:e6:cf:c4:e8:26:31:c6:56:49:70:9c:84:e5:6c: 01:94:16:8b:df:b5:83:be:06:8d:04:92:fc:f5:d9:f4:b2:89: 61:8c:8f:51:d3:3f:07:06:49:86:b2:58:41:45:27:87:66:4b: 80:8c:78:f8:c8:39:bc:61:ae:e1:c8:18:65:84:4a:97:9b:b5: 13:0c:a2:84:c1:d8:6d:22:7c:67:cc:66:2b:e2:70:89:e9:d6: 15:1f:68:18:1f:3c:8a:fd:7d:1e:37:46:bf:59:15:fc:32:ae: 96:a7:e2:ea:9b:4d:37:e4:8c:c2:b9:c8:5b:f1:02:dc:c9:dc: 31:a9:3e:9e:a7:f5:1a:e6:50:c4:e9:90:fd:8d:cf:c9:17:4f: 1b:5e:6f:b2:28:9a:d5:fd:42:67:01:9e:5b:d2:1b:db:82:c4: fd:e2:9e:40:d9:e7:13:a1:5c:45:16:e3:ae:9d:8b:29:be:58: 68:98:12:e2:53:a2:cf:56:db:9b:83:83:a0:c6:2b:e5:6f:61: ca:b8:e7:a9:a2:bf:5a:5e:da:38:87:d1:a3:4f:86:6d:66:c6: 4c:92:6e:18:ce:53:1b:54:dc:0d:89:ae:8e:56:e0:77:c2:59: f4:dd:07:3f:a3:0c:55:af:72:e7:ea:6c:22:b6:28:c9:f5:db: 71:ef:0b:17 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIsEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzA3MTRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEM1NkYyRkJGQTdFQTY3 RDQ4NDBBN0Q5OUJBNzAwOUM0OUEyNDhCRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr3bKn9yNk26ulp0ePcPl1PnLDrup6iA0cPeD9jXkunQeUT12O 49l2Ly3eSBKSh2RGFDlYHxaU2ned9udDVEO/JSq4Ql6arQb5itANENIruzo4OCGs gg9rvBCqLgx4Vt7B4WhQ+/c+Ue5grdIBLAl3y7nB3dAQr2VIGswlmLBaq8tAwsoa yx3Ce3UzKdwk8xib93Yht/wSu0IuAXh92dgl3G38cGBt7CQo64yMwd7iudcByaJq xzRDoUTzcBSJgt2tl3+msV/PhlZOK5fleSm9IXLQ3Gc+A3gm60M0u8X65ZnJj3KK bY6UchZ2f7Ky/zQKRdHj4dvTZxUZKsTBn3TjAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUxW8vv6fqZ9SECn2ZunAJxJoki+UwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcveFc4dnY2ZnFaOVNF Q24yWnVuQUp4Sm9raS1VLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfMSzANBgkqhkiG9w0BAQsFAAOCAQEAMxwuPubPxOgmMcZWSXCchOVsAZQW i9+1g74GjQSS/PXZ9LKJYYyPUdM/BwZJhrJYQUUnh2ZLgIx4+Mg5vGGu4cgYZYRK l5u1EwyihMHYbSJ8Z8xmK+JwienWFR9oGB88iv19HjdGv1kV/DKulqfi6ptNN+SM wrnIW/EC3MncMak+nqf1GuZQxOmQ/Y3PyRdPG15vsiia1f1CZwGeW9Ib24LE/eKe QNnnE6FcRRbjrp2LKb5YaJgS4lOiz1bbm4ODoMYr5W9hyrjnqaK/Wl7aOIfRo0+G bWbGTJJuGM5TG1TcDYmujlbgd8JZ9N0HP6MMVa9y5+psIrYoyfXbce8LFw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:59:17 2025 by rpki-client