This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/3RClfO_Oap2-cQcnQpFXkXxUpSo.roa File: 3RClfO_Oap2-cQcnQpFXkXxUpSo.roa (raw, json) Hash identifier: 1Zp/wNFwYRMzgXNbQlhE+Crx/2mtTJlwysD553sTAC0= Subject key identifier: DD:10:A5:7C:EF:CE:6A:9D:BE:71:07:27:42:91:57:91:7C:54:A5:2A Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 0567 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/3RClfO_Oap2-cQcnQpFXkXxUpSo.roa Signing time: Sat 20 Dec 2025 05:27:48 +0000 ROA not before: Sat 20 Dec 2025 05:27:48 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 152918 IP address blocks: 103.118.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 11:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1383 (0x567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Dec 20 05:27:48 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DD10A57CEFCE6A9DBE710727429157917C54A52A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f0:2a:a3:80:85:b9:67:2c:e2:18:e9:d9:a0: 95:17:16:c5:d6:be:ee:24:ed:8b:36:9e:5e:8b:7f: b7:91:c5:54:fa:d6:01:64:9c:47:9d:6f:ff:b8:a7: 07:59:ea:e2:27:96:94:12:49:09:a0:d0:51:00:57: 5c:12:a3:75:8b:6e:a0:bc:92:e1:fc:85:f5:31:e6: 6a:a1:76:af:82:5e:1b:a4:7e:1c:59:cd:2a:6e:bc: 95:94:23:d3:27:cf:6e:6d:a2:c5:70:85:83:38:0e: 2a:82:2b:80:f7:8f:00:66:1e:3e:ca:ba:a3:ec:76: 06:5a:29:ce:e6:8c:58:8b:08:c7:10:03:53:21:27: 30:c3:63:fb:bf:1a:25:12:a8:35:ca:e3:68:f0:fe: 8a:c9:c2:fc:7f:a4:63:a0:09:91:85:5d:27:fb:63: ed:28:bc:19:ad:5d:aa:f3:57:b6:bf:c2:0e:75:5e: 01:f0:be:f6:1a:38:17:3c:cc:89:aa:42:5d:31:9c: 0f:d7:af:71:aa:e3:86:f6:49:3d:92:f7:9a:2f:98: 2a:d1:7e:7e:92:89:98:f8:8a:ae:b0:2c:dd:5e:98: 80:44:7a:62:17:0e:12:c9:f3:8f:31:24:85:94:2a: 03:44:a2:9f:36:9a:c0:07:39:2c:26:9d:69:2d:83: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:10:A5:7C:EF:CE:6A:9D:BE:71:07:27:42:91:57:91:7C:54:A5:2A X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/3RClfO_Oap2-cQcnQpFXkXxUpSo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.242.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:c1:24:72:91:93:f0:93:1b:e9:5e:85:3b:a3:e5:37:ba:81: 4c:4c:6e:e8:7d:65:3a:9b:f2:07:51:64:bf:08:8c:f2:9b:80: 22:b2:9c:d5:54:a0:7a:4d:25:bd:04:72:f9:a1:69:1a:39:90: 5e:82:e4:42:bd:45:2f:9f:8f:4d:a2:0a:ed:2d:e7:55:31:d8: e1:9a:80:c6:06:4e:e9:ab:50:31:40:db:89:99:94:8f:3e:8f: 84:42:a2:97:32:b8:cc:0e:27:33:de:9d:ef:8e:cb:60:48:bb: c5:0f:0f:f2:9d:c9:db:49:51:0b:eb:cd:6a:df:4e:ff:5c:3a: 3c:59:cf:3b:e5:e6:5b:54:91:f5:d2:0e:cb:56:80:5e:61:c8: ce:cf:43:e6:83:1c:13:ad:50:aa:19:35:26:fe:b4:d5:6f:a9: c4:4c:32:0d:0d:4d:2e:a2:ab:85:40:f0:51:1c:de:c1:c3:ac: 03:de:d4:ce:9a:58:6b:ea:cf:dc:4f:50:27:be:60:bc:84:97: 06:2e:7d:9b:62:d3:a6:14:b9:59:90:e4:7a:fb:5b:39:2d:10: 86:2a:c5:5c:bd:3d:2d:b0:49:b6:8c:4f:a0:71:21:d2:59:5b: 2b:b4:f2:eb:5f:54:45:80:2f:c7:05:09:b4:48:f3:57:fa:1c: 34:d5:70:7a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBWcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzlF RTg1MkZFMTM4Q0RFREM1QjQyRDExQTM0Mjk1RDEwOUFENDkyNTAeFw0yNTEyMjAw NTI3NDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEREMTBBNTdDRUZDRTZB OURCRTcxMDcyNzQyOTE1NzkxN0M1NEE1MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDM8CqjgIW5ZyziGOnZoJUXFsXWvu4k7Ys2nl6Lf7eRxVT61gFk nEedb/+4pwdZ6uInlpQSSQmg0FEAV1wSo3WLbqC8kuH8hfUx5mqhdq+CXhukfhxZ zSpuvJWUI9Mnz25tosVwhYM4DiqCK4D3jwBmHj7KuqPsdgZaKc7mjFiLCMcQA1Mh JzDDY/u/GiUSqDXK42jw/orJwvx/pGOgCZGFXSf7Y+0ovBmtXarzV7a/wg51XgHw vvYaOBc8zImqQl0xnA/Xr3Gq44b2ST2S95ovmCrRfn6SiZj4iq6wLN1emIBEemIX DhLJ848xJIWUKgNEop82msAHOSwmnWktg6+9AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU3RClfO/Oap2+cQcnQpFXkXxUpSowHwYDVR0jBBgwFoAUOe6FL+E4ze3FtC0R o0KV0QmtSSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcx Ni9PZTZGTC1FNHplM0Z0QzBSbzBLVjBRbXRTU1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MTYvM1JDbGZPX09hcDIt Y1FjblFwRlhrWHhVcFNvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGd28jANBgkqhkiG9w0BAQsFAAOCAQEAa8EkcpGT8JMb6V6FO6PlN7qBTExu 6H1lOpvyB1FkvwiM8puAIrKc1VSgek0lvQRy+aFpGjmQXoLkQr1FL5+PTaIK7S3n VTHY4ZqAxgZO6atQMUDbiZmUjz6PhEKilzK4zA4nM96d747LYEi7xQ8P8p3J20lR C+vNat9O/1w6PFnPO+XmW1SR9dIOy1aAXmHIzs9D5oMcE61Qqhk1Jv601W+pxEwy DQ1NLqKrhUDwURzewcOsA97UzppYa+rP3E9QJ75gvISXBi59m2LTphS5WZDkevtb OS0QhirFXL09LbBJtoxPoHEh0llbK7Ty619URYAvxwUJtEjzV/ocNNVweg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:57:45 2025 by rpki-client