This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/6BhNlgTm9X4E0CrmB-SUzwDMBc0.roa File: 6BhNlgTm9X4E0CrmB-SUzwDMBc0.roa (raw, json) Hash identifier: pUTYJzrZ9U4tckOSXY6ObYZJbv73GHhdMjtwkWQLOhc= Subject key identifier: E8:18:4D:96:04:E6:F5:7E:04:D0:2A:E6:07:E4:94:CF:00:CC:05:CD Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 1853 Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/6BhNlgTm9X4E0CrmB-SUzwDMBc0.roa Signing time: Sat 20 Dec 2025 04:20:23 +0000 ROA not before: Sat 20 Dec 2025 04:20:23 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 13335 IP address blocks: 103.79.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6227 (0x1853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Dec 20 04:20:23 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=E8184D9604E6F57E04D02AE607E494CF00CC05CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5f:b1:eb:74:e2:41:8d:27:31:b9:1a:a6:3a: c7:4b:98:48:79:7f:50:0f:d8:30:66:ec:f7:98:a4: 3d:69:c4:3a:97:33:64:7c:1b:7c:96:02:f7:06:39: ba:04:ef:21:14:14:0f:7e:4f:c4:95:da:75:56:0b: 46:27:36:2d:cc:e7:17:6c:e1:78:4d:2f:dd:3e:7b: b5:cd:45:ab:15:37:15:9b:f6:50:53:f7:4b:6f:52: 54:90:83:32:9b:fe:78:5f:83:ff:40:5e:be:5c:51: e4:d3:e2:22:1b:c0:bc:b9:91:55:d8:5d:a7:23:99: b9:25:65:1e:e7:42:21:0a:3c:89:db:30:98:5a:6e: 2d:19:a7:c1:f9:2b:cd:2b:19:28:c9:fa:60:ec:f5: f0:85:f3:94:10:9a:03:90:81:46:8f:ef:ee:a3:ba: f9:86:cd:c7:c8:d3:ae:a9:f3:8b:d4:06:3d:7c:24: 9b:c1:e6:fe:c6:6f:44:98:40:00:31:76:23:0b:d9: 1a:84:14:f5:38:ac:63:e1:2d:7e:dd:6b:10:cc:51: 52:ab:b0:ef:7d:f5:ff:4f:2e:72:47:bc:84:bf:c7: e7:d2:a1:5f:2f:ee:15:07:2a:44:78:26:2a:9c:3b: 44:e2:2c:1d:d7:9b:86:55:e5:eb:81:a2:69:a6:b8: 58:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:18:4D:96:04:E6:F5:7E:04:D0:2A:E6:07:E4:94:CF:00:CC:05:CD X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/6BhNlgTm9X4E0CrmB-SUzwDMBc0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.79.228.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:2c:55:f9:92:4a:ad:56:59:84:cb:ac:cf:9c:96:ac:73:52: 82:9d:81:5d:cd:62:8f:c9:19:38:d0:73:c6:5b:e0:b3:5e:3b: 13:df:5a:4f:57:b8:27:cc:40:a2:be:28:4b:61:8e:e7:b0:c6: 6c:11:0b:4f:a8:46:af:ab:85:f5:23:01:b8:c2:09:0e:df:c7: 6d:be:cc:7c:c7:22:55:9f:2e:a0:3a:ff:18:79:21:e0:a8:02: a9:39:73:02:50:a7:75:53:29:89:38:b9:3a:a7:80:79:e7:b4: 2b:08:78:a0:e9:87:fe:ce:bc:dd:01:4c:1c:b6:d1:9e:52:e9: ec:10:68:af:89:67:e9:cb:e3:9a:dc:de:d6:e7:b7:3d:9e:60: 69:43:7f:95:61:dc:f9:2e:92:3a:53:c7:cb:e7:8a:74:be:16: 65:48:81:f0:06:88:b6:19:37:96:d3:7f:eb:b4:28:d8:9f:9b: 53:65:e0:9b:96:a7:d3:f0:cc:07:ac:2a:58:44:03:d6:12:99: 73:a0:78:ce:b1:ae:ef:83:d8:a4:57:33:45:49:89:05:89:09: 60:8a:f4:8e:4a:57:81:ea:2f:0e:fc:09:17:87:de:f7:31:48: 87:b1:8d:07:15:47:30:1a:26:79:eb:79:56:62:34:dc:94:71: cb:e9:d7:d2 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGFMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTEyMjAw NDIwMjNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEU4MTg0RDk2MDRFNkY1 N0UwNEQwMkFFNjA3RTQ5NENGMDBDQzA1Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPX7HrdOJBjScxuRqmOsdLmEh5f1AP2DBm7PeYpD1pxDqXM2R8 G3yWAvcGOboE7yEUFA9+T8SV2nVWC0YnNi3M5xds4XhNL90+e7XNRasVNxWb9lBT 90tvUlSQgzKb/nhfg/9AXr5cUeTT4iIbwLy5kVXYXacjmbklZR7nQiEKPInbMJha bi0Zp8H5K80rGSjJ+mDs9fCF85QQmgOQgUaP7+6juvmGzcfI066p84vUBj18JJvB 5v7Gb0SYQAAxdiML2RqEFPU4rGPhLX7daxDMUVKrsO999f9PLnJHvIS/x+fSoV8v 7hUHKkR4JiqcO0TiLB3Xm4ZV5euBommmuFjjAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU6BhNlgTm9X4E0CrmB+SUzwDMBc0wHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvNkJoTmxnVG05WDRF MENybUItU1V6d0RNQmMwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWdP5DANBgkqhkiG9w0BAQsFAAOCAQEAHSxV+ZJKrVZZhMusz5yWrHNSgp2B Xc1ij8kZONBzxlvgs147E99aT1e4J8xAor4oS2GO57DGbBELT6hGr6uF9SMBuMIJ Dt/Hbb7MfMciVZ8uoDr/GHkh4KgCqTlzAlCndVMpiTi5OqeAeee0Kwh4oOmH/s68 3QFMHLbRnlLp7BBor4ln6cvjmtze1ue3PZ5gaUN/lWHc+S6SOlPHy+eKdL4WZUiB 8AaIthk3ltN/67Qo2J+bU2Xgm5an0/DMB6wqWEQD1hKZc6B4zrGu74PYpFczRUmJ BYkJYIr0jkpXgeovDvwJF4fe9zFIh7GNBxVHMBomeet5VmI03JRxy+nX0g== -----END CERTIFICATE-----Generated at Sun Dec 21 01:08:33 2025 by rpki-client