This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/7MjeRxso_6bAJOkxiUYCSUa4YdE.roa File: 7MjeRxso_6bAJOkxiUYCSUa4YdE.roa (raw, json) Hash identifier: OCx3gGJ6xcnNittno1F5h3dT/exobGNhz5jrgb3ZamE= Subject key identifier: EC:C8:DE:47:1B:28:FF:A6:C0:24:E9:31:89:46:02:49:46:B8:61:D1 Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 1852 Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/7MjeRxso_6bAJOkxiUYCSUa4YdE.roa Signing time: Sat 20 Dec 2025 04:20:23 +0000 ROA not before: Sat 20 Dec 2025 04:20:23 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 211392 IP address blocks: 103.79.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6226 (0x1852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Dec 20 04:20:23 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=ECC8DE471B28FFA6C024E9318946024946B861D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0d:d7:44:d1:22:20:40:f4:d5:a5:aa:92:a4: 63:71:c7:83:b2:b0:49:1b:8d:6c:8e:da:62:59:22: 70:9a:b5:83:83:e1:64:bd:26:3d:c6:fb:73:55:ea: b8:bc:21:2b:7f:bf:ae:49:bd:07:e5:86:d4:78:49: 00:f2:6c:bc:ee:8b:0a:a2:01:4f:ff:b0:68:d8:f9: cd:55:54:66:51:f1:a0:4d:a8:c0:7c:14:1e:d6:17: 97:ee:f8:c5:bf:77:77:eb:96:6b:03:15:c3:33:55: 25:7f:f2:3d:6b:8a:e2:7b:0b:76:50:b6:40:ce:e6: f6:5f:a5:bb:ea:a8:2c:4d:34:45:81:f9:83:f7:69: 2d:df:26:d0:be:9d:56:20:a4:f2:5f:96:fd:6e:24: 9e:42:a7:19:81:53:bb:fb:3b:57:1f:73:0e:c2:5f: 31:e6:7f:0f:34:4f:4a:4d:21:14:5b:7f:7b:4f:37: 9e:be:9c:8e:a1:9c:40:1b:17:63:0d:49:d6:ea:be: 78:4d:30:71:85:10:7f:5f:a3:dc:7a:fe:03:ef:73: 53:42:77:26:ba:23:61:b3:54:05:bd:60:ff:c7:70: fd:cb:79:f3:d8:5c:6e:cd:3b:d3:22:c1:0d:9f:58: 18:11:2f:60:8d:7c:b6:64:12:cc:9d:12:e8:4c:7b: 63:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C8:DE:47:1B:28:FF:A6:C0:24:E9:31:89:46:02:49:46:B8:61:D1 X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/7MjeRxso_6bAJOkxiUYCSUa4YdE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.79.228.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:9f:b4:02:e5:66:25:88:99:05:da:4c:9a:2f:4c:09:d8:a6: e8:2f:c7:b6:48:72:f9:c8:e9:b9:6e:34:85:bc:3d:b7:2a:d2: c1:fd:7e:fd:61:6d:27:89:0a:28:ad:15:13:02:8f:7c:20:dd: 15:60:8e:3f:ce:2b:6f:0e:64:88:e0:cf:70:b7:c8:e2:64:10: 1a:76:d1:1b:64:0b:d7:c1:4c:bc:2a:49:94:9e:e9:89:5a:f6: b1:3b:3d:31:aa:04:cd:ba:32:8e:db:58:b6:50:93:11:31:cf: 71:7d:e0:14:ab:a6:44:b5:af:f9:20:e1:d2:8c:69:f9:44:30: 37:d8:6e:83:fd:30:33:d3:55:41:72:76:77:0d:4f:48:6d:4a: 92:3e:4b:71:33:16:e3:e7:09:7d:64:5d:0f:b2:25:5a:83:39: 4c:59:d2:55:96:03:c0:64:4e:6b:af:c2:e2:0f:96:a4:16:63: 0d:ee:3b:14:09:f1:8e:ba:36:7a:bb:98:49:12:e4:ef:ab:56: 9d:a8:f0:d7:d9:6c:39:55:58:ad:34:dc:ac:4b:37:26:f2:c8: e3:3d:a1:fd:87:78:ce:f9:c3:19:d3:d3:47:61:b1:16:e0:9c: cf:8a:d6:dd:84:61:76:dc:f6:4f:18:6c:8a:41:32:68:3f:e6: 5a:7c:92:04 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGFIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTEyMjAw NDIwMjNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEVDQzhERTQ3MUIyOEZG QTZDMDI0RTkzMTg5NDYwMjQ5NDZCODYxRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoDddE0SIgQPTVpaqSpGNxx4OysEkbjWyO2mJZInCatYOD4WS9 Jj3G+3NV6ri8ISt/v65JvQflhtR4SQDybLzuiwqiAU//sGjY+c1VVGZR8aBNqMB8 FB7WF5fu+MW/d3frlmsDFcMzVSV/8j1riuJ7C3ZQtkDO5vZfpbvqqCxNNEWB+YP3 aS3fJtC+nVYgpPJflv1uJJ5CpxmBU7v7O1cfcw7CXzHmfw80T0pNIRRbf3tPN56+ nI6hnEAbF2MNSdbqvnhNMHGFEH9fo9x6/gPvc1NCdya6I2GzVAW9YP/HcP3LefPY XG7NO9MiwQ2fWBgRL2CNfLZkEsydEuhMe2OZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU7MjeRxso/6bAJOkxiUYCSUa4YdEwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvN01qZVJ4c29fNmJB Sk9reGlVWUNTVWE0WWRFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWdP5DANBgkqhkiG9w0BAQsFAAOCAQEATZ+0AuVmJYiZBdpMmi9MCdim6C/H tkhy+cjpuW40hbw9tyrSwf1+/WFtJ4kKKK0VEwKPfCDdFWCOP84rbw5kiODPcLfI 4mQQGnbRG2QL18FMvCpJlJ7piVr2sTs9MaoEzboyjttYtlCTETHPcX3gFKumRLWv +SDh0oxp+UQwN9hug/0wM9NVQXJ2dw1PSG1Kkj5LcTMW4+cJfWRdD7IlWoM5TFnS VZYDwGROa6/C4g+WpBZjDe47FAnxjro2eruYSRLk76tWnajw19lsOVVYrTTcrEs3 JvLI4z2h/Yd4zvnDGdPTR2GxFuCcz4rW3YRhdtz2TxhsikEyaD/mWnySBA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:08:32 2025 by rpki-client