This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3070/ehTiw9rYkRpnHO8xmephp32y72U.roa File: ehTiw9rYkRpnHO8xmephp32y72U.roa (raw, json) Hash identifier: ZnSUAZcJTNu5SHbMWhhDR7TcoG7T1MIVuMxVggswvaw= Subject key identifier: 7A:14:E2:C3:DA:D8:91:1A:67:1C:EF:31:99:EA:61:A7:7D:B2:EF:65 Certificate issuer: /CN=C8662F2B48ACC077E95800E5AA92CE16D26E1DEA Certificate serial: 0270 Authority key identifier: C8:66:2F:2B:48:AC:C0:77:E9:58:00:E5:AA:92:CE:16:D2:6E:1D:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yGYvK0iswHfpWADlqpLOFtJuHeo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3070/ehTiw9rYkRpnHO8xmephp32y72U.roa Signing time: Thu 13 Nov 2025 07:58:24 +0000 ROA not before: Thu 13 Nov 2025 07:58:24 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 133033 IP address blocks: 103.248.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3070/yGYvK0iswHfpWADlqpLOFtJuHeo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3070/yGYvK0iswHfpWADlqpLOFtJuHeo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yGYvK0iswHfpWADlqpLOFtJuHeo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8662F2B48ACC077E95800E5AA92CE16D26E1DEA Validity Not Before: Nov 13 07:58:24 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7A14E2C3DAD8911A671CEF3199EA61A77DB2EF65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:f1:43:52:63:6c:e7:5f:dd:3f:6b:b3:6b: 6c:df:b5:9f:61:84:55:5c:dc:12:6a:87:b1:b2:cb: d2:72:81:b8:4a:38:c1:cb:78:fb:61:74:a0:35:75: 8c:89:db:f7:c2:1b:92:10:77:b4:02:f7:6a:75:8d: ef:70:3e:6b:af:27:2f:c9:a7:e6:d4:70:4b:58:d4: 2f:1d:05:97:f6:32:1e:63:e1:ac:c4:cf:23:ce:69: 7a:2a:a0:f2:6c:c0:ad:36:63:51:26:69:a6:13:bb: 52:56:43:20:0e:59:e7:c3:8c:b7:8d:c3:fb:e0:26: 22:f4:f2:7e:44:14:9b:96:6f:ad:bf:fd:93:f0:67: c0:a5:7a:fe:12:1b:be:35:59:49:bd:e1:81:92:67: 38:78:35:01:85:04:6a:5d:46:5d:e6:14:89:f6:3c: 50:21:f3:c6:b9:45:ee:2b:8a:05:b5:65:69:d1:b9: 84:52:0e:0f:77:5a:b0:6e:98:2c:66:fb:e8:3c:da: 42:3a:31:0d:51:a3:09:9c:bd:15:91:0c:db:33:c5: 6c:0f:a3:9b:4c:e3:ce:3b:0f:2a:02:a3:aa:cf:b6: 11:46:a5:6c:0a:ef:6b:8a:e8:15:85:4b:d6:af:bc: fa:cf:b3:1b:89:00:0f:e2:e3:70:4b:84:be:c7:ee: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:14:E2:C3:DA:D8:91:1A:67:1C:EF:31:99:EA:61:A7:7D:B2:EF:65 X509v3 Authority Key Identifier: keyid:C8:66:2F:2B:48:AC:C0:77:E9:58:00:E5:AA:92:CE:16:D2:6E:1D:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3070/yGYvK0iswHfpWADlqpLOFtJuHeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yGYvK0iswHfpWADlqpLOFtJuHeo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3070/ehTiw9rYkRpnHO8xmephp32y72U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.248.153.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:41:46:c9:c7:ee:b2:05:fa:cd:87:ee:41:c1:3b:b3:52:fa: b5:b5:b9:5c:37:ea:c6:18:21:38:98:83:b6:02:e5:0a:b2:7f: 52:bb:d5:aa:97:71:55:99:3c:55:7d:a2:5a:6c:b0:5e:2a:65: 39:35:48:65:e6:df:41:5f:7c:fd:02:e8:c6:a2:d2:fb:c8:88: 97:20:b5:f8:4a:42:10:64:e8:98:9c:d9:dc:98:51:3d:f4:ee: a9:09:c9:af:88:65:74:e0:ed:70:40:c6:7d:e2:60:0f:df:96: 9b:2c:fe:92:6c:10:69:3a:8e:42:e7:4b:9b:8e:58:01:ac:a6: 5a:81:09:a2:ea:9b:6a:76:ba:db:46:e7:ec:0d:f7:2e:a7:99: 7f:2c:50:64:18:3a:81:93:e2:02:01:e7:7e:f0:0f:93:5f:0f: b1:33:da:63:28:38:59:bc:81:61:72:e1:e6:cc:ff:15:ba:3b: c2:78:3f:08:11:75:1f:e4:50:d2:1a:c9:1d:01:eb:9a:3e:25: b0:c6:a6:ba:11:8f:cc:55:37:04:5e:19:94:ed:f0:d8:82:f2: b4:39:38:c9:d6:e1:0a:87:c4:ba:34:be:a7:94:c2:84:ac:e9: ca:22:00:0b:29:99:0b:09:1e:ec:ec:89:83:6c:b7:64:32:e1: 64:34:e9:ef -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzg2 NjJGMkI0OEFDQzA3N0U5NTgwMEU1QUE5MkNFMTZEMjZFMURFQTAeFw0yNTExMTMw NzU4MjRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDdBMTRFMkMzREFEODkx MUE2NzFDRUYzMTk5RUE2MUE3N0RCMkVGNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJP/FDUmNs51/dP2uza2zftZ9hhFVc3BJqh7Gyy9JygbhKOMHL ePthdKA1dYyJ2/fCG5IQd7QC92p1je9wPmuvJy/Jp+bUcEtY1C8dBZf2Mh5j4azE zyPOaXoqoPJswK02Y1EmaaYTu1JWQyAOWefDjLeNw/vgJiL08n5EFJuWb62//ZPw Z8Clev4SG741WUm94YGSZzh4NQGFBGpdRl3mFIn2PFAh88a5Re4rigW1ZWnRuYRS Dg93WrBumCxm++g82kI6MQ1RowmcvRWRDNszxWwPo5tM4847DyoCo6rPthFGpWwK 72uK6BWFS9avvPrPsxuJAA/i43BLhL7H7l1fAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUehTiw9rYkRpnHO8xmephp32y72UwHwYDVR0jBBgwFoAUyGYvK0iswHfpWADl qpLOFtJuHeowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3 MC95R1l2SzBpc3dIZnBXQURscXBMT0Z0SnVIZW8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3lHWXZLMGlzd0hmcFdBRGxxcExPRnRKdUhlby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNzAvZWhUaXc5cllrUnBu SE84eG1lcGhwMzJ5NzJVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGf4mTANBgkqhkiG9w0BAQsFAAOCAQEALkFGycfusgX6zYfuQcE7s1L6tbW5 XDfqxhghOJiDtgLlCrJ/UrvVqpdxVZk8VX2iWmywXiplOTVIZebfQV98/QLoxqLS +8iIlyC1+EpCEGTomJzZ3JhRPfTuqQnJr4hldODtcEDGfeJgD9+Wmyz+kmwQaTqO QudLm45YAaymWoEJouqbana620bn7A33LqeZfyxQZBg6gZPiAgHnfvAPk18PsTPa Yyg4WbyBYXLh5sz/Fbo7wng/CBF1H+RQ0hrJHQHrmj4lsMamuhGPzFU3BF4ZlO3w 2ILytDk4ydbhCofEujS+p5TChKzpyiIACymZCwke7OyJg2y3ZDLhZDTp7w== -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:36 2025 by rpki-client