This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3231/V77eQ2-llX74nxjLSbbZw6KeefA.roa
File: V77eQ2-llX74nxjLSbbZw6KeefA.roa (raw, json)
Hash identifier: fchYGo/W/cvZpDg4Rut02M7PcBM1dGKX5mMJqWdc/yA=
Subject key identifier: 57:BE:DE:43:6F:A5:95:7E:F8:9F:18:CB:49:B6:D9:C3:A2:9E:79:F0
Certificate issuer: /CN=D274A69BC9DB1EB773139F5654BB293BD28D559D
Certificate serial: 1052
Authority key identifier: D2:74:A6:9B:C9:DB:1E:B7:73:13:9F:56:54:BB:29:3B:D2:8D:55:9D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0nSmm8nbHrdzE59WVLspO9KNVZ0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3231/V77eQ2-llX74nxjLSbbZw6KeefA.roa
Signing time: Fri 14 Nov 2025 06:05:36 +0000
ROA not before: Fri 14 Nov 2025 06:05:36 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 150407
IP address blocks: 103.240.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3231/0nSmm8nbHrdzE59WVLspO9KNVZ0.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3231/0nSmm8nbHrdzE59WVLspO9KNVZ0.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0nSmm8nbHrdzE59WVLspO9KNVZ0.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 01:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4178 (0x1052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D274A69BC9DB1EB773139F5654BB293BD28D559D
Validity
Not Before: Nov 14 06:05:36 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=57BEDE436FA5957EF89F18CB49B6D9C3A29E79F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:b4:06:71:4c:7b:a4:93:2d:eb:13:aa:7d:
25:71:08:68:0d:c5:d8:8d:93:10:de:3a:84:f4:ad:
d9:40:55:20:57:57:ba:12:3c:4a:5a:b8:16:07:a5:
02:f3:ea:e7:eb:39:6f:e0:f8:67:f3:03:67:e2:3c:
82:cd:e6:b9:ce:16:ab:87:fe:4a:3e:02:a8:36:19:
32:d8:f0:28:3c:ee:02:8a:a5:13:bf:78:5c:3f:ca:
d2:05:fe:78:24:e5:cd:d3:95:27:28:2b:e8:6b:6a:
94:7d:02:80:c1:a6:41:67:2d:3b:19:49:ff:9c:8b:
2b:60:10:13:e2:e5:58:40:90:1a:31:0a:73:69:64:
ed:38:08:1c:06:ca:25:c8:8b:a3:ea:78:a0:1a:7c:
5e:f3:7b:0f:27:39:0c:76:b2:15:31:60:fa:82:00:
08:ef:d9:1c:71:cc:2b:63:83:b5:09:bd:8d:7a:87:
00:80:4f:14:33:cc:c5:fd:bb:0f:f5:db:13:52:5f:
5e:18:99:1b:bb:1f:fd:40:65:74:86:0e:f0:8b:c3:
80:bc:2f:27:ad:ac:e0:cf:24:b9:6a:9a:4e:77:a6:
7e:13:c9:32:99:1c:85:c3:86:0e:63:66:bc:c4:6a:
d5:d0:84:f6:c5:ef:2a:46:56:ad:c7:44:4e:ec:69:
f9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BE:DE:43:6F:A5:95:7E:F8:9F:18:CB:49:B6:D9:C3:A2:9E:79:F0
X509v3 Authority Key Identifier:
keyid:D2:74:A6:9B:C9:DB:1E:B7:73:13:9F:56:54:BB:29:3B:D2:8D:55:9D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3231/0nSmm8nbHrdzE59WVLspO9KNVZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0nSmm8nbHrdzE59WVLspO9KNVZ0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3231/V77eQ2-llX74nxjLSbbZw6KeefA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.240.200.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:94:aa:ee:ae:4b:26:d1:fe:47:a2:ca:fa:c1:26:94:05:93:
17:41:70:93:77:4f:b0:84:ea:1f:8d:60:bd:f2:34:46:62:5c:
ed:6e:15:66:cf:45:67:bc:19:e2:8c:a8:dd:e4:4b:b0:41:6f:
c4:f0:c3:68:17:72:c8:02:ef:bb:b8:5b:d7:23:2e:73:50:49:
3b:1e:c1:c9:04:66:2f:b3:04:ef:a3:10:f8:a3:3d:a7:62:2e:
ac:f0:78:7f:e0:5c:7b:e8:6a:de:f1:4d:39:00:9e:c5:af:05:
a0:a9:b6:8c:88:35:94:39:3e:18:91:0f:28:dd:33:86:8c:2c:
79:2e:3a:9f:4e:79:41:37:55:b4:e9:c1:99:7c:e4:38:81:dd:
85:b6:6c:c5:65:4d:86:fa:cb:c1:f5:0e:17:61:80:2d:3b:13:
0e:e4:f4:f3:8e:33:19:bc:ea:3a:9a:56:f6:22:20:33:9a:cf:
f6:f1:1d:4b:c1:b6:29:4a:4c:ec:16:73:16:b6:a7:ed:47:54:
07:17:5a:97:26:67:bb:c0:7a:ef:46:f4:88:55:90:94:5f:cc:
96:4f:f7:4a:bb:b3:9d:2f:f0:b7:68:3e:8b:95:83:f4:30:7d:
6b:84:9f:e2:3b:95:b8:46:b8:4e:c6:27:bf:c3:a4:69:29:a3:
ec:40:d5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 00:30:35 2025 by rpki-client