This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/37xRn0YrnF65DRPpuh6BeT-Bk84.roa File: 37xRn0YrnF65DRPpuh6BeT-Bk84.roa (raw, json) Hash identifier: P/z9uhYEm1wYbj3pldGsSH9FCnVs+LU9BstxFyo/F8U= Subject key identifier: DF:BC:51:9F:46:2B:9C:5E:B9:0D:13:E9:BA:1E:81:79:3F:81:93:CE Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 057B Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/37xRn0YrnF65DRPpuh6BeT-Bk84.roa Signing time: Fri 01 Aug 2025 06:34:45 +0000 ROA not before: Fri 01 Aug 2025 06:34:45 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1403 (0x57b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:34:45 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=DFBC519F462B9C5EB90D13E9BA1E81793F8193CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:2a:69:57:28:86:d7:69:f1:c7:78:f6:d0: 11:13:d7:3e:0d:4e:e7:d5:bc:d3:70:8c:d5:d8:10: b6:b0:64:b2:8b:8b:cd:a6:f9:1b:e4:fc:f0:81:f7: fe:a0:bd:7c:55:a0:7c:21:10:97:67:1e:2a:73:a7: 58:82:66:10:c3:dc:bc:08:3e:39:cd:89:23:93:50: 82:4f:14:34:35:f5:12:90:30:d5:78:20:a4:26:4f: d8:4c:dc:c4:c3:bc:33:2e:08:a6:4f:99:37:65:b8: e6:3f:e0:37:e7:6d:a8:45:a2:2e:96:56:57:46:6c: c7:05:2b:68:6e:eb:58:58:e5:f9:a8:25:6f:a8:2d: 5a:7f:1d:3e:34:f5:ab:d3:4f:46:df:e3:c7:80:8f: 81:54:04:a2:2c:e9:14:a7:c4:87:4e:95:6e:0d:39: 3a:e7:2c:86:63:71:b3:ff:a9:9c:0b:92:9c:2c:47: 3d:5d:07:bd:96:9b:09:cd:67:b8:9b:08:9a:12:27: 7c:1b:c4:39:8d:a5:94:b5:fd:3b:ad:d3:2e:7a:70: c6:a8:08:47:61:fa:45:92:7a:75:a2:56:e8:c9:01: 73:ea:84:a7:4f:5a:cb:2f:52:0d:a5:46:14:a5:8a: 1e:3c:c5:48:bc:57:a6:55:22:7d:30:ec:e3:8b:a3: f3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BC:51:9F:46:2B:9C:5E:B9:0D:13:E9:BA:1E:81:79:3F:81:93:CE X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/37xRn0YrnF65DRPpuh6BeT-Bk84.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.81.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:04:b9:40:ff:3b:01:68:76:60:b2:d4:55:e6:c2:8c:50:7b: 60:4d:03:f5:59:f2:28:b0:ef:d6:c8:57:99:60:b1:17:5f:20: be:7e:c1:2d:11:94:4c:34:24:9f:2d:21:92:a6:e4:83:cd:b7: d9:49:e7:eb:2d:dc:91:07:1b:0f:15:18:79:4f:39:0c:51:41: b4:f3:e8:d7:14:b6:6e:b9:ee:09:e7:1c:1e:d8:23:95:08:ae: 36:29:89:d3:58:b4:7c:8f:31:0a:cd:50:15:35:2d:56:80:9b: 8d:99:e8:c9:cb:2b:68:a1:92:ed:ab:5a:ce:33:09:f8:8e:2f: 74:68:fe:95:9c:5e:82:e4:14:16:36:09:74:9b:ca:7e:50:1e: cf:bb:09:40:45:1b:00:50:3c:4c:27:7c:8d:25:77:5e:0a:66: 06:66:e3:d9:6c:39:c7:a2:28:f1:e2:12:b0:43:4d:4d:50:29: 71:c6:67:47:df:df:52:3b:a0:ba:55:f7:36:4e:d7:ed:6d:27: 78:d2:38:41:c0:b0:98:62:84:df:4f:94:77:da:eb:30:2d:39: b0:9a:8e:5d:0e:34:fd:32:6c:59:85:40:58:89:29:c8:61:43: 39:87:88:4a:ed:64:91:7f:92:10:5d:d1:db:e5:77:e5:2f:c2: 97:7e:c7:31 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBXswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM0NDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKERGQkM1MTlGNDYyQjlD NUVCOTBEMTNFOUJBMUU4MTc5M0Y4MTkzQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoYippVyiG12nxx3j20BET1z4NTufVvNNwjNXYELawZLKLi82m +Rvk/PCB9/6gvXxVoHwhEJdnHipzp1iCZhDD3LwIPjnNiSOTUIJPFDQ19RKQMNV4 IKQmT9hM3MTDvDMuCKZPmTdluOY/4DfnbahFoi6WVldGbMcFK2hu61hY5fmoJW+o LVp/HT409avTT0bf48eAj4FUBKIs6RSnxIdOlW4NOTrnLIZjcbP/qZwLkpwsRz1d B72WmwnNZ7ibCJoSJ3wbxDmNpZS1/Tut0y56cMaoCEdh+kWSenWiVujJAXPqhKdP WssvUg2lRhSlih48xUi8V6ZVIn0w7OOLo/NTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU37xRn0YrnF65DRPpuh6BeT+Bk84wHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvMzd4Um4wWXJuRjY1 RFJQcHVoNkJlVC1Cazg0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsUTANBgkqhkiG9w0BAQsFAAOCAQEADwS5QP87AWh2YLLUVebCjFB7YE0D 9VnyKLDv1shXmWCxF18gvn7BLRGUTDQkny0hkqbkg8232Unn6y3ckQcbDxUYeU85 DFFBtPPo1xS2brnuCeccHtgjlQiuNimJ01i0fI8xCs1QFTUtVoCbjZnoycsraKGS 7atazjMJ+I4vdGj+lZxeguQUFjYJdJvKflAez7sJQEUbAFA8TCd8jSV3XgpmBmbj 2Ww5x6Io8eISsENNTVApccZnR9/fUjugulX3Nk7X7W0neNI4QcCwmGKE30+Ud9rr MC05sJqOXQ40/TJsWYVAWIkpyGFDOYeISu1kkX+SEF3R2+V35S/Cl37HMQ== -----END CERTIFICATE-----Generated at Fri Dec 5 00:32:50 2025 by rpki-client