This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/I1h6g9HHUqsU8UmcvX-P4Cy6Zvw.roa File: I1h6g9HHUqsU8UmcvX-P4Cy6Zvw.roa (raw, json) Hash identifier: STefs9GzuREnolUBEbWjWZ00x1Z6rhFzgy7c3Wgo2Og= Subject key identifier: 23:58:7A:83:D1:C7:52:AB:14:F1:49:9C:BD:7F:8F:E0:2C:BA:66:FC Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 0574 Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/I1h6g9HHUqsU8UmcvX-P4Cy6Zvw.roa Signing time: Fri 01 Aug 2025 06:34:43 +0000 ROA not before: Fri 01 Aug 2025 06:34:43 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1396 (0x574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:34:43 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=23587A83D1C752AB14F1499CBD7F8FE02CBA66FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:13:2a:ab:29:2a:a3:e2:b2:4a:82:fb:db:10: 98:dc:b4:3a:ee:25:d0:12:ee:90:39:2f:8a:12:cb: a0:20:41:fd:2c:86:f6:4d:a9:8b:2c:e1:96:ec:fc: 35:d4:66:7b:20:77:9b:e6:59:f8:52:1d:30:63:a7: 4e:ec:91:a6:a2:33:41:a4:a8:55:40:f7:ee:73:64: 1d:bb:3e:84:79:4f:24:f0:b7:7f:76:8b:ef:b7:d1: 63:24:1a:c5:46:ac:66:3c:0c:ee:9f:57:b9:e5:2c: ee:90:b7:99:01:13:2d:e3:be:51:60:11:07:fd:3d: 3c:0c:f5:f6:d8:d6:08:d9:d5:7c:32:75:56:5c:d9: a3:8d:23:8f:46:af:e7:dd:3d:01:c5:03:30:69:71: 0a:8f:65:b4:ee:72:a4:0d:e5:e2:e9:91:dc:79:88: 7b:0a:86:19:a8:39:72:ba:46:4a:60:56:08:80:02: b8:94:b2:30:18:70:79:25:c2:1f:65:39:7f:c9:9a: f6:7f:d2:31:4c:6e:de:77:c3:d1:ed:06:46:49:eb: b8:08:b9:ec:07:11:40:a9:7c:6d:ca:ca:e7:ff:9d: 8a:1a:40:dd:e3:85:c8:ff:94:f6:d9:40:8a:cf:fe: ed:0e:ac:a2:1d:f8:c6:a6:d5:4a:9e:21:09:a9:57: 06:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:58:7A:83:D1:C7:52:AB:14:F1:49:9C:BD:7F:8F:E0:2C:BA:66:FC X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/I1h6g9HHUqsU8UmcvX-P4Cy6Zvw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.70.0/24 Signature Algorithm: sha256WithRSAEncryption 57:d9:1f:90:82:61:dc:c5:9d:04:0f:ae:d5:42:30:68:92:bb: 5b:f3:44:bd:18:f9:14:70:cf:be:47:1f:ac:5f:83:8d:08:0a: f0:bd:c4:e4:23:da:f1:1c:a6:38:ca:76:81:2f:46:6f:b6:45: f1:f9:c7:06:a7:3e:18:8b:8c:a7:9d:c5:fe:5e:35:01:38:e9: ec:9d:1c:f3:3d:05:73:bd:39:f9:b4:58:86:c9:42:7b:15:52: 7f:35:35:e3:b3:a6:d0:d3:a5:5d:4e:2a:a5:73:ad:63:89:0f: e7:5c:95:dd:17:d9:36:95:c1:ff:b5:f1:42:2d:e6:44:49:52: 00:24:d1:03:88:bd:be:56:b6:e7:bf:38:0b:cf:eb:a8:50:68: f5:8d:93:73:16:68:02:88:8f:2b:86:47:9b:f6:77:d6:82:92: 7a:c1:73:58:a0:4b:8b:da:67:c1:25:08:33:67:77:51:2f:f4: be:a2:fb:ed:76:11:b2:e8:0d:d0:4c:46:09:c3:9a:52:9c:55: 9e:a7:15:b7:5f:52:67:68:7f:fa:8b:2c:f8:15:47:4b:bb:a8: 07:52:be:ac:41:dd:26:50:15:b9:6a:42:d4:46:09:42:cc:90: b7:31:88:13:cc:f3:52:af:ee:77:60:97:ac:a0:27:a5:1d:b2: 93:5d:2c:4e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM0NDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIzNTg3QTgzRDFDNzUy QUIxNEYxNDk5Q0JEN0Y4RkUwMkNCQTY2RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1EyqrKSqj4rJKgvvbEJjctDruJdAS7pA5L4oSy6AgQf0shvZN qYss4Zbs/DXUZnsgd5vmWfhSHTBjp07skaaiM0GkqFVA9+5zZB27PoR5TyTwt392 i++30WMkGsVGrGY8DO6fV7nlLO6Qt5kBEy3jvlFgEQf9PTwM9fbY1gjZ1XwydVZc 2aONI49Gr+fdPQHFAzBpcQqPZbTucqQN5eLpkdx5iHsKhhmoOXK6RkpgVgiAAriU sjAYcHklwh9lOX/JmvZ/0jFMbt53w9HtBkZJ67gIuewHEUCpfG3Kyuf/nYoaQN3j hcj/lPbZQIrP/u0OrKId+Mam1UqeIQmpVwb/AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUI1h6g9HHUqsU8UmcvX+P4Cy6ZvwwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvSTFoNmc5SEhVcXNV OFVtY3ZYLVA0Q3k2WnZ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsRjANBgkqhkiG9w0BAQsFAAOCAQEAV9kfkIJh3MWdBA+u1UIwaJK7W/NE vRj5FHDPvkcfrF+DjQgK8L3E5CPa8RymOMp2gS9Gb7ZF8fnHBqc+GIuMp53F/l41 ATjp7J0c8z0Fc705+bRYhslCexVSfzU147Om0NOlXU4qpXOtY4kP51yV3RfZNpXB /7XxQi3mRElSACTRA4i9vla25784C8/rqFBo9Y2TcxZoAoiPK4ZHm/Z31oKSesFz WKBLi9pnwSUIM2d3US/0vqL77XYRsugN0ExGCcOaUpxVnqcVt19SZ2h/+oss+BVH S7uoB1K+rEHdJlAVuWpC1EYJQsyQtzGIE8zzUq/ud2CXrKAnpR2yk10sTg== -----END CERTIFICATE-----Generated at Fri Dec 5 00:32:50 2025 by rpki-client