This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/tfA4ZtzqRLLsQ9xj8BKhq6Zf1X0.roa File: tfA4ZtzqRLLsQ9xj8BKhq6Zf1X0.roa (raw, json) Hash identifier: 2siDA33wNcAwT+PBYClWTFXdJvwUdqbj/OCHOOQgEng= Subject key identifier: B5:F0:38:66:DC:EA:44:B2:EC:43:DC:63:F0:12:A1:AB:A6:5F:D5:7D Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 058D Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/tfA4ZtzqRLLsQ9xj8BKhq6Zf1X0.roa Signing time: Fri 01 Aug 2025 06:36:03 +0000 ROA not before: Fri 01 Aug 2025 06:36:03 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1421 (0x58d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:36:03 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=B5F03866DCEA44B2EC43DC63F012A1ABA65FD57D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:81:90:f1:5c:c1:7f:03:a0:aa:21:97:1d: cd:4b:42:91:e0:be:65:67:6b:65:aa:11:8f:9c:9d: b8:68:26:c9:66:6a:41:62:5a:18:0e:fb:5d:bf:55: 52:28:ce:d7:ca:c2:cf:f7:26:96:94:90:24:ba:ab: 0d:da:ff:ac:21:d2:1d:39:c9:f9:6d:b3:15:89:72: f0:1f:4d:7f:a8:51:b0:29:5f:17:47:15:86:52:0a: 59:30:53:1a:eb:6e:25:a6:94:fd:35:45:28:bc:be: 77:0a:b5:42:c4:7d:7c:9b:55:45:d0:51:e9:6a:15: e4:91:23:b1:f0:91:81:c1:4f:35:65:91:38:e5:3d: 59:25:60:a7:26:42:fb:16:5e:99:e9:a0:27:54:b4: b6:18:b2:46:cf:e2:2c:1c:22:06:65:ce:81:d4:13: 48:82:39:41:4a:bf:f3:fa:54:c7:53:96:1a:67:9b: 4c:17:a2:fb:30:e5:d5:59:b5:d6:0a:ae:eb:d8:58: dc:47:03:03:8c:fe:52:e8:63:3f:c5:51:6c:87:63: d9:1d:78:3b:72:39:ee:0e:1b:d8:fb:f1:28:ee:d7: a1:aa:ba:22:0d:e8:0a:77:14:9d:e4:33:ac:a2:1a: dd:eb:12:6b:90:79:1e:b4:5d:06:77:5d:27:2a:22: ee:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F0:38:66:DC:EA:44:B2:EC:43:DC:63:F0:12:A1:AB:A6:5F:D5:7D X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/tfA4ZtzqRLLsQ9xj8BKhq6Zf1X0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.98.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:45:58:77:31:1f:8c:a9:cb:a0:dc:4a:04:f7:0f:dd:66:7f: 71:20:d4:10:e1:e2:2f:b2:30:db:16:6a:4a:f8:a5:c0:51:d7: 87:7b:c1:31:fa:02:22:68:4b:eb:ae:6f:5f:f8:1e:05:7e:60: 17:4f:00:53:a1:98:e2:08:e5:85:c2:64:1a:df:41:e5:ea:cf: 17:00:b8:b5:16:c2:f3:a4:6a:f8:4b:bc:70:9f:e3:9c:dc:8a: 57:8d:4c:02:6f:f0:d7:f0:21:fa:c7:81:6d:11:d3:79:4c:d7: 76:7d:4b:b0:0c:a0:81:d2:d4:71:7a:1a:4f:9a:72:ae:42:1f: c1:4d:bb:9d:63:90:11:2d:34:b5:f2:52:c0:fc:c8:ed:e3:2d: ad:66:f0:5c:61:af:13:fa:13:59:fc:26:4f:e7:66:fb:fc:12: 6b:6e:9f:ee:ce:70:12:5a:25:4f:3c:1d:9a:6b:74:4c:37:7b: 44:34:d0:8f:ec:d1:07:a5:40:24:64:a5:33:45:f8:49:5a:5e: 6d:99:7f:31:6f:bb:72:89:11:5d:6b:61:0b:66:a6:75:81:d9: 81:41:50:83:31:ac:7c:49:e7:f6:73:52:aa:d2:28:c6:46:22: 00:b1:c6:ed:62:85:1c:a6:81:ad:f7:a6:fc:6d:f3:87:ab:10: 56:41:a5:1e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM2MDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEI1RjAzODY2RENFQTQ0 QjJFQzQzREM2M0YwMTJBMUFCQTY1RkQ1N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzR4GQ8VzBfwOgqiGXHc1LQpHgvmVna2WqEY+cnbhoJslmakFi WhgO+12/VVIoztfKws/3JpaUkCS6qw3a/6wh0h05yfltsxWJcvAfTX+oUbApXxdH FYZSClkwUxrrbiWmlP01RSi8vncKtULEfXybVUXQUelqFeSRI7HwkYHBTzVlkTjl PVklYKcmQvsWXpnpoCdUtLYYskbP4iwcIgZlzoHUE0iCOUFKv/P6VMdTlhpnm0wX ovsw5dVZtdYKruvYWNxHAwOM/lLoYz/FUWyHY9kdeDtyOe4OG9j78Sju16GquiIN 6Ap3FJ3kM6yiGt3rEmuQeR60XQZ3XScqIu4hAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUtfA4ZtzqRLLsQ9xj8BKhq6Zf1X0wHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvdGZBNFp0enFSTExz UTl4ajhCS2hxNlpmMVgwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsYjANBgkqhkiG9w0BAQsFAAOCAQEAC0VYdzEfjKnLoNxKBPcP3WZ/cSDU EOHiL7Iw2xZqSvilwFHXh3vBMfoCImhL665vX/geBX5gF08AU6GY4gjlhcJkGt9B 5erPFwC4tRbC86Rq+Eu8cJ/jnNyKV41MAm/w1/Ah+seBbRHTeUzXdn1LsAyggdLU cXoaT5pyrkIfwU27nWOQES00tfJSwPzI7eMtrWbwXGGvE/oTWfwmT+dm+/wSa26f 7s5wElolTzwdmmt0TDd7RDTQj+zRB6VAJGSlM0X4SVpebZl/MW+7cokRXWthC2am dYHZgUFQgzGsfEnn9nNSqtIoxkYiALHG7WKFHKaBrfem/G3zh6sQVkGlHg== -----END CERTIFICATE-----Generated at Fri Dec 5 00:33:05 2025 by rpki-client