This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/VIyCJZhgUD5RSMmX-H-1j26GsG8.roa File: VIyCJZhgUD5RSMmX-H-1j26GsG8.roa (raw, json) Hash identifier: lOA+VJIaIu+ew6lIlcE/8MB832PX1FlBp3bU7gfvvyc= Subject key identifier: 54:8C:82:25:98:60:50:3E:51:48:C9:97:F8:7F:B5:8F:6E:86:B0:6F Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 21A2 Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/VIyCJZhgUD5RSMmX-H-1j26GsG8.roa Signing time: Tue 11 Nov 2025 02:15:35 +0000 ROA not before: Tue 11 Nov 2025 02:15:35 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134773 IP address blocks: 103.201.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Nov 2025 14:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8610 (0x21a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Nov 11 02:15:35 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=548C82259860503E5148C997F87FB58F6E86B06F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:66:6e:fc:13:12:b2:cc:60:a5:b6:29:7f:40: bf:b0:d5:23:bb:0f:9d:9b:8f:d8:f2:92:db:3b:08: 69:19:87:25:b9:11:e7:09:7b:16:8f:91:8e:78:a7: 6f:71:15:dc:6a:20:59:c5:f5:a8:1e:50:6c:f5:e6: 9f:b6:a4:78:53:f0:91:47:8b:52:8e:ac:65:a9:e5: 42:26:34:3c:85:22:b9:76:f2:b1:ee:d7:aa:3a:87: b8:88:93:57:1f:83:35:11:da:43:d3:e7:43:50:66: d7:e0:dd:d7:fc:82:3e:c3:4f:ee:ae:6b:da:31:d9: 3c:a3:61:2f:e1:8a:50:d3:04:21:6b:e4:57:7b:83: 05:08:5b:8b:90:4d:f4:4b:07:4d:bc:7a:3f:0f:b8: 55:e9:61:8d:13:c4:92:cb:ec:06:56:88:e4:94:20: fb:d4:ae:1a:a9:2b:cd:31:a6:54:62:b4:76:7c:0d: 43:64:96:e7:d4:de:97:51:81:86:6e:e7:ea:79:09: f7:2e:08:8d:dc:86:7f:81:95:ea:c9:bb:06:53:e7: a2:a4:0d:b8:91:c4:c1:7a:61:1c:a4:6d:7d:fb:b3: f0:82:08:03:91:e0:b1:8a:38:14:6c:dc:7a:33:be: 5b:b1:b5:7f:96:8d:e9:2a:a1:21:6e:e2:11:0c:ca: 01:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8C:82:25:98:60:50:3E:51:48:C9:97:F8:7F:B5:8F:6E:86:B0:6F X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/VIyCJZhgUD5RSMmX-H-1j26GsG8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.201.192.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:80:ee:cb:fc:f7:42:bd:84:2a:68:cc:46:f2:e9:a2:0a:41: 1b:03:16:5a:d2:84:4b:e8:e5:1f:ba:9f:05:09:35:af:5e:28: 79:91:a6:99:62:25:84:31:3d:d4:88:ad:00:17:d3:87:a1:5a: 48:76:24:be:aa:75:ca:48:77:97:1d:2a:27:cc:6d:08:41:5c: 82:7c:1e:b9:17:9c:33:8d:d0:f0:84:9e:51:51:79:37:5c:a6: e9:ec:8d:70:b2:2b:5d:0c:d7:64:cd:62:48:06:4e:f9:a5:4e: 14:d4:6a:a2:ec:1e:96:f1:c7:e0:ef:e1:df:b4:23:91:7a:b7: ce:a6:fa:f1:f8:e2:5d:d1:0a:17:77:d8:f3:ac:39:60:8d:41: 3c:f4:1f:11:18:39:8b:d4:86:c5:bd:60:ff:c0:24:70:67:80: 82:2f:73:4f:2c:d0:32:c2:a5:f8:37:5b:b6:9b:66:62:48:bb: 95:7b:f6:ef:92:c6:8e:a4:a1:2d:4f:8f:3c:3d:d3:83:83:f2: 44:db:fd:83:c3:a5:f5:b5:f8:d7:ab:76:aa:88:ea:72:e3:4e: db:f2:0f:00:e4:69:fc:2a:cb:01:c2:a1:36:e7:d7:1b:32:c7: 9f:a5:38:4d:0b:c7:9f:92:09:7c:5a:a0:d3:06:93:15:5c:82: 2c:7e:b2:d3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNTExMTEw MjE1MzVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDU0OEM4MjI1OTg2MDUw M0U1MTQ4Qzk5N0Y4N0ZCNThGNkU4NkIwNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUZm78ExKyzGCltil/QL+w1SO7D52bj9jykts7CGkZhyW5EecJ exaPkY54p29xFdxqIFnF9ageUGz15p+2pHhT8JFHi1KOrGWp5UImNDyFIrl28rHu 16o6h7iIk1cfgzUR2kPT50NQZtfg3df8gj7DT+6ua9ox2TyjYS/hilDTBCFr5Fd7 gwUIW4uQTfRLB028ej8PuFXpYY0TxJLL7AZWiOSUIPvUrhqpK80xplRitHZ8DUNk lufU3pdRgYZu5+p5CfcuCI3chn+BlerJuwZT56KkDbiRxMF6YRykbX37s/CCCAOR 4LGKOBRs3HozvluxtX+WjekqoSFu4hEMygEVAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUVIyCJZhgUD5RSMmX+H+1j26GsG8wHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxL1ZJeUNKWmhnVUQ1UlNN bVgtSC0xajI2R3NHOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnycAwDQYJKoZIhvcNAQELBQADggEBAH6A7sv890K9hCpozEby6aIKQRsDFlrS hEvo5R+6nwUJNa9eKHmRppliJYQxPdSIrQAX04ehWkh2JL6qdcpId5cdKifMbQhB XIJ8HrkXnDON0PCEnlFReTdcpunsjXCyK10M12TNYkgGTvmlThTUaqLsHpbxx+Dv 4d+0I5F6t86m+vH44l3RChd32POsOWCNQTz0HxEYOYvUhsW9YP/AJHBngIIvc08s 0DLCpfg3W7abZmJIu5V79u+Sxo6koS1Pjzw904OD8kTb/YPDpfW1+NerdqqI6nLj TtvyDwDkafwqywHCoTbn1xsyx5+lOE0Lx5+SCXxaoNMGkxVcgix+stM= -----END CERTIFICATE-----Generated at Tue Nov 25 13:37:06 2025 by rpki-client