This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/tC3pvTSXkklCg1D3EznGiCgND7s.roa File: tC3pvTSXkklCg1D3EznGiCgND7s.roa (raw, json) Hash identifier: vhDgWcM2Xb09B2R2Z2KDX8LRLjyetTKoX3rTfQ7u4zQ= Subject key identifier: B4:2D:E9:BD:34:97:92:49:42:83:50:F7:13:39:C6:88:28:0D:0F:BB Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 050D Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/tC3pvTSXkklCg1D3EznGiCgND7s.roa Signing time: Tue 02 Dec 2025 12:14:38 +0000 ROA not before: Tue 02 Dec 2025 12:14:38 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 395886 IP address blocks: 103.216.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 21:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1293 (0x50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Dec 2 12:14:38 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B42DE9BD34979249428350F71339C688280D0FBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:41:6d:66:20:97:0d:20:ff:53:c7:c2:c3: d1:68:5b:85:e6:10:f4:29:e5:ab:38:ac:68:c7:e5: 2f:98:ad:90:46:f7:cf:96:76:4c:d4:92:c6:28:23: 64:65:fc:3f:0a:1b:60:79:e1:8b:87:67:be:97:3e: b2:e7:a6:e5:3f:12:41:00:60:2f:c6:84:4c:1c:15: aa:b5:70:46:f1:45:c6:01:cb:90:4d:7b:bf:c1:8d: fb:06:05:8b:0e:c3:fe:40:5e:4e:29:0a:70:36:13: eb:7f:2e:a8:44:08:4b:bc:ae:b6:d8:ed:39:b5:fe: 81:e6:03:f8:84:a1:e8:1e:dd:22:bb:95:3c:7a:4b: e7:b8:32:37:df:29:05:d7:0d:8d:8b:11:3b:e3:37: fe:9d:ee:7b:28:e3:dc:c5:90:85:51:38:1b:f5:07: 77:9a:76:74:5c:45:de:1c:75:9e:f9:aa:b2:e1:9c: cc:8b:a2:44:24:f6:8c:c7:52:43:02:c1:27:93:74: 85:97:5c:2f:7e:0b:86:97:71:da:26:c1:54:36:21: b1:fd:df:af:cf:f6:69:fd:86:f5:8e:78:67:f6:7e: b1:7f:2e:9e:28:50:b5:de:eb:36:03:fd:be:5f:a6: 55:3e:c8:5f:4e:d5:ed:16:32:d9:f4:65:26:59:be: 92:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2D:E9:BD:34:97:92:49:42:83:50:F7:13:39:C6:88:28:0D:0F:BB X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/tC3pvTSXkklCg1D3EznGiCgND7s.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.216.228.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:1e:2c:3b:a2:74:5e:3d:60:53:24:98:32:0e:c7:aa:e4:b9: 31:0a:99:52:14:b9:d7:f2:22:6d:50:fe:41:93:c0:08:91:7b: fb:4a:65:e3:21:e9:d9:52:9f:f8:50:f5:30:1d:61:9e:b6:d2: 4a:0a:2b:be:a0:52:2d:1d:36:c3:68:ef:ae:10:71:8e:3e:9a: d8:c3:95:7d:7d:96:04:16:db:14:8a:e4:63:b0:e6:45:d8:d0: df:22:83:86:e7:d1:da:17:be:27:96:72:fe:98:8e:93:e9:a0: 8b:99:a7:47:44:9e:2c:69:66:1b:76:be:2d:8e:da:b8:8f:ef: 9f:1f:cf:00:f2:fe:e0:44:5e:6a:3c:f5:df:2e:5f:56:94:b1: c0:c1:39:05:ba:7f:58:09:14:4b:5d:2b:dc:81:b5:38:59:97: 80:43:61:16:b1:eb:dc:bc:3e:7d:71:9b:10:30:03:96:39:09: af:17:6c:cc:0e:63:8c:d6:6c:97:35:54:b3:e6:fd:14:52:5f: bd:9b:62:d1:f5:5a:7a:6e:33:0e:ab:67:2c:75:04:58:03:73: 82:8d:e3:33:80:b9:c9:60:b5:e3:07:7f:9b:e2:69:b3:e5:d6: 70:78:bc:40:dc:8c:ca:77:7e:0f:4c:8b:c5:8a:33:8d:46:8a: 3d:bb:b4:ed -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzlF RTg1MkZFMTM4Q0RFREM1QjQyRDExQTM0Mjk1RDEwOUFENDkyNTAeFw0yNTEyMDIx MjE0MzhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEI0MkRFOUJEMzQ5Nzky NDk0MjgzNTBGNzEzMzlDNjg4MjgwRDBGQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCMEFtZiCXDSD/U8fCw9FoW4XmEPQp5as4rGjH5S+YrZBG98+W dkzUksYoI2Rl/D8KG2B54YuHZ76XPrLnpuU/EkEAYC/GhEwcFaq1cEbxRcYBy5BN e7/BjfsGBYsOw/5AXk4pCnA2E+t/LqhECEu8rrbY7Tm1/oHmA/iEoege3SK7lTx6 S+e4MjffKQXXDY2LETvjN/6d7nso49zFkIVROBv1B3eadnRcRd4cdZ75qrLhnMyL okQk9ozHUkMCwSeTdIWXXC9+C4aXcdomwVQ2IbH936/P9mn9hvWOeGf2frF/Lp4o ULXe6zYD/b5fplU+yF9O1e0WMtn0ZSZZvpI3AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUtC3pvTSXkklCg1D3EznGiCgND7swHwYDVR0jBBgwFoAUOe6FL+E4ze3FtC0R o0KV0QmtSSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcx Ni9PZTZGTC1FNHplM0Z0QzBSbzBLVjBRbXRTU1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MTYvdEMzcHZUU1hra2xD ZzFEM0V6bkdpQ2dORDdzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfY5DANBgkqhkiG9w0BAQsFAAOCAQEAfR4sO6J0Xj1gUySYMg7HquS5MQqZ UhS51/IibVD+QZPACJF7+0pl4yHp2VKf+FD1MB1hnrbSSgorvqBSLR02w2jvrhBx jj6a2MOVfX2WBBbbFIrkY7DmRdjQ3yKDhufR2he+J5Zy/piOk+mgi5mnR0SeLGlm G3a+LY7auI/vnx/PAPL+4EReajz13y5fVpSxwME5Bbp/WAkUS10r3IG1OFmXgENh FrHr3Lw+fXGbEDADljkJrxdszA5jjNZslzVUs+b9FFJfvZti0fVaem4zDqtnLHUE WANzgo3jM4C5yWC14wd/m+Jps+XWcHi8QNyMynd+D0yLxYozjUaKPbu07Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:32:22 2025 by rpki-client