This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3318/CHLiiQJKxgaFDiDzRj40FDWLNZg.roa File: CHLiiQJKxgaFDiDzRj40FDWLNZg.roa (raw, json) Hash identifier: OZD6YtYs6CuZvkMMwkpswrVMOsIsIoAPX6V4OBIXX3U= Subject key identifier: 08:72:E2:89:02:4A:C6:06:85:0E:20:F3:46:3E:34:14:35:8B:35:98 Certificate issuer: /CN=3DCAE1310119B85AC476B00EFFAC2CA1C34B4631 Certificate serial: 080B Authority key identifier: 3D:CA:E1:31:01:19:B8:5A:C4:76:B0:0E:FF:AC:2C:A1:C3:4B:46:31 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PcrhMQEZuFrEdrAO_6wsocNLRjE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/CHLiiQJKxgaFDiDzRj40FDWLNZg.roa Signing time: Thu 27 Nov 2025 12:22:21 +0000 ROA not before: Thu 27 Nov 2025 12:22:21 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 149513 IP address blocks: 103.142.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/PcrhMQEZuFrEdrAO_6wsocNLRjE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/PcrhMQEZuFrEdrAO_6wsocNLRjE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PcrhMQEZuFrEdrAO_6wsocNLRjE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 21:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2059 (0x80b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DCAE1310119B85AC476B00EFFAC2CA1C34B4631 Validity Not Before: Nov 27 12:22:21 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0872E289024AC606850E20F3463E3414358B3598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:27:92:60:d1:68:f7:08:92:f5:6b:9b:47:af: 3b:28:54:17:87:0f:9f:9e:8a:fd:3c:7e:62:36:24: 23:f7:47:0e:b7:e8:9b:74:4d:f9:16:1f:e6:ad:e1: 21:16:cb:a3:34:39:ff:0a:ea:55:f3:45:25:3f:d6: 7e:f5:f7:42:6a:b8:36:5a:70:68:3b:ea:c0:6c:a7: 9c:c9:71:c6:ff:0f:b7:88:94:8f:3c:c3:f4:85:94: 36:1e:f1:cd:4b:bd:c4:bb:e1:09:9e:90:15:a6:06: 21:fe:c2:e2:95:9c:21:f6:3d:f3:70:8b:a8:e2:b4: b3:22:16:3b:55:5a:86:50:11:07:54:00:0e:5a:27: 5b:f3:01:aa:65:5c:7f:01:e2:b6:55:c1:72:54:83: ca:16:b1:10:eb:3b:55:8a:19:c7:16:02:89:8b:cf: 55:7c:12:44:74:d6:e0:b4:ac:58:0a:e5:f6:0b:d1: 2c:78:2f:47:e6:ea:6d:f2:11:8f:a8:b8:81:b1:8a: 7d:4b:e9:fb:c8:aa:09:42:bd:02:bb:d3:b1:a0:bb: 41:df:75:5e:8e:01:e3:13:c2:d5:05:bc:a5:d9:40: 41:f2:9b:64:8a:d7:57:97:6e:51:5e:4d:33:01:cf: 4a:7f:2b:96:87:c6:53:9b:35:f5:e9:c3:25:4f:e6: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:72:E2:89:02:4A:C6:06:85:0E:20:F3:46:3E:34:14:35:8B:35:98 X509v3 Authority Key Identifier: keyid:3D:CA:E1:31:01:19:B8:5A:C4:76:B0:0E:FF:AC:2C:A1:C3:4B:46:31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/PcrhMQEZuFrEdrAO_6wsocNLRjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PcrhMQEZuFrEdrAO_6wsocNLRjE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/CHLiiQJKxgaFDiDzRj40FDWLNZg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.142.82.0/24 Signature Algorithm: sha256WithRSAEncryption 54:98:5e:16:71:1a:e0:4d:b7:fe:72:21:9d:de:d5:b8:59:3a: 54:69:e4:7e:04:8a:1f:87:2c:b2:06:b6:28:86:66:48:1c:82: ae:f3:d6:0f:d3:95:df:41:05:d4:6b:89:a7:9b:63:23:1e:c6: 8f:13:1b:36:7e:04:62:a6:a1:f7:2b:ea:62:82:26:bf:15:e7: e8:e0:47:74:f0:25:80:35:7c:5f:39:6e:2e:10:04:8c:5e:54: b0:1a:68:02:2b:22:7b:b9:ee:29:64:fb:96:a7:7e:1f:c8:a3: 50:aa:07:69:0b:b0:4a:24:59:98:93:92:99:3c:ec:df:00:17: d0:2a:80:33:a7:3f:bb:47:22:2d:5d:97:b6:1f:7e:ab:96:7e: 6e:9f:0c:d2:15:c3:25:ef:56:ac:40:62:8a:55:8d:38:57:11: 66:99:43:88:51:51:b5:68:db:90:ec:ba:f8:65:f8:08:14:d7: ac:38:c6:6a:7c:91:48:6a:a3:c9:af:d2:4f:aa:03:3b:ee:ab: 1c:a9:7a:01:5c:58:21:91:ee:ae:2b:a8:7f:88:56:b3:fe:b7: ac:46:1e:8b:da:88:01:c1:d6:95:17:76:e4:e3:14:16:6a:a1: 99:a0:bd:35:9b:aa:43:e7:ed:41:a4:d4:02:2e:02:1e:6b:cb: 12:57:ed:3e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCAswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0RD QUUxMzEwMTE5Qjg1QUM0NzZCMDBFRkZBQzJDQTFDMzRCNDYzMTAeFw0yNTExMjcx MjIyMjFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDA4NzJFMjg5MDI0QUM2 MDY4NTBFMjBGMzQ2M0UzNDE0MzU4QjM1OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzJ5Jg0Wj3CJL1a5tHrzsoVBeHD5+eiv08fmI2JCP3Rw636Jt0 TfkWH+at4SEWy6M0Of8K6lXzRSU/1n7190JquDZacGg76sBsp5zJccb/D7eIlI88 w/SFlDYe8c1LvcS74QmekBWmBiH+wuKVnCH2PfNwi6jitLMiFjtVWoZQEQdUAA5a J1vzAaplXH8B4rZVwXJUg8oWsRDrO1WKGccWAomLz1V8EkR01uC0rFgK5fYL0Sx4 L0fm6m3yEY+ouIGxin1L6fvIqglCvQK707Ggu0HfdV6OAeMTwtUFvKXZQEHym2SK 11eXblFeTTMBz0p/K5aHxlObNfXpwyVP5pPNAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUCHLiiQJKxgaFDiDzRj40FDWLNZgwHwYDVR0jBBgwFoAUPcrhMQEZuFrEdrAO /6wsocNLRjEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx OC9QY3JoTVFFWnVGckVkckFPXzZ3c29jTkxSakUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1BjcmhNUUVadUZyRWRyQU9fNndzb2NOTFJqRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTgvQ0hMaWlRSkt4Z2FG RGlEelJqNDBGRFdMTlpnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGeOUjANBgkqhkiG9w0BAQsFAAOCAQEAVJheFnEa4E23/nIhnd7VuFk6VGnk fgSKH4cssga2KIZmSByCrvPWD9OV30EF1GuJp5tjIx7GjxMbNn4EYqah9yvqYoIm vxXn6OBHdPAlgDV8XzluLhAEjF5UsBpoAisie7nuKWT7lqd+H8ijUKoHaQuwSiRZ mJOSmTzs3wAX0CqAM6c/u0ciLV2Xth9+q5Z+bp8M0hXDJe9WrEBiilWNOFcRZplD iFFRtWjbkOy6+GX4CBTXrDjGanyRSGqjya/ST6oDO+6rHKl6AVxYIZHuriuof4hW s/63rEYei9qIAcHWlRd25OMUFmqhmaC9NZuqQ+ftQaTUAi4CHmvLElftPg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:13:24 2025 by rpki-client