This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3318/le3ozOEEoqkOBRTsd7zOTNYDeyU.roa File: le3ozOEEoqkOBRTsd7zOTNYDeyU.roa (raw, json) Hash identifier: uwZNWQuZ6ylRUik47KFwP6sadCkQhcpX2/xsJMJMvKg= Subject key identifier: 95:ED:E8:CC:E1:04:A2:A9:0E:05:14:EC:77:BC:CE:4C:D6:03:7B:25 Certificate issuer: /CN=3DCAE1310119B85AC476B00EFFAC2CA1C34B4631 Certificate serial: 0807 Authority key identifier: 3D:CA:E1:31:01:19:B8:5A:C4:76:B0:0E:FF:AC:2C:A1:C3:4B:46:31 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PcrhMQEZuFrEdrAO_6wsocNLRjE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/le3ozOEEoqkOBRTsd7zOTNYDeyU.roa Signing time: Thu 27 Nov 2025 12:14:17 +0000 ROA not before: Thu 27 Nov 2025 12:14:17 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 149513 IP address blocks: 103.142.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/PcrhMQEZuFrEdrAO_6wsocNLRjE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/PcrhMQEZuFrEdrAO_6wsocNLRjE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PcrhMQEZuFrEdrAO_6wsocNLRjE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 21:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2055 (0x807) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DCAE1310119B85AC476B00EFFAC2CA1C34B4631 Validity Not Before: Nov 27 12:14:17 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=95EDE8CCE104A2A90E0514EC77BCCE4CD6037B25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:5d:a7:22:2c:05:3a:40:3a:a5:63:f1:0c: 72:c8:e1:57:fb:00:54:a4:f8:ec:f4:25:00:13:cb: a6:2b:f3:90:a0:c4:18:c8:f9:c3:19:1c:a8:22:78: 0a:75:97:90:5b:6f:c5:0d:35:83:d8:17:22:a6:d5: e1:e6:34:24:72:fb:a4:c3:04:a4:a5:27:76:c8:9f: e8:40:4e:49:fe:1c:c0:05:3c:77:21:9e:22:c7:c0: ef:f0:c0:3e:1e:21:9e:0d:ad:1b:46:6a:4a:14:05: df:72:fc:96:5a:08:21:82:cf:f9:66:52:43:54:fc: 12:3d:83:da:f8:6e:95:22:35:09:70:4f:59:7f:b5: 38:71:20:24:1c:7d:a7:a6:ee:3d:9e:95:20:f5:87: ee:0d:72:e4:fa:fe:dd:1a:6c:42:be:f6:99:13:27: 8f:ec:10:16:84:d0:44:34:a0:8d:da:13:db:9e:75: d3:e5:2c:4e:43:b6:f8:d5:2f:09:0c:ff:74:07:99: 9b:34:1f:f5:75:e3:b7:44:56:af:1a:47:c9:e7:39: 64:f0:8f:5a:0d:ac:72:27:98:61:66:08:e5:17:1e: a3:d0:4d:d3:db:3e:cb:1e:aa:16:0f:c7:ff:e3:85: da:cd:19:31:59:b0:38:92:a5:11:f0:2e:83:d5:4e: 09:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:ED:E8:CC:E1:04:A2:A9:0E:05:14:EC:77:BC:CE:4C:D6:03:7B:25 X509v3 Authority Key Identifier: keyid:3D:CA:E1:31:01:19:B8:5A:C4:76:B0:0E:FF:AC:2C:A1:C3:4B:46:31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/PcrhMQEZuFrEdrAO_6wsocNLRjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PcrhMQEZuFrEdrAO_6wsocNLRjE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/le3ozOEEoqkOBRTsd7zOTNYDeyU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.142.83.0/24 Signature Algorithm: sha256WithRSAEncryption 63:df:a8:90:dc:cb:21:c2:ab:84:9a:65:67:66:ae:ec:79:ee: f8:e2:d4:21:64:a2:60:c2:92:64:b3:61:66:f5:1a:d2:fb:2e: 4e:b9:8f:d1:1f:ce:52:b2:c9:ad:7f:2c:68:1d:ad:55:85:03: a4:a1:99:f1:c7:b3:a6:97:44:8d:c5:57:00:f6:34:53:02:8b: ce:e9:93:33:33:3e:33:32:9d:08:fd:af:09:0b:af:50:53:7e: 4f:80:bc:40:4a:09:80:78:e4:47:4e:4c:40:fb:62:3e:d7:38: b8:34:b3:84:3e:01:b8:63:f9:7f:fd:24:4d:b7:ae:34:3b:f3: b8:3e:0b:4d:31:9a:30:04:3c:73:3e:b6:58:01:fd:bc:01:df: 98:55:b7:91:df:73:76:dc:23:5a:6d:a4:7a:85:16:33:28:d6: 22:73:a3:be:6c:2d:fd:72:3c:08:d7:cf:40:23:12:78:6c:95: d9:49:e3:62:17:d7:c3:fb:63:8b:61:dc:e4:2b:19:82:0f:4f: 0d:5e:03:cb:7b:55:3e:c2:fc:5b:35:9b:f5:1c:41:65:53:85: f6:8a:87:88:3e:87:06:de:00:be:63:db:5e:c1:25:c5:aa:36: 71:12:20:17:2b:69:99:47:9e:53:2b:be:44:c3:71:90:69:df: 33:e7:fe:34 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCAcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0RD QUUxMzEwMTE5Qjg1QUM0NzZCMDBFRkZBQzJDQTFDMzRCNDYzMTAeFw0yNTExMjcx MjE0MTdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDk1RURFOENDRTEwNEEy QTkwRTA1MTRFQzc3QkNDRTRDRDYwMzdCMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz912nIiwFOkA6pWPxDHLI4Vf7AFSk+Oz0JQATy6Yr85CgxBjI +cMZHKgieAp1l5Bbb8UNNYPYFyKm1eHmNCRy+6TDBKSlJ3bIn+hATkn+HMAFPHch niLHwO/wwD4eIZ4NrRtGakoUBd9y/JZaCCGCz/lmUkNU/BI9g9r4bpUiNQlwT1l/ tThxICQcfaem7j2elSD1h+4NcuT6/t0abEK+9pkTJ4/sEBaE0EQ0oI3aE9ueddPl LE5DtvjVLwkM/3QHmZs0H/V147dEVq8aR8nnOWTwj1oNrHInmGFmCOUXHqPQTdPb PsseqhYPx//jhdrNGTFZsDiSpRHwLoPVTgkNAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUle3ozOEEoqkOBRTsd7zOTNYDeyUwHwYDVR0jBBgwFoAUPcrhMQEZuFrEdrAO /6wsocNLRjEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx OC9QY3JoTVFFWnVGckVkckFPXzZ3c29jTkxSakUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1BjcmhNUUVadUZyRWRyQU9fNndzb2NOTFJqRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTgvbGUzb3pPRUVvcWtP QlJUc2Q3ek9UTllEZXlVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGeOUzANBgkqhkiG9w0BAQsFAAOCAQEAY9+okNzLIcKrhJplZ2au7Hnu+OLU IWSiYMKSZLNhZvUa0vsuTrmP0R/OUrLJrX8saB2tVYUDpKGZ8cezppdEjcVXAPY0 UwKLzumTMzM+MzKdCP2vCQuvUFN+T4C8QEoJgHjkR05MQPtiPtc4uDSzhD4BuGP5 f/0kTbeuNDvzuD4LTTGaMAQ8cz62WAH9vAHfmFW3kd9zdtwjWm2keoUWMyjWInOj vmwt/XI8CNfPQCMSeGyV2UnjYhfXw/tji2Hc5CsZgg9PDV4Dy3tVPsL8WzWb9RxB ZVOF9oqHiD6HBt4AvmPbXsElxao2cRIgFytpmUeeUyu+RMNxkGnfM+f+NA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:22:53 2025 by rpki-client