This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/7PSiNmw4uP5-tCFMOdEnIR7R1mY.roa File: 7PSiNmw4uP5-tCFMOdEnIR7R1mY.roa (raw, json) Hash identifier: //aLn6ijjd0RsSlEJvFmoXmtL59RIBJT5b37RKtCGhs= Subject key identifier: EC:F4:A2:36:6C:38:B8:FE:7E:B4:21:4C:39:D1:27:21:1E:D1:D6:66 Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 1E8C Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/7PSiNmw4uP5-tCFMOdEnIR7R1mY.roa Signing time: Thu 05 Jun 2025 08:54:28 +0000 ROA not before: Thu 05 Jun 2025 08:54:28 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 131314 IP address blocks: 103.200.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7820 (0x1e8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Jun 5 08:54:28 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=ECF4A2366C38B8FE7EB4214C39D127211ED1D666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9e:97:ab:b2:ac:f2:db:4e:f0:17:b8:0f:fd: 5e:22:f8:a8:28:6d:db:9a:16:bf:74:d2:1a:04:c7: 9e:e7:96:f9:9d:a0:6a:28:54:68:41:08:9c:9b:fb: 41:2d:11:b3:4d:b7:8e:4c:a7:2f:95:cb:eb:63:76: 3f:a6:90:1a:80:6d:55:b5:22:c2:ba:8b:83:8d:af: d6:4a:9a:f7:fd:81:17:4e:90:1f:93:ba:b8:b4:c8: 19:a5:1c:1d:e9:ee:62:c8:94:0a:fc:8c:29:3d:5c: 3c:21:53:0b:55:5a:53:60:84:ac:be:0b:e2:8a:71: b6:94:a2:06:0f:ec:fb:19:21:99:73:c1:88:19:5d: 85:db:1e:f2:d8:f8:c4:bb:97:c5:fc:9b:52:df:c5: 34:72:6e:06:e9:ef:77:67:9d:f7:ac:fe:f9:86:fa: 15:5a:f0:56:01:0e:ff:3d:3e:e0:79:c5:56:c7:3c: 4d:90:ca:3b:65:c6:bb:12:5a:ab:a4:8c:14:f0:57: a6:70:08:22:e5:24:8d:79:02:a5:79:8d:6b:10:db: a6:ae:e8:17:a7:86:5d:ef:59:a5:c0:59:98:60:7c: 50:82:a4:a4:0d:aa:03:74:fd:fc:3c:a3:3c:21:bf: e5:12:10:ee:18:a9:9d:bc:b1:0d:3c:11:22:d7:d1: 1d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F4:A2:36:6C:38:B8:FE:7E:B4:21:4C:39:D1:27:21:1E:D1:D6:66 X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/7PSiNmw4uP5-tCFMOdEnIR7R1mY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.200.220.0/22 Signature Algorithm: sha256WithRSAEncryption 03:e6:ab:d6:ab:0d:2b:33:4e:ff:4e:77:01:30:43:1f:a8:ca: 8c:70:d3:64:ea:90:da:ee:d2:a5:63:d4:09:b3:c5:8c:c3:5c: dd:3c:c1:fb:f4:d6:54:6a:89:db:7a:74:53:fa:94:5d:a3:85: f4:6f:1c:73:51:7f:22:73:ee:4e:a1:b7:ea:82:9a:eb:15:43: db:e0:3f:02:2e:45:7f:22:4f:ef:24:b9:43:ba:f3:ac:1b:61: 87:c6:8d:e3:22:95:ca:3c:5d:74:57:58:95:cf:b7:7b:a6:b7: ad:cd:8f:d8:96:11:c7:6e:a3:97:17:7e:1c:51:50:d1:f5:a8: 14:56:62:0c:b4:cd:ef:cf:71:b1:63:62:1a:20:db:28:02:6a: 7a:8b:7f:8d:cf:93:6f:ed:37:5b:de:14:fa:20:c4:5d:db:34: f1:87:fb:1a:bc:e8:c3:e2:fc:80:97:a5:49:f3:74:21:16:e2: 2a:ba:55:07:b3:60:55:19:8e:d9:e5:d0:61:62:5a:db:81:cb: 89:31:3a:07:c7:bd:56:42:b8:93:42:6b:f9:05:18:a9:e9:f5: ed:73:01:17:c4:0d:b0:c2:7b:01:29:0f:f3:9c:1b:6a:32:df: a6:e6:5a:4e:c0:aa:56:92:43:33:14:29:bc:f1:fe:a9:18:a2: 13:72:2e:e1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNTA2MDUw ODU0MjhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVDRjRBMjM2NkMzOEI4 RkU3RUI0MjE0QzM5RDEyNzIxMUVEMUQ2NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDznpersqzy207wF7gP/V4i+KgobduaFr900hoEx57nlvmdoGoo VGhBCJyb+0EtEbNNt45Mpy+Vy+tjdj+mkBqAbVW1IsK6i4ONr9ZKmvf9gRdOkB+T uri0yBmlHB3p7mLIlAr8jCk9XDwhUwtVWlNghKy+C+KKcbaUogYP7PsZIZlzwYgZ XYXbHvLY+MS7l8X8m1LfxTRybgbp73dnnfes/vmG+hVa8FYBDv89PuB5xVbHPE2Q yjtlxrsSWqukjBTwV6ZwCCLlJI15AqV5jWsQ26au6Benhl3vWaXAWZhgfFCCpKQN qgN0/fw8ozwhv+USEO4YqZ28sQ08ESLX0R0dAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU7PSiNmw4uP5+tCFMOdEnIR7R1mYwHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxLzdQU2lObXc0dVA1LXRD Rk1PZEVuSVI3UjFtWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnyNwwDQYJKoZIhvcNAQELBQADggEBAAPmq9arDSszTv9OdwEwQx+oyoxw02Tq kNru0qVj1AmzxYzDXN08wfv01lRqidt6dFP6lF2jhfRvHHNRfyJz7k6ht+qCmusV Q9vgPwIuRX8iT+8kuUO686wbYYfGjeMilco8XXRXWJXPt3umt63Nj9iWEcduo5cX fhxRUNH1qBRWYgy0ze/PcbFjYhog2ygCanqLf43Pk2/tN1veFPogxF3bNPGH+xq8 6MPi/ICXpUnzdCEW4iq6VQezYFUZjtnl0GFiWtuBy4kxOgfHvVZCuJNCa/kFGKnp 9e1zARfEDbDCewEpD/OcG2oy36bmWk7AqlaSQzMUKbzx/qkYohNyLuE= -----END CERTIFICATE-----Generated at Sun Dec 7 02:37:20 2025 by rpki-client