This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/JG36Bot0vUyWDO-Jkmcyw36ExuA.roa File: JG36Bot0vUyWDO-Jkmcyw36ExuA.roa (raw, json) Hash identifier: pUUT83yycKjx7TSfZoKvhxg7ZJy6HmCwysuJQnLONXM= Subject key identifier: 24:6D:FA:06:8B:74:BD:4C:96:0C:EF:89:92:67:32:C3:7E:84:C6:E0 Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 21B5 Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/JG36Bot0vUyWDO-Jkmcyw36ExuA.roa Signing time: Fri 14 Nov 2025 02:26:11 +0000 ROA not before: Fri 14 Nov 2025 02:26:11 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 17621 IP address blocks: 103.200.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 06:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8629 (0x21b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Nov 14 02:26:11 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=246DFA068B74BD4C960CEF89926732C37E84C6E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fa:21:40:36:fc:55:32:c9:f0:9e:d5:95:86: af:41:38:08:9a:cd:7d:9e:06:a7:b4:f2:ea:01:87: c0:a8:35:07:1a:bb:e7:09:77:b1:23:50:8b:af:15: 69:ac:8a:57:78:f5:c3:40:73:05:82:a0:5f:3e:3f: c2:d8:d5:df:cb:3f:08:d2:ae:dd:e4:90:5f:c9:3a: 89:47:18:c7:aa:07:9b:8b:95:ca:fe:b7:80:7a:44: 8c:4a:fc:ac:67:42:84:63:ad:cd:31:26:da:f7:2d: d8:40:9d:65:fd:77:f3:7c:43:7c:42:86:3a:02:e0: bb:3a:93:44:89:34:c9:a0:74:2c:66:5d:ee:87:e2: 4a:83:bc:70:85:97:07:24:de:a4:b0:78:2a:c5:f5: 0d:df:f0:34:94:88:34:0c:28:21:c8:79:d2:12:27: e0:d0:15:20:c9:8f:70:97:3c:1d:cb:93:1f:9b:db: ed:5a:c1:1c:50:bf:33:70:95:c7:0f:83:35:7d:1a: 22:d0:65:93:40:a7:dc:a5:81:f4:c2:a7:0e:b5:66: 67:03:21:98:b9:60:86:92:b9:29:b2:6b:49:64:5d: 62:97:aa:a7:2c:07:76:19:df:6e:17:31:1e:d6:6a: 42:e3:36:45:54:14:5b:5a:9b:d7:c6:03:93:5d:19: f2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6D:FA:06:8B:74:BD:4C:96:0C:EF:89:92:67:32:C3:7E:84:C6:E0 X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/JG36Bot0vUyWDO-Jkmcyw36ExuA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.200.224.0/24 Signature Algorithm: sha256WithRSAEncryption 88:f5:15:a7:bf:1b:4f:9c:ef:e0:1f:58:af:30:16:01:fd:8d: d3:1e:0a:ef:bf:46:cc:b4:80:bb:92:3d:15:51:a2:20:d1:00: bb:f9:83:a0:df:7e:74:74:a9:65:ea:e1:9e:ff:c5:07:cd:60: e0:58:a5:35:75:47:df:d4:76:c4:cb:ce:56:a4:42:d0:ce:a5: 7d:2e:e6:15:72:bb:fa:8e:f6:9a:84:54:bc:e2:26:c4:a7:15: 71:19:f1:4c:19:4e:ee:b9:73:e8:ac:79:be:ba:dd:b9:7b:ca: 34:6b:34:df:ec:31:6e:e9:58:36:4b:0e:cf:7e:fa:ab:a3:c6: b4:cb:f8:69:d9:36:b9:c7:9f:0f:18:e4:67:a5:2b:82:5f:dc: 67:49:4f:48:e7:3a:0d:40:44:73:ae:22:b7:23:a0:e4:b3:81: d0:df:b6:8b:77:a1:23:01:3d:54:6e:43:32:89:35:06:f0:02: 44:9f:09:53:98:d1:42:4b:2b:76:3e:78:ea:25:22:fb:cc:b5: cf:bd:26:33:29:98:ef:3a:05:4d:29:f0:00:08:42:8f:9e:ac: 3a:a8:a4:ca:46:dd:03:4c:c6:e1:93:30:b0:cc:de:ae:ce:28: fd:0d:49:db:a6:68:48:87:1f:0b:26:3c:29:81:f5:4d:ac:39: d0:c4:f9:49 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIbUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNTExMTQw MjI2MTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDI0NkRGQTA2OEI3NEJE NEM5NjBDRUY4OTkyNjczMkMzN0U4NEM2RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDn+iFANvxVMsnwntWVhq9BOAiazX2eBqe08uoBh8CoNQcau+cJ d7EjUIuvFWmsild49cNAcwWCoF8+P8LY1d/LPwjSrt3kkF/JOolHGMeqB5uLlcr+ t4B6RIxK/KxnQoRjrc0xJtr3LdhAnWX9d/N8Q3xChjoC4Ls6k0SJNMmgdCxmXe6H 4kqDvHCFlwck3qSweCrF9Q3f8DSUiDQMKCHIedISJ+DQFSDJj3CXPB3Lkx+b2+1a wRxQvzNwlccPgzV9GiLQZZNAp9ylgfTCpw61ZmcDIZi5YIaSuSmya0lkXWKXqqcs B3YZ324XMR7WakLjNkVUFFtam9fGA5NdGfJ/AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUJG36Bot0vUyWDO+Jkmcyw36ExuAwHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxL0pHMzZCb3QwdlV5V0RP LUprbWN5dzM2RXh1QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnyOAwDQYJKoZIhvcNAQELBQADggEBAIj1Fae/G0+c7+AfWK8wFgH9jdMeCu+/ Rsy0gLuSPRVRoiDRALv5g6DffnR0qWXq4Z7/xQfNYOBYpTV1R9/UdsTLzlakQtDO pX0u5hVyu/qO9pqEVLziJsSnFXEZ8UwZTu65c+iseb663bl7yjRrNN/sMW7pWDZL Ds9++qujxrTL+GnZNrnHnw8Y5GelK4Jf3GdJT0jnOg1ARHOuIrcjoOSzgdDftot3 oSMBPVRuQzKJNQbwAkSfCVOY0UJLK3Y+eOolIvvMtc+9JjMpmO86BU0p8AAIQo+e rDqopMpG3QNMxuGTMLDM3q7OKP0NSdumaEiHHwsmPCmB9U2sOdDE+Uk= -----END CERTIFICATE-----Generated at Sun Dec 7 05:50:07 2025 by rpki-client