This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/dfwYIoifEv--bOuqLCtW2pLyHXk.roa File: dfwYIoifEv--bOuqLCtW2pLyHXk.roa (raw, json) Hash identifier: JGH++bFpD2o8ad6jLOY3U43hyTYOpvAXrQ5Qr6Ak8jM= Subject key identifier: 75:FC:18:22:88:9F:12:FF:BE:6C:EB:AA:2C:2B:56:DA:92:F2:1D:79 Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 21B7 Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/dfwYIoifEv--bOuqLCtW2pLyHXk.roa Signing time: Fri 14 Nov 2025 02:26:11 +0000 ROA not before: Fri 14 Nov 2025 02:26:11 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 131314 IP address blocks: 103.200.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 02:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8631 (0x21b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Nov 14 02:26:11 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=75FC1822889F12FFBE6CEBAA2C2B56DA92F21D79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:08:08:f4:d1:61:44:be:05:47:67:9e:3f:93: a2:22:46:7e:a9:15:89:f8:97:0a:1c:d2:7e:38:a6: 97:83:bc:f9:98:0b:5a:36:79:14:e6:31:6f:d8:63: 54:82:9b:85:2e:c0:6d:21:b1:78:7f:d2:a2:2e:80: f2:d0:f6:09:6e:19:5a:61:13:9e:9a:e9:9a:d8:76: 16:29:e9:99:6d:99:cd:39:5c:fb:6e:af:17:f1:82: d1:b6:16:a0:6c:ab:20:c0:54:fa:04:27:59:4a:09: 0a:ab:f6:4a:ac:f7:01:89:16:b7:73:e9:93:af:40: 0d:47:fa:a9:8b:d3:9e:d1:97:a1:b9:36:74:f4:9a: 45:2d:64:fd:d9:db:9e:65:9c:99:7a:bf:2d:fa:29: d7:1d:05:89:eb:8f:0c:1c:63:0f:3c:18:9a:cd:e4: c5:83:25:ea:90:4d:b9:4e:48:91:1e:cc:69:da:dc: dc:0f:7b:41:92:8a:8f:95:99:78:b9:fb:8b:d3:44: 58:0d:03:8b:ae:12:35:5b:50:51:60:b4:63:76:e8: ed:28:ff:ca:a1:a7:7b:56:6d:1f:1b:b5:3a:ff:c9: e4:d2:5e:a3:70:f9:cf:a9:9e:15:7f:64:c7:9b:68: fc:1f:63:cb:25:fe:e4:e0:54:c5:e9:46:34:96:d5: 13:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FC:18:22:88:9F:12:FF:BE:6C:EB:AA:2C:2B:56:DA:92:F2:1D:79 X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/dfwYIoifEv--bOuqLCtW2pLyHXk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.200.224.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:1b:77:f5:91:9e:9d:a8:3a:d6:86:32:74:95:77:4e:ba:de: 83:dc:12:cf:77:7b:95:a1:37:dd:04:1a:26:6c:de:27:47:74: 66:b3:db:f0:87:f3:2c:0a:2e:80:f4:e7:33:18:f6:fb:59:67: 7e:a3:ab:3c:66:3c:41:83:ac:3d:a7:f9:f8:19:e3:3b:68:61: 74:de:8f:29:82:f1:66:88:da:9e:06:1e:69:3f:0a:20:b6:ea: 8a:6e:be:17:2e:d4:be:0b:54:e3:2c:b2:8f:df:bf:1f:8a:e4: eb:01:10:6b:2c:af:31:bf:d5:02:a5:4c:3d:7e:63:93:1e:e8: c0:66:ec:99:49:8d:4d:9a:83:91:f3:5d:64:a2:62:35:aa:ad: b0:7c:e7:08:da:e0:2c:86:50:c3:46:17:07:5a:a6:aa:1e:fd: 61:86:05:86:a3:e7:43:13:99:46:79:91:62:e2:2d:ea:5d:75: a8:05:40:1f:3a:a8:e6:86:55:63:b0:f5:58:66:3a:3c:08:34: e8:99:d5:4b:84:84:78:79:bc:1a:69:37:27:53:ed:f8:21:99: 07:8d:28:0a:df:f4:11:6c:fd:4c:e5:60:2f:3a:d8:b7:76:ba: 99:e8:4c:79:30:ce:f8:b6:62:f0:41:58:22:e4:63:7a:04:d4: e1:9d:0d:ac -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNTExMTQw MjI2MTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDc1RkMxODIyODg5RjEy RkZCRTZDRUJBQTJDMkI1NkRBOTJGMjFENzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDECAj00WFEvgVHZ54/k6IiRn6pFYn4lwoc0n44ppeDvPmYC1o2 eRTmMW/YY1SCm4UuwG0hsXh/0qIugPLQ9gluGVphE56a6ZrYdhYp6Zltmc05XPtu rxfxgtG2FqBsqyDAVPoEJ1lKCQqr9kqs9wGJFrdz6ZOvQA1H+qmL057Rl6G5NnT0 mkUtZP3Z255lnJl6vy36KdcdBYnrjwwcYw88GJrN5MWDJeqQTblOSJEezGna3NwP e0GSio+VmXi5+4vTRFgNA4uuEjVbUFFgtGN26O0o/8qhp3tWbR8btTr/yeTSXqNw +c+pnhV/ZMebaPwfY8sl/uTgVMXpRjSW1RPlAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUdfwYIoifEv++bOuqLCtW2pLyHXkwHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxL2Rmd1lJb2lmRXYtLWJP dXFMQ3RXMnBMeUhYay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnyOAwDQYJKoZIhvcNAQELBQADggEBAHobd/WRnp2oOtaGMnSVd0663oPcEs93 e5WhN90EGiZs3idHdGaz2/CH8ywKLoD05zMY9vtZZ36jqzxmPEGDrD2n+fgZ4zto YXTejymC8WaI2p4GHmk/CiC26opuvhcu1L4LVOMsso/fvx+K5OsBEGssrzG/1QKl TD1+Y5Me6MBm7JlJjU2ag5HzXWSiYjWqrbB85wja4CyGUMNGFwdapqoe/WGGBYaj 50MTmUZ5kWLiLepddagFQB86qOaGVWOw9VhmOjwINOiZ1UuEhHh5vBppNydT7fgh mQeNKArf9BFs/UzlYC862Ld2upnoTHkwzvi2YvBBWCLkY3oE1OGdDaw= -----END CERTIFICATE-----Generated at Sat Dec 6 23:41:41 2025 by rpki-client