This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1008/G0OzAKp9H3qMTcdDSd383-EnaNY.roa File: G0OzAKp9H3qMTcdDSd383-EnaNY.roa (raw, json) Hash identifier: 6M95qsHvHVz8pg7gOuht4QMpvYxmMeouys9XnZmlOoU= Subject key identifier: 1B:43:B3:00:AA:7D:1F:7A:8C:4D:C7:43:49:DD:FC:DF:E1:27:68:D6 Certificate issuer: /CN=0C253A719E8A44FC18E105B95AA2348B5DCED595 Certificate serial: 1B24 Authority key identifier: 0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/G0OzAKp9H3qMTcdDSd383-EnaNY.roa Signing time: Thu 25 Dec 2025 08:05:14 +0000 ROA not before: Thu 25 Dec 2025 08:05:14 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 37963 IP address blocks: 2403:28c0::/32 maxlen: 48 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 6948 (0x1b24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C253A719E8A44FC18E105B95AA2348B5DCED595 Validity Not Before: Dec 25 08:05:14 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=1B43B300AA7D1F7A8C4DC74349DDFCDFE12768D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:ba:83:0d:0d:53:61:36:b9:9c:bd:3b:6d: bb:ed:07:47:a4:e5:5a:62:e4:4e:54:3e:1a:49:4f: ed:10:ae:3d:b2:52:eb:32:4a:ce:17:1f:8a:64:8f: 4a:aa:40:cf:8f:56:c0:81:8a:af:67:64:6b:87:6f: 44:b6:90:d2:b9:f7:0a:bf:f3:d7:b0:0d:a2:b9:cf: 84:44:5a:5c:ec:e5:93:9f:30:3d:8f:8b:95:89:54: 65:b1:8f:ea:c6:9e:b8:35:bf:9e:0d:4b:20:00:94: 45:9e:81:58:26:72:15:74:5b:82:c7:7e:35:f5:c0: 75:bb:5c:97:43:15:5e:62:e7:95:61:2a:90:6f:9b: cd:07:35:fb:00:27:a3:b9:9c:64:b8:a1:fa:e3:ec: 33:51:b8:8c:6f:3c:94:40:56:3e:7c:9b:b5:28:aa: b6:df:a0:f5:45:75:09:83:0e:ce:0a:48:5b:e5:b7: 61:73:91:92:24:91:5c:8d:8b:9d:ad:c5:ff:18:bf: d5:91:a7:d4:5e:c7:f1:06:be:3e:0a:3b:e5:b1:01: c1:44:cb:9f:73:81:17:30:87:a6:b2:a3:7f:06:0c: 95:89:94:51:ff:6a:39:07:16:e1:57:8c:46:7e:89: d6:07:cb:aa:4b:bf:01:5c:0d:0b:4a:a2:13:3e:35: ec:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:43:B3:00:AA:7D:1F:7A:8C:4D:C7:43:49:DD:FC:DF:E1:27:68:D6 X509v3 Authority Key Identifier: keyid:0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/G0OzAKp9H3qMTcdDSd383-EnaNY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:28c0::/32 Signature Algorithm: sha256WithRSAEncryption 0c:20:97:c1:ad:fa:dd:32:da:cf:78:ff:58:5f:b3:0c:f8:d5: 1b:e7:3b:4f:dd:26:60:2d:5d:8f:ff:6d:72:20:02:44:23:01: a5:80:9e:f7:e6:15:df:14:50:f4:5e:e2:11:08:33:6b:8f:52: e0:a8:96:91:af:63:ce:d6:3d:46:77:01:17:1d:4a:75:40:42: 3c:b8:39:78:b7:67:ea:5f:c2:d9:83:36:f2:a5:34:c6:73:cb: 58:02:4d:4b:9d:dd:57:f7:7b:c8:a4:71:01:71:31:2a:63:a5: cb:22:ed:c3:71:cb:27:ec:32:cc:27:81:05:b2:f6:9a:06:83: a2:4f:40:6e:38:35:af:25:88:cc:a1:87:b2:18:30:bf:c3:be: b6:86:28:c3:10:bf:3c:e9:81:d5:49:63:bb:43:1e:e5:55:d3: 29:81:db:d4:b1:7d:64:9f:8a:52:69:90:1a:e5:f8:56:8c:55: 80:bf:29:17:a9:7e:14:f2:f7:54:f4:f4:da:c3:39:dd:b1:6a: c8:b4:d3:c4:a5:31:61:c4:a1:c6:fa:1c:0b:34:20:5d:6e:c7: d7:2c:46:af:9a:7d:13:16:b5:9b:c5:f4:b6:93:28:d4:e0:c0: 8d:cc:01:98:b4:d4:7f:e6:9c:f7:0e:da:69:03:20:cf:d1:2e: e9:71:e7:3f -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICGyQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEMy NTNBNzE5RThBNDRGQzE4RTEwNUI5NUFBMjM0OEI1RENFRDU5NTAeFw0yNTEyMjUw ODA1MTRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDFCNDNCMzAwQUE3RDFG N0E4QzREQzc0MzQ5RERGQ0RGRTEyNzY4RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6g7qDDQ1TYTa5nL07bbvtB0ek5Vpi5E5UPhpJT+0Qrj2yUusy Ss4XH4pkj0qqQM+PVsCBiq9nZGuHb0S2kNK59wq/89ewDaK5z4REWlzs5ZOfMD2P i5WJVGWxj+rGnrg1v54NSyAAlEWegVgmchV0W4LHfjX1wHW7XJdDFV5i55VhKpBv m80HNfsAJ6O5nGS4ofrj7DNRuIxvPJRAVj58m7UoqrbfoPVFdQmDDs4KSFvlt2Fz kZIkkVyNi52txf8Yv9WRp9Rex/EGvj4KO+WxAcFEy59zgRcwh6ayo38GDJWJlFH/ ajkHFuFXjEZ+idYHy6pLvwFcDQtKohM+New5AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUG0OzAKp9H3qMTcdDSd383+EnaNYwHwYDVR0jBBgwFoAUDCU6cZ6KRPwY4QW5 WqI0i13O1ZUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTAw OC9EQ1U2Y1o2S1JQd1k0UVc1V3FJMGkxM08xWlUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RDVTZjWjZLUlB3WTRRVzVXcUkwaTEzTzFaVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwMDgvRzBPekFLcDlIM3FN VGNkRFNkMzgzLUVuYU5ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQDKMAwDQYJKoZIhvcNAQELBQADggEBAAwgl8Gt+t0y2s94/1hfswz41Rvn O0/dJmAtXY//bXIgAkQjAaWAnvfmFd8UUPRe4hEIM2uPUuColpGvY87WPUZ3ARcd SnVAQjy4OXi3Z+pfwtmDNvKlNMZzy1gCTUud3Vf3e8ikcQFxMSpjpcsi7cNxyyfs MswngQWy9poGg6JPQG44Na8liMyhh7IYML/DvraGKMMQvzzpgdVJY7tDHuVV0ymB 29SxfWSfilJpkBrl+FaMVYC/KRepfhTy91T09NrDOd2xasi008SlMWHEocb6HAs0 IF1ux9csRq+afRMWtZvF9LaTKNTgwI3MAZi01H/mnPcO2mkDIM/RLulx5z8= -----END CERTIFICATE-----Generated at Sat Jan 3 06:50:59 2026 by rpki-client