This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/14fQ8q8dEpVid6g8TZW8Lqvfrlc.roa File: 14fQ8q8dEpVid6g8TZW8Lqvfrlc.roa (raw, json) Hash identifier: n7dLn8pJ4oQ+Vy4VLaT7kocEYkKXK+D5LLmYzZEIG8M= Subject key identifier: D7:87:D0:F2:AF:1D:12:95:62:77:A8:3C:4D:95:BC:2E:AB:DF:AE:57 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 52B2 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/14fQ8q8dEpVid6g8TZW8Lqvfrlc.roa Signing time: Wed 08 May 2024 20:23:55 +0000 ROA not before: Wed 08 May 2024 20:23:55 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.236.0.0/16 maxlen: 16 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 21170 (0x52b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 8 20:23:55 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=D787D0F2AF1D12956277A83C4D95BC2EABDFAE57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:24:55:a9:7c:ed:33:93:20:7a:89:ba:5a: d1:9e:27:e6:c3:45:3c:46:f7:2f:a3:31:62:cc:37: e9:b9:44:74:50:65:44:cc:aa:37:97:3e:d3:da:11: ec:19:ad:23:72:97:25:74:ef:10:2c:d8:74:0c:0e: e1:07:dd:d2:ee:55:a7:9e:a6:46:a8:3d:7b:54:ca: a6:b2:57:1a:ba:f1:06:65:b8:9f:5b:bb:f6:7b:b2: c8:99:2e:61:19:14:cb:55:3c:1f:8e:5b:35:e0:78: a1:ff:33:f5:a2:d7:49:6e:6a:55:dd:ca:1b:9d:34: 4c:45:08:ca:10:01:3d:66:44:3f:48:11:80:ee:5a: aa:27:b1:91:24:60:c0:c2:03:08:81:79:07:8e:0a: ee:34:bf:24:b5:09:09:53:4b:75:1b:49:35:73:db: 2a:cb:e8:44:85:df:65:76:df:02:b8:0b:a1:ec:01: e2:e6:0b:72:a8:0b:cb:08:66:71:77:fe:cf:4e:67: 20:e6:1b:13:28:92:3b:d2:23:b7:da:c9:55:c6:d3: d6:02:bc:14:44:60:2f:ba:cf:38:06:92:6f:cf:7c: 7f:8d:35:82:38:8b:a8:1f:e3:df:c4:69:da:d2:c0: 0f:8b:a4:03:48:90:1a:4c:76:4f:f4:87:53:2a:3e: 00:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:87:D0:F2:AF:1D:12:95:62:77:A8:3C:4D:95:BC:2E:AB:DF:AE:57 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/14fQ8q8dEpVid6g8TZW8Lqvfrlc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.236.0.0/16 Signature Algorithm: sha256WithRSAEncryption a4:fe:ea:70:36:10:0e:45:23:90:dd:0f:dc:8c:9f:e3:e9:b2: 6b:6a:14:83:13:1a:93:f0:59:46:da:4c:4e:70:1f:7c:36:63: 72:f5:5d:f0:87:2c:33:dd:a3:78:ac:77:e9:1a:7f:35:7e:b4: ff:dc:38:6f:d3:0d:17:fe:77:52:68:8a:94:5d:a2:91:62:e7: c7:ad:da:03:cc:6e:e2:ac:2a:30:90:98:0a:ee:56:77:59:32: ea:75:9e:b9:97:b6:0c:06:ce:2e:98:8c:8b:e6:58:b0:5d:1c: f2:e9:ea:89:5d:c2:72:86:ff:ca:0a:1b:ca:d7:b1:c3:a1:62: 32:3d:45:60:c5:9e:b8:01:47:18:a2:49:46:3f:fc:64:d1:ce: 6f:f8:d6:b2:c0:ec:b7:c0:7c:1a:ee:b1:14:4f:42:c2:6a:9e: e9:fc:43:c5:ec:4c:fe:89:82:31:ca:3a:2a:53:32:e5:e2:7c: bf:b0:61:7e:6c:36:c6:64:0d:32:31:8e:4e:70:04:d3:5d:89: 0d:b5:03:02:08:1e:51:1f:82:e9:4c:8d:e2:72:5b:25:07:ef: 5e:8f:6f:bf:f8:f1:2a:e8:83:55:1f:f4:e1:f7:f6:0b:5c:18: 75:f4:91:8c:51:6a:a7:20:65:05:e8:1f:34:a8:f9:52:2e:cb: c8:c3:13:df -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICUrIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDgy MDIzNTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQ3ODdEMEYyQUYxRDEy OTU2Mjc3QTgzQzREOTVCQzJFQUJERkFFNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9WSRVqXztM5Mgeom6WtGeJ+bDRTxG9y+jMWLMN+m5RHRQZUTM qjeXPtPaEewZrSNylyV07xAs2HQMDuEH3dLuVaeepkaoPXtUyqayVxq68QZluJ9b u/Z7ssiZLmEZFMtVPB+OWzXgeKH/M/Wi10lualXdyhudNExFCMoQAT1mRD9IEYDu WqonsZEkYMDCAwiBeQeOCu40vyS1CQlTS3UbSTVz2yrL6ESF32V23wK4C6HsAeLm C3KoC8sIZnF3/s9OZyDmGxMokjvSI7fayVXG09YCvBREYC+6zzgGkm/PfH+NNYI4 i6gf49/EadrSwA+LpANIkBpMdk/0h1MqPgADAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU14fQ8q8dEpVid6g8TZW8LqvfrlcwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzE0ZlE4cThkRXBWaWQ2 ZzhUWlc4THF2ZnJsYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEApP7qcDYQDkUjkN0P3Iyf4+mya2oUgxMa k/BZRtpMTnAffDZjcvVd8IcsM92jeKx36Rp/NX60/9w4b9MNF/53UmiKlF2ikWLn x63aA8xu4qwqMJCYCu5Wd1ky6nWeuZe2DAbOLpiMi+ZYsF0c8unqiV3Ccob/ygob ytexw6FiMj1FYMWeuAFHGKJJRj/8ZNHOb/jWssDst8B8Gu6xFE9Cwmqe6fxDxexM /omCMco6KlMy5eJ8v7Bhfmw2xmQNMjGOTnAE012JDbUDAggeUR+C6UyN4nJbJQfv Xo9vv/jxKuiDVR/04ff2C1wYdfSRjFFqpyBlBegfNKj5Ui7LyMMT3w== -----END CERTIFICATE-----Generated at Mon Jan 12 17:21:10 2026 by rpki-client