This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/cVm2-Mu_qIdJIWCKEJTgtjDsneo.roa
File: cVm2-Mu_qIdJIWCKEJTgtjDsneo.roa (raw, json)
Hash identifier: Upba/iUJ3PlrMjiuSSvJKOvj7jbVJWydd4303fy2W5I=
Subject key identifier: 71:59:B6:F8:CB:BF:A8:87:49:21:60:8A:10:94:E0:B6:30:EC:9D:EA
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 23CB
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/cVm2-Mu_qIdJIWCKEJTgtjDsneo.roa
Signing time: Mon 15 Dec 2025 12:20:25 +0000
ROA not before: Mon 15 Dec 2025 12:20:25 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 4811
IP address blocks: 124.174.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9163 (0x23cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Dec 15 12:20:25 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=7159B6F8CBBFA8874921608A1094E0B630EC9DEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:b8:3b:c8:b6:9f:95:3e:7b:83:f5:0b:cc:
28:67:c7:20:53:88:76:58:44:b4:7b:c8:cd:f8:21:
2d:b0:ca:a2:78:cb:66:f9:83:ba:aa:44:99:28:cb:
d0:e6:b6:b8:23:d9:3d:10:02:ed:40:b5:c1:4b:8e:
ca:71:a4:c1:96:51:c9:c0:86:d5:39:d9:e7:60:6c:
36:56:02:a8:b3:58:f7:f6:59:98:4d:38:c1:07:61:
87:b5:a1:d1:9b:87:eb:c7:d7:08:78:fa:9c:04:40:
8c:b8:b0:37:8a:9e:95:f7:37:e8:20:b5:0b:82:c8:
0d:48:62:a5:06:82:3e:59:0b:2c:98:12:5d:6a:2b:
a0:29:6a:69:46:3b:4b:54:d7:b5:b3:98:eb:88:61:
bc:2a:1c:91:7e:2d:34:a0:89:fa:91:c4:70:b7:2f:
d7:a6:9b:98:a6:7d:6d:4c:95:ac:29:6f:dd:b5:86:
20:da:04:e5:a1:73:e1:a0:19:15:85:a4:0c:0e:18:
f3:61:af:57:6a:40:2b:24:cf:69:ef:e7:1b:5f:2a:
1e:63:b1:5a:2c:56:ae:8f:d5:8c:19:b4:eb:db:72:
82:dc:d9:90:e1:53:ea:d7:f3:b8:9d:7c:e7:0f:59:
47:76:d0:53:8d:89:c7:f4:c2:39:4f:7c:1c:50:8c:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:59:B6:F8:CB:BF:A8:87:49:21:60:8A:10:94:E0:B6:30:EC:9D:EA
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/cVm2-Mu_qIdJIWCKEJTgtjDsneo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.174.0.0/16
Signature Algorithm: sha256WithRSAEncryption
be:fe:07:7a:28:b5:a9:e8:74:8b:91:bf:06:48:d7:34:19:41:
ec:9a:46:47:4b:69:98:83:0b:d0:8d:3f:4d:ff:e0:31:a9:c6:
e8:d8:7f:d4:1c:8c:a2:60:35:57:1d:8d:8d:87:3d:86:4a:3c:
f1:4c:6f:5b:f9:e9:85:2f:59:a2:d2:2c:73:cd:d8:aa:6a:c5:
26:8c:3d:88:be:9d:f4:6d:7d:a3:ee:6c:e0:c6:f2:07:aa:22:
cd:ca:5a:4f:27:6e:30:89:47:ce:a7:8e:79:0f:7d:79:f9:b6:
56:3f:5f:38:c3:d6:13:2e:68:20:ec:e4:8a:82:8e:27:3f:c8:
4f:c5:6c:e0:d7:94:d9:59:95:ea:33:82:3f:fe:0c:04:e0:94:
7d:2f:89:be:65:f1:63:df:b7:78:cd:2a:34:1e:83:3b:f3:ea:
4b:08:cf:9c:c3:e1:c9:6e:3c:02:f0:76:61:40:16:c8:cc:20:
cc:12:52:52:cf:87:59:e3:0d:46:20:90:75:ab:03:da:15:be:
50:ad:cd:ec:97:d4:ae:00:c8:b8:14:eb:e2:df:27:a5:5e:29:
b6:3f:6f:e6:6e:d4:f3:3f:ce:91:55:d8:b6:e0:c6:ef:bc:39:
68:4a:6d:0e:4b:2a:41:82:36:7d:dd:83:26:10:8e:c1:5e:e5:
79:db:75:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:53:32 2025 by rpki-client