This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/0h_EozcSoLBq11NZR76wQoG7byQ.roa File: 0h_EozcSoLBq11NZR76wQoG7byQ.roa (raw, json) Hash identifier: SQIw78fsdtaG86wDjbKyrZHbDkFy+xzBuq7z2MxU7P0= Subject key identifier: D2:1F:C4:A3:37:12:A0:B0:6A:D7:53:59:47:BE:B0:42:81:BB:6F:24 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 23F1 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0h_EozcSoLBq11NZR76wQoG7byQ.roa Signing time: Mon 09 Jun 2025 14:38:59 +0000 ROA not before: Mon 09 Jun 2025 14:38:59 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 9201 (0x23f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 9 14:38:59 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=D21FC4A33712A0B06AD7535947BEB04281BB6F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ae:75:b9:12:3f:5f:75:b2:af:18:c2:82:e7: d0:00:92:18:76:fa:71:d0:6d:17:8a:05:6a:c8:6a: ee:b0:24:63:ca:55:8e:b3:ba:94:56:49:03:15:3b: 17:7e:d3:c9:53:11:40:42:5b:c5:41:95:01:07:83: 4f:81:7b:e1:f3:d9:c0:22:20:48:93:6f:38:e0:09: 19:ec:be:6b:ae:61:ce:df:6f:ed:99:85:d1:95:a6: ef:1f:71:7b:f8:6f:31:ae:6a:b4:d1:f1:de:75:57: 55:1a:e6:ed:eb:6c:27:0e:87:71:e3:26:3e:e2:e1: d9:5c:ad:18:93:11:81:9b:2a:b7:48:f2:8e:a9:a7: 8f:ca:c3:87:97:1b:f2:0f:6d:20:1a:e8:78:dc:f4: e1:d5:9c:61:5a:3c:fb:09:6f:08:ba:d8:2c:4f:c3: 40:a2:b8:19:17:28:0e:70:51:8b:71:6d:2c:28:b3: 22:1d:98:f8:39:8d:5d:ce:27:bd:22:01:d4:70:c3: b0:ae:87:3a:9d:a1:ce:63:f0:d6:1d:b6:74:26:57: cd:5f:78:52:14:f5:3b:e2:78:b2:10:b6:3b:bd:14: e5:04:b9:1e:68:29:63:31:c4:c6:53:7d:da:23:bc: f0:eb:81:43:80:71:b9:9a:46:fa:4b:d4:79:7b:82: 20:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1F:C4:A3:37:12:A0:B0:6A:D7:53:59:47:BE:B0:42:81:BB:6F:24 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0h_EozcSoLBq11NZR76wQoG7byQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption b6:e7:24:fd:01:0a:56:c8:87:3c:f0:84:f1:ca:85:15:d1:1d: d4:51:c7:3a:b6:eb:2f:a3:c8:0b:24:71:22:9a:65:5b:d8:cd: 04:da:26:58:b2:61:09:7d:5d:db:bd:78:c9:65:7c:05:a5:06: e7:3a:d1:58:ee:67:fd:f7:a2:e0:5a:50:fa:6b:b1:87:51:6e: 38:c3:2e:b5:0d:54:db:b1:78:6d:52:b1:79:61:2c:bd:e4:7c: 28:dc:4e:97:f7:47:44:4d:32:82:35:1d:b6:be:62:07:1e:68: a3:04:af:99:06:62:46:d4:38:d5:af:c1:ab:ad:87:b7:76:fe: 55:d1:66:73:21:2d:e6:c9:89:47:1b:84:39:74:aa:37:eb:b5: 80:6d:22:af:71:96:83:7d:b5:67:f7:48:2c:10:db:8f:45:2f: 4e:98:cb:23:70:b8:f5:e9:cb:17:7f:35:ec:48:2a:44:ed:6f: 89:36:67:ac:81:76:6d:17:f6:82:21:fe:a6:20:a3:57:2f:01: 04:3b:a9:da:03:db:4f:62:a2:e5:de:4c:be:c0:49:93:81:58: 80:c5:2a:5c:5d:6a:ee:63:d0:e7:8a:25:ac:8e:9e:a3:68:ef: 7d:93:d3:ad:66:9a:aa:0a:a8:27:c4:fc:f8:5d:91:4b:e0:ba: 1d:03:8d:8e -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICI/EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDkx NDM4NTlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQyMUZDNEEzMzcxMkEw QjA2QUQ3NTM1OTQ3QkVCMDQyODFCQjZGMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDernW5Ej9fdbKvGMKC59AAkhh2+nHQbReKBWrIau6wJGPKVY6z upRWSQMVOxd+08lTEUBCW8VBlQEHg0+Be+Hz2cAiIEiTbzjgCRnsvmuuYc7fb+2Z hdGVpu8fcXv4bzGuarTR8d51V1Ua5u3rbCcOh3HjJj7i4dlcrRiTEYGbKrdI8o6p p4/Kw4eXG/IPbSAa6Hjc9OHVnGFaPPsJbwi62CxPw0CiuBkXKA5wUYtxbSwosyId mPg5jV3OJ70iAdRww7Cuhzqdoc5j8NYdtnQmV81feFIU9TvieLIQtju9FOUEuR5o KWMxxMZTfdojvPDrgUOAcbmaRvpL1Hl7giBhAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU0h/EozcSoLBq11NZR76wQoG7byQwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvMGhfRW96Y1NvTEJx MTFOWlI3NndRb0c3YnlRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBALbnJP0BClbIhzzwhPHKhRXRHdRR xzq26y+jyAskcSKaZVvYzQTaJliyYQl9Xdu9eMllfAWlBuc60VjuZ/33ouBaUPpr sYdRbjjDLrUNVNuxeG1SsXlhLL3kfCjcTpf3R0RNMoI1Hba+YgceaKMEr5kGYkbU ONWvwauth7d2/lXRZnMhLebJiUcbhDl0qjfrtYBtIq9xloN9tWf3SCwQ249FL06Y yyNwuPXpyxd/NexIKkTtb4k2Z6yBdm0X9oIh/qYgo1cvAQQ7qdoD209iouXeTL7A SZOBWIDFKlxdau5j0OeKJayOnqNo732T061mmqoKqCfE/PhdkUvguh0DjY4= -----END CERTIFICATE-----Generated at Mon Jan 12 17:21:33 2026 by rpki-client