This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/4LGxHIZUPLzfokCSoVz4EvMHAJ0.roa File: 4LGxHIZUPLzfokCSoVz4EvMHAJ0.roa (raw, json) Hash identifier: TFm1k5ltSwVj2gPAzRAkaXFo/OfsRavwtnxKZjAguSc= Subject key identifier: E0:B1:B1:1C:86:54:3C:BC:DF:A2:40:92:A1:5C:F8:12:F3:07:00:9D Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 21ED Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/4LGxHIZUPLzfokCSoVz4EvMHAJ0.roa Signing time: Fri 06 Jun 2025 00:38:47 +0000 ROA not before: Fri 06 Jun 2025 00:38:47 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 8685 (0x21ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 6 00:38:47 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=E0B1B11C86543CBCDFA24092A15CF812F307009D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5c:41:63:00:e7:77:5e:a8:b3:21:72:29:2d: f5:4a:b2:4a:f0:98:e0:0c:9b:bb:a8:a4:d7:e0:6a: bf:85:e3:e8:03:7e:3f:6e:b9:e3:f1:4e:4c:fe:c4: 2b:ab:1c:2d:64:6d:93:22:6f:b0:55:d4:ec:95:bd: 7b:13:fc:0e:30:3d:21:82:6d:22:ab:bb:51:f9:5d: 21:c4:a7:6a:57:5b:ac:8a:da:ad:47:ba:2c:ad:cd: b8:61:5f:61:bd:30:da:04:6f:6f:b0:94:1d:00:d7: 58:8a:99:ce:78:dc:2e:43:84:a9:4d:a1:ce:8b:b4: 32:71:4f:96:ed:f8:c2:0b:56:69:f1:34:bf:75:e1: b9:03:cf:4b:f4:34:b3:09:0b:a9:94:fd:ee:ae:55: 5d:a1:b3:b5:cb:04:5a:33:c6:d0:3a:54:70:de:95: 0c:32:12:da:2e:f7:f2:5a:9b:84:5e:cf:12:b4:c5: 53:49:81:4f:51:be:15:36:f5:96:2d:96:4b:b9:5a: d0:6d:21:4f:8b:54:4b:31:26:23:76:d2:4f:ec:df: 3c:fa:87:7b:64:91:bc:33:2f:4c:aa:23:7e:76:ff: 75:33:9b:94:53:8b:da:f5:6b:a4:55:6d:5f:7e:8a: fd:86:0b:4d:07:d2:eb:5f:34:c7:4e:be:6c:ba:5b: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B1:B1:1C:86:54:3C:BC:DF:A2:40:92:A1:5C:F8:12:F3:07:00:9D X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/4LGxHIZUPLzfokCSoVz4EvMHAJ0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption a3:60:e6:7e:95:e8:d9:bb:f0:c9:94:1b:bd:83:95:11:a0:a7: 49:7f:8c:bf:62:e9:16:ba:24:c8:ce:9c:21:a7:8f:ad:54:4e: 43:07:e9:3a:07:cb:ba:81:31:05:e8:5a:15:cc:48:09:d1:b1: e9:90:78:c6:70:e6:0b:f3:34:12:97:35:13:2f:68:ba:a8:d1: bf:75:9b:89:9e:f4:69:1f:a7:b3:68:7a:30:8c:14:6d:47:c1: 1a:bd:62:b7:c4:17:8a:c2:ef:70:1d:a1:6a:fd:17:4b:7c:f1: de:e9:a2:a3:d0:b8:7c:ce:4e:49:ef:5d:2f:f8:a1:7f:30:85: 7a:a5:23:fb:a7:1d:99:5b:d3:82:92:31:7d:d9:04:72:36:be: 9b:43:c3:fd:1d:a2:94:4e:ed:33:d8:69:b2:a7:ab:db:11:72: 11:ad:8a:ce:2c:a7:e4:b2:a1:f8:05:d6:97:a9:70:f0:ef:2e: 2a:3a:c2:46:b6:f2:c7:3b:bc:f5:41:4d:62:c7:a5:80:e5:37: 56:6d:ac:00:f0:c8:4e:8d:33:54:2d:9c:47:8c:94:40:60:8f: 67:01:09:da:a6:89:46:e3:0b:9d:1e:f4:0f:e0:98:db:cf:35: c6:4c:0c:c4:5a:2e:df:35:4a:f9:1b:c3:7b:86:f8:ac:18:e9: 2a:c8:ef:8a -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICIe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDYw MDM4NDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEUwQjFCMTFDODY1NDND QkNERkEyNDA5MkExNUNGODEyRjMwNzAwOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6XEFjAOd3XqizIXIpLfVKskrwmOAMm7uopNfgar+F4+gDfj9u uePxTkz+xCurHC1kbZMib7BV1OyVvXsT/A4wPSGCbSKru1H5XSHEp2pXW6yK2q1H uiytzbhhX2G9MNoEb2+wlB0A11iKmc543C5DhKlNoc6LtDJxT5bt+MILVmnxNL91 4bkDz0v0NLMJC6mU/e6uVV2hs7XLBFozxtA6VHDelQwyEtou9/Jam4RezxK0xVNJ gU9RvhU29ZYtlku5WtBtIU+LVEsxJiN20k/s3zz6h3tkkbwzL0yqI352/3Uzm5RT i9r1a6RVbV9+iv2GC00H0utfNMdOvmy6W+4HAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU4LGxHIZUPLzfokCSoVz4EvMHAJ0wHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvNExHeEhJWlVQTHpm b2tDU29WejRFdk1IQUowLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAKNg5n6V6Nm78MmUG72DlRGgp0l/ jL9i6Ra6JMjOnCGnj61UTkMH6ToHy7qBMQXoWhXMSAnRsemQeMZw5gvzNBKXNRMv aLqo0b91m4me9Gkfp7NoejCMFG1HwRq9YrfEF4rC73AdoWr9F0t88d7poqPQuHzO TknvXS/4oX8whXqlI/unHZlb04KSMX3ZBHI2vptDw/0dopRO7TPYabKnq9sRchGt is4sp+SyofgF1pepcPDvLio6wka28sc7vPVBTWLHpYDlN1ZtrADwyE6NM1QtnEeM lEBgj2cBCdqmiUbjC50e9A/gmNvPNcZMDMRaLt81Svkbw3uG+KwY6SrI74o= -----END CERTIFICATE-----Generated at Mon Jan 12 07:33:47 2026 by rpki-client