This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/AQ7VzH2eIpIQFIqBLuCFMCLA48U.roa File: AQ7VzH2eIpIQFIqBLuCFMCLA48U.roa (raw, json) Hash identifier: 0bz2XKcdt83y9QgEmKTOBcLQZRHYrokborA6Gxrouto= Subject key identifier: 01:0E:D5:CC:7D:9E:22:92:10:14:8A:81:2E:E0:85:30:22:C0:E3:C5 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 26BD Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/AQ7VzH2eIpIQFIqBLuCFMCLA48U.roa Signing time: Sat 14 Jun 2025 14:19:24 +0000 ROA not before: Sat 14 Jun 2025 14:19:24 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 9917 (0x26bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 14 14:19:24 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=010ED5CC7D9E229210148A812EE0853022C0E3C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2f:4f:7a:9c:55:f7:50:88:93:d8:03:bd:33: 78:24:1b:91:db:f9:0b:cf:2b:cd:06:20:22:a2:3b: f2:63:ac:6c:b1:58:cc:3e:02:56:7d:2b:4c:91:4c: af:1b:89:f2:89:7e:72:e7:82:f2:59:fe:79:ff:ef: e6:e0:c5:95:5b:3c:17:9b:2b:2b:83:1b:ca:fc:9a: f6:3d:00:2a:f4:bd:05:ed:5b:f7:99:e2:00:c1:db: 77:61:6f:97:41:e1:80:d0:84:3c:aa:60:b2:f1:45: d2:6e:68:51:e2:26:bb:29:c5:b3:f8:00:55:23:55: e1:c3:bf:c4:42:bd:ca:65:a8:8c:e4:5b:0d:ce:ca: 25:0e:55:d2:2a:5a:ed:83:97:d8:c3:00:c7:e9:e8: b7:92:61:1f:29:91:90:34:d5:7f:f4:74:ec:bf:5a: 50:c7:2f:53:5d:38:0d:37:09:cc:84:df:4d:d6:69: ff:a1:e4:8f:51:6d:74:53:ae:80:e5:73:ae:a4:d9: 68:80:e1:c8:2e:76:4b:1b:43:9e:ad:e8:2b:b7:0e: 3e:a5:88:8f:bb:2d:64:1a:c7:3b:ab:43:fe:5f:1e: 6a:b5:47:e2:f5:a5:b3:2f:88:72:f3:c3:15:be:57: d4:7f:17:17:0c:cf:a6:ce:2a:be:2e:62:49:24:20: ca:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0E:D5:CC:7D:9E:22:92:10:14:8A:81:2E:E0:85:30:22:C0:E3:C5 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/AQ7VzH2eIpIQFIqBLuCFMCLA48U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption bf:15:cd:3c:41:f7:ad:7c:00:39:cf:45:08:bb:8f:b2:da:9f: 38:2c:8e:fb:be:2b:8d:8a:79:6a:b6:0a:a7:f5:eb:42:1a:df: 08:4c:cd:b2:59:ec:4c:86:d4:a8:41:81:2b:b4:e5:0f:6c:70: 0e:25:e0:d2:e3:74:29:39:d8:5c:1c:57:e8:37:b2:69:0d:3f: 64:22:f0:3b:95:17:98:c2:ae:d1:51:1e:5b:cd:d0:2c:79:03: e3:9d:6a:a8:91:4a:d8:68:e5:b5:7a:d5:eb:bf:84:f6:14:f3: b0:76:85:1a:ce:a0:aa:32:ce:05:06:27:96:0d:84:f1:a4:d1: 46:b8:ee:d7:f9:37:dd:d2:12:7a:f3:c1:49:de:7f:4f:6c:fd: 42:a1:89:56:b9:c7:39:45:e2:e6:ee:90:49:7a:17:bf:5a:a1: 16:7a:23:a4:19:75:75:00:7d:1c:8a:5f:43:fe:b3:c4:bd:e6: 3f:6a:1c:ef:c8:f7:df:34:8f:f4:3a:43:e0:82:ff:d4:10:71: 67:86:1e:fd:c3:37:c7:b4:97:7f:20:16:df:38:e1:7d:1e:29: e3:75:dc:50:2a:2d:a4:74:2f:5e:ed:29:c8:ab:65:e6:04:cd: 93:25:e1:72:9f:71:9b:fb:c9:bb:ca:58:33:98:71:a5:d4:f9: 32:35:be:d8 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICJr0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTQx NDE5MjRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDAxMEVENUNDN0Q5RTIy OTIxMDE0OEE4MTJFRTA4NTMwMjJDMEUzQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKL096nFX3UIiT2AO9M3gkG5Hb+QvPK80GICKiO/JjrGyxWMw+ AlZ9K0yRTK8bifKJfnLngvJZ/nn/7+bgxZVbPBebKyuDG8r8mvY9ACr0vQXtW/eZ 4gDB23dhb5dB4YDQhDyqYLLxRdJuaFHiJrspxbP4AFUjVeHDv8RCvcplqIzkWw3O yiUOVdIqWu2Dl9jDAMfp6LeSYR8pkZA01X/0dOy/WlDHL1NdOA03CcyE303Waf+h 5I9RbXRTroDlc66k2WiA4cgudksbQ56t6Cu3Dj6liI+7LWQaxzurQ/5fHmq1R+L1 pbMviHLzwxW+V9R/FxcMz6bOKr4uYkkkIMpXAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUAQ7VzH2eIpIQFIqBLuCFMCLA48UwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvQVE3VnpIMmVJcElR RklxQkx1Q0ZNQ0xBNDhVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAL8VzTxB9618ADnPRQi7j7Lanzgs jvu+K42KeWq2Cqf160Ia3whMzbJZ7EyG1KhBgSu05Q9scA4l4NLjdCk52FwcV+g3 smkNP2Qi8DuVF5jCrtFRHlvN0Cx5A+OdaqiRStho5bV61eu/hPYU87B2hRrOoKoy zgUGJ5YNhPGk0Ua47tf5N93SEnrzwUnef09s/UKhiVa5xzlF4ubukEl6F79aoRZ6 I6QZdXUAfRyKX0P+s8S95j9qHO/I9980j/Q6Q+CC/9QQcWeGHv3DN8e0l38gFt84 4X0eKeN13FAqLaR0L17tKcirZeYEzZMl4XKfcZv7ybvKWDOYcaXU+TI1vtg= -----END CERTIFICATE-----Generated at Mon Jan 12 07:55:40 2026 by rpki-client