This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/E4DXYbPvi-2GPkLJfJaFdN_-Vsg.roa File: E4DXYbPvi-2GPkLJfJaFdN_-Vsg.roa (raw, json) Hash identifier: JpT7ccdX6TChQG6nrES3gsdnhaGow0Rdg9szpw3wAgo= Subject key identifier: 13:80:D7:61:B3:EF:8B:ED:86:3E:42:C9:7C:96:85:74:DF:FE:56:C8 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 2417 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/E4DXYbPvi-2GPkLJfJaFdN_-Vsg.roa Signing time: Mon 09 Jun 2025 21:09:05 +0000 ROA not before: Mon 09 Jun 2025 21:09:05 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 9239 (0x2417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 9 21:09:05 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1380D761B3EF8BED863E42C97C968574DFFE56C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:4b:7a:ca:45:31:eb:89:80:0d:01:e5:11: 22:92:26:b1:5d:ef:c3:d4:8a:3b:77:a1:a9:4d:ff: 90:af:6d:0a:b1:d5:cf:ea:0d:28:92:4f:99:97:16: 2d:0e:db:e1:e7:c2:ed:eb:8d:30:6f:bf:11:55:4c: 94:d9:db:fe:4c:eb:03:fc:2e:e7:f8:71:96:e3:2d: 5c:71:9d:ba:1d:0b:2a:67:66:47:30:ac:d3:01:c2: f0:bd:c5:52:54:46:9c:15:eb:bb:5f:6a:83:72:79: fc:48:a5:cc:91:41:f8:f0:f7:80:76:84:9e:50:80: ea:3c:d7:b2:19:c0:60:bb:29:81:04:79:42:19:f7: 06:73:54:0a:83:e2:9a:9f:16:f6:ef:98:d1:d7:23: 89:a1:bc:3b:d2:76:61:c9:5c:30:49:9e:a7:ce:e4: 90:f7:28:b2:8f:1e:fc:e4:21:1b:45:87:23:5e:a4: ce:2d:b6:96:8b:43:fc:6d:fd:21:f7:b0:85:84:41: f4:0c:ef:6c:8b:2e:f1:dd:c7:48:4c:63:86:45:ba: 7e:17:ef:d1:d9:65:7b:49:68:fc:2f:fc:78:b4:9f: 55:1c:d8:9e:e9:5a:98:43:8a:e0:7c:d4:5a:54:aa: 32:e4:05:60:2b:a1:4f:09:74:01:32:0b:e0:9c:6c: e0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:80:D7:61:B3:EF:8B:ED:86:3E:42:C9:7C:96:85:74:DF:FE:56:C8 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/E4DXYbPvi-2GPkLJfJaFdN_-Vsg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 0a:92:e7:09:45:cc:4e:b6:e3:d2:47:43:83:0a:4a:35:bf:0d: 87:cb:0a:76:6c:30:81:a2:d9:46:c8:8c:a7:ad:b0:91:5f:f5: 2d:f3:aa:21:50:7e:e1:3a:ef:ed:20:80:12:85:80:f5:c0:d2: 22:49:e0:6e:e9:07:23:ca:2b:ad:10:33:e9:c1:80:8f:8c:e9: f8:53:70:7e:e5:32:57:8a:7b:3d:f1:11:c6:5c:86:6b:e9:90: 08:d1:75:a9:dd:8f:ed:f1:9e:99:81:55:b5:cc:00:71:26:70: 2f:c9:6d:4a:55:6b:db:14:2f:4f:ad:c9:74:9c:67:0e:30:49: 0b:be:c4:f2:a0:9d:9e:20:c5:d6:2b:c8:12:d3:06:cd:b0:92: ec:02:9e:ed:97:8f:d4:93:7f:6d:4c:48:51:62:32:c6:61:33: 02:42:dc:a6:2d:a7:35:35:7f:5e:81:e8:32:0f:af:09:6c:70: d1:3b:3c:c0:14:17:b5:d6:54:1a:c9:ac:c3:2f:f4:6a:d5:df: 6c:b7:1f:d3:55:72:cd:85:68:63:dc:17:22:d3:86:2a:13:2b: 8a:c1:8f:72:0a:94:ac:da:d1:1b:27:8a:0c:20:37:6b:3e:03: 5e:2d:e8:65:09:ad:ca:17:0d:b0:67:47:fe:ca:3e:dd:a8:2c: 96:fd:2e:47 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICJBcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDky MTA5MDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDEzODBENzYxQjNFRjhC RUQ4NjNFNDJDOTdDOTY4NTc0REZGRTU2QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqakt6ykUx64mADQHlESKSJrFd78PUijt3oalN/5CvbQqx1c/q DSiST5mXFi0O2+Hnwu3rjTBvvxFVTJTZ2/5M6wP8Luf4cZbjLVxxnbodCypnZkcw rNMBwvC9xVJURpwV67tfaoNyefxIpcyRQfjw94B2hJ5QgOo817IZwGC7KYEEeUIZ 9wZzVAqD4pqfFvbvmNHXI4mhvDvSdmHJXDBJnqfO5JD3KLKPHvzkIRtFhyNepM4t tpaLQ/xt/SH3sIWEQfQM72yLLvHdx0hMY4ZFun4X79HZZXtJaPwv/Hi0n1Uc2J7p WphDiuB81FpUqjLkBWAroU8JdAEyC+CcbOBxAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUE4DXYbPvi+2GPkLJfJaFdN/+VsgwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvRTREWFliUHZpLTJH UGtMSmZKYUZkTl8tVnNnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAAqS5wlFzE6249JHQ4MKSjW/DYfL CnZsMIGi2UbIjKetsJFf9S3zqiFQfuE67+0ggBKFgPXA0iJJ4G7pByPKK60QM+nB gI+M6fhTcH7lMleKez3xEcZchmvpkAjRdandj+3xnpmBVbXMAHEmcC/JbUpVa9sU L0+tyXScZw4wSQu+xPKgnZ4gxdYryBLTBs2wkuwCnu2Xj9STf21MSFFiMsZhMwJC 3KYtpzU1f16B6DIPrwlscNE7PMAUF7XWVBrJrMMv9GrV32y3H9NVcs2FaGPcFyLT hioTK4rBj3IKlKza0RsnigwgN2s+A14t6GUJrcoXDbBnR/7KPt2oLJb9Lkc= -----END CERTIFICATE-----Generated at Thu Jan 1 18:01:05 2026 by rpki-client