This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/EDJSwBYIMT1-v6PcP8wWSeyawRM.roa File: EDJSwBYIMT1-v6PcP8wWSeyawRM.roa (raw, json) Hash identifier: Kv3YBqTWIudElg1zyhqnQCnZiGqZ1ng+CLXXx6gUJWQ= Subject key identifier: 10:32:52:C0:16:08:31:3D:7E:BF:A3:DC:3F:CC:16:49:EC:9A:C1:13 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 234E Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/EDJSwBYIMT1-v6PcP8wWSeyawRM.roa Signing time: Sun 08 Jun 2025 11:38:55 +0000 ROA not before: Sun 08 Jun 2025 11:38:55 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 9038 (0x234e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 8 11:38:55 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=103252C01608313D7EBFA3DC3FCC1649EC9AC113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:32:4c:14:a9:73:3c:44:42:02:ca:31:81: 10:1c:da:24:72:4e:6b:77:f6:f3:7e:ea:4f:7d:28: af:63:65:c9:13:fd:77:f1:3d:7a:12:7d:bd:ee:78: af:18:0b:e6:69:c8:e4:a1:39:36:94:f1:cd:ba:ee: 5a:75:bc:d7:a6:e2:d3:b2:b5:49:d6:2f:b3:6a:20: 1c:7e:8d:57:59:69:ce:8d:83:c0:5a:50:93:26:c4: c1:18:fe:a6:41:16:fa:92:48:75:45:77:11:88:d9: ff:25:43:15:af:e5:3c:f9:5b:a9:2c:ca:c8:c9:8c: 08:d8:ce:e6:b4:18:3d:6a:75:08:ad:62:3b:7b:b2: dc:bf:d9:57:1c:3d:a9:c8:e1:6c:6f:cb:e0:57:68: b4:1d:21:d9:23:73:fd:4c:67:d2:71:39:40:ae:3c: 1d:ac:5c:17:12:2f:86:e7:25:46:08:19:35:9a:01: 36:53:56:76:67:55:50:cf:25:56:92:7d:cb:69:ef: f4:8a:67:4e:2a:32:40:4c:5c:22:bc:5c:2b:79:16: fe:48:d0:27:51:53:72:12:dd:55:87:cd:81:38:54: c9:87:ee:33:ae:37:40:30:ba:ad:b4:3e:42:bf:1f: b8:17:d6:6d:ae:c4:36:94:db:79:7e:9b:82:8c:21: 12:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:32:52:C0:16:08:31:3D:7E:BF:A3:DC:3F:CC:16:49:EC:9A:C1:13 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/EDJSwBYIMT1-v6PcP8wWSeyawRM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 70:1e:c3:fc:b0:0f:5e:75:34:3f:0b:cb:a5:f1:39:c7:c7:6d: 0d:5f:4e:7f:a8:24:36:45:be:e6:4d:38:f3:09:57:28:98:23: f5:f8:87:c5:12:19:e5:92:61:7b:56:e4:ab:ab:5a:55:43:77: e6:38:af:36:b6:67:89:bb:b5:9b:76:8b:2e:27:2a:8d:be:bc: 99:b4:79:3c:cf:c6:5a:fd:2c:5d:9b:49:5d:0e:28:86:a2:ab: 7c:3e:e3:ad:1c:a1:9b:0a:4f:79:31:81:e7:f3:af:45:59:ca: e1:ea:47:51:9d:37:cc:dd:ac:b9:17:9c:6d:d4:ee:d6:1f:ef: 7f:4f:d8:27:e6:49:41:d0:e5:7b:b6:ba:0e:a6:a1:20:e7:68: e0:bc:19:4e:11:0b:74:f7:96:70:a1:c5:69:50:42:f6:a1:92: 4c:15:ab:39:b0:80:ab:83:5e:39:97:3e:39:b6:8e:10:b8:e0: 12:50:d6:f3:fc:2c:d4:8e:27:64:fe:37:93:aa:b1:f0:38:26: 8a:48:85:fc:40:cd:bd:ef:80:fe:a2:15:97:15:90:96:44:f7: 13:39:74:ee:59:ab:d4:79:26:01:2c:c7:bc:2c:9d:0a:ef:ea: 01:05:cf:9b:6c:c3:26:bd:f4:6a:92:9d:79:7d:64:49:a3:ef: b2:f6:52:e0 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICI04wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDgx MTM4NTVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDEwMzI1MkMwMTYwODMx M0Q3RUJGQTNEQzNGQ0MxNjQ5RUM5QUMxMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyAzJMFKlzPERCAsoxgRAc2iRyTmt39vN+6k99KK9jZckT/Xfx PXoSfb3ueK8YC+ZpyOShOTaU8c267lp1vNem4tOytUnWL7NqIBx+jVdZac6Ng8Ba UJMmxMEY/qZBFvqSSHVFdxGI2f8lQxWv5Tz5W6ksysjJjAjYzua0GD1qdQitYjt7 sty/2VccPanI4Wxvy+BXaLQdIdkjc/1MZ9JxOUCuPB2sXBcSL4bnJUYIGTWaATZT VnZnVVDPJVaSfctp7/SKZ04qMkBMXCK8XCt5Fv5I0CdRU3IS3VWHzYE4VMmH7jOu N0Awuq20PkK/H7gX1m2uxDaU23l+m4KMIRITAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUEDJSwBYIMT1+v6PcP8wWSeyawRMwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvRURKU3dCWUlNVDEt djZQY1A4d1dTZXlhd1JNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAHAew/ywD151ND8Ly6XxOcfHbQ1f Tn+oJDZFvuZNOPMJVyiYI/X4h8USGeWSYXtW5KurWlVDd+Y4rza2Z4m7tZt2iy4n Ko2+vJm0eTzPxlr9LF2bSV0OKIaiq3w+460coZsKT3kxgefzr0VZyuHqR1GdN8zd rLkXnG3U7tYf739P2CfmSUHQ5Xu2ug6moSDnaOC8GU4RC3T3lnChxWlQQvahkkwV qzmwgKuDXjmXPjm2jhC44BJQ1vP8LNSOJ2T+N5OqsfA4JopIhfxAzb3vgP6iFZcV kJZE9xM5dO5Zq9R5JgEsx7wsnQrv6gEFz5tswya99GqSnXl9ZEmj77L2UuA= -----END CERTIFICATE-----Generated at Sun Jan 11 18:16:00 2026 by rpki-client