This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/KBnXEpOklKpOx4Cz5wHWXHpuRsM.roa File: KBnXEpOklKpOx4Cz5wHWXHpuRsM.roa (raw, json) Hash identifier: 3f00Kkk6mDl7fdmlrD5WsCuodip1nUCEJmut20AB//A= Subject key identifier: 28:19:D7:12:93:A4:94:AA:4E:C7:80:B3:E7:01:D6:5C:7A:6E:46:C3 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 1F0D Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/KBnXEpOklKpOx4Cz5wHWXHpuRsM.roa Signing time: Sat 31 May 2025 22:08:32 +0000 ROA not before: Sat 31 May 2025 22:08:32 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 7949 (0x1f0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: May 31 22:08:32 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=2819D71293A494AA4EC780B3E701D65C7A6E46C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:df:18:22:52:cc:ee:89:8f:a2:c1:8a:9c:c6: e0:98:57:12:b3:7f:9d:df:1c:f9:17:fb:a2:67:2d: b3:a2:2e:04:76:8a:41:b4:c4:65:b6:11:1d:52:d3: b2:72:0a:51:30:79:bb:76:30:4b:c2:25:89:f8:f5: 42:83:0f:b5:69:80:9f:de:6d:3d:fe:c4:f6:e3:f5: aa:05:78:48:60:8e:af:6a:d6:f3:2e:1b:9e:41:c8: 92:7c:3e:8f:bc:fb:ce:ab:23:0e:f9:97:3b:95:27: 5b:21:b8:2d:3a:12:e9:4a:e0:66:cf:ed:78:b5:e1: 59:4e:b5:7a:f1:87:30:ea:b0:bc:b0:22:09:6d:61: 81:ed:5b:10:ac:08:8f:b8:90:f4:48:b6:cc:ff:34: d9:f3:7a:e6:09:d9:d2:fa:62:eb:92:fb:c8:ee:0c: d8:af:c6:27:a8:56:ce:ad:39:80:c6:60:72:1c:37: 79:f1:59:8c:bb:76:13:44:48:55:c0:15:ed:7e:83: f5:50:8f:89:cb:d7:7f:79:cd:1d:db:f5:51:22:a4: 3a:00:a4:10:00:53:38:39:47:96:90:1c:83:41:4c: c2:cf:3d:32:4e:41:d2:d0:50:c3:8a:a5:ab:45:eb: b1:08:57:4a:a1:49:71:ce:94:87:e5:a1:01:22:5b: 6f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:19:D7:12:93:A4:94:AA:4E:C7:80:B3:E7:01:D6:5C:7A:6E:46:C3 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/KBnXEpOklKpOx4Cz5wHWXHpuRsM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 4c:94:21:8b:0d:fc:f5:5a:0b:a9:6f:d0:2d:69:b8:41:a2:5c: ef:26:44:c0:a7:f9:29:ec:84:4d:97:ff:bc:ab:29:cc:96:79: dc:13:fb:be:69:89:eb:23:64:62:4e:c2:7c:d3:d0:47:12:b2: 78:85:45:f6:c5:59:e6:96:af:4f:6a:32:8b:62:66:43:3d:50: 50:67:08:17:e5:3c:00:ee:a0:29:34:82:b6:73:49:aa:52:82: 3d:58:4a:74:6a:65:f0:60:c1:f6:fa:33:19:87:ce:91:6b:26: 4d:1f:42:b7:6d:03:8a:f8:ed:e3:bc:c5:59:c1:e2:46:67:6d: 72:af:28:7e:b1:99:c4:fd:4f:59:e7:53:58:45:d4:24:4a:f3: ac:e3:f1:32:68:a3:56:c4:3c:de:a6:e1:ea:d8:79:6c:81:6c: cf:26:3a:54:eb:7e:f8:a2:35:81:6d:92:61:cf:ac:77:33:96: e9:c9:26:94:69:14:bc:b0:40:43:9c:25:c2:79:b0:3e:05:66: 77:41:e5:dd:19:a8:31:ca:eb:15:3a:ac:03:4a:41:2c:1d:db: af:d0:8b:e3:e8:82:95:ac:1a:31:24:36:7c:94:2a:34:54:3c: be:4b:41:25:c4:26:04:57:87:6b:7c:c1:4d:a9:ce:08:b6:7f: e2:3c:d8:1d -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICHw0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA1MzEy MjA4MzJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDI4MTlENzEyOTNBNDk0 QUE0RUM3ODBCM0U3MDFENjVDN0E2RTQ2QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC43xgiUszuiY+iwYqcxuCYVxKzf53fHPkX+6JnLbOiLgR2ikG0 xGW2ER1S07JyClEwebt2MEvCJYn49UKDD7VpgJ/ebT3+xPbj9aoFeEhgjq9q1vMu G55ByJJ8Po+8+86rIw75lzuVJ1shuC06EulK4GbP7Xi14VlOtXrxhzDqsLywIglt YYHtWxCsCI+4kPRItsz/NNnzeuYJ2dL6YuuS+8juDNivxieoVs6tOYDGYHIcN3nx WYy7dhNESFXAFe1+g/VQj4nL1395zR3b9VEipDoApBAAUzg5R5aQHINBTMLPPTJO QdLQUMOKpatF67EIV0qhSXHOlIfloQEiW293AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUKBnXEpOklKpOx4Cz5wHWXHpuRsMwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvS0JuWEVwT2tsS3BP eDRDejV3SFdYSHB1UnNNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAEyUIYsN/PVaC6lv0C1puEGiXO8m RMCn+SnshE2X/7yrKcyWedwT+75piesjZGJOwnzT0EcSsniFRfbFWeaWr09qMoti ZkM9UFBnCBflPADuoCk0grZzSapSgj1YSnRqZfBgwfb6MxmHzpFrJk0fQrdtA4r4 7eO8xVnB4kZnbXKvKH6xmcT9T1nnU1hF1CRK86zj8TJoo1bEPN6m4erYeWyBbM8m OlTrfviiNYFtkmHPrHczlunJJpRpFLywQEOcJcJ5sD4FZndB5d0ZqDHK6xU6rANK QSwd26/Qi+PogpWsGjEkNnyUKjRUPL5LQSXEJgRXh2t8wU2pzgi2f+I82B0= -----END CERTIFICATE-----Generated at Mon Jan 12 08:08:36 2026 by rpki-client