This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/LI39B8p0a3ilf-k3RzQw2qG_Cn0.roa File: LI39B8p0a3ilf-k3RzQw2qG_Cn0.roa (raw, json) Hash identifier: wVxMAZv+/gImKMyuS2lTXW3w0Taw1NLT+tFXZWMAgHw= Subject key identifier: 2C:8D:FD:07:CA:74:6B:78:A5:7F:E9:37:47:34:30:DA:A1:BF:0A:7D Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 1C14 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/LI39B8p0a3ilf-k3RzQw2qG_Cn0.roa Signing time: Mon 26 May 2025 15:08:06 +0000 ROA not before: Mon 26 May 2025 15:08:06 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 7188 (0x1c14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: May 26 15:08:06 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=2C8DFD07CA746B78A57FE937473430DAA1BF0A7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:76:be:c3:dc:de:c5:1e:d8:b3:15:1f:f2:c9: cf:56:99:f0:12:ad:87:da:2a:bb:3a:4a:5a:e3:c5: f3:53:c3:69:ad:a2:ec:14:a1:4f:6d:9c:c2:17:e9: 33:7a:69:0b:61:a5:c0:09:20:9a:00:23:4f:9d:29: 8c:0b:22:2c:47:34:d2:36:db:e5:ef:b8:30:e5:02: 0e:bd:dc:bc:a3:9f:99:f3:ba:2d:23:07:1c:93:c3: b1:65:f9:b4:b0:72:b5:97:68:58:61:7e:d8:32:14: 65:9a:d2:32:ea:9a:79:7c:11:6a:e1:09:e0:55:39: 61:38:9f:50:5e:7d:1c:7e:44:95:9d:d4:af:5c:b5: 8d:1d:dc:01:4a:5b:d7:6c:bc:3d:63:7c:d9:3b:ac: 05:cd:15:56:25:a1:8d:2d:c5:c0:8a:36:2e:76:04: 35:7f:c7:3c:d6:c7:e4:f0:dd:3d:ea:de:73:47:19: 74:99:a4:19:25:b5:30:bb:ab:00:b8:b2:b3:8c:a2: 50:1a:57:53:6d:93:10:95:b1:05:45:97:27:6c:a0: fc:a9:c2:4c:63:7e:f2:f4:09:50:6f:7d:1a:6f:76: 0d:65:e0:b9:0d:84:94:bb:45:99:d0:00:eb:d3:4c: 8a:68:75:7f:ca:34:2d:dd:f7:fd:09:89:31:e8:8e: 4d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8D:FD:07:CA:74:6B:78:A5:7F:E9:37:47:34:30:DA:A1:BF:0A:7D X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/LI39B8p0a3ilf-k3RzQw2qG_Cn0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption c3:c8:e1:b4:3f:68:df:98:f6:dd:14:0e:8e:4a:8a:ca:be:88: f0:7c:fd:9b:dd:dd:ff:be:75:93:64:9d:f2:6e:ea:e3:b2:c9: f7:36:4a:44:09:37:bf:98:ea:8b:a2:ee:1b:25:d2:17:8f:71: 70:29:fd:8a:f4:fa:a4:50:30:65:20:bc:f2:2d:1b:ea:04:bf: 60:b6:56:89:2f:1b:61:7a:3e:3a:c0:ac:68:83:22:ab:e1:dd: c5:c7:d7:62:3d:6b:24:d5:5e:82:04:ec:d4:9e:1e:4c:7f:5d: da:35:d0:69:50:b4:03:f3:77:79:cd:4e:b3:0a:f8:ba:9c:65: 02:6b:99:af:aa:8d:2e:72:e3:2e:24:dd:23:ca:90:9d:71:4f: 9d:92:b6:d2:05:a2:48:e7:33:90:ed:85:69:20:79:10:cb:00: 7f:d7:e5:37:18:cd:d6:27:78:66:b2:c6:bf:88:42:7e:07:b2: 71:f1:18:bc:0e:f6:07:4c:cb:40:eb:3d:61:ec:46:24:e0:b6: 6b:39:de:c8:07:ef:2e:4f:9c:97:a1:db:9f:b7:ac:31:e1:11: 96:09:04:aa:96:45:6e:76:7d:10:c0:61:b6:a4:25:71:42:9e: 0e:1d:3e:e4:4b:31:0d:5e:5b:a1:90:39:58:12:07:84:48:47: c6:30:11:ed -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICHBQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA1MjYx NTA4MDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDJDOERGRDA3Q0E3NDZC NzhBNTdGRTkzNzQ3MzQzMERBQTFCRjBBN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNdr7D3N7FHtizFR/yyc9WmfASrYfaKrs6SlrjxfNTw2mtouwU oU9tnMIX6TN6aQthpcAJIJoAI0+dKYwLIixHNNI22+XvuDDlAg693Lyjn5nzui0j BxyTw7Fl+bSwcrWXaFhhftgyFGWa0jLqmnl8EWrhCeBVOWE4n1BefRx+RJWd1K9c tY0d3AFKW9dsvD1jfNk7rAXNFVYloY0txcCKNi52BDV/xzzWx+Tw3T3q3nNHGXSZ pBkltTC7qwC4srOMolAaV1NtkxCVsQVFlydsoPypwkxjfvL0CVBvfRpvdg1l4LkN hJS7RZnQAOvTTIpodX/KNC3d9/0JiTHojk0bAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQULI39B8p0a3ilf+k3RzQw2qG/Cn0wHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvTEkzOUI4cDBhM2ls Zi1rM1J6UXcycUdfQ24wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAMPI4bQ/aN+Y9t0UDo5Kisq+iPB8 /Zvd3f++dZNknfJu6uOyyfc2SkQJN7+Y6oui7hsl0hePcXAp/Yr0+qRQMGUgvPIt G+oEv2C2VokvG2F6PjrArGiDIqvh3cXH12I9ayTVXoIE7NSeHkx/Xdo10GlQtAPz d3nNTrMK+LqcZQJrma+qjS5y4y4k3SPKkJ1xT52SttIFokjnM5DthWkgeRDLAH/X 5TcYzdYneGayxr+IQn4HsnHxGLwO9gdMy0DrPWHsRiTgtms53sgH7y5PnJeh25+3 rDHhEZYJBKqWRW52fRDAYbakJXFCng4dPuRLMQ1eW6GQOVgSB4RIR8YwEe0= -----END CERTIFICATE-----Generated at Thu Jan 8 23:51:35 2026 by rpki-client