This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/Q31dDaWaXXVMHy-p8vYeGpD3BKk.roa File: Q31dDaWaXXVMHy-p8vYeGpD3BKk.roa (raw, json) Hash identifier: oTJKl/xTko1PaaFT+CXUt+kzRCB+795xPaGMZKEEjbI= Subject key identifier: 43:7D:5D:0D:A5:9A:5D:75:4C:1F:2F:A9:F2:F6:1E:1A:90:F7:04:A9 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 268B Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Q31dDaWaXXVMHy-p8vYeGpD3BKk.roa Signing time: Sat 14 Jun 2025 05:39:17 +0000 ROA not before: Sat 14 Jun 2025 05:39:17 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 9867 (0x268b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 14 05:39:17 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=437D5D0DA59A5D754C1F2FA9F2F61E1A90F704A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:8e:3f:e6:c2:28:75:cc:ee:2b:2d:e2:5f: 47:30:5c:79:a9:be:4a:76:68:02:1f:04:57:7f:d9: 89:35:27:73:5c:9d:0f:c9:91:75:9d:9c:d1:4d:ae: 6f:83:21:20:db:9c:b0:55:d7:8d:22:01:65:d1:ed: df:35:ee:a5:7f:46:bc:9a:02:8b:8a:c8:7f:c8:2f: 94:d4:69:21:6e:c5:75:e6:db:1e:53:dc:57:18:a7: 83:81:f3:7b:43:cf:f6:3e:83:78:dc:9d:a6:c9:dc: aa:fb:b8:fc:4c:e6:36:b9:4f:79:e7:5b:2d:51:d1: 12:96:3c:ce:ab:12:d1:60:28:7c:d1:ed:49:3c:88: 6c:29:73:4d:ac:4a:ec:f6:2f:60:e5:65:3a:1a:14: f7:fb:1f:47:85:2c:60:b5:88:2b:72:fd:33:10:d7: 1a:4d:3a:57:1c:20:c3:32:ab:a6:b8:28:84:dd:39: 2f:ac:bc:6d:78:85:1a:3f:ca:5c:04:12:a1:ce:ed: 32:05:46:5c:ea:39:37:e9:26:61:b2:f3:81:c4:04: f6:c6:24:19:3a:2d:44:2e:15:d7:e0:75:d5:f7:7a: 66:f9:54:d6:db:8d:63:c2:97:e7:9c:2b:c0:f7:17: e5:66:58:33:f3:05:5d:16:3b:ed:bf:23:8c:c4:28: 1b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7D:5D:0D:A5:9A:5D:75:4C:1F:2F:A9:F2:F6:1E:1A:90:F7:04:A9 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Q31dDaWaXXVMHy-p8vYeGpD3BKk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 7c:f4:b9:79:35:2f:09:6e:c2:29:ec:60:e9:ff:92:03:81:52: cc:3d:26:a8:e0:1d:b7:b5:04:1d:06:51:90:13:9c:63:a7:c5: 1e:64:04:ef:d5:20:80:7f:a8:75:22:ee:ef:b0:89:95:8e:8e: 3b:06:08:11:ed:0b:ab:6a:32:33:e6:fb:49:33:fc:aa:3e:d0: 3b:03:55:dd:0d:8d:12:d9:b6:f7:aa:2f:48:23:b2:4c:15:4f: ae:69:81:dc:8e:5c:c4:17:28:00:43:7b:a8:e1:f0:9d:91:60: a0:04:ab:d8:10:6e:fe:7c:ee:52:da:75:08:7c:eb:7c:29:f8: f7:48:2d:be:a2:59:e0:e1:85:ed:2e:da:10:3f:dc:b2:36:ba: c0:ad:81:8c:04:9a:32:81:8d:1b:4c:97:f2:be:54:23:24:cd: ea:99:11:3c:f1:60:21:7c:1c:a5:b0:e7:04:51:c9:db:02:7e: 0b:0a:ed:2b:8d:83:21:22:81:85:e3:ff:23:41:a8:b2:f3:f6: 1d:2a:be:76:51:dc:50:ed:13:28:f5:7d:ae:6d:32:ab:79:1b: 13:88:89:32:5f:aa:e9:d1:d3:de:de:3e:d0:5d:ec:85:1c:9e: f0:48:8e:8e:2c:cc:ec:36:a2:a8:e9:72:49:6d:be:27:84:5f: ba:60:7a:eb -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICJoswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTQw NTM5MTdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQzN0Q1RDBEQTU5QTVE NzU0QzFGMkZBOUYyRjYxRTFBOTBGNzA0QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzxY4/5sIodczuKy3iX0cwXHmpvkp2aAIfBFd/2Yk1J3NcnQ/J kXWdnNFNrm+DISDbnLBV140iAWXR7d817qV/RryaAouKyH/IL5TUaSFuxXXm2x5T 3FcYp4OB83tDz/Y+g3jcnabJ3Kr7uPxM5ja5T3nnWy1R0RKWPM6rEtFgKHzR7Uk8 iGwpc02sSuz2L2DlZToaFPf7H0eFLGC1iCty/TMQ1xpNOlccIMMyq6a4KITdOS+s vG14hRo/ylwEEqHO7TIFRlzqOTfpJmGy84HEBPbGJBk6LUQuFdfgddX3emb5VNbb jWPCl+ecK8D3F+VmWDPzBV0WO+2/I4zEKBuNAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUQ31dDaWaXXVMHy+p8vYeGpD3BKkwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvUTMxZERhV2FYWFZN SHktcDh2WWVHcEQzQktrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAHz0uXk1LwluwinsYOn/kgOBUsw9 JqjgHbe1BB0GUZATnGOnxR5kBO/VIIB/qHUi7u+wiZWOjjsGCBHtC6tqMjPm+0kz /Ko+0DsDVd0NjRLZtveqL0gjskwVT65pgdyOXMQXKABDe6jh8J2RYKAEq9gQbv58 7lLadQh863wp+PdILb6iWeDhhe0u2hA/3LI2usCtgYwEmjKBjRtMl/K+VCMkzeqZ ETzxYCF8HKWw5wRRydsCfgsK7SuNgyEigYXj/yNBqLLz9h0qvnZR3FDtEyj1fa5t Mqt5GxOIiTJfqunR097ePtBd7IUcnvBIjo4szOw2oqjpckltvieEX7pgeus= -----END CERTIFICATE-----Generated at Mon Jan 12 07:57:01 2026 by rpki-client