This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/WRFrjbacqiO15YbGYhUQRvK-Bvc.roa
File: WRFrjbacqiO15YbGYhUQRvK-Bvc.roa (raw, json)
Hash identifier: xCE5XsOJwqDh68ggMas9L5fjsZVu/tljh7VC917CBZg=
Subject key identifier: 59:11:6B:8D:B6:9C:AA:23:B5:E5:86:C6:62:15:10:46:F2:BE:06:F7
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 21A5
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/WRFrjbacqiO15YbGYhUQRvK-Bvc.roa
Signing time: Thu 05 Jun 2025 12:38:47 +0000
ROA not before: Thu 05 Jun 2025 12:38:47 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8613 (0x21a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 5 12:38:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=59116B8DB69CAA23B5E586C662151046F2BE06F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ea:0c:9d:8b:a1:a0:06:9d:a4:fe:f0:55:a9:
7c:5b:e8:56:05:21:87:e8:2d:8d:1a:8a:1c:10:a8:
47:f2:98:24:09:d2:cf:0e:80:8b:ca:19:ad:5e:ed:
42:52:eb:59:d9:6e:ac:80:3b:92:a4:fe:bc:b8:5a:
63:b8:c2:4e:2d:d9:6a:ff:57:5a:13:78:25:b2:fb:
b2:2f:5d:d2:0f:4c:86:97:be:80:bf:ea:76:7f:74:
2b:fc:0b:45:74:ee:a3:f1:2c:11:4b:f1:74:e6:15:
4c:95:9d:eb:64:21:61:10:a0:c6:16:20:5f:90:d4:
7e:11:e7:e6:11:87:47:96:ce:84:d4:82:1b:60:40:
17:1d:66:62:6a:0d:23:53:68:eb:d9:07:7c:f3:1a:
5e:be:bd:3e:9d:ec:89:35:e4:96:66:42:dc:ce:c0:
af:6f:ea:6e:0c:43:a2:c0:c9:e3:be:f5:a9:13:db:
1a:5c:1e:5d:ad:19:7b:d2:c0:86:5e:65:21:3a:c8:
7a:d7:a6:66:89:b9:4e:c3:11:7d:b4:e9:1b:42:2c:
fe:9a:7e:35:41:5c:fb:1e:55:ab:71:70:31:92:73:
3f:12:6e:0f:d6:79:48:b9:03:aa:e6:c2:13:d3:a6:
a3:69:35:0a:33:4e:cd:bb:7c:5a:fc:62:03:37:0b:
2d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:11:6B:8D:B6:9C:AA:23:B5:E5:86:C6:62:15:10:46:F2:BE:06:F7
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/WRFrjbacqiO15YbGYhUQRvK-Bvc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
12:19:71:1b:6d:4e:91:b4:64:01:83:1a:21:b6:76:b3:95:f9:
30:f4:ca:1d:95:77:44:72:ba:84:24:fa:3d:41:c0:7e:5b:98:
c9:16:89:e6:b5:2e:ae:d5:65:af:6a:c1:bf:b8:5d:48:50:c4:
d8:5f:cd:8d:f6:a7:5b:ce:99:2a:f5:47:22:44:ab:b2:29:b8:
e9:a3:1d:91:dd:03:45:e7:f5:a9:b4:19:19:63:44:82:33:5c:
e9:99:1f:a7:ce:70:1d:e0:44:e7:23:9e:67:53:fe:ac:47:ba:
b1:c9:70:1d:73:62:5f:bf:76:ed:16:4c:7e:28:b2:76:cd:28:
5e:05:c7:d0:06:b7:f6:cc:e6:41:9f:95:01:cd:c9:11:17:29:
d9:d0:9b:77:ba:77:04:d6:d2:45:f9:ec:91:b5:18:f3:4a:0d:
67:f6:87:0e:01:ba:e2:d9:e2:50:6b:48:d7:84:88:a4:d6:b6:
02:b5:95:69:a0:e4:de:62:ef:97:69:f7:c7:60:66:d5:e1:8e:
dc:88:35:09:3c:fb:73:a6:1d:ec:5e:58:c3:4c:0b:9e:3f:15:
be:d9:8b:08:ef:3f:ff:a9:44:e4:22:c2:73:90:11:1a:13:42:
68:bd:7e:79:32:3f:8a:45:7b:ec:cd:1e:bd:11:0a:d9:18:8e:
4d:30:df:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 23:54:58 2026 by rpki-client