This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/XRo2tibqB3nn-UB1sIM75MNbXPk.roa File: XRo2tibqB3nn-UB1sIM75MNbXPk.roa (raw, json) Hash identifier: IWZkwGEF957UECod7r3E4R41Du+a+1388Ip9+fDbMgg= Subject key identifier: 5D:1A:36:B6:26:EA:07:79:E7:F9:40:75:B0:83:3B:E4:C3:5B:5C:F9 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 1EF9 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/XRo2tibqB3nn-UB1sIM75MNbXPk.roa Signing time: Sat 31 May 2025 18:38:31 +0000 ROA not before: Sat 31 May 2025 18:38:31 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 7929 (0x1ef9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: May 31 18:38:31 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=5D1A36B626EA0779E7F94075B0833BE4C35B5CF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:88:4f:ec:66:f2:47:bb:d7:a3:4b:29:6f:03: 19:fe:a1:da:06:22:c0:34:fc:ba:9e:d9:6a:af:fa: 9f:95:6f:36:04:de:e3:72:1c:14:33:58:03:2e:49: 68:1d:5c:a3:a6:47:21:0a:51:f1:7f:c7:a2:18:8a: 69:18:70:6c:de:77:38:95:ef:f4:ea:e6:fd:28:e0: 92:b1:3c:2d:ee:db:f4:fa:00:79:ef:39:61:81:ed: ce:12:09:15:ed:82:f4:be:38:9f:64:92:61:f6:b3: be:1e:1b:e3:88:a7:79:c0:a4:cf:f6:43:92:f7:71: 8b:47:82:42:0b:e2:4f:6b:13:8c:5d:82:58:52:28: 24:3e:17:6c:e5:f2:dd:75:f2:d8:af:ab:ac:19:73: 9b:29:9a:a6:d0:b4:d4:7e:6b:4b:21:7f:08:d9:72: 58:93:77:8a:ef:a0:b7:aa:7e:92:75:ba:ec:27:88: db:84:17:1e:05:a3:aa:68:83:53:50:f7:b9:98:7f: 3f:dd:40:3e:5f:7c:6e:98:a8:93:30:0a:fa:e5:f1: b1:2d:04:f4:74:23:1e:4e:ff:b6:97:fe:04:db:6d: bf:a2:4d:1a:ee:53:ee:ff:94:47:42:11:1a:a2:8b: 49:c3:dc:ad:af:7d:a4:d0:ce:07:a5:0d:59:b0:d4: 5b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1A:36:B6:26:EA:07:79:E7:F9:40:75:B0:83:3B:E4:C3:5B:5C:F9 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/XRo2tibqB3nn-UB1sIM75MNbXPk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 27:42:07:e3:e6:33:4e:3e:85:63:db:ec:c4:af:52:c7:21:9a: 54:56:69:4c:ad:40:4b:ae:23:58:7c:08:f1:00:b2:0a:84:a0: 60:65:bb:14:b7:67:c8:83:35:8f:8a:62:b1:b5:a8:a9:eb:23: 66:13:2a:45:31:07:96:9e:e3:a2:c0:82:75:11:aa:c8:9c:1f: 18:77:88:f7:fa:44:d5:4b:90:07:69:f7:81:27:b4:f8:7f:77: 74:b8:72:ac:73:4a:16:a7:a1:a9:67:60:9c:9f:f2:fe:2f:cd: f0:a6:ee:1d:f8:ec:c3:3f:a7:16:8b:1c:05:93:0d:40:92:01: 9e:27:c0:6d:94:86:35:26:3e:33:9e:3a:5f:77:b5:25:95:c8: 69:4c:aa:ca:bb:46:57:19:c2:9f:b5:aa:3e:e4:22:a5:c1:89: ff:2e:5e:1f:17:f4:be:f9:ec:26:e1:1a:69:db:db:c9:27:65: bc:40:07:3f:24:6b:f2:8b:52:62:ef:9a:3c:14:35:e2:82:a2: 9c:a7:8b:51:97:d4:66:6e:a6:6a:a4:32:03:0a:e0:cf:44:18: ad:69:36:22:e1:5e:6a:a1:4f:1d:54:90:3c:24:de:57:81:b5: 4a:be:b6:9a:fe:6d:5e:80:3b:b3:45:37:71:32:28:44:91:f6: c4:a0:06:36 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICHvkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA1MzEx ODM4MzFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDVEMUEzNkI2MjZFQTA3 NzlFN0Y5NDA3NUIwODMzQkU0QzM1QjVDRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkiE/sZvJHu9ejSylvAxn+odoGIsA0/Lqe2Wqv+p+VbzYE3uNy HBQzWAMuSWgdXKOmRyEKUfF/x6IYimkYcGzedziV7/Tq5v0o4JKxPC3u2/T6AHnv OWGB7c4SCRXtgvS+OJ9kkmH2s74eG+OIp3nApM/2Q5L3cYtHgkIL4k9rE4xdglhS KCQ+F2zl8t118tivq6wZc5spmqbQtNR+a0shfwjZcliTd4rvoLeqfpJ1uuwniNuE Fx4Fo6pog1NQ97mYfz/dQD5ffG6YqJMwCvrl8bEtBPR0Ix5O/7aX/gTbbb+iTRru U+7/lEdCERqii0nD3K2vfaTQzgelDVmw1FszAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUXRo2tibqB3nn+UB1sIM75MNbXPkwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvWFJvMnRpYnFCM25u LVVCMXNJTTc1TU5iWFBrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBACdCB+PmM04+hWPb7MSvUschmlRW aUytQEuuI1h8CPEAsgqEoGBluxS3Z8iDNY+KYrG1qKnrI2YTKkUxB5ae46LAgnUR qsicHxh3iPf6RNVLkAdp94EntPh/d3S4cqxzShanoalnYJyf8v4vzfCm7h347MM/ pxaLHAWTDUCSAZ4nwG2UhjUmPjOeOl93tSWVyGlMqsq7RlcZwp+1qj7kIqXBif8u Xh8X9L757CbhGmnb28knZbxABz8ka/KLUmLvmjwUNeKCopyni1GX1GZupmqkMgMK 4M9EGK1pNiLhXmqhTx1UkDwk3leBtUq+tpr+bV6AO7NFN3EyKESR9sSgBjY= -----END CERTIFICATE-----Generated at Mon Jan 12 08:18:07 2026 by rpki-client