This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/iAcnNRFNXQryFFYmzyZhHzNngqU.roa File: iAcnNRFNXQryFFYmzyZhHzNngqU.roa (raw, json) Hash identifier: pNQ9PxsOF1VQM5j+WyCoUxsbNnyOQjBzf1zpBIWPxXQ= Subject key identifier: 88:07:27:35:11:4D:5D:0A:F2:14:56:26:CF:26:61:1F:33:67:82:A5 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 1FEE Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/iAcnNRFNXQryFFYmzyZhHzNngqU.roa Signing time: Mon 02 Jun 2025 11:38:36 +0000 ROA not before: Mon 02 Jun 2025 11:38:36 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 8174 (0x1fee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 2 11:38:36 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=88072735114D5D0AF2145626CF26611F336782A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:34:98:1b:be:19:4e:02:72:bb:71:d6:80: 9e:8c:91:7d:10:03:82:c1:39:f0:7d:ee:52:5e:71: 2c:97:ba:b9:28:e8:2d:86:a3:9f:86:6f:85:a9:15: 03:dd:59:8f:cb:d6:aa:9b:71:d5:b4:5c:dd:76:b7: 2f:73:34:7a:21:bb:72:23:27:c9:d2:b6:30:bc:5c: 5d:ff:f3:c5:83:29:40:77:32:d4:8d:aa:5f:24:2f: 34:c0:ea:e7:b3:ab:15:74:61:b9:3f:07:26:d2:fe: e2:42:d5:60:5e:1c:91:bf:01:36:f4:58:fe:6d:cc: 72:94:d2:28:32:a0:b5:88:62:1b:8e:ef:29:0e:57: 5d:3a:71:c2:14:34:54:71:b3:be:2b:0e:c4:e2:78: 85:61:a2:47:44:54:8b:9c:86:98:a3:f6:a7:67:f0: a8:6b:17:fb:6a:75:2c:ca:db:eb:1a:26:2c:f2:cc: db:f1:d7:0e:37:f7:51:83:2d:19:9d:15:ea:0f:f2: 10:61:50:82:25:48:a0:51:f6:60:b3:1b:c8:a3:ff: 6a:64:a0:41:90:8b:82:cb:63:79:eb:2f:54:95:95: 36:24:ad:c0:d3:ae:27:dd:f1:53:c6:a6:cd:d7:8d: b9:35:72:0b:d9:6e:f0:f4:f8:f5:40:a6:40:f4:9f: 7b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:07:27:35:11:4D:5D:0A:F2:14:56:26:CF:26:61:1F:33:67:82:A5 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/iAcnNRFNXQryFFYmzyZhHzNngqU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 4f:8a:3f:2c:ef:c3:47:53:5d:09:ef:88:e2:34:f6:ab:fe:ff: 4d:14:c1:ea:22:df:95:1d:29:1d:2c:5c:79:aa:47:ad:a1:ae: b4:28:e3:77:cd:75:3a:42:02:d3:b4:99:b3:01:77:dc:7d:13: ab:ba:2f:3c:d3:f2:12:35:d3:79:08:ff:3b:66:6f:d9:a5:17: aa:e1:ff:0f:c6:80:c6:61:4e:84:5e:9d:64:7f:ee:e4:b5:3b: f4:40:cd:9a:2d:46:c4:cc:66:e0:86:b2:69:ab:4a:1c:3d:50: b5:1f:d4:fb:19:b8:ee:33:26:ac:43:d2:4c:00:08:88:18:ad: 52:b8:a7:22:e1:e8:23:02:97:62:16:de:23:17:56:a6:c8:7a: 42:4e:dd:45:a4:75:a4:97:49:e1:58:c1:a5:89:33:72:db:7d: a4:c0:a0:af:26:94:87:44:26:14:cb:e7:d2:20:e3:35:3a:a0: 70:ee:63:49:48:47:6d:e0:60:bd:c6:de:9d:38:18:b5:61:b5: 01:95:7e:93:06:bf:e8:41:1e:dc:b9:ff:2e:3e:8e:98:4a:4b: fa:13:d2:1d:30:fe:c6:af:49:6f:8a:52:9e:3d:64:7d:ca:e5: b7:83:c2:52:5c:59:a5:06:b9:1d:6a:ee:ac:4a:fb:1f:16:98: 8f:ee:6a:99 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICH+4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDIx MTM4MzZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDg4MDcyNzM1MTE0RDVE MEFGMjE0NTYyNkNGMjY2MTFGMzM2NzgyQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC30jSYG74ZTgJyu3HWgJ6MkX0QA4LBOfB97lJecSyXurko6C2G o5+Gb4WpFQPdWY/L1qqbcdW0XN12ty9zNHohu3IjJ8nStjC8XF3/88WDKUB3MtSN ql8kLzTA6uezqxV0Ybk/BybS/uJC1WBeHJG/ATb0WP5tzHKU0igyoLWIYhuO7ykO V106ccIUNFRxs74rDsTieIVhokdEVIuchpij9qdn8KhrF/tqdSzK2+saJizyzNvx 1w4391GDLRmdFeoP8hBhUIIlSKBR9mCzG8ij/2pkoEGQi4LLY3nrL1SVlTYkrcDT rifd8VPGps3Xjbk1cgvZbvD0+PVApkD0n3uDAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUiAcnNRFNXQryFFYmzyZhHzNngqUwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvaUFjbk5SRk5YUXJ5 RkZZbXp5WmhIek5uZ3FVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAE+KPyzvw0dTXQnviOI09qv+/00U weoi35UdKR0sXHmqR62hrrQo43fNdTpCAtO0mbMBd9x9E6u6LzzT8hI103kI/ztm b9mlF6rh/w/GgMZhToRenWR/7uS1O/RAzZotRsTMZuCGsmmrShw9ULUf1PsZuO4z JqxD0kwACIgYrVK4pyLh6CMCl2IW3iMXVqbIekJO3UWkdaSXSeFYwaWJM3LbfaTA oK8mlIdEJhTL59Ig4zU6oHDuY0lIR23gYL3G3p04GLVhtQGVfpMGv+hBHty5/y4+ jphKS/oT0h0w/savSW+KUp49ZH3K5beDwlJcWaUGuR1q7qxK+x8WmI/uapk= -----END CERTIFICATE-----Generated at Mon Jan 12 07:35:10 2026 by rpki-client