This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/olCQZhuBSHCBvG0ssAdqT-VI0nU.roa File: olCQZhuBSHCBvG0ssAdqT-VI0nU.roa (raw, json) Hash identifier: TH0Hqv8aPhjx5CEeKf3stuCmVbkr0wGCcGgJ9515o2A= Subject key identifier: A2:50:90:66:1B:81:48:70:81:BC:6D:2C:B0:07:6A:4F:E5:48:D2:75 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 2219 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/olCQZhuBSHCBvG0ssAdqT-VI0nU.roa Signing time: Fri 06 Jun 2025 08:08:47 +0000 ROA not before: Fri 06 Jun 2025 08:08:47 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 8729 (0x2219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 6 08:08:47 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=A25090661B81487081BC6D2CB0076A4FE548D275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:ca:fc:eb:8c:ad:33:3b:c7:39:3b:dc:8f: 9d:a1:73:5a:68:be:63:0f:ac:dc:1b:33:b9:5b:ef: 71:11:b0:25:fe:ff:7f:f5:96:27:d9:b4:0d:22:f6: 8d:18:41:82:b0:43:fd:5d:b2:77:a5:f5:43:e7:04: 27:99:c1:18:c5:36:aa:e9:ad:d1:3f:b7:7f:b5:b7: 9a:7c:95:83:f9:15:80:ce:f6:ac:b9:49:be:0b:71: 61:c1:8b:5c:99:bc:af:0d:7a:b9:6b:e6:ce:52:5a: fa:c4:56:5c:09:00:49:e1:4a:11:d1:a6:76:15:bb: 47:29:02:d2:d1:a5:5e:e7:43:a8:6a:4f:01:88:52: 22:60:4c:8e:03:59:aa:02:87:e4:5d:f4:b8:d8:dc: 2d:8c:7d:11:d3:4c:98:c8:b7:5e:32:7b:43:34:b0: 57:10:0c:fd:1c:1a:f1:81:40:93:dd:78:3a:32:f8: 93:07:ec:3a:ea:e2:e3:bd:20:88:b0:56:69:f0:75: fd:6a:15:df:c7:9f:b6:77:62:4b:44:c1:f9:cf:75: f2:30:42:fc:72:a4:53:29:0d:c8:fe:94:f1:dd:23: ec:16:64:72:26:e9:6f:36:0e:2d:b5:83:39:e2:72: 65:68:e9:6b:fa:e0:03:f7:0f:c6:47:a2:58:f4:a0: 0d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:50:90:66:1B:81:48:70:81:BC:6D:2C:B0:07:6A:4F:E5:48:D2:75 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/olCQZhuBSHCBvG0ssAdqT-VI0nU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 4a:f0:ec:4e:56:1e:26:62:89:d0:d0:a3:f5:f3:60:ec:71:4f: 52:29:06:3f:aa:d6:ba:cb:bf:74:7b:97:22:b9:4e:4b:fd:df: 5f:c2:43:13:fa:bc:a0:e0:62:f7:69:12:35:e9:c8:14:d1:79: 10:c7:65:08:89:57:90:3c:ff:1d:2f:87:a8:ed:13:8a:ba:ce: e8:68:77:6a:30:5d:1b:dc:30:d1:ad:38:ce:d8:04:42:2d:57: 5a:02:38:e6:02:fb:23:0d:15:37:04:51:6f:06:75:f9:72:af: 36:f3:c1:69:18:98:6c:1f:51:63:89:8f:c6:15:fd:10:94:57: 72:1e:d6:ac:bc:c5:9d:64:59:f7:51:61:35:74:a0:ce:1e:ee: 64:86:81:bb:cc:26:a4:94:02:84:76:98:e4:fa:e1:d1:64:87: c2:f5:81:f1:57:d5:b8:68:61:c6:e6:77:ef:34:a5:b5:71:e3: a2:92:d4:4b:48:f8:dd:32:3f:15:29:6d:d4:0a:b4:29:b9:81: 40:0a:ba:2d:09:7a:91:5e:fe:37:85:92:f1:3f:00:c2:9f:62: 92:98:03:f5:3a:10:f4:a2:a5:22:81:29:f8:5d:61:a0:40:19: 81:56:19:6c:7a:6c:17:b5:2a:e3:38:6f:ef:80:f0:57:51:c6: ff:c1:74:61 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICIhkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDYw ODA4NDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEEyNTA5MDY2MUI4MTQ4 NzA4MUJDNkQyQ0IwMDc2QTRGRTU0OEQyNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK48r864ytMzvHOTvcj52hc1povmMPrNwbM7lb73ERsCX+/3/1 lifZtA0i9o0YQYKwQ/1dsnel9UPnBCeZwRjFNqrprdE/t3+1t5p8lYP5FYDO9qy5 Sb4LcWHBi1yZvK8Nerlr5s5SWvrEVlwJAEnhShHRpnYVu0cpAtLRpV7nQ6hqTwGI UiJgTI4DWaoCh+Rd9LjY3C2MfRHTTJjIt14ye0M0sFcQDP0cGvGBQJPdeDoy+JMH 7Drq4uO9IIiwVmnwdf1qFd/Hn7Z3YktEwfnPdfIwQvxypFMpDcj+lPHdI+wWZHIm 6W82Di21gznicmVo6Wv64AP3D8ZHolj0oA2/AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUolCQZhuBSHCBvG0ssAdqT+VI0nUwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvb2xDUVpodUJTSENC dkcwc3NBZHFULVZJMG5VLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAErw7E5WHiZiidDQo/XzYOxxT1Ip Bj+q1rrLv3R7lyK5Tkv931/CQxP6vKDgYvdpEjXpyBTReRDHZQiJV5A8/x0vh6jt E4q6zuhod2owXRvcMNGtOM7YBEItV1oCOOYC+yMNFTcEUW8GdflyrzbzwWkYmGwf UWOJj8YV/RCUV3Ie1qy8xZ1kWfdRYTV0oM4e7mSGgbvMJqSUAoR2mOT64dFkh8L1 gfFX1bhoYcbmd+80pbVx46KS1EtI+N0yPxUpbdQKtCm5gUAKui0JepFe/jeFkvE/ AMKfYpKYA/U6EPSipSKBKfhdYaBAGYFWGWx6bBe1KuM4b++A8FdRxv/BdGE= -----END CERTIFICATE-----Generated at Mon Jan 12 08:18:50 2026 by rpki-client