This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/sDGwyWuCG3yUZ5NGr5prEs5rduk.roa File: sDGwyWuCG3yUZ5NGr5prEs5rduk.roa (raw, json) Hash identifier: epfpOcLgLpk0kjvn9O6epqV4ALUCoz0GDs4LvV3OeCQ= Subject key identifier: B0:31:B0:C9:6B:82:1B:7C:94:67:93:46:AF:9A:6B:12:CE:6B:76:E9 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 261E Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/sDGwyWuCG3yUZ5NGr5prEs5rduk.roa Signing time: Fri 13 Jun 2025 11:39:20 +0000 ROA not before: Fri 13 Jun 2025 11:39:20 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 9758 (0x261e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 13 11:39:20 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=B031B0C96B821B7C94679346AF9A6B12CE6B76E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ca:7b:c4:24:5a:a8:8a:b8:1b:ff:d8:8d:64: 17:b2:24:3b:37:15:03:19:1c:74:4d:53:ab:e0:5a: 32:bc:01:30:fd:dc:7c:98:77:0b:99:96:30:5a:24: 98:e9:81:62:51:cb:f0:e8:1b:dd:ae:f5:1f:1e:5b: e8:5a:4d:d8:2e:c7:6d:0e:3d:72:a4:0f:42:e3:3f: 91:fb:bc:19:94:97:46:92:30:a3:72:75:d7:96:a9: cd:14:02:a8:62:a0:ba:02:70:32:d4:18:7b:5e:bf: 7d:6a:60:c4:98:53:1a:2d:68:9c:69:10:11:0d:c7: d9:04:99:e9:6d:c1:6f:97:91:00:e1:21:16:e2:c5: 81:ef:bc:fa:84:5e:73:0d:4a:6c:1b:18:4b:7d:47: 93:9f:6b:30:c5:0a:89:5e:97:79:88:e5:bf:96:6c: d6:ad:85:0d:c3:64:08:5f:c2:9d:1d:aa:99:00:e5: dd:63:eb:ac:13:5f:4d:07:df:d4:46:10:ad:14:4d: 2d:e4:97:cb:4b:22:3c:fe:df:45:e9:45:6e:33:35: 49:9c:46:2e:af:88:51:84:3a:62:fd:f6:54:64:e2: eb:8e:9a:06:3d:7e:86:10:15:31:d9:44:53:f1:df: f7:44:1f:fb:5e:1c:fe:79:12:96:28:b8:7d:f7:6a: fe:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:31:B0:C9:6B:82:1B:7C:94:67:93:46:AF:9A:6B:12:CE:6B:76:E9 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/sDGwyWuCG3yUZ5NGr5prEs5rduk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 1c:12:a9:78:9c:e8:41:5c:b5:61:b1:82:d4:1f:48:3d:24:d4: 2b:72:3f:85:df:2e:92:81:2d:e8:77:1f:15:42:db:56:6c:51: bd:14:fc:ce:e5:83:8a:29:87:a1:c1:2c:eb:88:85:0b:95:ba: cb:84:b4:1a:9e:69:1b:1b:e2:63:51:8f:53:3f:82:39:86:fc: 05:e4:1d:a0:d2:51:85:52:95:31:13:14:fa:0b:0c:8d:ce:0d: 0a:e6:9e:ff:93:39:67:c8:4e:ce:98:c2:bc:23:38:2b:3c:59: ae:4d:e1:ff:fa:8a:48:02:eb:43:ce:ff:85:f7:9c:bd:9e:ca: cc:6f:ce:58:a9:9a:38:b4:60:5d:80:19:68:27:44:a6:08:1a: ce:26:58:c6:28:dc:8a:46:be:6d:38:ea:60:60:f8:ab:a5:07: 70:8b:02:c1:80:9f:06:db:57:8d:78:47:26:75:79:70:25:86: 59:70:15:87:d4:cb:e9:52:db:ca:0d:23:ed:ac:f3:c5:08:50: c3:b1:67:b4:e1:77:9a:38:99:d4:b4:5e:66:56:cb:62:b0:a0: 8c:00:d8:be:78:4a:c3:96:91:df:77:59:b9:a7:0b:16:e9:55: 9d:41:8e:48:dd:c2:28:f7:20:99:ff:9a:cd:8e:ac:6a:40:6e: 02:ff:51:93 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICJh4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTMx MTM5MjBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEIwMzFCMEM5NkI4MjFC N0M5NDY3OTM0NkFGOUE2QjEyQ0U2Qjc2RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1ynvEJFqoirgb/9iNZBeyJDs3FQMZHHRNU6vgWjK8ATD93HyY dwuZljBaJJjpgWJRy/DoG92u9R8eW+haTdgux20OPXKkD0LjP5H7vBmUl0aSMKNy ddeWqc0UAqhioLoCcDLUGHtev31qYMSYUxotaJxpEBENx9kEmeltwW+XkQDhIRbi xYHvvPqEXnMNSmwbGEt9R5OfazDFColel3mI5b+WbNathQ3DZAhfwp0dqpkA5d1j 66wTX00H39RGEK0UTS3kl8tLIjz+30XpRW4zNUmcRi6viFGEOmL99lRk4uuOmgY9 foYQFTHZRFPx3/dEH/teHP55EpYouH33av4FAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUsDGwyWuCG3yUZ5NGr5prEs5rdukwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvc0RHd3lXdUNHM3lV WjVOR3I1cHJFczVyZHVrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBABwSqXic6EFctWGxgtQfSD0k1Cty P4XfLpKBLeh3HxVC21ZsUb0U/M7lg4oph6HBLOuIhQuVusuEtBqeaRsb4mNRj1M/ gjmG/AXkHaDSUYVSlTETFPoLDI3ODQrmnv+TOWfITs6YwrwjOCs8Wa5N4f/6ikgC 60PO/4X3nL2eysxvzlipmji0YF2AGWgnRKYIGs4mWMYo3IpGvm046mBg+KulB3CL AsGAnwbbV414RyZ1eXAlhllwFYfUy+lS28oNI+2s88UIUMOxZ7Thd5o4mdS0XmZW y2KwoIwA2L54SsOWkd93WbmnCxbpVZ1Bjkjdwij3IJn/ms2OrGpAbgL/UZM= -----END CERTIFICATE-----Generated at Mon Jan 12 07:36:15 2026 by rpki-client