This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3417/7qqfCczVpqzPAfV0rFSiOaInTZo.roa
File: 7qqfCczVpqzPAfV0rFSiOaInTZo.roa (raw, json)
Hash identifier: He/3RBMb/hdGBTYVCyG/HVT/wnrhQ3TGFKE110yMwhM=
Subject key identifier: EE:AA:9F:09:CC:D5:A6:AC:CF:01:F5:74:AC:54:A2:39:A2:27:4D:9A
Certificate issuer: /CN=43E6FDAB0F150EE9C43CF5A2BB76588A7E5F8502
Certificate serial: 05
Authority key identifier: 43:E6:FD:AB:0F:15:0E:E9:C4:3C:F5:A2:BB:76:58:8A:7E:5F:85:02
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q-b9qw8VDunEPPWiu3ZYin5fhQI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/7qqfCczVpqzPAfV0rFSiOaInTZo.roa
Signing time: Mon 15 Dec 2025 09:52:48 +0000
ROA not before: Mon 15 Dec 2025 09:52:48 +0000
ROA not after: Sat 12 Dec 2026 07:10:43 +0000
asID: 135542
IP address blocks: 144.79.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43E6FDAB0F150EE9C43CF5A2BB76588A7E5F8502
Validity
Not Before: Dec 15 09:52:48 2025 GMT
Not After : Dec 12 07:10:43 2026 GMT
Subject: CN=EEAA9F09CCD5A6ACCF01F574AC54A239A2274D9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5f:ae:5d:5d:aa:c6:e9:c7:cb:fc:5e:5c:7c:
8d:df:54:68:9d:7e:93:f9:65:15:62:c2:81:40:51:
3b:6c:79:29:ff:40:a2:eb:e7:6d:32:ab:82:1d:57:
4a:55:95:58:48:2d:69:0a:d3:7f:cf:39:98:47:c1:
35:c5:93:5a:5c:e0:64:54:b2:ed:46:b1:a5:a8:c1:
a3:93:39:c6:be:55:5f:79:38:ba:3b:56:5a:7f:91:
72:45:6d:c2:2a:a0:de:ba:63:74:6d:ed:1e:80:35:
9c:1b:6b:b8:51:0b:d9:f9:8d:5a:80:f9:b7:02:d9:
4c:7c:b2:e7:0a:f7:51:8d:76:f1:16:6d:3f:10:76:
3c:95:fa:5e:b6:7a:e5:d2:0c:34:8e:96:03:4e:0e:
96:4d:70:4f:d1:0c:18:e0:67:24:ce:a7:9b:c4:f9:
0e:20:9a:08:60:38:30:94:e8:58:85:87:ac:34:da:
fd:2b:10:e4:35:15:ff:a1:44:76:72:7b:a1:36:51:
a9:a6:7b:ee:63:1e:f0:06:8e:a8:95:73:89:9f:0e:
59:7e:91:28:22:87:55:26:6a:30:4f:42:43:8a:a8:
17:e4:c1:85:00:c1:96:3c:cc:51:5e:63:3a:3b:7b:
36:bb:b6:da:f2:55:ec:02:6d:0d:10:dc:59:b0:8e:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AA:9F:09:CC:D5:A6:AC:CF:01:F5:74:AC:54:A2:39:A2:27:4D:9A
X509v3 Authority Key Identifier:
keyid:43:E6:FD:AB:0F:15:0E:E9:C4:3C:F5:A2:BB:76:58:8A:7E:5F:85:02
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/Q-b9qw8VDunEPPWiu3ZYin5fhQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q-b9qw8VDunEPPWiu3ZYin5fhQI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/7qqfCczVpqzPAfV0rFSiOaInTZo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.119.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:22:1d:46:7b:37:91:46:86:65:e3:23:a0:ae:24:bb:26:d6:
25:7c:f4:d6:05:fa:16:fa:82:d6:eb:2d:33:86:fe:00:9a:ac:
ca:0d:db:24:c2:42:87:18:f8:86:ea:c0:c8:1a:0b:07:0b:4e:
cb:19:2f:06:c1:60:40:27:8c:a9:c9:44:42:4c:19:38:b1:fa:
f4:68:98:ff:79:de:37:26:f9:2b:97:0e:c4:23:cb:e7:55:df:
f5:5c:0d:0a:7e:dd:7c:c4:22:0b:ef:39:4d:33:8d:7c:8e:c0:
67:83:8f:6c:d6:a3:47:50:4f:40:6b:4d:38:8b:c9:2f:99:5c:
6f:70:f6:2a:4b:a8:78:e7:8d:44:c9:3a:a7:da:23:5d:6a:b5:
ac:16:e1:41:61:ba:a6:00:5e:f0:39:13:73:5e:a8:ec:20:cd:
d8:67:50:71:40:f0:d0:3e:32:4e:ea:27:b2:d9:2f:3b:38:36:
fc:68:37:0b:4e:c3:86:6f:f6:34:d0:5f:ff:18:12:93:b0:97:
ff:f6:a3:d9:a8:12:8f:b8:6e:55:65:61:77:5a:7b:a7:41:75:
7a:4a:2a:c1:59:fd:ce:24:6d:9c:05:c4:82:05:2d:ae:7a:77:
47:83:fa:8d:f3:7a:2e:30:db:1a:09:2f:f6:f2:4c:04:6d:4b:
da:25:57:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:53:40 2025 by rpki-client