This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3417/zyd9sNtiUGWk-rPMxkaAwd-jMjU.roa
File: zyd9sNtiUGWk-rPMxkaAwd-jMjU.roa (raw, json)
Hash identifier: gJ4z3p20OCkd5sduSBhdXm57HvoUXImlRN+QEWanG2A=
Subject key identifier: CF:27:7D:B0:DB:62:50:65:A4:FA:B3:CC:C6:46:80:C1:DF:A3:32:35
Certificate issuer: /CN=43E6FDAB0F150EE9C43CF5A2BB76588A7E5F8502
Certificate serial: 04
Authority key identifier: 43:E6:FD:AB:0F:15:0E:E9:C4:3C:F5:A2:BB:76:58:8A:7E:5F:85:02
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q-b9qw8VDunEPPWiu3ZYin5fhQI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/zyd9sNtiUGWk-rPMxkaAwd-jMjU.roa
Signing time: Mon 15 Dec 2025 09:52:47 +0000
ROA not before: Mon 15 Dec 2025 09:52:47 +0000
ROA not after: Sat 12 Dec 2026 07:10:43 +0000
asID: 135542
IP address blocks: 144.79.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43E6FDAB0F150EE9C43CF5A2BB76588A7E5F8502
Validity
Not Before: Dec 15 09:52:47 2025 GMT
Not After : Dec 12 07:10:43 2026 GMT
Subject: CN=CF277DB0DB625065A4FAB3CCC64680C1DFA33235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:b8:fe:36:8e:ba:9a:3b:30:a4:3b:a8:90:
ca:d2:e7:ee:6f:5e:2a:59:b0:94:04:f9:4f:fb:c5:
ad:a8:0f:73:dd:c0:b2:ff:ea:c8:82:21:58:a1:12:
62:c1:2a:99:d3:8b:35:f8:dd:03:bf:84:c4:b0:4a:
fd:7d:a1:54:33:2e:e9:0c:79:56:cc:22:af:e6:ec:
c7:37:27:01:4b:65:c2:cd:47:2e:8f:3d:4c:a3:f1:
6e:f5:4e:53:00:57:5b:5b:9c:e7:80:2f:4d:16:d0:
4e:68:2f:df:5c:fc:45:62:8c:e0:b0:3d:be:e4:fd:
5c:a9:f8:07:b1:df:d6:e6:2d:86:ca:d5:74:9e:f6:
16:7d:50:a0:6b:e0:d6:92:9e:34:1d:15:12:c5:03:
20:96:26:0e:92:c8:07:2b:11:dc:d9:82:8a:7e:6b:
f5:04:4b:6c:c4:3e:ca:d4:d1:bf:09:79:ff:43:0d:
4c:3e:1a:64:d1:72:15:4b:e4:32:ed:7a:ca:ae:22:
3a:e5:ed:0e:7a:12:b8:21:0e:4d:a6:7e:62:5b:3a:
33:76:31:63:de:93:6f:33:a9:55:4f:c8:bc:a4:69:
dd:d7:a7:d8:05:1a:d2:2b:d0:7a:f4:c5:c1:bc:18:
83:c7:be:af:6d:93:8d:a4:dd:f7:b4:48:85:73:a7:
bb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:27:7D:B0:DB:62:50:65:A4:FA:B3:CC:C6:46:80:C1:DF:A3:32:35
X509v3 Authority Key Identifier:
keyid:43:E6:FD:AB:0F:15:0E:E9:C4:3C:F5:A2:BB:76:58:8A:7E:5F:85:02
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/Q-b9qw8VDunEPPWiu3ZYin5fhQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q-b9qw8VDunEPPWiu3ZYin5fhQI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/zyd9sNtiUGWk-rPMxkaAwd-jMjU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.118.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:d1:e0:60:b4:e8:d6:18:b3:66:a3:87:58:1d:b5:e0:86:9b:
75:02:99:e7:0c:52:4e:45:e7:24:4e:a3:80:e3:bf:a2:b4:89:
66:c9:54:5e:e1:73:03:42:b1:db:bc:4f:2b:41:fb:e1:4b:7f:
0b:8d:ac:24:4a:6d:cc:97:5a:d4:2a:67:68:16:8c:bf:db:63:
23:3e:25:e5:e4:82:37:31:c2:04:74:8b:7a:97:5b:af:fc:55:
b1:0f:0e:bc:d2:35:f4:5b:ca:27:95:78:64:32:85:89:fc:6f:
9c:2e:3e:33:95:85:de:83:6e:d5:da:d1:06:11:79:c6:75:6b:
53:03:20:d0:16:02:93:34:a9:42:40:38:2d:b8:40:e3:b0:4a:
d8:52:08:cf:6c:1f:8b:bd:e6:a8:c1:46:bb:25:11:9c:5f:d6:
c9:6e:87:7f:d0:72:27:b3:c4:b6:3c:91:1c:32:fb:55:21:f4:
a0:1a:ee:ee:c4:e1:4c:cd:fe:93:f1:7b:b8:07:66:9c:86:c1:
16:97:22:bc:10:68:86:0e:9d:39:5b:cb:9a:f6:3a:71:1d:d8:
4e:25:0e:05:92:5c:59:32:f5:e0:30:57:2b:41:81:83:c9:4d:
48:d9:5a:5c:7c:f2:80:ba:4f:54:fe:78:f1:8a:df:cf:d8:99:
79:a3:c5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:53:33 2025 by rpki-client