This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/CrkQavEnBCQpbfLlWemrU5c4Rj0.roa File: CrkQavEnBCQpbfLlWemrU5c4Rj0.roa (raw, json) Hash identifier: QMJ+MGguR/XZAmyVm+gbLHwqO9LAW4cPm1LflFY1srE= Subject key identifier: 0A:B9:10:6A:F1:27:04:24:29:6D:F2:E5:59:E9:AB:53:97:38:46:3D Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Certificate serial: 0702 Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/CrkQavEnBCQpbfLlWemrU5c4Rj0.roa Signing time: Wed 22 Jan 2025 05:54:57 +0000 ROA not before: Wed 22 Jan 2025 05:54:57 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139076 IP address blocks: 113.31.64.0/21 maxlen: 24 113.31.72.0/21 maxlen: 24 113.31.128.0/21 maxlen: 24 113.31.136.0/21 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1794 (0x702) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Validity Not Before: Jan 22 05:54:57 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0AB9106AF1270424296DF2E559E9AB539738463D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:37:42:64:f1:85:96:cc:7d:c7:02:cb:53:8b: 99:47:ee:6e:03:f1:27:c2:09:7c:3b:f1:cb:51:65: 1e:7c:0f:96:9e:5f:3b:8d:6b:af:75:db:c4:ad:3c: 94:04:44:45:7c:60:fb:04:7e:34:e6:9b:84:7e:94: 24:ea:99:58:8b:77:75:46:f9:ed:e5:dd:a5:7a:38: be:94:c7:7d:cb:ab:1b:a0:2d:de:f6:60:df:55:e9: 88:6b:ec:75:fd:51:b1:22:3c:e4:de:1a:8f:15:7b: 49:1d:a8:e3:75:03:61:02:97:2b:f6:61:80:23:de: b6:0b:6d:7b:53:fa:24:28:41:f9:86:58:82:9d:19: a4:2f:42:c0:64:eb:8b:4c:38:fd:9d:43:32:eb:e5: a4:76:47:70:c8:be:0e:a1:71:1e:57:3f:57:0c:7d: f5:b7:84:f5:f3:c6:23:ec:09:f2:84:14:86:2b:13: 78:2b:65:6f:05:f3:b2:37:59:65:41:ad:b0:90:af: c8:19:bb:8c:aa:78:6a:57:79:a2:16:4e:6c:d1:9f: 7f:c9:3f:a1:06:c6:d1:1a:ca:ad:38:0b:47:ef:0e: dd:45:26:26:3b:a7:d9:3a:55:8c:5e:2c:6d:68:57: c7:ac:fe:e2:e4:38:50:83:0f:98:f5:7a:31:da:fe: 24:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B9:10:6A:F1:27:04:24:29:6D:F2:E5:59:E9:AB:53:97:38:46:3D X509v3 Authority Key Identifier: keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/CrkQavEnBCQpbfLlWemrU5c4Rj0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.31.64.0/20 113.31.128.0/20 Signature Algorithm: sha256WithRSAEncryption 0f:34:97:f6:69:00:c7:56:97:52:03:b3:c3:66:e3:aa:29:cb: b2:db:03:47:5a:c8:6a:97:78:1a:c9:60:d6:51:79:0c:8c:12: 17:b4:6d:cf:cd:d5:b8:9b:28:ef:42:c3:18:f4:40:ce:4f:41: e3:99:92:84:aa:24:89:83:3d:c3:fc:c3:3d:df:f1:fa:64:7b: ad:b5:58:b2:6a:80:6c:52:e8:3e:f0:5d:fd:38:0b:35:0c:cd: 0f:49:77:14:dc:9e:7a:25:b0:5a:1a:15:26:f2:e2:af:14:25: 55:18:49:94:03:f8:1c:dc:bb:7d:81:d8:dc:82:c2:b4:c5:89: 0c:79:e0:f8:34:19:75:94:0b:1a:77:c4:e9:c9:f5:52:ef:f8: 4b:ce:1d:09:29:d7:67:c0:44:24:9f:5f:0e:c5:6c:93:f3:32: 63:f7:ec:f9:75:2c:7f:55:03:16:62:26:82:14:4a:43:89:e5: 38:e3:ef:9b:1d:2f:1d:9f:59:e2:3d:81:f9:1a:a3:73:4e:01: 9a:67:fb:c9:c9:e7:de:89:94:cf:b0:f1:21:90:1e:af:f2:a3: f6:aa:9b:fa:aa:d4:d8:6c:de:ba:a4:eb:ae:4b:58:ed:96:b9: ed:3c:84:16:dd:03:58:c3:34:6c:3f:56:ae:ac:06:4d:d1:a5: 45:7c:ff:3d -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICBwIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3 MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjIw NTU0NTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBBQjkxMDZBRjEyNzA0 MjQyOTZERjJFNTU5RTlBQjUzOTczODQ2M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnN0Jk8YWWzH3HAstTi5lH7m4D8SfCCXw78ctRZR58D5aeXzuN a69128StPJQEREV8YPsEfjTmm4R+lCTqmViLd3VG+e3l3aV6OL6Ux33LqxugLd72 YN9V6Yhr7HX9UbEiPOTeGo8Ve0kdqON1A2EClyv2YYAj3rYLbXtT+iQoQfmGWIKd GaQvQsBk64tMOP2dQzLr5aR2R3DIvg6hcR5XP1cMffW3hPXzxiPsCfKEFIYrE3gr ZW8F87I3WWVBrbCQr8gZu4yqeGpXeaIWTmzRn3/JP6EGxtEayq04C0fvDt1FJiY7 p9k6VYxeLG1oV8es/uLkOFCDD5j1ejHa/iS3AgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUCrkQavEnBCQpbfLlWemrU5c4Rj0wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0Nya1FhdkVuQkNRcGJm TGxXZW1yVTVjNFJqMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAA80l/ZpAMdWl1IDs8Nm46op y7LbA0dayGqXeBrJYNZReQyMEhe0bc/N1bibKO9Cwxj0QM5PQeOZkoSqJImDPcP8 wz3f8fpke621WLJqgGxS6D7wXf04CzUMzQ9JdxTcnnolsFoaFSby4q8UJVUYSZQD +Bzcu32B2NyCwrTFiQx54Pg0GXWUCxp3xOnJ9VLv+EvOHQkp12fARCSfXw7FbJPz MmP37Pl1LH9VAxZiJoIUSkOJ5Tjj75sdLx2fWeI9gfkao3NOAZpn+8nJ596JlM+w 8SGQHq/yo/aqm/qq1Nhs3rqk665LWO2Wue08hBbdA1jDNGw/Vq6sBk3RpUV8/z0= -----END CERTIFICATE-----Generated at Mon Jan 12 06:58:40 2026 by rpki-client