This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/64/1zMpwtyU0_nOTDxAsq2-wM_kW4Q.roa File: 1zMpwtyU0_nOTDxAsq2-wM_kW4Q.roa (raw, json) Hash identifier: PYpm/Y/pqp1t3jEcOrkYXYmVt8VIXzP1nkeHpwHPwls= Subject key identifier: D7:33:29:C2:DC:94:D3:F9:CE:4C:3C:40:B2:AD:BE:C0:CF:E4:5B:84 Certificate issuer: /CN=5EB8C57D72F7946DD7B2420599288ECA153CB709 Certificate serial: 043B Authority key identifier: 5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/1zMpwtyU0_nOTDxAsq2-wM_kW4Q.roa Signing time: Wed 17 Dec 2025 04:16:39 +0000 ROA not before: Wed 17 Dec 2025 04:16:39 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9803 IP address blocks: 211.150.124.0/23 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB8C57D72F7946DD7B2420599288ECA153CB709 Validity Not Before: Dec 17 04:16:39 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=D73329C2DC94D3F9CE4C3C40B2ADBEC0CFE45B84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:2d:2d:51:a7:3a:79:bb:c3:2d:22:d9:ec: a1:36:97:51:bb:dd:78:83:86:d6:58:85:12:fe:ca: c3:81:53:71:54:8d:aa:3d:5c:89:55:a5:21:41:e7: e2:bf:6a:43:59:fa:bf:1c:20:c6:e7:10:e6:dc:98: 35:c9:65:17:73:40:0d:f0:18:2a:30:ed:46:93:53: 76:f0:9e:0d:d2:7d:31:ad:17:1b:52:06:bb:dc:35: 65:3f:73:9e:d2:0d:65:1c:5a:ee:d4:dc:62:c1:09: 77:ee:bb:92:18:ea:79:eb:ce:d0:8b:6c:25:ae:c6: f8:67:90:b0:b3:bb:a8:a7:5e:ed:ad:d2:27:8a:68: 9d:f8:62:a7:1c:fa:7a:2c:cb:3a:da:65:04:8e:2e: f8:75:e3:0d:94:b8:6d:b8:9d:69:ee:13:b4:52:53: 40:70:2f:51:23:6c:d7:06:d8:d1:08:24:f6:c3:0f: f4:de:28:d7:fd:8c:74:4a:b1:f0:d8:56:f7:9c:bf: b3:21:ce:aa:f5:62:14:5b:05:a9:28:e7:96:96:bf: e7:ff:12:49:4f:92:32:40:53:75:7e:9a:5d:36:d1: fb:6a:a4:12:9d:da:97:9f:e5:22:b1:08:44:f0:76: 69:23:b8:bc:0a:5b:3f:e3:53:21:e1:53:80:38:9d: 2c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:33:29:C2:DC:94:D3:F9:CE:4C:3C:40:B2:AD:BE:C0:CF:E4:5B:84 X509v3 Authority Key Identifier: keyid:5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/1zMpwtyU0_nOTDxAsq2-wM_kW4Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.150.124.0/23 Signature Algorithm: sha256WithRSAEncryption 49:16:b0:d1:43:64:a6:9b:8e:7a:cc:b1:0a:b7:45:8f:7a:ee: 1e:eb:ac:ef:5a:37:e7:f3:2f:8e:aa:9f:f6:c7:61:46:49:cb: 1a:5b:83:74:a2:0c:5d:48:68:38:1d:bc:bb:f6:dc:f8:c1:a3: c5:69:8f:3a:70:a5:de:dd:02:36:ba:7e:46:d6:4c:b6:b1:b1: 60:c0:81:3a:bf:59:1d:bf:46:1c:44:4f:72:83:fc:1a:c4:46: 44:a5:b1:a6:e0:f0:88:5f:2e:28:d8:9a:73:00:53:7f:92:ec: d8:e5:18:cd:3c:e7:c5:44:5c:f2:84:91:f0:0c:d8:df:48:82: a0:c5:e1:5c:ac:01:d0:e7:57:2f:6f:21:95:69:c7:17:b9:7d: c0:e5:1c:28:00:7e:31:fa:c9:dd:52:91:20:2a:49:e8:ab:c2: 5b:cf:e0:96:51:fa:bd:10:74:86:38:7e:ff:3d:f4:84:fc:37: 44:56:47:88:4f:c3:4d:38:9e:54:b1:42:e8:19:5a:71:2f:c7: 6d:bc:e8:f8:83:ef:94:c1:e0:ac:3c:d2:f0:f0:00:49:8d:76: 3b:b4:51:8d:02:8a:3c:ef:3b:f5:5e:49:2e:d5:d6:a0:b3:7a: ab:80:85:54:bd:16:eb:71:a6:d0:08:fc:a5:6a:6c:18:c9:ff: ae:0e:95:aa -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBDswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUVC OEM1N0Q3MkY3OTQ2REQ3QjI0MjA1OTkyODhFQ0ExNTNDQjcwOTAeFw0yNTEyMTcw NDE2MzlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEQ3MzMyOUMyREM5NEQz RjlDRTRDM0M0MEIyQURCRUMwQ0ZFNDVCODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/oi0tUac6ebvDLSLZ7KE2l1G73XiDhtZYhRL+ysOBU3FUjao9 XIlVpSFB5+K/akNZ+r8cIMbnEObcmDXJZRdzQA3wGCow7UaTU3bwng3SfTGtFxtS BrvcNWU/c57SDWUcWu7U3GLBCXfuu5IY6nnrztCLbCWuxvhnkLCzu6inXu2t0ieK aJ34Yqcc+nosyzraZQSOLvh14w2UuG24nWnuE7RSU0BwL1EjbNcG2NEIJPbDD/Te KNf9jHRKsfDYVvecv7Mhzqr1YhRbBako55aWv+f/EklPkjJAU3V+ml020ftqpBKd 2pef5SKxCETwdmkjuLwKWz/jUyHhU4A4nSy9AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU1zMpwtyU0/nOTDxAsq2+wM/kW4QwHwYDVR0jBBgwFoAUXrjFfXL3lG3XskIF mSiOyhU8twkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQv WHJqRmZYTDNsRzNYc2tJRm1TaU95aFU4dHdrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9YcmpGZlhMM2xHM1hza0lGbVNpT3loVTh0d2suY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NC8xek1wd3R5VTBfbk9URHhB c3EyLXdNX2tXNFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 05Z8MA0GCSqGSIb3DQEBCwUAA4IBAQBJFrDRQ2Smm456zLEKt0WPeu4e66zvWjfn 8y+Oqp/2x2FGScsaW4N0ogxdSGg4Hby79tz4waPFaY86cKXe3QI2un5G1ky2sbFg wIE6v1kdv0YcRE9yg/waxEZEpbGm4PCIXy4o2JpzAFN/kuzY5RjNPOfFRFzyhJHw DNjfSIKgxeFcrAHQ51cvbyGVaccXuX3A5RwoAH4x+sndUpEgKknoq8Jbz+CWUfq9 EHSGOH7/PfSE/DdEVkeIT8NNOJ5UsULoGVpxL8dtvOj4g++UweCsPNLw8ABJjXY7 tFGNAoo87zv1Xkku1dags3qrgIVUvRbrcabQCPylamwYyf+uDpWq -----END CERTIFICATE-----Generated at Mon Jan 12 17:17:47 2026 by rpki-client