This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/64/2gfea-lNU0ZrCqHrMFOJQibNTs0.roa File: 2gfea-lNU0ZrCqHrMFOJQibNTs0.roa (raw, json) Hash identifier: bQaiodGpv7vV0hH3PtQYMVBmH4m4DFgLFdA3BL8tBR0= Subject key identifier: DA:07:DE:6B:E9:4D:53:46:6B:0A:A1:EB:30:53:89:42:26:CD:4E:CD Certificate issuer: /CN=5EB8C57D72F7946DD7B2420599288ECA153CB709 Certificate serial: 043A Authority key identifier: 5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/2gfea-lNU0ZrCqHrMFOJQibNTs0.roa Signing time: Wed 17 Dec 2025 04:16:38 +0000 ROA not before: Wed 17 Dec 2025 04:16:38 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9803 IP address blocks: 211.150.100.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB8C57D72F7946DD7B2420599288ECA153CB709 Validity Not Before: Dec 17 04:16:38 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DA07DE6BE94D53466B0AA1EB3053894226CD4ECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a6:8a:ba:bc:48:db:da:7b:70:8a:ee:9d:11: 16:54:64:ba:10:fb:5c:72:28:c3:ea:42:f3:87:b7: 48:62:37:4f:08:e0:53:f7:d1:81:c2:b6:6b:d2:83: 60:96:27:f0:85:b2:cb:c2:d0:9f:01:ef:72:59:07: 82:a6:07:b6:79:41:cf:0f:c9:1c:0a:fc:d2:3b:03: a1:c9:7c:2a:ac:43:7e:6b:37:37:67:c4:d1:da:58: 2f:95:f0:87:3d:1e:f1:12:1f:e4:ff:e5:63:67:c1: 54:46:13:5e:52:19:06:11:20:cd:99:53:00:9b:d7: 21:e5:47:9c:35:d7:27:1d:38:a4:ee:fb:91:c9:da: 0a:99:e8:2b:13:4d:e1:47:f6:ec:dd:8f:9c:29:ab: 38:cc:f0:fa:69:b4:ee:69:fd:80:c3:94:bb:ad:c5: 48:7a:57:f4:fd:8a:d4:5d:02:d6:95:82:32:19:d4: d1:84:15:67:db:da:12:6d:2e:da:d1:be:66:5d:b3: 13:cb:4e:5d:51:80:25:cd:2b:1b:1f:77:15:6c:42: f3:df:b6:c7:a6:2f:36:d9:c8:7c:d3:cd:ba:0a:e7: 50:20:d0:15:ff:ef:8c:28:ff:f0:e5:5c:67:ed:e4: b9:b8:a6:16:e6:a3:82:6f:9c:48:fe:bc:1d:cb:45: 33:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:07:DE:6B:E9:4D:53:46:6B:0A:A1:EB:30:53:89:42:26:CD:4E:CD X509v3 Authority Key Identifier: keyid:5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/2gfea-lNU0ZrCqHrMFOJQibNTs0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.150.100.0/24 Signature Algorithm: sha256WithRSAEncryption 39:c3:60:aa:07:c5:3c:57:17:e7:c1:19:b3:d4:a1:c1:9b:63: cf:f3:6a:2e:b8:18:0a:d7:fb:06:87:17:6e:ac:41:a9:de:6d: 2d:52:da:b3:3a:ec:e4:c1:b3:d3:3a:df:f6:0c:b0:7e:58:ba: 3e:35:df:25:d2:ae:1f:c9:a7:3c:26:a9:f3:be:f8:f7:19:41: 37:1c:8e:a7:01:7c:4e:c5:b6:43:67:57:ff:72:ed:2c:5e:d5: 44:d2:ee:d9:30:43:35:40:71:d6:d7:80:73:9a:74:8a:7c:94: 0c:ae:b2:18:cd:da:e8:bd:e0:1a:67:ba:d5:d7:dc:e5:82:76: 6a:14:32:eb:8e:03:2a:09:20:eb:7b:bd:b3:82:fc:65:52:57: f6:95:18:4b:f2:89:8f:1c:27:39:be:13:1a:53:67:07:1e:8e: e2:84:7b:5b:7f:4f:3e:36:06:4e:c6:2f:40:25:2e:de:e5:d1: a7:d3:dc:e9:17:22:7f:d1:3e:6b:31:71:06:9b:82:6d:bf:00: 5d:2e:03:9e:77:d2:60:81:3c:bd:8c:d7:49:61:93:cf:b0:f7: b1:e7:92:17:f0:86:2a:36:84:b9:8b:67:e9:fa:25:1b:a5:78: bf:2d:48:0e:72:06:e9:16:05:aa:4b:cc:83:fd:21:d3:ec:1c: 25:7b:58:94 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBDowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUVC OEM1N0Q3MkY3OTQ2REQ3QjI0MjA1OTkyODhFQ0ExNTNDQjcwOTAeFw0yNTEyMTcw NDE2MzhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERBMDdERTZCRTk0RDUz NDY2QjBBQTFFQjMwNTM4OTQyMjZDRDRFQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXpoq6vEjb2ntwiu6dERZUZLoQ+1xyKMPqQvOHt0hiN08I4FP3 0YHCtmvSg2CWJ/CFssvC0J8B73JZB4KmB7Z5Qc8PyRwK/NI7A6HJfCqsQ35rNzdn xNHaWC+V8Ic9HvESH+T/5WNnwVRGE15SGQYRIM2ZUwCb1yHlR5w11ycdOKTu+5HJ 2gqZ6CsTTeFH9uzdj5wpqzjM8PpptO5p/YDDlLutxUh6V/T9itRdAtaVgjIZ1NGE FWfb2hJtLtrRvmZdsxPLTl1RgCXNKxsfdxVsQvPftsemLzbZyHzTzboK51Ag0BX/ 74wo//DlXGft5Lm4phbmo4JvnEj+vB3LRTP9AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU2gfea+lNU0ZrCqHrMFOJQibNTs0wHwYDVR0jBBgwFoAUXrjFfXL3lG3XskIF mSiOyhU8twkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQv WHJqRmZYTDNsRzNYc2tJRm1TaU95aFU4dHdrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9YcmpGZlhMM2xHM1hza0lGbVNpT3loVTh0d2suY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NC8yZ2ZlYS1sTlUwWnJDcUhy TUZPSlFpYk5UczAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 05ZkMA0GCSqGSIb3DQEBCwUAA4IBAQA5w2CqB8U8VxfnwRmz1KHBm2PP82ouuBgK 1/sGhxdurEGp3m0tUtqzOuzkwbPTOt/2DLB+WLo+Nd8l0q4fyac8Jqnzvvj3GUE3 HI6nAXxOxbZDZ1f/cu0sXtVE0u7ZMEM1QHHW14BzmnSKfJQMrrIYzdroveAaZ7rV 19zlgnZqFDLrjgMqCSDre72zgvxlUlf2lRhL8omPHCc5vhMaU2cHHo7ihHtbf08+ NgZOxi9AJS7e5dGn09zpFyJ/0T5rMXEGm4JtvwBdLgOed9JggTy9jNdJYZPPsPex 55IX8IYqNoS5i2fp+iUbpXi/LUgOcgbpFgWqS8yD/SHT7Bwle1iU -----END CERTIFICATE-----Generated at Mon Jan 12 17:17:50 2026 by rpki-client