This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/64/yI-lLqw_CfftuoN-oxjMGUVV_48.roa File: yI-lLqw_CfftuoN-oxjMGUVV_48.roa (raw, json) Hash identifier: i6LuOFOhSPgU5pIDeHHtaP3BVhDVs4bHa+CpmMM+OLA= Subject key identifier: C8:8F:A5:2E:AC:3F:09:F7:ED:BA:83:7E:A3:18:CC:19:45:55:FF:8F Certificate issuer: /CN=5EB8C57D72F7946DD7B2420599288ECA153CB709 Certificate serial: 0439 Authority key identifier: 5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/yI-lLqw_CfftuoN-oxjMGUVV_48.roa Signing time: Wed 17 Dec 2025 04:16:38 +0000 ROA not before: Wed 17 Dec 2025 04:16:38 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9803 IP address blocks: 211.150.122.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB8C57D72F7946DD7B2420599288ECA153CB709 Validity Not Before: Dec 17 04:16:38 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C88FA52EAC3F09F7EDBA837EA318CC194555FF8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c9:88:af:b1:d7:39:8e:9a:ec:f1:45:e3:ba: 9a:54:e5:9c:8d:4b:ad:dd:7c:7d:65:74:d3:e5:d0: 63:9e:76:4e:8d:a1:a2:76:b5:51:49:10:da:8b:26: 92:db:12:1d:44:8d:b7:85:0c:83:bf:ff:ce:4e:a9: 39:5b:45:18:4d:e3:46:bf:58:cf:17:d6:dc:6b:97: 36:7c:e6:e9:87:07:4e:11:79:69:17:16:05:ba:b3: 3e:b9:20:7b:59:8e:4b:ca:44:fe:df:59:be:ad:a2: ba:78:a3:ed:78:60:67:a2:22:e2:57:c2:76:f2:c3: 31:76:16:0d:3b:45:2d:6f:a2:a9:bd:ec:05:f9:61: 5b:ba:a6:50:0d:d0:c4:13:ba:2d:61:9c:f1:0e:ac: 04:85:e4:c6:7a:2b:ba:d7:19:9e:c0:23:94:93:41: 18:ff:f8:97:74:f7:bc:35:15:c4:c8:6f:ad:9a:52: ac:c3:d6:82:b0:aa:c9:73:6f:52:8a:89:9a:86:d4: 6d:57:5f:3e:aa:5e:26:3d:d9:df:b2:88:0f:24:b2: e4:b5:2f:11:1a:72:3f:de:28:93:10:6f:79:db:bf: 1d:01:b1:75:cc:19:ea:c9:84:55:de:42:1f:59:12: 35:b3:57:c4:9c:b6:bc:8d:5d:d4:83:c9:40:a2:89: d6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8F:A5:2E:AC:3F:09:F7:ED:BA:83:7E:A3:18:CC:19:45:55:FF:8F X509v3 Authority Key Identifier: keyid:5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/yI-lLqw_CfftuoN-oxjMGUVV_48.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.150.122.0/24 Signature Algorithm: sha256WithRSAEncryption 59:ba:8e:d4:35:4c:a8:e4:c8:7b:a5:20:fc:9c:ef:41:0b:d7: a1:34:2d:1d:60:dc:32:fd:fc:28:7c:aa:36:71:10:57:4c:94: 41:53:ac:65:c2:a9:f5:49:71:6b:9b:3e:16:47:df:a9:ea:05: e2:ca:81:3d:f8:a3:7a:d2:54:c3:0a:45:04:67:62:63:2d:d5: 33:3f:7e:ac:e3:8e:a8:ff:1f:ec:07:7c:a9:53:a9:f3:ae:b7: b4:40:e4:72:f0:ab:f4:f7:1e:9d:15:7d:89:a7:f8:30:ea:f2: 1a:28:79:ce:12:45:a1:7b:98:61:80:bd:32:f6:6b:31:55:e7: b0:58:dd:9f:fa:d5:5b:5f:75:42:81:9d:f2:ab:13:db:89:55: 9d:18:ca:52:f8:f7:80:fb:29:38:62:14:0d:47:50:41:3f:27: 5d:01:9f:e0:70:8d:5b:72:88:e6:63:2f:5d:fa:52:c2:2b:77: 11:19:f6:38:31:a2:fa:11:06:b1:30:0e:d5:05:8a:77:7a:f6: 50:15:a3:4c:ac:cb:c9:07:f1:ad:40:e6:37:2b:57:ff:2d:1b: 93:36:6f:1b:0f:93:b4:01:43:2d:10:f9:b4:64:54:02:e5:60: a4:f6:21:f2:83:bb:66:ce:a4:3c:a7:3d:a3:94:cb:34:6f:43: 3b:d7:1a:6c -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUVC OEM1N0Q3MkY3OTQ2REQ3QjI0MjA1OTkyODhFQ0ExNTNDQjcwOTAeFw0yNTEyMTcw NDE2MzhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEM4OEZBNTJFQUMzRjA5 RjdFREJBODM3RUEzMThDQzE5NDU1NUZGOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWyYivsdc5jprs8UXjuppU5ZyNS63dfH1ldNPl0GOedk6NoaJ2 tVFJENqLJpLbEh1EjbeFDIO//85OqTlbRRhN40a/WM8X1txrlzZ85umHB04ReWkX FgW6sz65IHtZjkvKRP7fWb6torp4o+14YGeiIuJXwnbywzF2Fg07RS1voqm97AX5 YVu6plAN0MQTui1hnPEOrASF5MZ6K7rXGZ7AI5STQRj/+Jd097w1FcTIb62aUqzD 1oKwqslzb1KKiZqG1G1XXz6qXiY92d+yiA8ksuS1LxEacj/eKJMQb3nbvx0BsXXM GerJhFXeQh9ZEjWzV8SctryNXdSDyUCiidYTAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUyI+lLqw/CfftuoN+oxjMGUVV/48wHwYDVR0jBBgwFoAUXrjFfXL3lG3XskIF mSiOyhU8twkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQv WHJqRmZYTDNsRzNYc2tJRm1TaU95aFU4dHdrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9YcmpGZlhMM2xHM1hza0lGbVNpT3loVTh0d2suY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NC95SS1sTHF3X0NmZnR1b04t b3hqTUdVVlZfNDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 05Z6MA0GCSqGSIb3DQEBCwUAA4IBAQBZuo7UNUyo5Mh7pSD8nO9BC9ehNC0dYNwy /fwofKo2cRBXTJRBU6xlwqn1SXFrmz4WR9+p6gXiyoE9+KN60lTDCkUEZ2JjLdUz P36s446o/x/sB3ypU6nzrre0QORy8Kv09x6dFX2Jp/gw6vIaKHnOEkWhe5hhgL0y 9msxVeewWN2f+tVbX3VCgZ3yqxPbiVWdGMpS+PeA+yk4YhQNR1BBPyddAZ/gcI1b cojmYy9d+lLCK3cRGfY4MaL6EQaxMA7VBYp3evZQFaNMrMvJB/GtQOY3K1f/LRuT Nm8bD5O0AUMtEPm0ZFQC5WCk9iHyg7tmzqQ8pz2jlMs0b0M71xps -----END CERTIFICATE-----Generated at Mon Jan 12 17:17:51 2026 by rpki-client