This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/tmR3P2DUQj2yUzfQv-m_-dqexZg.roa File: tmR3P2DUQj2yUzfQv-m_-dqexZg.roa (raw, json) Hash identifier: iII6T+T59x8Ewbo+d6XH5X09ykMxXdYP/6e9beQMbSw= Subject key identifier: B6:64:77:3F:60:D4:42:3D:B2:53:37:D0:BF:E9:BF:F9:DA:9E:C5:98 Certificate issuer: /CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD Certificate serial: 108A Authority key identifier: DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/tmR3P2DUQj2yUzfQv-m_-dqexZg.roa Signing time: Wed 24 Dec 2025 07:10:50 +0000 ROA not before: Wed 24 Dec 2025 07:10:50 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 4837 IP address blocks: 43.248.184.0/21 maxlen: 21 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 4234 (0x108a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD Validity Not Before: Dec 24 07:10:50 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B664773F60D4423DB25337D0BFE9BFF9DA9EC598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:6e:ba:bc:34:10:51:21:ff:6d:b0:35:80: 02:2b:66:2f:20:8a:f9:9d:48:af:99:8d:d2:ad:ae: 55:88:52:7e:03:ee:93:a9:e6:a6:46:b9:b3:24:25: 42:72:c8:2d:02:84:ad:55:83:7c:0a:bb:cb:7c:92: cb:f1:23:68:b0:70:fd:c8:ae:67:a3:71:f6:38:69: 0a:7e:8e:ea:3d:f1:ee:d6:6a:9d:7b:eb:c4:75:0b: 45:90:64:10:f3:69:0c:4c:f1:5f:fa:7b:72:33:c3: 94:03:5f:1b:e6:8c:69:52:52:b6:8a:8d:24:c5:27: a1:5a:51:5d:fe:10:51:49:bc:98:c2:eb:37:7c:45: 35:9a:51:d0:35:90:3d:a9:0c:18:a5:7d:f6:b1:f4: d3:37:78:9e:9c:79:0c:c8:0b:99:68:15:1f:8a:00: b4:81:6b:52:f1:17:46:88:c3:13:e0:a5:33:58:94: 8f:2b:47:4e:ce:7a:b2:99:1f:31:3a:b7:ce:22:dd: ed:cb:ce:ac:98:a7:4f:3e:59:87:50:2d:12:3b:74: 44:c0:d0:57:35:f6:3b:db:c1:ed:94:1e:63:ff:c4: 8b:48:19:da:da:90:63:0d:20:6a:d3:c7:7e:6a:74: be:84:5c:46:5c:ae:ae:a1:91:48:80:59:38:70:a1: 69:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:64:77:3F:60:D4:42:3D:B2:53:37:D0:BF:E9:BF:F9:DA:9E:C5:98 X509v3 Authority Key Identifier: keyid:DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/tmR3P2DUQj2yUzfQv-m_-dqexZg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.248.184.0/21 Signature Algorithm: sha256WithRSAEncryption 8a:c6:34:39:e3:4c:fc:b8:af:a0:00:3b:e4:9f:a3:26:82:33: 52:f0:d1:fa:b3:45:65:b5:5f:47:c5:10:e7:5f:b5:74:37:a6: ee:f4:dc:37:05:ff:29:90:5a:6f:52:21:75:85:96:0c:b5:ef: 55:d7:94:bc:49:92:9f:49:20:62:9b:de:9b:20:5e:6a:51:bb: 97:f9:61:97:29:da:25:6b:be:76:1b:b9:f3:80:59:c5:6e:7e: e8:d7:2f:22:fa:e3:46:61:28:6c:71:c4:13:75:01:ae:c4:f1: cc:56:33:d2:f7:33:f0:2f:41:11:5e:07:58:05:81:f4:fc:55: 55:9f:67:67:83:e9:b2:6a:d5:1f:58:ba:ca:b7:a1:7a:ab:65: 93:de:93:9b:01:44:e8:cb:24:71:ac:06:25:3d:91:2f:58:1a: 20:ba:04:33:fd:b0:a7:d8:bf:ae:08:85:0c:90:9f:0a:9e:7b: fd:e6:d1:26:f6:c5:e5:d5:8f:e6:09:36:b7:0b:d7:53:fa:4d: d8:f2:69:cf:8e:cf:4a:0f:48:9f:2b:c6:a8:28:02:c5:1f:df: a8:fa:11:e3:38:72:73:da:82:37:e4:5e:91:a9:cc:cf:ae:f9: c6:2c:ef:bd:97:2b:1f:33:cd:c5:3d:ad:51:82:1d:ac:d6:43: b5:9b:95:e6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREJC NEM1RkE5NkI4NzQxQkY2OEI0OEJGMDA0REJENkZEOTYzNkZBRDAeFw0yNTEyMjQw NzEwNTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEI2NjQ3NzNGNjBENDQy M0RCMjUzMzdEMEJGRTlCRkY5REE5RUM1OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLwm66vDQQUSH/bbA1gAIrZi8givmdSK+ZjdKtrlWIUn4D7pOp 5qZGubMkJUJyyC0ChK1Vg3wKu8t8ksvxI2iwcP3IrmejcfY4aQp+juo98e7Wap17 68R1C0WQZBDzaQxM8V/6e3Izw5QDXxvmjGlSUraKjSTFJ6FaUV3+EFFJvJjC6zd8 RTWaUdA1kD2pDBilffax9NM3eJ6ceQzIC5loFR+KALSBa1LxF0aIwxPgpTNYlI8r R07OerKZHzE6t84i3e3LzqyYp08+WYdQLRI7dETA0Fc19jvbwe2UHmP/xItIGdra kGMNIGrTx35qdL6EXEZcrq6hkUiAWThwoWn1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUtmR3P2DUQj2yUzfQv+m/+dqexZgwHwYDVR0jBBgwFoAU27TF+pa4dBv2i0i/ AE29b9ljb60wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODkw LzI3VEYtcGE0ZEJ2MmkwaV9BRTI5YjlsamI2MC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMjdURi1wYTRkQnYyaTBpX0FFMjliOWxqYjYwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODkwL3RtUjNQMkRVUWoyeVV6 ZlF2LW1fLWRxZXhaZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAMr+LgwDQYJKoZIhvcNAQELBQADggEBAIrGNDnjTPy4r6AAO+SfoyaCM1Lw0fqz RWW1X0fFEOdftXQ3pu703DcF/ymQWm9SIXWFlgy171XXlLxJkp9JIGKb3psgXmpR u5f5YZcp2iVrvnYbufOAWcVufujXLyL640ZhKGxxxBN1Aa7E8cxWM9L3M/AvQRFe B1gFgfT8VVWfZ2eD6bJq1R9Yusq3oXqrZZPek5sBROjLJHGsBiU9kS9YGiC6BDP9 sKfYv64IhQyQnwqee/3m0Sb2xeXVj+YJNrcL11P6Tdjyac+Oz0oPSJ8rxqgoAsUf 36j6EeM4cnPagjfkXpGpzM+u+cYs772XKx8zzcU9rVGCHazWQ7WbleY= -----END CERTIFICATE-----Generated at Mon Jan 12 08:08:08 2026 by rpki-client