This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/PYtXJ6tl5r9WY5sf-s4OqvR_2lY.roa File: PYtXJ6tl5r9WY5sf-s4OqvR_2lY.roa (raw, json) Hash identifier: 2AH+e21KqDdm7qi+016NzWiUE20tGV/t5rYXqMvAfS0= Subject key identifier: 3D:8B:57:27:AB:65:E6:BF:56:63:9B:1F:FA:CE:0E:AA:F4:7F:DA:56 Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 2151 Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/PYtXJ6tl5r9WY5sf-s4OqvR_2lY.roa Signing time: Fri 05 Dec 2025 02:36:40 +0000 ROA not before: Fri 05 Dec 2025 02:36:40 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 4808 IP address blocks: 113.208.112.0/22 maxlen: 22 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 8529 (0x2151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: Dec 5 02:36:40 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=3D8B5727AB65E6BF56639B1FFACE0EAAF47FDA56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:e4:80:ae:30:02:bd:25:85:23:86:92:13: 56:8c:41:72:fe:4b:c1:a9:56:0a:92:bb:4b:36:da: d4:dc:8e:5e:ff:92:3b:5d:d7:1e:8a:5f:df:bc:ed: 83:8a:c1:ac:ad:95:a6:c6:76:49:95:ef:3b:35:db: 43:bc:21:44:a6:7d:8f:a2:2f:b5:c1:f4:19:b5:52: 04:eb:b9:a6:bd:dd:65:91:05:01:29:9a:3a:71:6b: 20:f5:34:02:ad:1d:fb:ed:ed:20:b1:e3:85:12:0c: 58:a4:89:86:d7:bb:3f:5b:9a:19:78:25:5a:66:f6: 39:52:ac:36:75:a7:5c:ae:74:d2:66:f3:2b:1d:ab: 09:e6:64:80:4f:63:be:e4:61:b5:f1:e6:1b:2d:2f: 8a:53:18:d6:ee:dc:04:5e:bd:94:63:43:e4:b9:30: 99:d9:d8:f7:a0:a3:a7:01:2d:2c:88:e3:0c:ec:0a: cb:c0:9b:a4:0e:65:51:78:05:ba:3e:17:10:45:2f: 8c:6e:2e:af:f2:6c:d0:24:98:8a:ec:82:5a:fb:2e: 10:ac:57:08:4c:f1:66:e7:a7:66:d1:36:e7:88:ea: a0:a8:11:6c:22:7b:83:a2:54:1a:78:c1:47:60:1c: bb:e8:13:e9:c5:c8:6a:20:54:e5:06:21:75:e3:7a: 2a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8B:57:27:AB:65:E6:BF:56:63:9B:1F:FA:CE:0E:AA:F4:7F:DA:56 X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/PYtXJ6tl5r9WY5sf-s4OqvR_2lY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.208.112.0/22 Signature Algorithm: sha256WithRSAEncryption a4:72:bc:2a:62:ef:4f:9c:66:a3:93:cc:71:d2:d5:6d:c8:f3: 70:5a:38:fe:3c:98:0c:44:48:97:2f:27:d1:bc:53:59:09:6d: 52:cc:02:fc:f8:9a:a4:ce:1b:30:1f:26:30:a3:45:16:4d:f6: 8f:4d:11:b1:85:b3:1a:b1:8b:fd:5e:35:f7:a9:48:8c:d4:6f: db:f1:a0:60:ca:aa:ff:d3:08:29:82:fd:18:47:b8:3a:84:c1: 94:73:45:41:75:34:43:aa:b3:59:0d:23:69:77:3f:2a:88:57: 1d:5e:5e:70:34:d1:4a:cc:b3:ac:a7:d1:b6:11:81:44:0a:f1: 2d:da:85:e4:e8:94:8a:90:88:bf:6d:1d:14:64:22:34:9b:22: 68:52:a9:54:1e:4c:64:97:80:0c:55:56:02:d4:7e:1e:bd:7c: 79:7a:40:cf:aa:ff:2f:09:e3:3f:d6:2f:a5:a6:0a:2c:4c:32: 28:67:a5:80:09:e4:ff:33:a2:79:78:c5:62:bf:65:91:24:10: 37:bd:89:04:16:22:2e:b4:ba:f6:fb:66:a6:74:93:bf:d4:d8: 57:03:a2:3a:01:21:b8:0d:cf:02:c4:10:01:32:72:c4:45:99: 76:e5:63:94:cd:5d:b7:2b:df:ab:e4:7c:a5:fa:0e:2f:a9:9d: c4:de:e6:fb -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIVEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTEyMDUw MjM2NDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDNEOEI1NzI3QUI2NUU2 QkY1NjYzOUIxRkZBQ0UwRUFBRjQ3RkRBNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAm+SArjACvSWFI4aSE1aMQXL+S8GpVgqSu0s22tTcjl7/kjtd 1x6KX9+87YOKwaytlabGdkmV7zs120O8IUSmfY+iL7XB9Bm1UgTruaa93WWRBQEp mjpxayD1NAKtHfvt7SCx44USDFikiYbXuz9bmhl4JVpm9jlSrDZ1p1yudNJm8ysd qwnmZIBPY77kYbXx5hstL4pTGNbu3ARevZRjQ+S5MJnZ2Pego6cBLSyI4wzsCsvA m6QOZVF4Bbo+FxBFL4xuLq/ybNAkmIrsglr7LhCsVwhM8Wbnp2bRNueI6qCoEWwi e4OiVBp4wUdgHLvoE+nFyGogVOUGIXXjeiqDAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUPYtXJ6tl5r9WY5sf+s4OqvR/2lYwHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxL1BZdFhKNnRsNXI5V1k1 c2YtczRPcXZSXzJsWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJx0HAwDQYJKoZIhvcNAQELBQADggEBAKRyvCpi70+cZqOTzHHS1W3I83BaOP48 mAxESJcvJ9G8U1kJbVLMAvz4mqTOGzAfJjCjRRZN9o9NEbGFsxqxi/1eNfepSIzU b9vxoGDKqv/TCCmC/RhHuDqEwZRzRUF1NEOqs1kNI2l3PyqIVx1eXnA00UrMs6yn 0bYRgUQK8S3aheTolIqQiL9tHRRkIjSbImhSqVQeTGSXgAxVVgLUfh69fHl6QM+q /y8J4z/WL6WmCixMMihnpYAJ5P8zonl4xWK/ZZEkEDe9iQQWIi60uvb7ZqZ0k7/U 2FcDojoBIbgNzwLEEAEycsRFmXblY5TNXbcr36vkfKX6Di+pncTe5vs= -----END CERTIFICATE-----Generated at Sun Dec 7 00:07:24 2025 by rpki-client