This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/q5zXrMoMffZwLXVeq6HsixWLmIU.roa File: q5zXrMoMffZwLXVeq6HsixWLmIU.roa (raw, json) Hash identifier: kaHQJjHgBD5QKZ3AV/zXx/ZRGKqzCMEx6Yr4AMs0Kvg= Subject key identifier: AB:9C:D7:AC:CA:0C:7D:F6:70:2D:75:5E:AB:A1:EC:8B:15:8B:98:85 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: F402 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/q5zXrMoMffZwLXVeq6HsixWLmIU.roa Signing time: Sun 25 Jan 2026 07:28:13 +0000 ROA not before: Sun 25 Jan 2026 07:28:13 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 134762 IP address blocks: 43.226.72.0/22 maxlen: 22 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 62466 (0xf402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 25 07:28:13 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=AB9CD7ACCA0C7DF6702D755EABA1EC8B158B9885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:41:2b:15:5b:75:26:db:bb:4a:8f:ba:2b:52: 21:ae:ef:0e:86:c5:69:11:fd:37:11:4b:dd:43:fb: cf:ab:f9:0c:ed:80:c9:f4:05:ee:3b:c0:c3:5d:1b: 29:32:e6:18:dd:7e:9b:21:34:35:32:88:9e:fc:ff: a7:89:cc:b1:6f:c8:c0:20:43:5c:ad:00:54:f3:9d: 2d:15:36:ab:8c:e1:70:e5:24:14:3a:01:ca:24:e1: 5f:a9:88:94:94:5c:08:8f:c4:dc:aa:12:20:cc:f2: 5d:1a:3a:93:0b:48:c5:f5:cc:14:c0:6d:bd:77:93: 75:93:6c:d4:ba:d8:a5:5c:a2:28:47:6b:4f:8e:13: 17:79:fa:92:3a:a6:27:2e:f8:47:45:3c:53:3f:5b: 82:72:50:05:12:df:3f:67:08:be:8c:eb:a1:97:09: ce:25:75:c7:2e:1c:94:cc:0e:cc:dd:a9:68:94:a4: be:b0:47:42:e8:a9:47:a7:a3:3b:07:d7:0c:ff:0e: 28:9c:53:d4:a4:19:b7:6e:b9:3b:5c:dc:98:25:85: f0:4d:18:81:26:7a:eb:04:0b:1d:6e:10:65:df:22: 1f:1b:d8:8d:d3:52:99:c4:51:5d:d8:cd:24:75:d9: 6d:f9:4f:c0:a5:ac:ab:02:b0:ae:34:b6:cb:f9:06: 88:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9C:D7:AC:CA:0C:7D:F6:70:2D:75:5E:AB:A1:EC:8B:15:8B:98:85 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/q5zXrMoMffZwLXVeq6HsixWLmIU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.72.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:2a:4a:24:db:75:15:d6:7b:52:32:b7:28:27:3b:86:5a:2e: 64:a0:78:95:3f:f5:26:a1:03:c7:eb:3d:b0:e9:5c:98:81:72: 50:cb:d7:b1:7a:f0:de:10:40:28:bb:90:f7:00:2e:a3:f9:fa: 95:e9:2e:0d:c1:2e:3d:57:70:06:ba:80:51:54:c6:80:be:4f: 3f:f4:20:f1:f5:b9:b2:39:85:45:0c:c1:d6:4c:bf:eb:7c:ab: 2c:fb:fd:a4:91:86:b0:33:1a:9c:cf:b4:b1:15:aa:c6:34:d8: 65:70:17:55:56:00:49:13:97:7d:af:55:3d:28:b8:4d:7f:1a: 9e:89:d7:d9:9f:04:80:0c:e8:ff:cb:29:8f:7f:4c:ef:c8:74: 7c:e7:d5:e8:c1:c5:9f:66:c3:25:0a:cd:91:83:7c:49:ac:38: a0:dc:a5:28:ba:32:dd:10:02:c7:53:f5:b9:e9:af:7d:cf:29: 52:6c:d3:f9:af:e0:85:99:44:77:94:f7:cd:db:1c:9c:5c:28: e4:76:7a:88:3e:60:f3:e9:ce:2a:b2:c4:3e:48:5b:e6:bc:e2: 50:4d:bf:79:68:e0:8a:53:e4:88:0f:d7:91:9f:e4:d5:6a:6a: 3d:da:1b:e7:31:5a:7f:3b:5a:6b:9e:b2:2c:92:d2:9d:ed:8a: 57:4c:bb:93 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAPQCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTI1 MDcyODEzWhcNMjcwMTA5MDgyMzE4WjAzMTEwLwYDVQQDEyhBQjlDRDdBQ0NBMEM3 REY2NzAyRDc1NUVBQkExRUM4QjE1OEI5ODg1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAzEErFVt1Jtu7So+6K1Ihru8OhsVpEf03EUvdQ/vPq/kM7YDJ 9AXuO8DDXRspMuYY3X6bITQ1Moie/P+nicyxb8jAIENcrQBU850tFTarjOFw5SQU OgHKJOFfqYiUlFwIj8TcqhIgzPJdGjqTC0jF9cwUwG29d5N1k2zUutilXKIoR2tP jhMXefqSOqYnLvhHRTxTP1uCclAFEt8/Zwi+jOuhlwnOJXXHLhyUzA7M3alolKS+ sEdC6KlHp6M7B9cM/w4onFPUpBm3brk7XNyYJYXwTRiBJnrrBAsdbhBl3yIfG9iN 01KZxFFd2M0kddlt+U/ApayrArCuNLbL+QaI+wIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFKuc16zKDH32cC11Xquh7IsVi5iFMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL3E1elhyTW9NZmZa d0xYVmVxNkhzaXhXTG1JVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIr4kgwDQYJKoZIhvcNAQELBQADggEBAGwqSiTbdRXWe1IytygnO4ZaLmSg eJU/9SahA8frPbDpXJiBclDL17F68N4QQCi7kPcALqP5+pXpLg3BLj1XcAa6gFFU xoC+Tz/0IPH1ubI5hUUMwdZMv+t8qyz7/aSRhrAzGpzPtLEVqsY02GVwF1VWAEkT l32vVT0ouE1/Gp6J19mfBIAM6P/LKY9/TO/IdHzn1ejBxZ9mwyUKzZGDfEmsOKDc pSi6Mt0QAsdT9bnpr33PKVJs0/mv4IWZRHeU983bHJxcKOR2eog+YPPpziqyxD5I W+a84lBNv3lo4IpT5IgP15Gf5NVqaj3aG+cxWn87WmuesiyS0p3tildMu5M= -----END CERTIFICATE-----Generated at Sun Jan 25 11:58:10 2026 by rpki-client