This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2358/3chrI5RdhjIBoTWIkcprsQK-7Yo.roa File: 3chrI5RdhjIBoTWIkcprsQK-7Yo.roa (raw, json) Hash identifier: Z6c3X/e7f8O3PvItxRFteZOKzRAOLRNJsPpjkYKmHUs= Subject key identifier: DD:C8:6B:23:94:5D:86:32:01:A1:35:88:91:CA:6B:B1:02:BE:ED:8A Certificate issuer: /CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1 Certificate serial: 0177 Authority key identifier: 4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/3chrI5RdhjIBoTWIkcprsQK-7Yo.roa Signing time: Mon 24 Nov 2025 07:47:22 +0000 ROA not before: Mon 24 Nov 2025 07:47:22 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 131539 IP address blocks: 110.42.16.0/24 maxlen: 32 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1 Validity Not Before: Nov 24 07:47:22 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DDC86B23945D863201A1358891CA6BB102BEED8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9f:22:fe:fd:4b:a5:ed:b4:e9:ed:ef:6a:fe: 1a:04:2e:a2:cc:8f:f2:4c:bf:97:39:85:33:3d:6a: 63:15:3c:3e:c8:c2:89:65:4d:bb:88:69:ab:7d:31: 98:06:eb:56:94:c4:1b:93:ee:cb:a9:1a:74:4b:24: 14:be:11:34:63:5f:39:f4:aa:1e:20:78:6c:ab:12: a1:32:92:f0:ee:71:05:0a:57:a1:fe:5c:7e:9b:ca: 4e:75:52:e0:4a:e3:2f:fd:dd:b7:43:93:fd:e0:3e: 29:03:f9:4b:4f:6a:11:04:22:df:34:d7:86:ee:c1: 47:56:d8:04:4a:c1:2e:11:a2:29:c9:06:d0:ee:d0: 9a:41:0c:1b:48:61:ce:78:2c:12:b0:69:d4:0b:ea: 6b:94:1a:9c:6d:20:3b:cf:eb:fa:37:1e:d6:31:55: 6a:fe:a6:22:2d:0c:b4:26:9c:36:9a:9c:70:ca:fc: 52:6e:a0:c0:46:db:62:ce:01:ef:56:b9:c0:62:03: 2a:1c:7b:a5:a6:30:86:06:f5:00:b8:40:8f:4c:bd: f0:08:08:5a:da:7e:d5:0b:37:11:90:ea:ba:da:ae: c5:34:55:32:d0:5e:bc:d4:57:49:19:7c:3c:6e:57: 03:72:7c:49:aa:aa:6d:02:9b:29:ed:ed:66:1e:7c: af:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C8:6B:23:94:5D:86:32:01:A1:35:88:91:CA:6B:B1:02:BE:ED:8A X509v3 Authority Key Identifier: keyid:4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/3chrI5RdhjIBoTWIkcprsQK-7Yo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.42.16.0/24 Signature Algorithm: sha256WithRSAEncryption aa:f3:e8:ff:34:23:4c:23:38:cc:c7:b9:96:37:dd:bc:a2:ec: 1b:4e:d8:93:22:10:ea:d4:ad:6d:13:ae:70:92:88:9b:22:b4: 44:74:7f:1c:a6:1e:07:29:0c:77:18:97:e6:cf:86:53:b0:4a: 25:9b:df:86:c3:6f:2c:c5:da:75:28:7b:2b:2a:f7:d7:ea:c7: 29:8f:a8:64:f6:6a:c0:25:40:f1:b0:ad:b4:b0:a1:6f:d3:fb: 00:1a:3b:8c:ad:52:46:10:4b:bf:cf:09:7a:0b:d6:37:e6:ee: 45:53:f3:59:ab:26:70:fc:22:b6:7e:af:d1:31:6c:26:03:7e: 40:f5:41:6c:b9:be:4e:32:6e:3a:56:48:31:77:e3:4b:a6:fd: 25:81:0c:d9:bb:ca:ac:bf:b5:4e:bf:a9:59:1f:1c:89:00:d3: 82:73:71:d2:69:6f:94:f9:18:24:79:17:bb:77:6b:6d:57:4d: af:e5:a6:fe:7c:6f:2c:45:33:b5:e4:8e:29:19:5b:52:e9:7e: c6:04:a2:d1:c7:59:d4:34:a0:bd:71:49:56:c6:20:aa:8a:6e: 63:b0:ad:35:47:5a:62:82:bd:08:e2:28:40:cd:87:4c:68:9e: 28:28:d7:7b:c6:95:2c:44:05:40:42:0c:3b:43:68:00:e7:fd: 56:a1:b7:29 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEMw NDMwRTM1MThBNUFGNTFCQzBERjYyNTY3RTBEMTU3Q0E1MjNDMTAeFw0yNTExMjQw NzQ3MjJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEREQzg2QjIzOTQ1RDg2 MzIwMUExMzU4ODkxQ0E2QkIxMDJCRUVEOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhnyL+/Uul7bTp7e9q/hoELqLMj/JMv5c5hTM9amMVPD7Iwoll TbuIaat9MZgG61aUxBuT7supGnRLJBS+ETRjXzn0qh4geGyrEqEykvDucQUKV6H+ XH6byk51UuBK4y/93bdDk/3gPikD+UtPahEEIt8014buwUdW2ARKwS4RoinJBtDu 0JpBDBtIYc54LBKwadQL6muUGpxtIDvP6/o3HtYxVWr+piItDLQmnDaanHDK/FJu oMBG22LOAe9WucBiAyoce6WmMIYG9QC4QI9MvfAICFraftULNxGQ6rrarsU0VTLQ XrzUV0kZfDxuVwNyfEmqqm0Cmynt7WYefK9LAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU3chrI5RdhjIBoTWIkcprsQK+7YowHwYDVR0jBBgwFoAUTAQw41GKWvUbwN9i Vn4NFXylI8EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM1 OC9UQVF3NDFHS1d2VWJ3TjlpVm40TkZYeWxJOEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RBUXc0MUdLV3ZVYndOOWlWbjRORlh5bEk4RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzNTgvM2Nockk1UmRoaklC b1RXSWtjcHJzUUstN1lvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG4qEDANBgkqhkiG9w0BAQsFAAOCAQEAqvPo/zQjTCM4zMe5ljfdvKLsG07Y kyIQ6tStbROucJKImyK0RHR/HKYeBykMdxiX5s+GU7BKJZvfhsNvLMXadSh7Kyr3 1+rHKY+oZPZqwCVA8bCttLChb9P7ABo7jK1SRhBLv88JegvWN+buRVPzWasmcPwi tn6v0TFsJgN+QPVBbLm+TjJuOlZIMXfjS6b9JYEM2bvKrL+1Tr+pWR8ciQDTgnNx 0mlvlPkYJHkXu3drbVdNr+Wm/nxvLEUzteSOKRlbUul+xgSi0cdZ1DSgvXFJVsYg qopuY7CtNUdaYoK9COIoQM2HTGieKCjXe8aVLEQFQEIMO0NoAOf9VqG3KQ== -----END CERTIFICATE-----Generated at Sun Dec 7 11:59:30 2025 by rpki-client