This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/242/RErAL65HRCGrc8Rg8rd4PzX2Lwk.roa File: RErAL65HRCGrc8Rg8rd4PzX2Lwk.roa (raw, json) Hash identifier: 0yvpMKvii87j2Vl3CUVTg0uM0+hwFSf/HY7xN0uVRJQ= Subject key identifier: 44:4A:C0:2F:AE:47:44:21:AB:73:C4:60:F2:B7:78:3F:35:F6:2F:09 Certificate issuer: /CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA Certificate serial: 196F Authority key identifier: 0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/RErAL65HRCGrc8Rg8rd4PzX2Lwk.roa Signing time: Wed 07 Jan 2026 03:15:35 +0000 ROA not before: Wed 07 Jan 2026 03:15:35 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 37963 IP address blocks: 43.250.12.0/22 maxlen: 24 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 6511 (0x196f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA Validity Not Before: Jan 7 03:15:35 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=444AC02FAE474421AB73C460F2B7783F35F62F09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:8d:3f:0b:5c:17:06:91:3a:2f:79:f5:37: 12:cf:ef:4f:70:7f:e6:87:42:ad:4f:f6:d8:5d:55: a1:a8:46:c2:98:97:43:ad:3f:f0:ba:fe:72:93:dd: 21:86:f4:57:63:1f:9d:18:63:3b:a1:e4:cf:86:a7: fb:c5:3a:9f:42:f2:71:2c:a7:42:d3:d6:e7:4e:f6: 06:47:36:63:62:5b:22:27:03:b2:84:62:bc:71:c2: de:2d:94:14:f3:e4:58:b9:47:2b:f9:de:1c:5c:fb: cb:ce:4f:27:46:1a:d3:4a:90:99:46:66:43:db:4c: bf:4e:9d:3d:86:ad:fc:7a:a6:16:fa:61:5b:20:19: f9:97:67:62:1f:3b:0c:f3:0c:b3:a8:ae:c6:91:31: bf:05:5a:eb:83:b2:79:d5:eb:89:c0:17:44:97:b4: 4c:c8:60:d8:4d:9c:0f:cf:95:04:be:33:2b:1d:44: a6:f7:40:eb:6f:c0:f0:86:c9:d2:e6:d4:20:10:6d: 5c:b9:7d:40:55:77:5e:18:3d:ac:d6:09:41:04:83: 2b:0d:e9:2b:76:13:04:75:a3:f6:b2:27:f4:50:1c: 72:0d:6c:5c:38:d5:85:5e:5b:d3:38:a4:45:80:c3: 2c:70:b0:e0:a3:4a:a5:b6:0a:0b:77:5d:f8:02:f5: 6c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4A:C0:2F:AE:47:44:21:AB:73:C4:60:F2:B7:78:3F:35:F6:2F:09 X509v3 Authority Key Identifier: keyid:0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/RErAL65HRCGrc8Rg8rd4PzX2Lwk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.250.12.0/22 Signature Algorithm: sha256WithRSAEncryption 96:22:be:39:a3:52:a3:64:a7:62:3d:f5:6b:f8:70:f2:52:81: 0b:3f:c1:0d:39:b8:89:b6:bd:5d:d4:4c:27:af:78:63:73:98: 74:24:07:86:9f:1a:29:33:4d:b9:87:41:fe:ce:b5:d8:7d:a2: f9:d9:89:41:8a:dd:f1:56:65:17:f1:36:67:58:03:d4:47:97: 1c:16:f8:7c:bb:09:3b:e5:c3:66:2f:a8:90:95:c6:b4:ee:44: 5e:86:83:fa:30:7a:0b:0e:31:31:d5:95:dc:c1:4e:ee:ff:c4: 3f:8f:93:59:d2:54:f1:af:f5:60:04:12:87:0a:23:1f:36:ca: c2:b4:32:61:ea:06:43:bc:32:5d:95:9d:56:f4:a2:39:6b:52: b7:73:14:05:d5:f7:34:6f:02:08:82:4f:26:d1:51:7c:70:7e: 8b:3f:48:ae:30:a6:1b:db:6c:72:5c:3c:84:6b:5c:c2:a5:d8: 0b:43:f0:85:ba:ea:97:9c:54:7a:31:20:21:37:89:48:1b:cc: ba:b9:48:82:51:89:89:09:ed:cf:3e:53:0e:7e:55:0a:4d:11: dd:1f:ea:43:a0:27:aa:88:b1:cc:2f:58:59:45:46:65:9b:85: 8e:69:18:f8:27:e7:95:c3:a5:e5:8b:f6:3b:c5:50:88:da:73: 47:c7:b0:d4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGW8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE2 Rjk3MkQyNDA3OEY4OTA4OEVEMTEwQTI2RENERjkwQTlFQkNFQTAeFw0yNjAxMDcw MzE1MzVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQ0NEFDMDJGQUU0NzQ0 MjFBQjczQzQ2MEYyQjc3ODNGMzVGNjJGMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC41o0/C1wXBpE6L3n1NxLP709wf+aHQq1P9thdVaGoRsKYl0Ot P/C6/nKT3SGG9FdjH50YYzuh5M+Gp/vFOp9C8nEsp0LT1udO9gZHNmNiWyInA7KE Yrxxwt4tlBTz5Fi5Ryv53hxc+8vOTydGGtNKkJlGZkPbTL9OnT2Grfx6phb6YVsg GfmXZ2IfOwzzDLOorsaRMb8FWuuDsnnV64nAF0SXtEzIYNhNnA/PlQS+MysdRKb3 QOtvwPCGydLm1CAQbVy5fUBVd14YPazWCUEEgysN6St2EwR1o/ayJ/RQHHINbFw4 1YVeW9M4pEWAwyxwsOCjSqW2Cgt3XfgC9WwxAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQURErAL65HRCGrc8Rg8rd4PzX2LwkwHwYDVR0jBBgwFoAUCm+XLSQHj4kIjtEQ om3N+QqevOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQy L0NtLVhMU1FIajRrSWp0RVFvbTNOLVFxZXZPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvQ20tWExTUUhqNGtJanRFUW9tM04tUXFldk9vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQyL1JFckFMNjVIUkNHcmM4 Umc4cmQ0UHpYMkx3ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr+gwwDQYJKoZIhvcNAQELBQADggEBAJYivjmjUqNkp2I99Wv4cPJSgQs/wQ05 uIm2vV3UTCeveGNzmHQkB4afGikzTbmHQf7Otdh9ovnZiUGK3fFWZRfxNmdYA9RH lxwW+Hy7CTvlw2YvqJCVxrTuRF6Gg/owegsOMTHVldzBTu7/xD+Pk1nSVPGv9WAE EocKIx82ysK0MmHqBkO8Ml2VnVb0ojlrUrdzFAXV9zRvAgiCTybRUXxwfos/SK4w phvbbHJcPIRrXMKl2AtD8IW66pecVHoxICE3iUgbzLq5SIJRiYkJ7c8+Uw5+VQpN Ed0f6kOgJ6qIscwvWFlFRmWbhY5pGPgn55XDpeWL9jvFUIjac0fHsNQ= -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:35 2026 by rpki-client