This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/7PKrlIeYLDtSJF6jj50hPuMW56o.roa
File: 7PKrlIeYLDtSJF6jj50hPuMW56o.roa (raw, json)
Hash identifier: j6HqdTw6z2bYh9eJ3jguI5sSBOiyrYwlkyNEUVTc4wc=
Subject key identifier: EC:F2:AB:94:87:98:2C:3B:52:24:5E:A3:8F:9D:21:3E:E3:16:E7:AA
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 2437
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/7PKrlIeYLDtSJF6jj50hPuMW56o.roa
Signing time: Mon 05 Jan 2026 03:02:46 +0000
ROA not before: Mon 05 Jan 2026 03:02:46 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 4811
IP address blocks: 101.96.192.0/18 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9271 (0x2437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 5 03:02:46 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=ECF2AB9487982C3B52245EA38F9D213EE316E7AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:c1:65:c5:30:76:6d:3d:12:5f:78:5a:c3:
60:dd:8c:b4:79:b7:26:29:d2:ff:3d:87:ac:81:c5:
ce:34:7f:84:07:cc:89:30:77:40:aa:9d:a1:b9:6c:
77:7a:b3:60:50:16:2e:69:04:26:2a:91:10:9c:bd:
12:b5:af:bc:6f:45:71:77:40:ae:ae:5c:91:e8:fe:
8c:d6:c3:c5:53:5e:eb:f8:93:7a:50:39:1e:9a:05:
ab:5a:4b:1a:de:ec:c5:57:a0:a4:23:c6:60:0a:a8:
33:16:d6:a7:05:52:13:45:32:7f:d0:11:88:38:61:
d6:f8:a6:0e:55:78:f5:66:d1:dc:86:f7:b3:f2:0a:
a8:4e:25:d9:25:d9:e6:6c:d3:a9:78:4a:3e:06:93:
23:14:f0:6a:43:ac:0e:85:79:49:a3:2c:83:35:cf:
ef:5d:0e:8b:a5:9d:1a:65:5b:0c:4b:d0:1e:e7:07:
e7:16:2a:25:dc:38:4e:a4:97:59:8f:dd:f8:82:21:
4b:62:1c:89:bd:e7:15:c8:06:47:25:e5:0e:76:3a:
5f:35:77:a3:4d:d5:a5:e6:dc:f3:4c:fa:f8:8c:3e:
b6:37:eb:fb:54:6a:fe:f2:f4:85:5b:9a:c9:aa:25:
42:37:2e:4b:3f:fb:a3:70:9c:6a:9b:e8:18:99:4d:
d1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F2:AB:94:87:98:2C:3B:52:24:5E:A3:8F:9D:21:3E:E3:16:E7:AA
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/7PKrlIeYLDtSJF6jj50hPuMW56o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.96.192.0/18
Signature Algorithm: sha256WithRSAEncryption
99:fe:29:b3:cf:a6:65:64:34:f8:aa:1d:1c:bb:7b:4d:c6:45:
9d:e7:7c:53:f5:f5:17:6c:e4:be:a2:fb:d1:8e:61:fe:4b:cd:
69:6e:5b:51:a8:86:ee:f0:1b:93:92:4a:46:8f:b0:8f:75:40:
3e:c1:ec:66:e7:21:0d:9c:ca:17:8a:c3:a3:46:1f:6e:5a:41:
9b:a8:02:81:cc:b1:25:62:99:c7:b5:ec:a2:71:83:fe:2e:7a:
8c:fa:00:06:bc:ee:b6:51:bd:3e:f2:61:29:0e:8e:e0:b0:47:
8d:ef:26:fc:f3:54:01:c2:0e:5f:00:a6:28:6b:47:cf:f5:bc:
d9:6d:a4:14:55:7b:63:40:df:87:72:bd:ae:fe:1c:79:d3:ea:
2b:d7:f0:6e:a9:43:d7:e3:97:2b:d4:84:ce:0a:d8:ec:cf:bc:
67:36:49:44:3f:6c:d1:8e:af:a7:74:ee:75:d5:8a:ac:12:a0:
93:f1:c9:6e:10:1f:08:2a:a1:22:95:8d:99:47:81:f0:fc:39:
9b:4c:4c:2a:a9:0a:d1:f9:4c:fa:d6:4b:51:e4:b2:1a:be:84:
e4:13:ff:a6:e2:c3:f1:fe:d0:2a:4e:99:a8:85:4e:c4:d3:77:
30:6e:08:d0:71:60:87:64:57:4a:9c:6a:29:8c:13:40:76:c8:
e6:30:0c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:19:06 2026 by rpki-client