This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/5p7WvI35Ug4E8xvMHN7bEksJcFQ.roa File: 5p7WvI35Ug4E8xvMHN7bEksJcFQ.roa (raw, json) Hash identifier: 3siNeWqHluofaJglAwIa3CA42nVVWawtOjLxh4gNluo= Subject key identifier: E6:9E:D6:BC:8D:F9:52:0E:04:F3:1B:CC:1C:DE:DB:12:4B:09:70:54 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 894B Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/5p7WvI35Ug4E8xvMHN7bEksJcFQ.roa Signing time: Sun 07 Dec 2025 05:48:02 +0000 ROA not before: Sun 07 Dec 2025 05:48:02 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 35147 (0x894b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Dec 7 05:48:02 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=E69ED6BC8DF9520E04F31BCC1CDEDB124B097054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:38:a4:c9:f6:d7:45:53:e4:03:9b:32:96: 36:15:bb:51:63:9c:b7:7c:97:47:a9:0d:45:09:50: 77:28:5d:e8:88:d1:b1:4d:8f:a2:60:ec:cf:63:fe: a6:af:9e:81:24:cb:c7:37:90:70:40:64:cb:97:fb: a2:aa:86:96:71:6f:99:6e:dc:67:d4:bb:5e:ce:fe: e5:67:fc:77:58:69:38:f5:62:31:24:c3:4f:b0:cc: 24:3a:e4:52:21:ad:cd:08:0f:dd:8c:eb:30:12:81: a0:cf:ac:3a:9c:02:4c:03:92:c5:1a:0a:a8:bf:fc: 00:26:e9:11:b5:64:24:80:89:7f:1e:74:40:76:06: 8a:46:e0:61:8b:d7:c6:76:31:5c:20:85:8d:ed:c2: d4:40:b9:26:73:a0:42:e0:aa:35:81:4b:2e:e1:0c: db:f4:ec:eb:aa:42:fe:38:e4:c2:f0:b3:79:96:1f: ca:07:78:e1:40:c5:b2:57:e3:a2:ab:9e:b6:01:89: 6e:82:3b:00:ac:04:a3:6f:83:91:93:17:17:51:ca: 70:55:bb:d0:36:e4:e7:36:a2:fc:65:d8:b0:f5:77: 29:4c:17:5d:dc:e8:27:16:6d:e5:4d:95:f3:62:16: 06:aa:86:d2:17:bf:99:98:7f:63:f9:32:a8:57:1b: 0e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9E:D6:BC:8D:F9:52:0E:04:F3:1B:CC:1C:DE:DB:12:4B:09:70:54 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/5p7WvI35Ug4E8xvMHN7bEksJcFQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 2e:cb:be:5f:26:f1:54:ad:34:f9:e1:2a:05:cc:69:6f:dd:14: 7e:dd:c7:ae:96:79:55:14:04:1e:31:6d:a7:fa:3e:da:1f:c7: 7c:18:35:f9:b0:f1:85:f4:1e:48:bd:63:7e:d2:4a:0e:24:ae: d8:dc:ca:1f:f3:fe:50:4a:8c:2e:c2:e2:8c:d5:d8:87:e9:f6: 62:48:aa:94:71:e4:89:3b:d8:37:64:3c:8f:c7:d9:27:29:4c: ae:6f:21:d0:b7:20:37:0e:09:dc:39:55:b1:b7:c1:9a:f1:94: 0f:9b:76:f2:d6:4a:18:54:e8:a8:a4:b7:89:fc:e1:4e:99:5c: 40:54:ec:92:92:cd:5e:c2:b7:cb:62:cf:6d:a8:3a:d9:a8:96: 44:81:83:32:b6:55:f7:bd:b1:2f:79:1c:ce:2c:92:99:e8:63: 5b:4f:41:a7:2a:e4:c5:17:ae:69:56:3a:6a:bc:9b:2f:e5:1f: 14:4e:87:c0:ff:8b:55:c1:3b:13:74:ff:7b:94:43:3f:f5:17: ec:9b:d5:71:04:ad:ba:97:0a:bb:78:5b:46:1e:dd:2f:e6:f4: 68:b0:ee:23:b5:d1:0c:41:40:81:59:74:27:5d:be:ee:3c:ac: 3d:fa:21:78:5d:b9:3c:ce:28:c6:f0:1d:80:54:c8:02:e9:75: 97:ec:0f:18 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIDAIlLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKEQy QUI2QzlCNkUxNjUzMzRDMDMyRDA1MUQ1RkM3RDE1NDdFNEUzNTMwHhcNMjUxMjA3 MDU0ODAyWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyhFNjlFRDZCQzhERjk1 MjBFMDRGMzFCQ0MxQ0RFREIxMjRCMDk3MDU0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAqOA4pMn210VT5AObMpY2FbtRY5y3fJdHqQ1FCVB3KF3oiNGx TY+iYOzPY/6mr56BJMvHN5BwQGTLl/uiqoaWcW+Zbtxn1Ltezv7lZ/x3WGk49WIx JMNPsMwkOuRSIa3NCA/djOswEoGgz6w6nAJMA5LFGgqov/wAJukRtWQkgIl/HnRA dgaKRuBhi9fGdjFcIIWN7cLUQLkmc6BC4Ko1gUsu4Qzb9OzrqkL+OOTC8LN5lh/K B3jhQMWyV+Oiq562AYlugjsArASjb4ORkxcXUcpwVbvQNuTnNqL8Zdiw9XcpTBdd 3OgnFm3lTZXzYhYGqobSF7+ZmH9j+TKoVxsOHQIDAQABo4IB9DCCAfAwHQYDVR0O BBYEFOae1ryN+VIOBPMbzBze2xJLCXBUMB8GA1UdIwQYMBaAFNKrbJtuFlM0wDLQ UdX8fRVH5ONTMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw OTgvMHF0c20yNFdVelRBTXRCUjFmeDlGVWZrNDFNLmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDk4LzVwN1d2STM1VWc0 RTh4dk1ITjdiRWtzSmNGUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkB5tAMA0GCSqGSIb3DQEBCwUAA4IBAQAuy75fJvFUrTT54SoFzGlv3RR+ 3ceulnlVFAQeMW2n+j7aH8d8GDX5sPGF9B5IvWN+0koOJK7Y3Mof8/5QSowuwuKM 1diH6fZiSKqUceSJO9g3ZDyPx9knKUyubyHQtyA3DgncOVWxt8Ga8ZQPm3by1koY VOiopLeJ/OFOmVxAVOySks1ewrfLYs9tqDrZqJZEgYMytlX3vbEveRzOLJKZ6GNb T0GnKuTFF65pVjpqvJsv5R8UTofA/4tVwTsTdP97lEM/9Rfsm9VxBK26lwq7eFtG Ht0v5vRosO4jtdEMQUCBWXQnXb7uPKw9+iF4Xbk8zijG8B2AVMgC6XWX7A8Y -----END CERTIFICATE-----Generated at Sun Dec 7 11:59:26 2025 by rpki-client