This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/q4TynouLo_pIFDn-tnfGlvvT6vU.roa File: q4TynouLo_pIFDn-tnfGlvvT6vU.roa (raw, json) Hash identifier: hHbEXu4MwVtgG3iUjttRn8bAxHt+93buH2jhSeuBS6w= Subject key identifier: AB:84:F2:9E:8B:8B:A3:FA:48:14:39:FE:B6:77:C6:96:FB:D3:EA:F5 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 894A Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/q4TynouLo_pIFDn-tnfGlvvT6vU.roa Signing time: Sun 07 Dec 2025 05:48:02 +0000 ROA not before: Sun 07 Dec 2025 05:48:02 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 35146 (0x894a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Dec 7 05:48:02 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=AB84F29E8B8BA3FA481439FEB677C696FBD3EAF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:77:c2:d3:7e:f3:ea:9b:4a:56:35:bd:2c: 84:48:d0:8a:8f:80:f7:73:00:93:6b:fb:58:c0:47: da:71:4f:7a:9b:da:a7:14:00:55:c4:c2:a5:e5:c2: ed:0b:f7:1a:c9:1d:fd:86:f6:e3:33:74:aa:c7:e9: e5:75:09:ab:cb:34:05:62:38:02:6b:d0:29:66:1a: da:06:33:9c:85:cb:0a:00:86:da:1c:97:80:4e:63: c1:a8:aa:d0:45:06:73:13:96:04:01:d8:a2:b7:56: a9:7e:9b:77:60:cc:a9:73:47:bd:6a:0c:a2:92:23: de:a1:ba:5a:e0:af:b5:a5:29:16:d4:7e:fb:ab:8c: 80:76:f0:7b:39:36:6e:0d:31:1e:43:04:e0:93:b2: af:47:c4:ee:41:9d:72:29:71:83:d5:70:d7:be:44: b6:50:46:c9:91:80:4e:1f:92:a9:6d:a6:15:b1:db: c0:44:17:6d:8b:2a:29:85:0d:3d:d4:3c:6c:6d:77: 51:d9:6e:2b:00:5a:e1:f6:5e:a6:6d:a2:50:e0:53: 03:34:af:2f:d8:2f:2f:fc:05:7d:ac:20:d0:ba:4b: 17:a5:ef:b5:9c:cc:7e:07:6b:34:c0:42:12:64:86: 8d:ae:9f:ed:40:e5:e9:5d:13:a1:72:d0:62:f9:a2: 23:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:84:F2:9E:8B:8B:A3:FA:48:14:39:FE:B6:77:C6:96:FB:D3:EA:F5 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/q4TynouLo_pIFDn-tnfGlvvT6vU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption b6:28:2f:9d:fd:46:e8:e5:c2:a0:a5:0c:ad:71:41:72:2b:4e: 0c:1e:be:8e:6d:72:10:f9:d9:36:2c:38:37:05:ee:13:e3:61: 5e:1c:6d:cc:66:10:25:2e:35:3b:55:83:36:41:be:db:a1:88: f0:70:92:9f:44:5a:42:0b:03:55:9e:e6:f3:76:e6:74:21:89: f9:6f:30:2d:86:91:79:2c:50:cc:c2:66:7a:c6:70:79:2b:40: 9d:4e:c4:96:77:94:91:14:f1:75:6f:b1:6e:81:43:c3:9c:a8: 13:f3:16:cf:d0:a4:a6:49:c3:6c:ab:9d:ec:08:f8:2d:00:ab: 24:85:1d:f9:15:6e:1b:68:ca:bd:cc:7b:49:cb:f4:33:e0:d5: 9f:6f:a6:a2:b7:1b:1f:09:c7:d5:09:b6:23:64:6a:38:c7:46: 8c:9a:51:2b:d1:1d:65:30:8f:69:7e:22:34:9c:0b:85:74:6f: af:5c:66:f2:15:11:40:65:dd:a3:f8:bd:97:7a:a7:03:7c:4d: 2e:7b:b0:3b:ca:d4:5c:19:e7:99:b0:df:3a:65:eb:a1:2b:cf: be:12:db:e5:31:ff:80:8e:c6:e0:93:8c:8b:12:d4:fc:10:1a: 74:6f:1d:7b:45:ec:ed:af:02:28:3f:28:de:1d:2b:84:30:75: 13:3d:95:6c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIDAIlKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKEQy QUI2QzlCNkUxNjUzMzRDMDMyRDA1MUQ1RkM3RDE1NDdFNEUzNTMwHhcNMjUxMjA3 MDU0ODAyWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyhBQjg0RjI5RThCOEJB M0ZBNDgxNDM5RkVCNjc3QzY5NkZCRDNFQUY1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAuXl3wtN+8+qbSlY1vSyESNCKj4D3cwCTa/tYwEfacU96m9qn FABVxMKl5cLtC/cayR39hvbjM3Sqx+nldQmryzQFYjgCa9ApZhraBjOchcsKAIba HJeATmPBqKrQRQZzE5YEAdiit1apfpt3YMypc0e9agyikiPeobpa4K+1pSkW1H77 q4yAdvB7OTZuDTEeQwTgk7KvR8TuQZ1yKXGD1XDXvkS2UEbJkYBOH5KpbaYVsdvA RBdtiyophQ091DxsbXdR2W4rAFrh9l6mbaJQ4FMDNK8v2C8v/AV9rCDQuksXpe+1 nMx+B2s0wEISZIaNrp/tQOXpXROhctBi+aIjUwIDAQABo4IB9DCCAfAwHQYDVR0O BBYEFKuE8p6Li6P6SBQ5/rZ3xpb70+r1MB8GA1UdIwQYMBaAFNKrbJtuFlM0wDLQ UdX8fRVH5ONTMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw OTgvMHF0c20yNFdVelRBTXRCUjFmeDlGVWZrNDFNLmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDk4L3E0VHlub3VMb19w SUZEbi10bmZHbHZ2VDZ2VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkB5tAMA0GCSqGSIb3DQEBCwUAA4IBAQC2KC+d/Ubo5cKgpQytcUFyK04M Hr6ObXIQ+dk2LDg3Be4T42FeHG3MZhAlLjU7VYM2Qb7boYjwcJKfRFpCCwNVnubz duZ0IYn5bzAthpF5LFDMwmZ6xnB5K0CdTsSWd5SRFPF1b7FugUPDnKgT8xbP0KSm ScNsq53sCPgtAKskhR35FW4baMq9zHtJy/Qz4NWfb6aitxsfCcfVCbYjZGo4x0aM mlEr0R1lMI9pfiI0nAuFdG+vXGbyFRFAZd2j+L2XeqcDfE0ue7A7ytRcGeeZsN86 ZeuhK8++EtvlMf+Ajsbgk4yLEtT8EBp0bx17ReztrwIoPyjeHSuEMHUTPZVs -----END CERTIFICATE-----Generated at Sun Dec 7 11:58:43 2025 by rpki-client