This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/JgjWkLdCFleawVTGhEhJNpE74sI.roa
File: JgjWkLdCFleawVTGhEhJNpE74sI.roa (raw, json)
Hash identifier: N9APigkUnifz939TtzUKxhKyyn8AOmLm5xRTMW8fCf8=
Subject key identifier: 26:08:D6:90:B7:42:16:57:9A:C1:54:C6:84:48:49:36:91:3B:E2:C2
Certificate issuer: /CN=B61E9138CFEB7D89AB8CF54276ED29B3D808E0BC
Certificate serial: 074D
Authority key identifier: B6:1E:91:38:CF:EB:7D:89:AB:8C:F5:42:76:ED:29:B3:D8:08:E0:BC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/th6ROM_rfYmrjPVCdu0ps9gI4Lw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/JgjWkLdCFleawVTGhEhJNpE74sI.roa
Signing time: Fri 16 Jan 2026 09:37:21 +0000
ROA not before: Fri 16 Jan 2026 09:37:21 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 214432
IP address blocks: 161.248.84.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1869 (0x74d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B61E9138CFEB7D89AB8CF54276ED29B3D808E0BC
Validity
Not Before: Jan 16 09:37:21 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=2608D690B74216579AC154C684484936913BE2C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:15:93:15:4e:89:90:78:ac:60:f1:8f:c3:81:
a6:3d:e6:ff:78:95:0e:3c:01:22:54:98:c3:c7:6f:
e7:2b:fe:89:d6:b6:7f:5e:56:41:25:fc:18:0d:35:
9c:9b:11:3c:39:04:e3:98:e1:fd:3c:4d:54:29:bc:
50:f4:a3:8a:b7:58:3c:43:f4:89:aa:ab:ac:af:b8:
60:a5:70:c1:f0:57:d1:fb:b5:ab:9c:93:a2:07:99:
76:f6:4f:94:06:f7:1d:71:4e:59:d8:eb:36:85:30:
75:75:12:74:d8:cc:3f:d8:62:5a:e7:7d:22:ed:38:
14:b0:94:e9:99:64:e1:1b:8d:2d:c4:14:40:29:2c:
11:83:54:66:3f:01:de:b1:16:fe:b9:f0:e2:66:aa:
75:22:6b:da:17:fa:b4:6f:a5:58:f9:17:b7:e9:1e:
29:cf:6b:d7:da:cc:cd:94:6a:4b:10:10:8a:f1:43:
4e:3d:12:34:bf:5c:77:61:d1:76:49:bf:c7:e5:0c:
0b:16:0f:09:e1:4a:8b:91:18:3c:7e:66:96:3a:dc:
64:2d:f9:d0:b5:80:84:ea:c7:3c:56:40:8f:09:f2:
65:d6:77:e9:dd:50:de:b1:1e:f6:7b:82:42:90:f9:
2e:27:c1:ce:79:71:ac:c6:9f:10:1c:33:22:6d:b4:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:08:D6:90:B7:42:16:57:9A:C1:54:C6:84:48:49:36:91:3B:E2:C2
X509v3 Authority Key Identifier:
keyid:B6:1E:91:38:CF:EB:7D:89:AB:8C:F5:42:76:ED:29:B3:D8:08:E0:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/th6ROM_rfYmrjPVCdu0ps9gI4Lw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/JgjWkLdCFleawVTGhEhJNpE74sI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.84.0/23
Signature Algorithm: sha256WithRSAEncryption
36:e0:af:84:cf:3e:19:45:e9:66:a2:42:33:0c:97:9e:dc:9e:
3b:0b:ac:24:97:04:fc:76:07:a7:22:ef:4c:67:4f:ba:42:13:
42:23:d6:07:00:de:79:df:85:f0:6a:e9:ff:68:22:87:3e:79:
62:f0:a5:af:3c:f4:18:0e:25:c5:24:0b:be:4b:84:da:a5:c3:
51:fb:a3:9e:11:72:a3:d7:b2:8e:a7:80:6b:90:c9:68:b2:4b:
dc:f2:6a:71:b6:88:08:85:1c:53:91:09:b5:97:a6:88:af:6d:
ec:1e:49:fa:e0:b6:65:03:b9:21:a7:f7:1b:3e:0e:97:b4:b4:
fc:bf:d2:48:06:7d:6a:22:dc:17:f7:fa:3e:c5:97:55:d7:81:
d3:11:15:02:31:78:69:3f:f3:82:d5:b5:5c:e8:88:2a:43:c8:
fe:ab:bb:2d:8e:93:8e:d9:27:48:0e:ee:be:46:52:19:bc:5c:
b6:1d:13:07:ce:73:6a:fe:56:49:2c:6a:35:a1:4e:5b:4a:75:
e3:7e:92:4e:51:d1:23:55:75:27:b2:57:be:df:6d:43:ef:3e:
9e:c8:5d:64:f7:ed:7c:3c:1b:88:09:29:60:67:e0:c8:b7:6c:
97:76:9f:2d:0c:02:d0:19:15:dc:f3:bd:0b:87:13:8c:bc:39:
6b:49:ac:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:06:08 2026 by rpki-client