This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3399/bd9GrxZEfHWtOWHMuYJUpax949Y.roa File: bd9GrxZEfHWtOWHMuYJUpax949Y.roa (raw, json) Hash identifier: Vy2eK3SQCyGw1GNGKXYuy4gqV0cZkl9Rql6LWidAWcA= Subject key identifier: 6D:DF:46:AF:16:44:7C:75:AD:39:61:CC:B9:82:54:A5:AC:7D:E3:D6 Certificate issuer: /CN=A9A169A2CF022FBA0AF383CA997B4564FED5F89B Certificate serial: 96 Authority key identifier: A9:A1:69:A2:CF:02:2F:BA:0A:F3:83:CA:99:7B:45:64:FE:D5:F8:9B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qaFpos8CL7oK84PKmXtFZP7V-Js.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/bd9GrxZEfHWtOWHMuYJUpax949Y.roa Signing time: Thu 20 Nov 2025 02:04:55 +0000 ROA not before: Thu 20 Nov 2025 02:04:55 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 137731 IP address blocks: 138.252.72.0/23 maxlen: 23 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9A169A2CF022FBA0AF383CA997B4564FED5F89B Validity Not Before: Nov 20 02:04:55 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=6DDF46AF16447C75AD3961CCB98254A5AC7DE3D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c3:ba:5b:83:84:7d:2f:4b:7f:f4:6f:26:7e: af:8b:4e:b8:f5:af:0d:59:7e:17:d2:6b:69:11:1b: 80:63:5f:06:f7:38:19:cd:20:dd:02:9e:24:9e:4e: 69:53:b5:24:e2:73:46:93:e1:ee:c6:6f:20:71:84: fb:3b:90:9c:38:2b:13:a6:70:7c:8d:df:29:b2:5d: e8:e6:ac:77:4f:04:72:c2:78:3f:f3:2c:d9:14:74: c2:45:c8:f3:1a:be:ce:f6:37:ec:1c:2e:53:91:8d: 37:b3:36:8d:f5:42:97:fe:28:79:2c:97:35:47:10: fe:38:ca:11:3b:a7:84:8c:93:15:05:3b:fc:d3:e6: 4e:22:8f:3d:53:00:6a:63:62:c3:6f:4f:33:22:97: f7:98:02:b6:13:ca:26:7c:f1:39:ba:27:3a:2c:83: 53:83:8b:5e:4e:31:ba:de:12:a3:32:66:83:91:9f: c2:ea:ce:1c:76:00:e6:1a:09:db:a0:16:aa:b9:74: 46:99:24:10:f0:55:c2:da:84:61:ba:d7:01:26:9f: c3:b3:14:3a:70:c7:44:48:58:7e:38:e4:2d:b8:9f: 13:e1:a3:02:7e:0e:6c:ba:5a:df:89:92:0c:eb:b8: 21:df:f4:d7:ed:11:ac:ce:c9:60:84:06:6b:3c:c2: 37:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DF:46:AF:16:44:7C:75:AD:39:61:CC:B9:82:54:A5:AC:7D:E3:D6 X509v3 Authority Key Identifier: keyid:A9:A1:69:A2:CF:02:2F:BA:0A:F3:83:CA:99:7B:45:64:FE:D5:F8:9B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/qaFpos8CL7oK84PKmXtFZP7V-Js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qaFpos8CL7oK84PKmXtFZP7V-Js.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/bd9GrxZEfHWtOWHMuYJUpax949Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.72.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:48:60:ce:ae:c7:5e:cc:cd:f7:91:60:1c:6e:68:b3:78:86: 12:a5:2d:09:83:ba:b5:d6:63:16:48:78:2a:dc:83:1c:b2:ea: 26:16:66:05:9d:c3:05:ea:1c:20:b9:08:4d:1c:9a:27:42:5a: 75:84:21:48:dc:c7:ee:1e:3e:8f:a8:cf:b6:e8:04:f2:f2:dc: 1b:dd:63:da:65:cf:35:2b:5b:df:1c:98:0d:72:ef:02:e1:8d: 98:e7:18:5d:58:a0:4d:bf:8a:2a:8c:22:63:25:06:4e:e1:6d: 4a:5b:53:df:e1:82:bb:22:7f:32:57:18:2a:ef:ad:55:04:43: 62:6d:30:45:b7:a1:58:e2:5d:18:e5:00:f9:40:0b:f7:d8:5b: 31:b5:51:ff:e0:d4:76:c9:d6:16:fe:f7:c2:08:bf:e9:a6:26: 0a:33:9e:39:69:7d:70:1d:06:00:04:40:0e:83:55:c6:7c:7c: 9d:02:49:1c:14:9c:48:9c:3e:7e:77:78:4b:7d:3e:ea:aa:74: 84:1f:a5:60:4d:71:7b:61:ce:81:f9:f6:2f:d3:ca:96:5a:9e: b9:5b:6a:79:18:bd:6d:86:b2:8a:76:38:73:7a:41:ac:c4:92: 11:02:d0:d3:89:cc:5f:00:fa:73:b9:c8:23:03:5b:ab:79:5c: b1:2c:30:87 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTlB MTY5QTJDRjAyMkZCQTBBRjM4M0NBOTk3QjQ1NjRGRUQ1Rjg5QjAeFw0yNTExMjAw MjA0NTVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDZEREY0NkFGMTY0NDdD NzVBRDM5NjFDQ0I5ODI1NEE1QUM3REUzRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3w7pbg4R9L0t/9G8mfq+LTrj1rw1ZfhfSa2kRG4BjXwb3OBnN IN0CniSeTmlTtSTic0aT4e7GbyBxhPs7kJw4KxOmcHyN3ymyXejmrHdPBHLCeD/z LNkUdMJFyPMavs72N+wcLlORjTezNo31Qpf+KHkslzVHEP44yhE7p4SMkxUFO/zT 5k4ijz1TAGpjYsNvTzMil/eYArYTyiZ88Tm6Jzosg1ODi15OMbreEqMyZoORn8Lq zhx2AOYaCdugFqq5dEaZJBDwVcLahGG61wEmn8OzFDpwx0RIWH445C24nxPhowJ+ Dmy6Wt+JkgzruCHf9NftEazOyWCEBms8wjdlAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUbd9GrxZEfHWtOWHMuYJUpax949YwHwYDVR0jBBgwFoAUqaFpos8CL7oK84PK mXtFZP7V+JswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 OS9xYUZwb3M4Q0w3b0s4NFBLbVh0RlpQN1YtSnMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FhRnBvczhDTDdvSzg0UEttWHRGWlA3Vi1Kcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTkvYmQ5R3J4WkVmSFd0 T1dITXVZSlVwYXg5NDlZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAYr8SDANBgkqhkiG9w0BAQsFAAOCAQEAbkhgzq7HXszN95FgHG5os3iGEqUt CYO6tdZjFkh4KtyDHLLqJhZmBZ3DBeocILkITRyaJ0JadYQhSNzH7h4+j6jPtugE 8vLcG91j2mXPNStb3xyYDXLvAuGNmOcYXVigTb+KKowiYyUGTuFtSltT3+GCuyJ/ MlcYKu+tVQRDYm0wRbehWOJdGOUA+UAL99hbMbVR/+DUdsnWFv73wgi/6aYmCjOe OWl9cB0GAARADoNVxnx8nQJJHBScSJw+fnd4S30+6qp0hB+lYE1xe2HOgfn2L9PK llqeuVtqeRi9bYayinY4c3pBrMSSEQLQ04nMXwD6c7nIIwNbq3lcsSwwhw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:22:48 2025 by rpki-client