This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/RaawOuDDYFp9jGPJIVM5tLlWjyk.roa
File: RaawOuDDYFp9jGPJIVM5tLlWjyk.roa (raw, json)
Hash identifier: WWfDSgavDPugQlvWIeOHbTfRUr6gg9vMY9vNrAQH45g=
Subject key identifier: 45:A6:B0:3A:E0:C3:60:5A:7D:8C:63:C9:21:53:39:B4:B9:56:8F:29
Certificate issuer: /CN=43AA7F201331D710A3F06822BE4D472A5207EB09
Certificate serial: F1
Authority key identifier: 43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/RaawOuDDYFp9jGPJIVM5tLlWjyk.roa
Signing time: Tue 06 Jan 2026 12:32:39 +0000
ROA not before: Tue 06 Jan 2026 12:32:39 +0000
ROA not after: Thu 19 Nov 2026 10:13:34 +0000
asID: 151251
IP address blocks: 144.79.10.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43AA7F201331D710A3F06822BE4D472A5207EB09
Validity
Not Before: Jan 6 12:32:39 2026 GMT
Not After : Nov 19 10:13:34 2026 GMT
Subject: CN=45A6B03AE0C3605A7D8C63C9215339B4B9568F29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:e8:75:1a:fa:ee:cf:c5:1c:1d:e2:62:89:
be:82:ad:d2:99:d6:08:33:22:dd:1a:14:2b:2a:d5:
4d:a7:57:d9:14:fc:14:cb:12:bf:35:40:3b:e4:94:
2a:6f:ce:c0:7c:39:00:93:80:26:ce:38:b9:ce:fc:
4c:77:55:8c:61:6b:ad:ac:ab:e0:cf:ac:82:a8:bc:
e5:5c:bf:10:99:91:45:9f:d8:99:f4:66:bc:6b:08:
3f:d8:07:04:85:83:36:b2:b7:7f:5b:a2:a4:77:f4:
d9:76:ac:1f:b6:1c:df:db:f0:5c:ab:35:6e:44:e9:
dd:e4:8e:29:7d:c0:7c:7e:ee:55:68:37:6f:23:46:
89:b4:ef:35:59:e4:1c:d5:40:8f:83:b9:8a:e9:cb:
79:2e:7e:56:dd:9e:0f:b0:0c:be:38:3d:bb:a3:69:
e5:45:6d:33:1d:1e:12:8d:5f:e7:3e:31:7e:67:8f:
c9:81:78:de:f1:f3:c4:03:be:5f:47:29:31:a9:e3:
e3:fa:d1:8e:be:b7:b6:b4:c2:f8:6c:37:f6:7c:46:
66:10:a8:5c:1c:2c:c7:2c:50:34:07:5d:3a:dd:55:
bb:bc:c1:c5:19:91:bf:40:25:94:6e:46:38:89:f1:
cf:63:22:a6:03:dc:ae:7e:bb:38:fa:ff:4c:62:46:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A6:B0:3A:E0:C3:60:5A:7D:8C:63:C9:21:53:39:B4:B9:56:8F:29
X509v3 Authority Key Identifier:
keyid:43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/RaawOuDDYFp9jGPJIVM5tLlWjyk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.10.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:ac:35:11:0b:0f:86:0b:6e:b4:a9:60:bd:15:5c:2c:57:2f:
a5:e2:1e:95:94:2c:f1:56:dd:00:2d:43:ee:09:de:ea:85:69:
e2:31:fd:03:56:9d:13:72:3b:8c:c0:25:9d:40:82:91:92:55:
49:70:44:6b:e0:8e:f6:bf:81:b7:ff:92:36:fc:1d:90:4c:25:
d3:76:4a:a9:03:d6:fb:3e:6e:2f:cd:f6:52:21:89:a1:ff:d9:
92:1a:7a:c2:c2:21:54:c4:00:eb:1e:22:82:e9:81:47:85:bb:
03:b5:46:a6:88:48:84:c4:7f:a9:92:6e:b1:6b:2b:dc:66:c6:
18:0e:ae:1f:a5:05:7e:87:54:f5:39:36:3b:0a:68:f4:cd:df:
8e:c7:0a:18:bc:d9:01:8a:8b:8f:2a:51:51:6f:fe:34:19:58:
29:f5:bd:85:af:e7:96:b3:d6:dc:1d:55:f5:ec:94:6e:e2:4f:
30:01:bb:9c:d2:10:61:c8:04:4f:6e:10:8c:02:e0:5d:ff:80:
ef:7e:e9:f9:da:41:a6:13:d7:89:70:88:81:05:61:80:8f:1d:
ff:a8:de:1f:38:3e:4b:c4:ad:22:3e:c3:6d:4a:93:94:3a:db:
cc:aa:96:3e:6b:3c:52:df:ce:d4:8f:ae:89:92:85:2d:63:4a:
c6:4a:cb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:57:42 2026 by rpki-client