This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/QXTeHANBHYjlUi1Un6heiD8bVqI.roa File: QXTeHANBHYjlUi1Un6heiD8bVqI.roa (raw, json) Hash identifier: ramgfbyXhG1Ot3RsEzvi2GitSrW1e/E/aXaqe2oYOmw= Subject key identifier: 41:74:DE:1C:03:41:1D:88:E5:52:2D:54:9F:A8:5E:88:3F:1B:56:A2 Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 22CE Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/QXTeHANBHYjlUi1Un6heiD8bVqI.roa Signing time: Wed 07 Jan 2026 06:08:06 +0000 ROA not before: Wed 07 Jan 2026 06:08:06 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 131314 IP address blocks: 103.201.193.0/24 maxlen: 24 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 8910 (0x22ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Jan 7 06:08:06 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4174DE1C03411D88E5522D549FA85E883F1B56A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:89:09:85:54:11:f9:5f:dc:fe:04:df:80: 75:d6:9d:8a:cc:d4:1f:d1:c7:23:e5:93:5b:42:0e: 09:ee:6b:9e:ce:f9:55:40:94:27:45:c1:0c:21:cb: 07:3f:0d:c0:9f:b3:92:5f:aa:20:15:e8:95:f0:c0: 62:7b:ef:e7:38:2d:0f:30:84:a9:79:06:7a:1a:6b: f1:85:17:21:44:25:14:ec:f9:f1:37:44:e1:85:55: 2d:6c:ed:ab:6b:58:9f:c1:89:ae:12:79:7a:47:0f: 35:43:d3:2b:96:78:4c:ed:7b:4b:56:61:73:9e:97: a7:b9:66:e7:84:54:56:6e:71:76:35:e3:64:fc:fb: 55:a8:f1:cf:7e:78:b8:10:c0:d4:a7:ca:a2:db:02: 3a:74:2c:6f:a3:7b:cd:4c:1d:21:e7:29:6b:5c:a0: d0:5b:13:5d:67:4a:99:e0:93:89:06:48:6f:3e:78: dc:ba:22:98:e4:b8:2e:2b:0e:90:2c:7e:ff:04:59: a6:de:8a:b6:93:59:13:8b:f0:8d:c9:36:8f:88:53: 10:73:8a:06:7d:d8:df:6a:d2:b8:98:e9:de:01:30: 26:9f:8b:6a:c7:a4:29:18:5a:40:aa:4a:af:5c:e0: 43:3e:c4:75:9f:ee:b6:8c:6b:d3:cd:dd:07:2f:b7: 8d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:74:DE:1C:03:41:1D:88:E5:52:2D:54:9F:A8:5E:88:3F:1B:56:A2 X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/QXTeHANBHYjlUi1Un6heiD8bVqI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.201.193.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:e4:40:db:8c:30:1b:c6:0d:0f:72:32:e8:69:0f:a0:f2:d6: c0:d2:6b:0d:98:b4:ff:44:cd:13:6b:f3:c7:a2:90:b1:30:33: ea:be:b2:5b:0e:44:91:98:9c:2c:0c:b9:dd:19:0d:47:d5:f5: 44:c2:40:30:bf:fa:74:a5:1d:8b:74:d5:40:bc:91:91:8a:6a: 35:aa:00:33:bf:2e:2e:74:91:bb:19:03:c0:76:e9:80:23:7d: 48:2a:de:27:24:ec:4d:78:ec:af:c5:63:29:36:7e:fa:12:bc: 19:3b:4c:86:da:41:1d:8c:2a:47:12:3b:e3:1f:5c:4e:5c:d4: b1:e8:ad:79:3e:5c:08:52:36:57:ac:ec:46:37:04:d6:49:3c: 9b:d0:29:e7:b2:90:97:a1:d1:bf:00:9a:25:0f:a6:10:a7:66: ff:c4:26:86:15:dd:ca:32:56:01:e3:dc:63:2b:65:69:23:db: 09:0b:59:0a:9e:63:e2:bc:33:08:9f:e8:64:02:43:d0:7d:6c: 99:b9:b5:37:42:00:df:2f:1a:e4:d9:80:c0:0b:c3:f0:38:03: 0f:da:94:24:c9:60:c1:ef:74:21:5a:4f:bd:95:c9:9e:0a:28: 6e:43:87:f5:a7:c1:a2:04:cb:b8:16:08:39:35:c5:32:50:af: 82:06:79:5f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIs4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNjAxMDcw NjA4MDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDQxNzRERTFDMDM0MTFE ODhFNTUyMkQ1NDlGQTg1RTg4M0YxQjU2QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDiYkJhVQR+V/c/gTfgHXWnYrM1B/RxyPlk1tCDgnua57O+VVA lCdFwQwhywc/DcCfs5JfqiAV6JXwwGJ77+c4LQ8whKl5Bnoaa/GFFyFEJRTs+fE3 ROGFVS1s7atrWJ/Bia4SeXpHDzVD0yuWeEzte0tWYXOel6e5ZueEVFZucXY142T8 +1Wo8c9+eLgQwNSnyqLbAjp0LG+je81MHSHnKWtcoNBbE11nSpngk4kGSG8+eNy6 IpjkuC4rDpAsfv8EWabeiraTWROL8I3JNo+IUxBzigZ92N9q0riY6d4BMCafi2rH pCkYWkCqSq9c4EM+xHWf7raMa9PN3Qcvt40NAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUQXTeHANBHYjlUi1Un6heiD8bVqIwHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxL1FYVGVIQU5CSFlqbFVp MVVuNmhlaUQ4YlZxSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnycEwDQYJKoZIhvcNAQELBQADggEBADrkQNuMMBvGDQ9yMuhpD6Dy1sDSaw2Y tP9EzRNr88eikLEwM+q+slsORJGYnCwMud0ZDUfV9UTCQDC/+nSlHYt01UC8kZGK ajWqADO/Li50kbsZA8B26YAjfUgq3ick7E147K/FYyk2fvoSvBk7TIbaQR2MKkcS O+MfXE5c1LHorXk+XAhSNles7EY3BNZJPJvQKeeykJeh0b8AmiUPphCnZv/EJoYV 3coyVgHj3GMrZWkj2wkLWQqeY+K8Mwif6GQCQ9B9bJm5tTdCAN8vGuTZgMALw/A4 Aw/alCTJYMHvdCFaT72VyZ4KKG5Dh/WnwaIEy7gWCDk1xTJQr4IGeV8= -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:48 2026 by rpki-client