This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/fxJrd3gYlKjYvQG-onLTbkCOZ-U.roa File: fxJrd3gYlKjYvQG-onLTbkCOZ-U.roa (raw, json) Hash identifier: bDWJAjgscfjM8jDQgSehgcjYfsouKFrvcdn8jNWJZ80= Subject key identifier: 7F:12:6B:77:78:18:94:A8:D8:BD:01:BE:A2:72:D3:6E:40:8E:67:E5 Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 2284 Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/fxJrd3gYlKjYvQG-onLTbkCOZ-U.roa Signing time: Thu 25 Dec 2025 05:40:41 +0000 ROA not before: Thu 25 Dec 2025 05:40:41 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 131314 IP address blocks: 2403:9b00:2000::/48 maxlen: 48 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 8836 (0x2284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Dec 25 05:40:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7F126B77781894A8D8BD01BEA272D36E408E67E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:d6:56:d4:2e:0a:5d:e3:23:cc:03:91:15: 07:1d:e5:54:66:6f:09:c6:ae:38:1e:92:f4:a9:4f: 42:a1:d3:46:08:9e:7c:e7:8b:e0:70:d9:cf:2a:72: 54:b9:f8:11:d5:0b:72:19:2d:bb:dc:1e:dd:67:5f: fd:07:15:76:30:73:55:84:cd:12:51:0d:a0:e3:d9: 3e:05:59:1b:ff:18:6d:78:e0:5f:12:5f:ac:11:ec: 24:b7:87:5d:74:39:7a:90:6e:18:6f:80:2f:7e:e6: b2:ce:9f:2c:f7:09:98:11:65:f1:8f:c2:0e:d4:39: f6:d2:c1:d2:8b:64:be:f9:04:53:1a:83:44:5a:ab: 0c:1f:f0:00:8b:67:4e:e1:e9:54:58:87:7b:ed:52: ec:a8:ff:44:a1:bf:d4:e2:fd:11:4c:d8:6d:b6:7b: 2d:4e:43:2c:2b:de:31:b2:a0:fe:3c:c1:93:d0:5f: 6c:6b:cc:4b:6a:a4:47:e6:5d:11:51:27:7d:73:09: d8:15:df:b6:ac:68:56:9d:41:9e:12:33:c0:6b:65: e0:e2:e2:71:31:c1:75:d4:a4:ce:d1:c8:82:fd:1c: b8:ab:4d:84:5b:7a:b8:41:3a:2e:a2:62:c2:2c:c2: b5:ad:c0:6c:de:db:3d:f7:5d:7c:34:1f:5c:c3:73: 47:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:12:6B:77:78:18:94:A8:D8:BD:01:BE:A2:72:D3:6E:40:8E:67:E5 X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/fxJrd3gYlKjYvQG-onLTbkCOZ-U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:9b00:2000::/48 Signature Algorithm: sha256WithRSAEncryption 79:4b:e0:a6:df:68:d5:4d:9b:4d:80:87:cb:48:94:a4:d1:98: a1:90:63:15:e7:db:f7:11:ce:ea:43:d3:ea:85:99:dd:45:e1: 63:53:62:ee:b6:da:75:89:fb:75:85:75:85:e0:c7:d5:a2:b2: 99:cd:44:15:01:30:a9:0d:aa:59:86:d6:9c:05:13:02:b7:38: 09:24:9c:0c:60:9b:49:e1:4d:8d:0c:65:62:b4:bf:cd:0d:40: b7:98:62:5e:08:82:97:12:0c:0d:1d:2c:d9:d0:31:2a:6b:ea: 3e:e2:25:d0:23:04:37:31:a7:6b:51:26:02:2a:4c:e2:0c:c0: dc:05:09:d7:f0:3a:53:43:83:71:d7:c2:e7:fe:92:04:16:5b: 2e:58:67:9a:d4:02:45:5b:92:7a:7a:47:7b:87:e1:55:b7:04: c8:da:1c:5e:0a:e5:b8:55:5f:b7:d2:0f:75:03:be:f4:9b:e7: f1:33:d3:03:5c:20:00:b1:c4:04:ea:c4:b1:0e:8f:5b:09:cf: 34:31:cf:cf:1b:39:b0:8c:d7:19:b6:90:76:02:3e:45:f0:83: 47:6d:a6:24:fe:ab:e2:5b:81:10:19:9b:49:9d:c8:68:7a:e6: 7c:ba:bc:ef:99:9f:e9:8c:e6:18:f0:a4:3e:bf:8c:44:d0:c4: b1:aa:e5:4a -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICIoQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNTEyMjUw NTQwNDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDdGMTI2Qjc3NzgxODk0 QThEOEJEMDFCRUEyNzJEMzZFNDA4RTY3RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBodZW1C4KXeMjzAORFQcd5VRmbwnGrjgekvSpT0Kh00YInnzn i+Bw2c8qclS5+BHVC3IZLbvcHt1nX/0HFXYwc1WEzRJRDaDj2T4FWRv/GG144F8S X6wR7CS3h110OXqQbhhvgC9+5rLOnyz3CZgRZfGPwg7UOfbSwdKLZL75BFMag0Ra qwwf8ACLZ07h6VRYh3vtUuyo/0Shv9Ti/RFM2G22ey1OQywr3jGyoP48wZPQX2xr zEtqpEfmXRFRJ31zCdgV37asaFadQZ4SM8BrZeDi4nExwXXUpM7RyIL9HLirTYRb erhBOi6iYsIswrWtwGze2z33XXw0H1zDc0dLAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUfxJrd3gYlKjYvQG+onLTbkCOZ+UwHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxL2Z4SnJkM2dZbEtqWXZR Ry1vbkxUYmtDT1otVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAkA5sAIAAwDQYJKoZIhvcNAQELBQADggEBAHlL4KbfaNVNm02Ah8tIlKTRmKGQ YxXn2/cRzupD0+qFmd1F4WNTYu622nWJ+3WFdYXgx9WispnNRBUBMKkNqlmG1pwF EwK3OAkknAxgm0nhTY0MZWK0v80NQLeYYl4IgpcSDA0dLNnQMSpr6j7iJdAjBDcx p2tRJgIqTOIMwNwFCdfwOlNDg3HXwuf+kgQWWy5YZ5rUAkVbknp6R3uH4VW3BMja HF4K5bhVX7fSD3UDvvSb5/Ez0wNcIACxxATqxLEOj1sJzzQxz88bObCM1xm2kHYC PkXwg0dtpiT+q+JbgRAZm0mdyGh65ny6vO+Zn+mM5hjwpD6/jETQxLGq5Uo= -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:36 2026 by rpki-client