This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/zhejpkP-WtqCIc57pwiUP3W6bTQ.roa File: zhejpkP-WtqCIc57pwiUP3W6bTQ.roa (raw, json) Hash identifier: ptnSB5i0kpWSn11Ib7z2wujWybVtI/CkcaoHvqOClYQ= Subject key identifier: CE:17:A3:A6:43:FE:5A:DA:82:21:CE:7B:A7:08:94:3F:75:BA:6D:34 Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 2286 Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/zhejpkP-WtqCIc57pwiUP3W6bTQ.roa Signing time: Thu 25 Dec 2025 05:40:41 +0000 ROA not before: Thu 25 Dec 2025 05:40:41 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 4808 IP address blocks: 2403:9b00:2000::/48 maxlen: 48 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 8838 (0x2286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Dec 25 05:40:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=CE17A3A643FE5ADA8221CE7BA708943F75BA6D34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:37:84:67:79:a3:4c:27:5e:85:fb:de:35: 50:64:a5:9f:78:ce:03:fd:90:08:19:42:bf:c9:21: 7d:ef:c6:6b:84:3e:15:8d:a6:97:b7:6c:a1:66:83: bf:a1:8e:37:73:f9:cc:9e:6e:20:c9:5c:f9:83:7a: 1a:92:74:05:5d:06:cc:d7:7b:d2:70:70:89:4d:d7: 8d:e6:0f:f5:e7:91:c9:e7:53:17:d8:6a:22:39:66: 9e:7e:08:b0:d9:68:bb:2e:77:f6:b4:2d:48:ec:1b: c7:46:a8:8e:f3:2f:8b:43:9a:6a:ac:70:3f:56:91: aa:fc:c5:a1:8a:4a:80:c8:86:6b:ce:47:e3:c6:58: d9:1a:d7:56:54:42:82:b8:0e:ad:fd:1f:b9:82:4e: 4a:f1:6d:60:3a:60:7e:b9:7d:b4:b4:eb:cc:2f:e3: e3:94:e1:f8:2f:f8:0f:3e:b8:eb:01:0b:4a:12:6c: ca:6d:51:23:51:ac:5f:8e:09:d9:8b:41:02:22:27: 6e:92:33:91:57:c7:a3:5a:dd:97:c8:f9:ea:51:08: e4:58:4a:a3:25:bc:34:a9:c5:23:c8:84:09:de:ba: 80:0c:5a:4e:b8:99:95:36:29:2a:fe:66:86:a0:15: 12:80:be:6c:ee:4f:92:11:d8:59:f4:2a:16:c2:0d: 2b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:17:A3:A6:43:FE:5A:DA:82:21:CE:7B:A7:08:94:3F:75:BA:6D:34 X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/zhejpkP-WtqCIc57pwiUP3W6bTQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:9b00:2000::/48 Signature Algorithm: sha256WithRSAEncryption 94:aa:59:44:f2:68:45:e0:f7:83:22:54:81:d0:ab:43:f4:b6: bb:87:67:99:42:75:28:c9:d2:58:a4:35:e9:43:84:90:13:fc: 6c:75:fa:60:76:c7:61:ab:ef:d0:f0:7d:c3:60:fb:71:ed:7a: bf:a4:9f:df:2e:d7:74:c6:77:29:f6:79:74:55:87:9b:46:93: 96:1a:bd:06:74:3e:4d:55:64:01:d9:7f:ef:1f:f6:e5:a2:4d: d2:b6:86:99:8c:6a:c7:5d:c2:af:d1:0d:ef:e7:c3:31:1b:44: 5e:1f:3c:31:88:b2:88:11:7c:b1:68:df:9d:f2:15:db:a9:4b: 87:9d:88:22:91:88:ae:e3:cf:81:f3:3a:f8:a4:65:df:99:5b: 47:de:53:fd:23:17:80:85:24:cd:5c:9c:79:64:64:8c:92:69: 2e:a5:28:f3:ee:76:0a:6b:65:f6:9c:50:df:68:e1:92:ac:8c: f9:bb:1b:ca:6c:02:0d:98:67:4f:77:06:66:8e:fc:5e:74:61: 26:04:16:eb:4d:66:ab:4d:5b:b4:96:aa:4d:46:d4:59:50:bd: 91:6b:c0:85:84:2d:2a:40:42:90:94:aa:81:fe:6e:07:8f:e0: b0:97:eb:b7:e1:a2:70:de:dc:9a:ff:39:b1:7b:5f:5b:c0:16: 69:1d:27:be -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICIoYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNTEyMjUw NTQwNDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKENFMTdBM0E2NDNGRTVB REE4MjIxQ0U3QkE3MDg5NDNGNzVCQTZEMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC94jeEZ3mjTCdehfveNVBkpZ94zgP9kAgZQr/JIX3vxmuEPhWN ppe3bKFmg7+hjjdz+cyebiDJXPmDehqSdAVdBszXe9JwcIlN143mD/XnkcnnUxfY aiI5Zp5+CLDZaLsud/a0LUjsG8dGqI7zL4tDmmqscD9Wkar8xaGKSoDIhmvOR+PG WNka11ZUQoK4Dq39H7mCTkrxbWA6YH65fbS068wv4+OU4fgv+A8+uOsBC0oSbMpt USNRrF+OCdmLQQIiJ26SM5FXx6Na3ZfI+epRCORYSqMlvDSpxSPIhAneuoAMWk64 mZU2KSr+ZoagFRKAvmzuT5IR2Fn0KhbCDStxAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUzhejpkP+WtqCIc57pwiUP3W6bTQwHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxL3poZWpwa1AtV3RxQ0lj NTdwd2lVUDNXNmJUUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAkA5sAIAAwDQYJKoZIhvcNAQELBQADggEBAJSqWUTyaEXg94MiVIHQq0P0truH Z5lCdSjJ0likNelDhJAT/Gx1+mB2x2Gr79DwfcNg+3Hter+kn98u13TGdyn2eXRV h5tGk5YavQZ0Pk1VZAHZf+8f9uWiTdK2hpmMasddwq/RDe/nwzEbRF4fPDGIsogR fLFo353yFdupS4ediCKRiK7jz4HzOvikZd+ZW0feU/0jF4CFJM1cnHlkZIySaS6l KPPudgprZfacUN9o4ZKsjPm7G8psAg2YZ093BmaO/F50YSYEFutNZqtNW7SWqk1G 1FlQvZFrwIWELSpAQpCUqoH+bgeP4LCX67fhonDe3Jr/ObF7X1vAFmkdJ74= -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:11 2026 by rpki-client