This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/OiqSA3jDFcSJj6oG6J3r3SK6cXQ.roa File: OiqSA3jDFcSJj6oG6J3r3SK6cXQ.roa (raw, json) Hash identifier: Y1qsVY8OipFSQylQJgxlhiQdl5Z6iDyj6ac3+RmR6q8= Subject key identifier: 3A:2A:92:03:78:C3:15:C4:89:8F:AA:06:E8:9D:EB:DD:22:BA:71:74 Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Certificate serial: 0612 Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/OiqSA3jDFcSJj6oG6J3r3SK6cXQ.roa Signing time: Sun 19 Jan 2025 17:56:19 +0000 ROA not before: Sun 19 Jan 2025 17:56:19 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139076 IP address blocks: 113.31.64.0/21 maxlen: 24 113.31.72.0/21 maxlen: 24 113.31.128.0/21 maxlen: 24 113.31.136.0/21 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1554 (0x612) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Validity Not Before: Jan 19 17:56:19 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=3A2A920378C315C4898FAA06E89DEBDD22BA7174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:78:81:9b:77:11:dd:34:ba:96:ff:99:28:62: 55:e1:ad:d2:00:09:c8:0f:f6:d5:31:92:ba:f2:47: dc:d1:16:d0:fe:2f:99:7c:7d:54:6f:d0:46:70:f8: 77:e6:dd:93:a2:a4:d0:d7:e4:8a:5c:dc:9a:15:80: fe:84:f8:4e:d9:a7:f0:ba:b1:a9:1b:4b:cb:64:6f: 8b:3a:96:41:ab:b6:c3:8b:af:6b:a2:84:da:d3:9f: a6:10:61:8b:83:d5:94:fc:f7:d2:2a:5e:a2:13:1e: ad:3d:81:db:e5:73:a6:cf:86:d9:06:59:97:2f:79: 54:bb:0f:87:7d:ac:ca:a3:20:d8:99:cd:0d:4a:fe: 40:2b:10:3c:cd:cb:de:20:5b:66:14:20:12:8a:31: 3f:e2:7e:1a:ca:03:d8:47:45:6e:a9:6e:5c:e2:da: 9a:71:16:fb:03:1b:84:8c:f5:78:13:10:b4:d5:a9: 38:f5:83:00:63:cc:ae:83:8b:15:ba:13:f8:bb:29: d3:58:40:65:96:8d:8a:c0:62:77:57:42:15:1f:4a: e0:db:17:4e:75:33:45:6e:f0:92:a5:2b:c7:9b:ca: f4:25:74:79:2a:37:31:85:f5:f5:f7:ab:8e:ef:c8: 06:37:4e:cf:d0:ad:3a:47:48:ad:86:72:b8:4f:78: 03:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2A:92:03:78:C3:15:C4:89:8F:AA:06:E8:9D:EB:DD:22:BA:71:74 X509v3 Authority Key Identifier: keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/OiqSA3jDFcSJj6oG6J3r3SK6cXQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.31.64.0/20 113.31.128.0/20 Signature Algorithm: sha256WithRSAEncryption 92:52:94:d2:a1:f3:84:1d:f7:96:b5:ea:29:f5:9a:7a:a3:b1: 77:3f:c0:9f:8b:6a:44:09:9b:b2:84:89:a5:d7:8a:db:10:8b: c6:76:b8:d1:9a:f8:58:59:74:19:8a:c5:b2:d4:78:23:60:ae: 87:c7:90:26:7b:6c:83:68:1b:e9:e6:bb:51:3d:91:3e:4c:3b: 5c:5b:7d:3b:43:6b:3a:d5:eb:19:8c:8a:6e:5c:c8:cb:9b:eb: e9:3f:ee:37:c6:a8:78:e6:ca:c9:0e:f9:ac:de:e0:11:d8:f1: 6e:72:6e:8e:e3:1b:84:c0:36:9a:7a:4a:70:d7:4e:79:be:f0: 52:78:a8:5d:40:8f:2a:3a:d4:2c:04:f6:bd:f4:26:cb:cb:bf: b2:85:bd:b3:7f:2e:50:1b:7b:fb:a8:6e:c9:e6:bf:66:e0:34: d4:e2:61:b3:e2:23:8a:00:45:47:aa:a6:d4:c2:e7:0a:f5:3c: d3:d7:cd:13:14:b9:72:a5:1f:e7:d1:7a:9c:50:ef:73:fb:b0: 7a:00:50:40:55:b7:91:da:ab:f1:fe:69:f5:d7:a1:08:e7:90: 61:21:6d:49:4e:1f:58:5d:30:b2:a5:3a:b0:80:a7:9b:42:44: 5b:16:a0:7c:ec:c7:8c:43:b1:46:eb:d7:1b:5c:50:83:a5:75: c5:5a:f8:5c -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICBhIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3 MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMTkx NzU2MTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDNBMkE5MjAzNzhDMzE1 QzQ4OThGQUEwNkU4OURFQkREMjJCQTcxNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDleIGbdxHdNLqW/5koYlXhrdIACcgP9tUxkrryR9zRFtD+L5l8 fVRv0EZw+Hfm3ZOipNDX5Ipc3JoVgP6E+E7Zp/C6sakbS8tkb4s6lkGrtsOLr2ui hNrTn6YQYYuD1ZT899IqXqITHq09gdvlc6bPhtkGWZcveVS7D4d9rMqjINiZzQ1K /kArEDzNy94gW2YUIBKKMT/ifhrKA9hHRW6pblzi2ppxFvsDG4SM9XgTELTVqTj1 gwBjzK6DixW6E/i7KdNYQGWWjYrAYndXQhUfSuDbF051M0Vu8JKlK8ebyvQldHkq NzGF9fX3q47vyAY3Ts/QrTpHSK2GcrhPeAO5AgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUOiqSA3jDFcSJj6oG6J3r3SK6cXQwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL09pcVNBM2pERmNTSmo2 b0c2SjNyM1NLNmNYUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAJJSlNKh84Qd95a16in1mnqj sXc/wJ+LakQJm7KEiaXXitsQi8Z2uNGa+FhZdBmKxbLUeCNgrofHkCZ7bINoG+nm u1E9kT5MO1xbfTtDazrV6xmMim5cyMub6+k/7jfGqHjmyskO+aze4BHY8W5ybo7j G4TANpp6SnDXTnm+8FJ4qF1Ajyo61CwE9r30JsvLv7KFvbN/LlAbe/uobsnmv2bg NNTiYbPiI4oARUeqptTC5wr1PNPXzRMUuXKlH+fRepxQ73P7sHoAUEBVt5Haq/H+ afXXoQjnkGEhbUlOH1hdMLKlOrCAp5tCRFsWoHzsx4xDsUbr1xtcUIOldcVa+Fw= -----END CERTIFICATE-----Generated at Mon Dec 22 12:29:37 2025 by rpki-client