This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/shoNf2syTTXuPEdAKC_n6qT-kBY.roa File: shoNf2syTTXuPEdAKC_n6qT-kBY.roa (raw, json) Hash identifier: BD3wKggefPgtt5UsrXRK+NBdo6Jo3DjkYFAgwUW7hRU= Subject key identifier: B2:1A:0D:7F:6B:32:4D:35:EE:3C:47:40:28:2F:E7:EA:A4:FE:90:16 Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Certificate serial: 0500 Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/shoNf2syTTXuPEdAKC_n6qT-kBY.roa Signing time: Thu 16 Jan 2025 21:24:43 +0000 ROA not before: Thu 16 Jan 2025 21:24:43 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139076 IP address blocks: 113.31.64.0/21 maxlen: 24 113.31.72.0/21 maxlen: 24 113.31.128.0/21 maxlen: 24 113.31.136.0/21 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1280 (0x500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Validity Not Before: Jan 16 21:24:43 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B21A0D7F6B324D35EE3C4740282FE7EAA4FE9016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:49:1a:ab:e2:29:2f:1e:ba:7e:f2:de:a2:65: 2e:6e:cf:24:1a:83:23:5a:f9:05:73:be:c9:6f:ca: e5:35:2c:5a:e2:e0:46:6c:59:7e:e5:7c:cf:4e:66: cf:2d:1e:34:f2:6b:14:15:cb:26:ff:fe:d5:d9:d6: 91:e5:db:40:c6:8b:76:f1:73:13:d2:63:48:a7:17: 15:e5:f2:05:1d:70:b2:a3:f5:0a:31:c6:09:9c:12: a9:2b:11:3b:f3:aa:7e:f8:a6:32:af:b0:18:75:ea: 94:cf:aa:1c:d8:0a:84:76:1e:f6:62:59:5e:58:42: c2:a4:a9:53:81:8b:cf:73:ab:81:a1:1c:8c:09:81: a4:73:54:6c:ba:8f:62:2d:32:91:21:e0:dd:ed:59: d8:cd:fb:08:ea:41:fb:7b:d8:7b:53:66:9f:87:fc: da:90:7a:3d:d6:cd:99:18:ec:24:65:f9:6c:65:8b: 0d:16:85:d2:40:c0:ec:1c:09:59:9a:f3:83:05:d2: 5f:2d:36:96:2e:f9:0a:42:51:cd:6a:9c:24:93:46: 49:c9:ae:ed:50:3e:99:20:33:ed:8c:74:d3:e7:19: 63:97:17:73:77:9e:bd:eb:30:29:b7:16:ec:25:a9: 5a:2d:1e:bc:9a:22:4d:ed:ac:d0:a5:52:03:43:b6: 1e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1A:0D:7F:6B:32:4D:35:EE:3C:47:40:28:2F:E7:EA:A4:FE:90:16 X509v3 Authority Key Identifier: keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/shoNf2syTTXuPEdAKC_n6qT-kBY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.31.64.0/20 113.31.128.0/20 Signature Algorithm: sha256WithRSAEncryption 39:80:01:bd:ac:d7:77:18:59:4d:55:68:3e:20:18:a8:c0:02: ef:7b:d2:0a:1a:fa:99:19:33:c1:a8:84:78:37:f6:fd:5d:aa: 48:8f:9f:72:49:e6:0c:14:4a:c7:f1:df:6c:78:5d:6a:e8:9c: 35:71:44:19:28:7f:64:a1:cc:59:56:e3:0f:36:8e:cb:42:fa: 72:11:70:e4:1b:3f:8a:ee:77:15:6a:14:99:57:4f:19:80:5b: 9e:14:88:c8:27:91:5a:cd:71:62:17:b7:c5:0c:e3:1f:3e:4f: c4:51:ba:ef:ac:67:d6:18:a2:b6:8a:59:b5:3f:eb:a7:6d:89: fe:c8:bb:76:ee:02:45:76:9c:57:6c:48:01:bd:88:6c:bb:1d: 13:a4:3f:99:f7:58:a3:48:7e:f7:8d:67:97:c1:d8:77:63:5d: 51:34:b3:35:4d:31:1e:4c:08:08:1d:57:43:eb:9b:aa:22:cf: 47:2e:81:90:70:51:c2:c0:db:e9:b0:70:38:e6:0b:8e:24:c2: 83:3f:ef:b3:f4:84:fc:29:ea:4c:a5:9b:52:9c:15:0f:9b:31: 99:26:e7:26:3f:58:ff:98:16:c3:9e:55:d6:c2:a9:de:ef:59: 8d:f4:fc:e2:7d:30:43:9a:11:a1:f5:d9:7e:a0:e6:b7:75:e5: 07:60:0c:4b -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3 MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMTYy MTI0NDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEIyMUEwRDdGNkIzMjRE MzVFRTNDNDc0MDI4MkZFN0VBQTRGRTkwMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3SRqr4ikvHrp+8t6iZS5uzyQagyNa+QVzvslvyuU1LFri4EZs WX7lfM9OZs8tHjTyaxQVyyb//tXZ1pHl20DGi3bxcxPSY0inFxXl8gUdcLKj9Qox xgmcEqkrETvzqn74pjKvsBh16pTPqhzYCoR2HvZiWV5YQsKkqVOBi89zq4GhHIwJ gaRzVGy6j2ItMpEh4N3tWdjN+wjqQft72HtTZp+H/NqQej3WzZkY7CRl+Wxliw0W hdJAwOwcCVma84MF0l8tNpYu+QpCUc1qnCSTRknJru1QPpkgM+2MdNPnGWOXF3N3 nr3rMCm3FuwlqVotHryaIk3trNClUgNDth7BAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUshoNf2syTTXuPEdAKC/n6qT+kBYwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL3Nob05mMnN5VFRYdVBF ZEFLQ19uNnFULWtCWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBADmAAb2s13cYWU1VaD4gGKjA Au970goa+pkZM8GohHg39v1dqkiPn3JJ5gwUSsfx32x4XWronDVxRBkof2ShzFlW 4w82jstC+nIRcOQbP4rudxVqFJlXTxmAW54UiMgnkVrNcWIXt8UM4x8+T8RRuu+s Z9YYoraKWbU/66dtif7Iu3buAkV2nFdsSAG9iGy7HROkP5n3WKNIfveNZ5fB2Hdj XVE0szVNMR5MCAgdV0Prm6oiz0cugZBwUcLA2+mwcDjmC44kwoM/77P0hPwp6kyl m1KcFQ+bMZkm5yY/WP+YFsOeVdbCqd7vWY30/OJ9MEOaEaH12X6g5rd15QdgDEs= -----END CERTIFICATE-----Generated at Mon Dec 22 11:12:52 2025 by rpki-client