This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/bf9tjEQhJcypTEpWnmdPn8Wuxzg.roa
File: bf9tjEQhJcypTEpWnmdPn8Wuxzg.roa (raw, json)
Hash identifier: hOMmxYCZH97U36OHqfzp2BvSDJDhyvQwEKdYpYn+K5U=
Subject key identifier: 6D:FF:6D:8C:44:21:25:CC:A9:4C:4A:56:9E:67:4F:9F:C5:AE:C7:38
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1392
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/bf9tjEQhJcypTEpWnmdPn8Wuxzg.roa
Signing time: Fri 12 Apr 2024 03:53:12 +0000
ROA not before: Fri 12 Apr 2024 03:53:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5010 (0x1392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 12 03:53:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6DFF6D8C442125CCA94C4A569E674F9FC5AEC738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dd:36:04:7b:b2:ab:8f:9b:46:9c:34:11:11:
19:29:ed:12:0d:01:9e:3d:6b:54:64:a8:e2:7e:8f:
f4:d9:e6:56:85:b5:de:b6:fd:ee:8d:fb:de:89:db:
8b:f1:58:0a:07:19:c3:1f:d2:52:e5:07:ba:49:50:
00:a2:4e:8d:d2:1b:f0:4e:0b:da:0c:99:0d:2e:99:
8a:4e:90:2b:1d:44:2a:50:90:f4:95:09:2d:6c:04:
1f:c5:4d:72:81:7b:7e:ec:4d:b0:ea:94:2c:a7:3a:
0d:fe:9f:73:d1:2c:ae:3f:62:5d:ee:15:49:16:ec:
10:2c:d5:fc:a7:30:44:24:a2:71:ff:0a:64:85:a5:
90:0b:2c:12:a0:ac:1e:5c:41:78:78:c1:56:e8:82:
fd:80:fa:ae:d9:a0:1c:e5:08:cc:32:e6:20:c7:8f:
fb:8a:d5:f9:87:4b:b0:71:9d:c9:49:7f:ea:01:8d:
92:a9:e9:d2:55:8b:6f:a2:58:56:5f:b3:a3:b7:74:
b2:27:68:76:b9:d1:ac:e0:0c:c0:62:ec:6c:ef:f9:
25:3c:a1:57:c2:97:5b:22:a4:b8:90:99:82:b1:6e:
ae:00:e3:1b:49:e2:fc:cd:b7:0e:d0:4b:c7:d3:e9:
7d:ab:fa:b8:04:ec:a7:d5:2d:b0:87:0d:18:ae:e1:
9f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FF:6D:8C:44:21:25:CC:A9:4C:4A:56:9E:67:4F:9F:C5:AE:C7:38
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/bf9tjEQhJcypTEpWnmdPn8Wuxzg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:cd:c1:bf:05:d0:9a:18:16:c7:cf:63:3c:df:5f:e0:ef:d9:
b2:3b:3b:1a:51:87:1b:38:36:22:fa:8b:8d:bd:d4:9b:74:f2:
33:26:38:9e:48:96:cb:22:f0:95:11:60:e4:14:6e:46:d3:c0:
80:d2:bb:f3:74:bb:e2:5e:ab:12:a5:e0:51:ea:50:11:d4:a6:
0d:6f:03:ab:1f:be:ea:59:b4:56:ba:6f:9c:c5:37:d3:71:62:
5c:04:22:70:c7:0b:67:23:3c:48:71:d2:40:07:ff:f2:51:af:
97:fa:f5:63:df:69:13:76:a4:20:51:99:d2:1d:b4:ff:61:9b:
a7:77:ec:79:aa:3e:2b:7f:2d:0e:51:33:65:78:7b:a8:b2:bc:
66:09:0c:c4:12:7a:fe:60:4d:05:ee:c2:d7:8a:03:84:d4:ea:
2b:e5:ff:25:af:56:1a:1a:c3:6e:cf:3c:6c:b8:18:27:f4:0f:
95:70:17:bd:3a:a1:49:ae:9d:24:5f:27:4b:76:64:24:15:20:
f4:06:87:30:5f:45:26:74:4e:1c:d8:e6:51:78:6d:c0:24:aa:
af:a5:36:09:ed:68:90:86:75:0e:98:3c:47:f6:59:8f:58:d5:
83:11:b5:57:dc:bd:c2:33:6d:a1:c3:9b:ca:66:52:4c:21:7e:
4c:f3:3a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:53:01 2025 by rpki-client