This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/63vXTRCT2OWgY_3PbMtsgOnZmfc.roa File: 63vXTRCT2OWgY_3PbMtsgOnZmfc.roa (raw, json) Hash identifier: hLkXO4J/3oPofJlXveEFFnqmruZNmL8Yyyl6ARtvB6M= Subject key identifier: EB:7B:D7:4D:10:93:D8:E5:A0:63:FD:CF:6C:CB:6C:80:E9:D9:99:F7 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 417C Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/63vXTRCT2OWgY_3PbMtsgOnZmfc.roa Signing time: Sun 07 Dec 2025 05:46:41 +0000 ROA not before: Sun 07 Dec 2025 05:46:41 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9391 IP address blocks: 124.29.0.0/17 maxlen: 17 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 16764 (0x417c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Dec 7 05:46:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=EB7BD74D1093D8E5A063FDCF6CCB6C80E9D999F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:03:84:6c:c8:e3:ae:c3:c3:93:e7:5d:48:2c: 5f:1b:26:88:b2:01:c9:99:b2:88:e6:c8:5b:32:48: 3f:35:d4:d3:41:22:68:0c:b0:6a:cd:76:ae:bc:04: 46:86:bc:bb:74:8f:68:75:fb:17:64:34:c7:a7:23: e7:a5:fe:e1:75:44:b2:bb:a9:1c:97:9f:02:39:05: 4a:cb:5f:7c:7d:0e:34:93:8f:e7:4d:67:ba:7a:1a: 0a:dc:cc:59:47:0d:cc:16:66:16:3d:21:2f:2d:95: 20:ff:e5:82:72:11:a7:8e:a7:c4:10:c6:8c:33:2c: e7:5d:4d:f0:7b:e9:4e:0e:00:06:fc:0b:c2:05:0b: d2:68:d0:9d:7f:1b:cf:57:5d:3f:c2:e5:75:b7:ad: 4b:67:35:4f:2b:ce:b2:d2:50:ac:4b:d2:ab:d0:93: 44:16:57:1c:ff:e9:5d:bc:d6:0f:4c:c3:76:c1:82: 85:42:aa:be:7e:72:a3:e5:64:d4:19:92:ea:3b:32: ab:61:42:e5:90:b1:67:94:2a:c6:16:b5:f4:07:e1: a2:ad:12:af:a6:71:38:75:a7:b1:c1:45:28:09:12: 5a:d2:94:15:6f:38:50:c5:40:45:e6:b0:30:a4:2c: f2:df:04:20:32:e7:6d:c3:89:dd:85:e3:00:94:0d: b7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7B:D7:4D:10:93:D8:E5:A0:63:FD:CF:6C:CB:6C:80:E9:D9:99:F7 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/63vXTRCT2OWgY_3PbMtsgOnZmfc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.29.0.0/17 Signature Algorithm: sha256WithRSAEncryption 68:4c:79:ac:68:2a:21:9e:c2:d9:fc:91:7a:3b:15:9b:eb:ee: 0f:40:36:96:3e:39:81:dd:b2:87:29:a1:0c:2b:77:c6:34:eb: dc:a9:b0:95:5e:dc:aa:1f:27:bd:db:97:ba:d7:2c:e9:f2:48: 1c:49:df:4b:c6:ba:9d:50:1c:39:09:1b:42:a8:61:32:94:c2: 77:96:91:1e:0a:53:40:5b:b2:83:8f:2e:e0:05:4c:bc:51:df: ce:11:cd:ac:a5:79:c1:10:32:36:ce:4a:54:31:ef:3c:ca:cb: cd:e5:ba:ed:25:de:06:bd:a3:e8:ce:c9:73:37:a3:50:e9:5b: 75:46:c3:b5:56:a1:c3:68:e3:32:29:46:a8:a9:4f:73:22:36: 3d:ee:04:b3:d9:4f:80:2e:df:04:60:26:d0:6e:2a:85:67:cc: 65:7f:2d:1b:5e:75:2b:e0:0f:52:bf:02:78:a1:7c:66:c3:e7: 80:c6:e5:2d:67:0b:9c:3e:1f:3a:6e:46:2e:c7:81:8d:2b:39: 21:3a:86:98:1c:fb:76:34:da:dc:8a:ca:43:eb:46:9f:d6:d9: 7b:9c:a5:89:f8:a5:b5:1f:f8:be:14:25:4a:49:b7:6d:f1:a1: c8:75:dd:47:ba:da:a6:49:57:9c:d2:d4:72:1a:1e:d6:22:81: 71:32:e4:82 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICQXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTEyMDcw NTQ2NDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEVCN0JENzREMTA5M0Q4 RTVBMDYzRkRDRjZDQ0I2QzgwRTlEOTk5RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuA4RsyOOuw8OT511ILF8bJoiyAcmZsojmyFsySD811NNBImgM sGrNdq68BEaGvLt0j2h1+xdkNMenI+el/uF1RLK7qRyXnwI5BUrLX3x9DjSTj+dN Z7p6GgrczFlHDcwWZhY9IS8tlSD/5YJyEaeOp8QQxowzLOddTfB76U4OAAb8C8IF C9Jo0J1/G89XXT/C5XW3rUtnNU8rzrLSUKxL0qvQk0QWVxz/6V281g9Mw3bBgoVC qr5+cqPlZNQZkuo7MqthQuWQsWeUKsYWtfQH4aKtEq+mcTh1p7HBRSgJElrSlBVv OFDFQEXmsDCkLPLfBCAy523Did2F4wCUDbdNAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU63vXTRCT2OWgY/3PbMtsgOnZmfcwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni82M3ZYVFJDVDJPV2dZXzNQ Yk10c2dPblptZmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH fB0AMA0GCSqGSIb3DQEBCwUAA4IBAQBoTHmsaCohnsLZ/JF6OxWb6+4PQDaWPjmB 3bKHKaEMK3fGNOvcqbCVXtyqHye925e61yzp8kgcSd9LxrqdUBw5CRtCqGEylMJ3 lpEeClNAW7KDjy7gBUy8Ud/OEc2spXnBEDI2zkpUMe88ysvN5brtJd4GvaPozslz N6NQ6Vt1RsO1VqHDaOMyKUaoqU9zIjY97gSz2U+ALt8EYCbQbiqFZ8xlfy0bXnUr 4A9SvwJ4oXxmw+eAxuUtZwucPh86bkYux4GNKzkhOoaYHPt2NNrcispD60af1tl7 nKWJ+KW1H/i+FCVKSbdt8aHIdd1HutqmSVec0tRyGh7WIoFxMuSC -----END CERTIFICATE-----Generated at Sun Dec 7 11:59:28 2025 by rpki-client