This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/CCBtiiog09seuPN5GNx9GH8YOUU.roa File: CCBtiiog09seuPN5GNx9GH8YOUU.roa (raw, json) Hash identifier: q3YJsEy48LAT3L/3nEC+MSl+jBoFDkiugQhOeDID2oM= Subject key identifier: 08:20:6D:8A:2A:20:D3:DB:1E:B8:F3:79:18:DC:7D:18:7F:18:39:45 Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 178D Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/CCBtiiog09seuPN5GNx9GH8YOUU.roa Signing time: Wed 21 Jan 2026 04:53:16 +0000 ROA not before: Wed 21 Jan 2026 04:53:16 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 62387 IP address blocks: 101.232.84.0/22 maxlen: 24 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 6029 (0x178d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Jan 21 04:53:16 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=08206D8A2A20D3DB1EB8F37918DC7D187F183945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7f:db:45:48:83:e9:04:cc:0e:f8:e2:50:44: 8a:ea:7a:d0:b8:90:59:4c:3a:61:07:28:83:96:be: 44:5e:c9:e1:09:3d:16:da:87:61:3d:bc:a4:f2:58: 4d:68:b3:85:fb:87:aa:b0:fd:51:29:0e:6a:f3:9e: d4:73:13:ce:c3:e9:bf:ff:a5:43:27:ae:d3:81:f9: 92:59:3c:d4:02:86:1f:ad:a7:46:e5:d7:d1:70:93: be:fb:14:bd:74:1c:75:e6:41:0c:8f:49:77:c8:66: 93:f6:9c:90:de:fd:a2:f0:01:55:12:9b:d0:83:72: eb:36:55:49:e6:5f:97:53:39:25:f7:b1:b1:63:0c: 97:28:a0:6e:ff:45:8b:0e:f7:9e:03:e2:94:de:78: 79:ea:e1:de:19:7c:66:a6:0b:a4:cf:b3:83:0a:04: be:51:95:9f:85:c0:1f:3b:4c:4a:d5:e5:15:26:f8: cf:d6:2f:81:cf:3d:e6:19:5c:b0:b6:1b:d7:1f:cd: 6f:5a:fa:e8:b9:73:61:6b:5e:3c:78:64:14:f9:e1: 2a:7f:10:a6:21:6f:00:7d:85:23:d0:59:1b:6e:34: 90:a1:75:35:36:1e:83:37:98:f2:1f:94:6a:a6:a7: 19:81:74:ba:8c:aa:4e:cd:e1:a8:36:75:42:c7:65: 17:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:20:6D:8A:2A:20:D3:DB:1E:B8:F3:79:18:DC:7D:18:7F:18:39:45 X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/CCBtiiog09seuPN5GNx9GH8YOUU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.232.84.0/22 Signature Algorithm: sha256WithRSAEncryption 55:19:ce:35:2f:e2:ae:df:ac:76:d6:f7:4d:17:67:86:d7:ca: 64:22:de:3d:7c:c2:59:10:23:c5:88:a9:3c:64:0e:fb:e2:20: 3d:a4:3e:26:cf:45:95:d3:74:b1:77:02:08:93:99:40:72:a9: da:c5:7a:b0:70:8e:25:36:88:c1:75:6e:2e:75:95:65:7c:59: 83:2e:d1:ce:fc:f3:0e:42:e4:3e:90:75:69:b1:09:46:d9:b1: bd:f6:57:06:b2:f3:93:ec:80:8e:aa:77:9e:23:06:9b:38:6f: ab:ab:70:82:29:1a:25:70:4a:02:5c:6a:02:ec:99:39:95:bf: c5:27:4b:38:96:36:b7:4b:ff:47:b6:6b:55:f0:d6:df:3f:93: 6f:ec:01:b0:0f:2e:53:71:61:4e:d7:2d:20:9d:0e:26:1d:dd: 6a:ca:ac:da:a3:b3:45:90:00:14:57:0a:af:d0:21:a8:4b:84: 5b:33:d8:26:60:5e:69:48:6a:09:b0:75:91:8f:59:3c:71:95: 26:48:31:96:0d:3e:2e:04:6b:cc:7b:79:5b:a3:91:39:a8:16: a0:b2:c3:0f:aa:7a:09:7c:72:7d:03:f1:e9:b0:fb:8a:29:2b: 4d:29:13:21:f9:b9:6e:a1:51:50:c3:53:44:55:57:4b:47:4c: b1:cc:6a:f0 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICF40wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNjAxMjEw NDUzMTZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDA4MjA2RDhBMkEyMEQz REIxRUI4RjM3OTE4REM3RDE4N0YxODM5NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTf9tFSIPpBMwO+OJQRIrqetC4kFlMOmEHKIOWvkReyeEJPRba h2E9vKTyWE1os4X7h6qw/VEpDmrzntRzE87D6b//pUMnrtOB+ZJZPNQChh+tp0bl 19Fwk777FL10HHXmQQyPSXfIZpP2nJDe/aLwAVUSm9CDcus2VUnmX5dTOSX3sbFj DJcooG7/RYsO954D4pTeeHnq4d4ZfGamC6TPs4MKBL5RlZ+FwB87TErV5RUm+M/W L4HPPeYZXLC2G9cfzW9a+ui5c2FrXjx4ZBT54Sp/EKYhbwB9hSPQWRtuNJChdTU2 HoM3mPIflGqmpxmBdLqMqk7N4ag2dULHZRf3AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUCCBtiiog09seuPN5GNx9GH8YOUUwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL0NDQnRpaW9nMDlzZXVQ TjVHTng5R0g4WU9VVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJl6FQwDQYJKoZIhvcNAQELBQADggEBAFUZzjUv4q7frHbW900XZ4bXymQi3j18 wlkQI8WIqTxkDvviID2kPibPRZXTdLF3AgiTmUByqdrFerBwjiU2iMF1bi51lWV8 WYMu0c788w5C5D6QdWmxCUbZsb32Vway85PsgI6qd54jBps4b6urcIIpGiVwSgJc agLsmTmVv8UnSziWNrdL/0e2a1Xw1t8/k2/sAbAPLlNxYU7XLSCdDiYd3WrKrNqj s0WQABRXCq/QIahLhFsz2CZgXmlIagmwdZGPWTxxlSZIMZYNPi4Ea8x7eVujkTmo FqCyww+qegl8cn0D8emw+4opK00pEyH5uW6hUVDDU0RVV0tHTLHMavA= -----END CERTIFICATE-----Generated at Thu Jan 22 15:28:52 2026 by rpki-client