This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/0kdNl2Hck-JmD85ygEJgqIzXPAI.roa File: 0kdNl2Hck-JmD85ygEJgqIzXPAI.roa (raw, json) Hash identifier: yUOtTAC5coZuCssYEgnknq54fJwnwX+KK9OKa+yTzPA= Subject key identifier: D2:47:4D:97:61:DC:93:E2:66:0F:CE:72:80:42:60:A8:8C:D7:3C:02 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1809 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/0kdNl2Hck-JmD85ygEJgqIzXPAI.roa Signing time: Fri 17 Jan 2025 01:24:28 +0000 ROA not before: Fri 17 Jan 2025 01:24:28 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.23.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 6153 (0x1809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:28 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D2474D9761DC93E2660FCE72804260A88CD73C02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:0a:82:13:30:00:d2:5e:31:d2:70:98:65: 2b:6a:b0:6a:43:4c:a7:bc:4c:cb:01:53:b3:98:92: cb:a1:91:98:66:70:ac:82:ab:5c:19:90:34:8f:31: 9e:34:a3:bb:86:71:11:7f:6b:01:7d:a5:94:d6:b1: 65:55:29:7a:6a:39:49:99:dd:78:02:83:bf:0c:f8: ad:f1:09:43:2d:76:21:43:8a:83:d5:7b:19:c5:f1: 93:16:53:aa:aa:13:ef:82:d5:d3:7a:f1:fb:ad:44: a9:4d:7f:7d:45:c8:12:41:3c:5f:62:c5:9f:68:9a: 1c:6a:7d:cf:e3:6d:2d:a0:2a:fb:1f:4e:13:14:62: bd:d5:69:da:d7:f7:60:66:c5:13:4d:8e:d3:7d:4e: 1c:a9:74:52:0d:f6:e9:68:6e:f7:99:20:20:30:37: 28:9a:50:d5:ab:9c:88:84:1f:5e:0c:df:0d:44:f1: be:97:8b:56:0a:02:64:4d:34:c0:90:b3:0f:bd:e0: 3a:86:7f:aa:2d:7d:bb:7d:b0:86:de:81:c0:19:84: 84:b6:8a:9f:15:fb:38:49:e1:61:c1:02:ae:99:1c: a8:39:96:9b:44:77:35:74:f0:65:04:d3:91:29:ec: 1a:35:5d:40:13:5c:35:61:25:2a:ec:69:4f:9c:79: c0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:47:4D:97:61:DC:93:E2:66:0F:CE:72:80:42:60:A8:8C:D7:3C:02 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/0kdNl2Hck-JmD85ygEJgqIzXPAI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.23.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:7a:93:6d:b3:34:7e:f0:fe:3c:f9:ac:93:11:c3:56:73:08: e0:f2:fd:d7:f3:56:8f:bd:0e:bc:ec:15:7f:3a:fd:ce:c2:8b: b7:f8:82:0c:77:7e:4f:13:ca:b1:f9:5a:27:2b:31:65:27:35: a4:03:0e:5f:c0:75:00:1e:48:ec:8e:48:86:87:4a:bd:08:64: 17:01:44:fa:b7:68:fc:57:25:81:58:b4:1d:67:04:c9:47:8b: c3:c6:92:1a:3b:ee:5c:dd:36:07:fc:4b:0e:ea:89:32:d8:0b: 2c:5d:f5:00:1c:4a:92:97:cb:74:50:a9:33:d5:a5:ce:1c:6d: 3a:27:6e:47:6f:2f:67:2c:86:6a:33:99:f9:23:67:ab:0c:7e: f2:87:93:0c:2a:26:26:83:04:db:c4:f3:5d:a1:1c:5a:ec:ed: be:63:ff:f8:c1:64:03:c0:9d:46:54:56:c6:47:73:c4:33:f2: 35:10:77:8a:a9:e5:1c:0d:ea:1a:3e:5c:a6:be:33:51:0b:80: 06:ce:96:fd:0b:6f:ba:0c:7a:c1:32:8f:27:08:a0:b6:4a:55: a2:53:00:f6:06:c5:74:a8:30:76:09:a0:bf:06:76:72:6e:28: c6:eb:36:fd:50:46:df:b9:6c:48:f1:ea:0f:ee:e7:c2:a8:b6: 2c:dd:96:fe -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGAkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MjhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQyNDc0RDk3NjFEQzkz RTI2NjBGQ0U3MjgwNDI2MEE4OENENzNDMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/sQqCEzAA0l4x0nCYZStqsGpDTKe8TMsBU7OYksuhkZhmcKyC q1wZkDSPMZ40o7uGcRF/awF9pZTWsWVVKXpqOUmZ3XgCg78M+K3xCUMtdiFDioPV exnF8ZMWU6qqE++C1dN68futRKlNf31FyBJBPF9ixZ9omhxqfc/jbS2gKvsfThMU Yr3VadrX92BmxRNNjtN9ThypdFIN9ulobveZICAwNyiaUNWrnIiEH14M3w1E8b6X i1YKAmRNNMCQsw+94DqGf6otfbt9sIbegcAZhIS2ip8V+zhJ4WHBAq6ZHKg5lptE dzV08GUE05Ep7Bo1XUATXDVhJSrsaU+cecB3AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU0kdNl2Hck+JmD85ygEJgqIzXPAIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzBrZE5sMkhjay1KbUQ4 NXlnRUpncUl6WFBBSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RcwDQYJKoZIhvcNAQELBQADggEBACt6k22zNH7w/jz5rJMRw1ZzCODy/dfz Vo+9DrzsFX86/c7Ci7f4ggx3fk8TyrH5WicrMWUnNaQDDl/AdQAeSOyOSIaHSr0I ZBcBRPq3aPxXJYFYtB1nBMlHi8PGkho77lzdNgf8Sw7qiTLYCyxd9QAcSpKXy3RQ qTPVpc4cbTonbkdvL2cshmozmfkjZ6sMfvKHkwwqJiaDBNvE812hHFrs7b5j//jB ZAPAnUZUVsZHc8Qz8jUQd4qp5RwN6ho+XKa+M1ELgAbOlv0Lb7oMesEyjycIoLZK VaJTAPYGxXSoMHYJoL8GdnJuKMbrNv1QRt+5bEjx6g/u58Kotizdlv4= -----END CERTIFICATE-----Generated at Wed Dec 24 13:24:05 2025 by rpki-client