This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/8VQZLO48jwYGw2yXdB6v_TO9qEc.roa
File: 8VQZLO48jwYGw2yXdB6v_TO9qEc.roa (raw, json)
Hash identifier: 6aKFCrqnR0zsdTJv8aafMVS4cqIFGywedkT6HonkqWA=
Subject key identifier: F1:54:19:2C:EE:3C:8F:06:06:C3:6C:97:74:1E:AF:FD:33:BD:A8:47
Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Certificate serial: 0713
Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/8VQZLO48jwYGw2yXdB6v_TO9qEc.roa
Signing time: Tue 30 Dec 2025 01:40:10 +0000
ROA not before: Tue 30 Dec 2025 01:40:10 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 142132
IP address blocks: 114.28.238.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1811 (0x713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Validity
Not Before: Dec 30 01:40:10 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=F154192CEE3C8F0606C36C97741EAFFD33BDA847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:2b:dd:60:a6:0f:06:2e:71:6c:ce:cf:26:
e8:3a:5b:20:0c:0e:f4:45:81:ad:7a:b6:27:19:48:
c5:d4:d3:f2:48:bb:fb:6e:7d:c9:8d:13:7f:8c:5a:
3d:06:e7:fd:f2:45:20:3f:70:94:0e:ec:9f:43:db:
78:6d:c8:2a:52:af:a6:7f:29:a7:7b:bb:fd:e0:68:
45:89:88:99:2d:59:8c:65:1f:2b:80:c3:4e:74:57:
f0:98:8a:69:d6:6c:c0:e9:ec:77:85:3b:89:c3:49:
cc:57:2a:9c:fd:3e:0f:86:18:5e:9e:a7:b7:83:39:
a7:86:9c:da:1f:1e:02:f6:3c:97:99:8d:c6:5e:31:
c1:1b:3e:79:1f:42:b4:37:b2:28:65:69:34:f0:4f:
a9:01:d0:67:8e:ea:d0:9c:6d:a2:db:35:05:e2:99:
fa:02:02:8e:4e:d7:32:cf:d0:29:3a:3f:b0:55:08:
e9:9b:55:d2:2e:24:db:ef:58:ad:e6:2d:38:84:cc:
db:42:d3:a8:bc:96:60:b6:bf:f8:fc:27:f2:78:a4:
30:96:a5:2c:ed:79:2d:1a:4e:52:52:0c:53:80:16:
f6:81:99:f8:9b:b3:6a:5c:42:5f:57:8c:4c:13:02:
01:fe:7d:a6:df:54:d8:b7:97:2e:bf:1b:5d:35:8a:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:54:19:2C:EE:3C:8F:06:06:C3:6C:97:74:1E:AF:FD:33:BD:A8:47
X509v3 Authority Key Identifier:
keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/8VQZLO48jwYGw2yXdB6v_TO9qEc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.28.238.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:58:bf:23:75:8c:27:91:e6:4a:2a:99:5e:13:19:44:58:35:
06:01:7a:ef:f3:b2:1c:b8:18:1d:c5:ad:05:49:7d:b4:be:b8:
de:dd:37:29:e9:b5:0a:1d:5c:32:a9:f4:52:59:58:eb:9e:21:
df:44:a4:44:b6:86:6e:86:c4:b2:5a:52:ad:fa:cf:60:c6:68:
d7:ec:25:5e:15:a8:ed:b3:2c:ce:32:6b:dd:6a:80:22:d1:bf:
b4:ca:cb:16:6f:5a:e4:a7:82:98:8c:0c:74:84:69:42:42:63:
d0:23:c3:7c:fa:24:22:9c:64:f5:4f:31:80:18:2b:4c:22:b7:
e6:27:5f:8b:73:9f:18:bf:ae:42:40:4c:e4:fd:d6:05:70:7a:
75:50:a9:92:66:0b:e5:b0:ed:61:a2:b7:4e:10:92:a7:b4:08:
da:bc:9b:ca:f8:cf:c0:1b:57:07:8f:fc:df:fc:62:3e:f9:0d:
9d:14:e5:b8:11:da:7b:23:5e:f6:b2:a6:cd:9c:7b:b3:12:10:
53:46:24:3e:6c:ac:6b:04:d0:bb:ea:1b:93:96:a3:94:8d:8c:
86:70:99:cd:79:39:ae:05:24:e3:d8:a5:63:04:53:1d:f1:48:
ac:42:fe:f9:bc:e0:48:2a:3c:81:32:13:f1:40:1b:eb:84:10:
72:85:e6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:29:52 2026 by rpki-client