This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/Okp8lbrN9ockG9xCvsJH-FfMotk.roa File: Okp8lbrN9ockG9xCvsJH-FfMotk.roa (raw, json) Hash identifier: ClFc9Wzk3eRJVO2XowP7zKYuAcwSUPbNcLHyQRHevEM= Subject key identifier: 3A:4A:7C:95:BA:CD:F6:87:24:1B:DC:42:BE:C2:47:F8:57:CC:A2:D9 Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A Certificate serial: 0712 Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/Okp8lbrN9ockG9xCvsJH-FfMotk.roa Signing time: Tue 30 Dec 2025 01:40:09 +0000 ROA not before: Tue 30 Dec 2025 01:40:09 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 142132 IP address blocks: 114.28.211.0/24 maxlen: 32 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1810 (0x712) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A Validity Not Before: Dec 30 01:40:09 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=3A4A7C95BACDF687241BDC42BEC247F857CCA2D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:58:40:ed:d2:af:cd:24:2b:52:9b:9b:39:aa: 36:cb:00:1a:62:96:66:40:f7:ea:12:3e:8e:6b:02: 82:75:63:cf:13:f6:4d:76:a1:8a:53:08:cb:ef:88: f2:28:0a:68:d5:7c:ff:ad:e2:87:24:cf:e3:18:ef: 04:46:cb:31:cb:48:ca:60:ec:a3:96:b0:77:23:9d: 57:75:e4:2f:bf:b1:ff:ac:66:cf:22:13:8b:7e:70: 41:0c:ad:bc:f4:c8:b1:de:b4:0c:0d:14:b6:69:74: 87:f0:a5:ff:a3:5a:d7:53:0a:12:12:c3:32:8e:93: 88:f5:15:59:68:25:23:ef:67:05:20:1c:13:9d:38: 2c:26:87:05:01:7f:df:db:97:4f:01:f2:19:85:34: 5a:2f:6e:2c:8f:79:41:1c:00:de:eb:48:44:06:41: 30:da:01:2b:64:27:3e:2e:a5:d0:10:ec:1f:18:3b: 68:56:74:42:78:81:9e:d2:02:0d:3a:24:7c:a2:8d: 90:79:99:73:4f:96:e7:84:39:0a:8a:ab:82:67:88: 69:e1:88:a4:2a:fb:b3:25:c6:fe:a2:e3:0b:cc:b6: df:bd:12:73:86:77:2e:ac:e1:40:72:e5:f0:1a:68: a5:77:d0:f3:48:b2:98:5c:63:e3:75:22:1d:03:8c: 26:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4A:7C:95:BA:CD:F6:87:24:1B:DC:42:BE:C2:47:F8:57:CC:A2:D9 X509v3 Authority Key Identifier: keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/Okp8lbrN9ockG9xCvsJH-FfMotk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.28.211.0/24 Signature Algorithm: sha256WithRSAEncryption bc:27:50:fe:30:90:ff:4d:30:f2:f7:16:ae:65:ad:42:41:01: 1b:8f:5f:89:75:3c:08:70:aa:85:9a:17:99:46:51:f2:94:a4: 33:10:20:b6:1a:ed:f4:9d:3e:53:62:90:9c:c8:81:42:69:ce: 0f:1b:60:e8:85:1a:25:b8:64:e9:4a:a4:b4:d3:0e:7b:25:b5: cd:d5:6b:f2:b6:35:21:cb:4c:00:20:d8:46:96:25:62:a5:09: d7:51:f7:87:d2:53:7a:ff:7d:ec:18:99:28:dc:29:25:8c:ca: 10:39:24:66:9b:23:01:86:0f:39:ca:04:fd:ad:6f:a5:d5:54: de:8a:d8:62:f2:bb:ed:a9:16:c1:11:9d:2e:03:81:59:2a:53: 1b:46:77:37:fb:14:1c:a2:24:b0:9d:8d:87:e4:0e:ee:66:14: 61:4d:5f:d2:96:53:ca:7d:d3:b2:96:3f:0c:c8:eb:25:f2:5b: 83:12:04:6e:4a:64:13:58:8f:3c:03:49:84:e4:a0:e9:73:25: 9f:2b:24:ee:f8:33:5a:0a:7f:b0:03:8e:00:76:7e:80:80:ea: 5a:a1:68:70:e5:4b:e7:5f:95:42:0b:4d:8b:9b:9d:6c:34:f2: d9:04:c9:16:1c:55:bc:06:f7:fa:ae:ad:bf:00:8c:fa:4e:f0: b7:4a:ee:42 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICBxIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTEyMzAw MTQwMDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDNBNEE3Qzk1QkFDREY2 ODcyNDFCREM0MkJFQzI0N0Y4NTdDQ0EyRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdWEDt0q/NJCtSm5s5qjbLABpilmZA9+oSPo5rAoJ1Y88T9k12 oYpTCMvviPIoCmjVfP+t4ockz+MY7wRGyzHLSMpg7KOWsHcjnVd15C+/sf+sZs8i E4t+cEEMrbz0yLHetAwNFLZpdIfwpf+jWtdTChISwzKOk4j1FVloJSPvZwUgHBOd OCwmhwUBf9/bl08B8hmFNFovbiyPeUEcAN7rSEQGQTDaAStkJz4updAQ7B8YO2hW dEJ4gZ7SAg06JHyijZB5mXNPlueEOQqKq4JniGnhiKQq+7Mlxv6i4wvMtt+9EnOG dy6s4UBy5fAaaKV30PNIsphcY+N1Ih0DjCYxAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUOkp8lbrN9ockG9xCvsJH+FfMotkwHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwL09rcDhsYnJOOW9ja0c5 eEN2c0pILUZmTW90ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAByHNMwDQYJKoZIhvcNAQELBQADggEBALwnUP4wkP9NMPL3Fq5lrUJBARuPX4l1 PAhwqoWaF5lGUfKUpDMQILYa7fSdPlNikJzIgUJpzg8bYOiFGiW4ZOlKpLTTDnsl tc3Va/K2NSHLTAAg2EaWJWKlCddR94fSU3r/fewYmSjcKSWMyhA5JGabIwGGDznK BP2tb6XVVN6K2GLyu+2pFsERnS4DgVkqUxtGdzf7FByiJLCdjYfkDu5mFGFNX9KW U8p907KWPwzI6yXyW4MSBG5KZBNYjzwDSYTkoOlzJZ8rJO74M1oKf7ADjgB2foCA 6lqhaHDlS+dflUILTYubnWw08tkEyRYcVbwG9/qurb8AjPpO8LdK7kI= -----END CERTIFICATE-----Generated at Mon Jan 19 11:29:52 2026 by rpki-client