This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/Tl8s6o7kvYmLotBUW2ESEn5qWqE.roa File: Tl8s6o7kvYmLotBUW2ESEn5qWqE.roa (raw, json) Hash identifier: MTgZfUt91DGmN8aZm1CyYr+RIFKKC3Q5/pkE6y4sLEo= Subject key identifier: 4E:5F:2C:EA:8E:E4:BD:89:8B:A2:D0:54:5B:61:12:12:7E:6A:5A:A1 Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A Certificate serial: 0715 Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/Tl8s6o7kvYmLotBUW2ESEn5qWqE.roa Signing time: Tue 30 Dec 2025 01:40:10 +0000 ROA not before: Tue 30 Dec 2025 01:40:10 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 142132 IP address blocks: 114.28.212.0/22 maxlen: 32 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1813 (0x715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A Validity Not Before: Dec 30 01:40:10 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4E5F2CEA8EE4BD898BA2D0545B6112127E6A5AA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:b7:9a:3d:77:b1:8d:8d:f0:76:f3:d7:99: da:68:8d:f6:14:a3:a1:e4:8c:b2:4c:4f:2c:07:2b: 4a:50:3b:39:69:8d:4c:c1:96:be:15:70:9b:91:42: 61:52:41:0d:a5:87:6f:48:7f:28:4e:83:cf:83:70: d0:9f:24:ae:30:4b:b6:dd:fd:f0:5e:7c:0e:20:ef: 79:09:2c:0a:be:9d:7c:59:cc:f9:fd:94:65:c5:e6: 64:b2:e4:3a:f6:f2:b0:c5:eb:ee:a5:5b:14:91:1e: 84:1c:74:6a:67:52:6f:ad:e9:3c:5b:36:ff:0b:bb: 29:92:ec:59:2c:7b:b5:ab:ff:6a:49:13:97:be:f3: b0:f5:21:b9:da:b5:86:d4:b0:d0:36:3d:ff:51:bf: cd:fc:cf:18:53:f5:6b:09:48:ed:61:79:e7:2b:f9: b2:2e:bd:9a:cd:3d:e4:52:dc:ce:fa:06:1b:d5:c8: f6:c4:c3:a5:96:71:8f:40:95:9d:ea:34:4b:2b:2e: 65:6b:3a:0f:f9:6e:8a:88:6a:e6:aa:51:8e:10:c0: 70:83:40:12:e3:7a:ae:9e:d5:b4:ff:7e:45:50:a4: 26:34:b9:9d:a9:0e:22:e1:cf:f7:0d:19:62:f2:c7: bb:fe:ea:ae:25:27:22:7b:fa:b1:1e:a7:a2:90:ed: ca:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5F:2C:EA:8E:E4:BD:89:8B:A2:D0:54:5B:61:12:12:7E:6A:5A:A1 X509v3 Authority Key Identifier: keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/Tl8s6o7kvYmLotBUW2ESEn5qWqE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.28.212.0/22 Signature Algorithm: sha256WithRSAEncryption ab:36:6b:93:1c:49:72:02:ef:be:67:dc:96:5a:9c:e8:67:44: 2d:9c:07:47:93:4d:cc:91:2d:cf:d0:3b:54:a0:9b:58:58:e4: 53:c4:37:fd:01:b7:e1:1a:69:e0:68:29:10:3e:94:be:23:27: c1:5a:ff:b0:41:c1:00:d9:bc:a7:cc:01:4b:71:7e:50:d8:50: d4:4e:d7:0a:51:79:1d:74:d9:e9:13:b0:b2:48:e2:fb:f7:3e: 3f:86:ec:7a:50:76:24:a9:d7:ac:5c:f8:22:ad:83:29:d2:21: 1c:87:2b:d1:f0:98:62:6e:7b:21:55:3d:08:16:fd:84:23:99: 25:32:d6:34:8a:1e:09:02:5c:be:f3:1c:1e:f6:c9:f5:98:45: 64:45:d3:fb:0e:3b:ab:ca:08:d0:22:6f:b5:fc:bf:67:ca:ea: 06:52:16:ac:9c:37:a7:dc:0c:9a:80:f4:20:01:00:e0:01:b6: 05:95:cd:18:18:92:04:43:7c:94:53:6c:6d:c9:e8:b3:7e:cf: 38:04:70:37:98:39:00:9a:3b:de:3c:b5:bc:bd:cd:c6:3d:f8: 7c:3f:bf:3d:39:6b:c2:70:74:9f:2b:9e:30:34:eb:7e:92:7d: 0b:94:28:1a:81:09:db:bb:42:67:83:53:78:84:58:a2:15:d2: d0:95:45:40 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTEyMzAw MTQwMTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDRFNUYyQ0VBOEVFNEJE ODk4QkEyRDA1NDVCNjExMjEyN0U2QTVBQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8jreaPXexjY3wdvPXmdpojfYUo6HkjLJMTywHK0pQOzlpjUzB lr4VcJuRQmFSQQ2lh29IfyhOg8+DcNCfJK4wS7bd/fBefA4g73kJLAq+nXxZzPn9 lGXF5mSy5Dr28rDF6+6lWxSRHoQcdGpnUm+t6TxbNv8LuymS7Fkse7Wr/2pJE5e+ 87D1IbnatYbUsNA2Pf9Rv838zxhT9WsJSO1heecr+bIuvZrNPeRS3M76BhvVyPbE w6WWcY9AlZ3qNEsrLmVrOg/5boqIauaqUY4QwHCDQBLjeq6e1bT/fkVQpCY0uZ2p DiLhz/cNGWLyx7v+6q4lJyJ7+rEep6KQ7crbAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUTl8s6o7kvYmLotBUW2ESEn5qWqEwHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwL1RsOHM2bzdrdlltTG90 QlVXMkVTRW41cVdxRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJyHNQwDQYJKoZIhvcNAQELBQADggEBAKs2a5McSXIC775n3JZanOhnRC2cB0eT TcyRLc/QO1Sgm1hY5FPEN/0Bt+EaaeBoKRA+lL4jJ8Fa/7BBwQDZvKfMAUtxflDY UNRO1wpReR102ekTsLJI4vv3Pj+G7HpQdiSp16xc+CKtgynSIRyHK9HwmGJueyFV PQgW/YQjmSUy1jSKHgkCXL7zHB72yfWYRWRF0/sOO6vKCNAib7X8v2fK6gZSFqyc N6fcDJqA9CABAOABtgWVzRgYkgRDfJRTbG3J6LN+zzgEcDeYOQCaO948tby9zcY9 +Hw/vz05a8JwdJ8rnjA0636SfQuUKBqBCdu7QmeDU3iEWKIV0tCVRUA= -----END CERTIFICATE-----Generated at Mon Jan 19 11:29:53 2026 by rpki-client