This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/YP7hcwU9WhLbRC8IWSHbLaS4uJM.roa File: YP7hcwU9WhLbRC8IWSHbLaS4uJM.roa (raw, json) Hash identifier: 3maiPD2D3+WoEOgD7VvyOVUHqmZYoY5OxOLIqHMcnBY= Subject key identifier: 60:FE:E1:73:05:3D:5A:12:DB:44:2F:08:59:21:DB:2D:A4:B8:B8:93 Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A Certificate serial: 0722 Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/YP7hcwU9WhLbRC8IWSHbLaS4uJM.roa Signing time: Tue 30 Dec 2025 01:40:13 +0000 ROA not before: Tue 30 Dec 2025 01:40:13 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 142132 IP address blocks: 114.28.210.0/24 maxlen: 32 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A Validity Not Before: Dec 30 01:40:13 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=60FEE173053D5A12DB442F085921DB2DA4B8B893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ac:c4:cf:39:e0:2f:ad:c5:28:3b:66:3e:c1: f7:93:b9:d6:f5:93:3e:cb:20:b8:d5:48:c2:86:33: 2c:b0:ef:be:3d:2c:9f:b8:35:19:da:66:08:3a:0d: 34:d1:4f:94:ee:09:c1:8e:7b:fd:38:b4:df:e4:8e: 8b:a9:bf:a9:fa:25:2f:ea:e0:db:fb:b1:9a:23:f0: 06:10:36:0e:33:87:de:43:d6:7e:0a:12:6f:81:f2: 94:af:b5:84:ab:25:57:97:f9:89:ca:e2:85:bb:44: f2:af:bd:0a:2a:32:b1:76:be:bb:63:d5:70:4b:ed: 8d:85:c7:77:80:50:6c:68:a7:90:02:86:3d:6f:18: 59:3f:b4:56:af:e8:41:d5:0c:37:7d:c0:e2:27:4f: f5:1b:92:26:eb:ca:09:17:0f:77:0c:2b:b5:44:9a: 29:26:6a:8d:7a:61:8f:45:e0:84:ab:84:f7:2e:0d: b0:01:3b:21:5d:c3:37:ad:99:60:d1:13:20:29:8a: 1e:f7:12:0f:c7:5b:cd:76:67:1a:a1:8a:ea:88:da: 3e:8b:b9:97:e8:c7:a7:a5:fb:6e:34:d5:75:22:43: f3:e1:f4:84:04:7a:ab:6c:8e:c1:d9:d4:b3:12:48: 0c:81:12:1b:b4:df:f6:cc:69:ae:51:57:48:96:47: 15:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FE:E1:73:05:3D:5A:12:DB:44:2F:08:59:21:DB:2D:A4:B8:B8:93 X509v3 Authority Key Identifier: keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/YP7hcwU9WhLbRC8IWSHbLaS4uJM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.28.210.0/24 Signature Algorithm: sha256WithRSAEncryption 54:b5:20:f4:73:36:10:db:e3:61:cf:9e:55:89:1e:8f:67:46: e4:4b:96:c0:7f:73:cb:46:53:98:54:32:0f:8f:ba:b3:0a:f8: 9b:d6:7b:99:d7:f3:9c:82:36:60:a7:f6:8d:79:8d:45:e6:d0: a9:40:83:68:7e:77:db:75:98:9f:e4:27:de:f1:fa:f7:35:48: 9a:c4:ad:73:5d:3f:27:17:68:85:ee:4c:74:27:8d:e9:6f:80: 2d:e3:64:0b:75:97:0a:e1:de:fd:41:e7:f5:63:f5:dc:b8:6f: 9a:57:76:c0:32:36:27:34:e5:b0:a6:4a:09:5b:8c:8d:a8:13: 9f:50:0a:de:d1:c7:55:08:79:5a:71:1e:52:97:3b:b7:4c:8c: a8:d6:cb:2d:be:1d:a3:6f:ee:90:12:84:a9:9d:a8:a2:bf:84: 3b:68:05:3c:9e:f0:22:f8:8a:c8:74:b1:b5:ed:e0:bf:7f:8f: a7:1b:3d:19:09:68:b6:69:7a:cb:9e:68:26:c1:77:80:32:e9: fa:22:c8:f0:36:ca:6b:5b:49:9e:da:79:c6:7d:b1:c8:28:23: dd:95:9a:e4:16:cf:b1:a7:df:0a:aa:ca:38:90:51:6c:2a:a0: c6:bb:49:90:6d:c0:07:ea:79:3c:7d:4e:b8:f4:d4:db:43:5f: f7:9a:14:13 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICByIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTEyMzAw MTQwMTNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDYwRkVFMTczMDUzRDVB MTJEQjQ0MkYwODU5MjFEQjJEQTRCOEI4OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLrMTPOeAvrcUoO2Y+wfeTudb1kz7LILjVSMKGMyyw7749LJ+4 NRnaZgg6DTTRT5TuCcGOe/04tN/kjoupv6n6JS/q4Nv7sZoj8AYQNg4zh95D1n4K Em+B8pSvtYSrJVeX+YnK4oW7RPKvvQoqMrF2vrtj1XBL7Y2Fx3eAUGxop5AChj1v GFk/tFav6EHVDDd9wOInT/UbkibrygkXD3cMK7VEmikmao16YY9F4ISrhPcuDbAB OyFdwzetmWDREyApih73Eg/HW812ZxqhiuqI2j6LuZfox6el+2401XUiQ/Ph9IQE eqtsjsHZ1LMSSAyBEhu03/bMaa5RV0iWRxWhAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUYP7hcwU9WhLbRC8IWSHbLaS4uJMwHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwL1lQN2hjd1U5V2hMYlJD OElXU0hiTGFTNHVKTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAByHNIwDQYJKoZIhvcNAQELBQADggEBAFS1IPRzNhDb42HPnlWJHo9nRuRLlsB/ c8tGU5hUMg+PurMK+JvWe5nX85yCNmCn9o15jUXm0KlAg2h+d9t1mJ/kJ97x+vc1 SJrErXNdPycXaIXuTHQnjelvgC3jZAt1lwrh3v1B5/Vj9dy4b5pXdsAyNic05bCm SglbjI2oE59QCt7Rx1UIeVpxHlKXO7dMjKjWyy2+HaNv7pAShKmdqKK/hDtoBTye 8CL4ish0sbXt4L9/j6cbPRkJaLZpesueaCbBd4Ay6foiyPA2ymtbSZ7aecZ9scgo I92VmuQWz7Gn3wqqyjiQUWwqoMa7SZBtwAfqeTx9Trj01NtDX/eaFBM= -----END CERTIFICATE-----Generated at Mon Jan 19 11:29:52 2026 by rpki-client