This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/uHA7bPi3FNmBGwBadlxZrR3fo8E.roa File: uHA7bPi3FNmBGwBadlxZrR3fo8E.roa (raw, json) Hash identifier: UeiBTzUEejHwfOggKPyJtaa4ijGLTbKIkudK87iYHBI= Subject key identifier: B8:70:3B:6C:F8:B7:14:D9:81:1B:00:5A:76:5C:59:AD:1D:DF:A3:C1 Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A Certificate serial: 0720 Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/uHA7bPi3FNmBGwBadlxZrR3fo8E.roa Signing time: Tue 30 Dec 2025 01:40:12 +0000 ROA not before: Tue 30 Dec 2025 01:40:12 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 142132 IP address blocks: 114.28.206.0/24 maxlen: 32 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A Validity Not Before: Dec 30 01:40:12 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B8703B6CF8B714D9811B005A765C59AD1DDFA3C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:12:49:b5:d9:22:5d:d6:38:8e:0a:d9:ef:be: ae:18:b1:20:64:c4:96:3c:27:b1:85:0e:1d:49:18: 94:18:c1:c6:27:d9:dd:81:68:96:56:0e:d0:3f:2a: 1a:43:05:be:3f:25:5f:cb:44:92:1e:75:3c:3c:e5: f5:d3:3f:b8:55:e1:3e:f0:1e:af:e8:9a:a9:6f:98: 41:b0:05:c5:27:e8:75:b0:f5:84:c4:6f:28:fe:01: 8e:7d:00:a1:4a:da:f5:d5:ce:96:23:bf:5f:90:ff: d4:69:e5:a3:53:30:84:df:ba:1a:39:eb:78:16:81: 8d:80:1d:b6:f3:42:d3:98:dc:33:c8:c4:2b:0c:9e: c4:47:2b:04:f0:28:f5:ce:a4:cc:d0:81:36:03:dd: 73:02:68:77:69:7f:7c:dd:3e:29:b1:41:69:bb:26: f4:d0:29:2b:97:77:76:55:97:2d:44:97:57:81:8a: 53:ab:9f:af:f0:16:65:c1:fa:f0:a3:5a:3a:84:00: 15:85:ac:82:22:d3:9f:35:28:8f:d9:6d:8b:a7:a3: 87:80:73:02:8c:31:45:c3:11:32:dc:6b:25:86:01: 66:40:b3:ec:e5:e6:90:34:b4:8c:4b:f0:4e:8d:87: 70:b7:5f:b3:02:7f:9c:92:95:d9:0d:6b:19:14:d8: 55:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:70:3B:6C:F8:B7:14:D9:81:1B:00:5A:76:5C:59:AD:1D:DF:A3:C1 X509v3 Authority Key Identifier: keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/uHA7bPi3FNmBGwBadlxZrR3fo8E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.28.206.0/24 Signature Algorithm: sha256WithRSAEncryption 67:91:30:78:a5:9f:ff:34:8d:13:c9:20:f2:fb:e2:d8:42:be: 76:57:2e:24:a1:8f:eb:d8:bb:cc:7f:98:7d:da:3b:ad:77:a9: e9:28:7a:f9:fc:3a:81:05:72:b5:b8:76:12:06:a6:49:3a:23: 6c:b3:e3:ab:34:6b:88:16:dd:a7:9e:bb:be:12:95:ba:2a:1f: 43:35:67:a0:5d:3a:3a:5c:1e:89:a3:fd:5f:18:61:fc:a6:3e: 5c:19:e7:17:10:46:c8:9d:35:c4:ff:32:56:46:8a:e2:c8:69: 77:0d:04:60:8d:ef:46:45:5f:89:93:d8:51:b7:61:44:7a:26: 6c:a4:b7:83:81:f4:6d:62:e1:e9:02:09:48:48:ef:d1:7d:20: 36:46:da:f5:d6:3d:c9:72:58:33:25:35:b5:ae:ee:56:2e:bf: 7b:08:e2:67:dc:95:6a:88:a4:68:e2:f0:28:17:c5:95:5b:96: ab:cc:ea:d8:dd:48:05:89:57:3c:c6:12:bc:e4:d3:11:f4:d6: a0:27:c4:d2:8e:cf:e7:f8:ca:d9:3d:b0:92:30:cc:64:f4:4b: 21:0f:39:6f:5a:49:41:72:58:34:8a:5f:3a:c8:5c:4e:94:7e: e2:f3:a2:6d:d9:82:25:b7:47:98:e0:12:e4:3a:8a:80:09:a7: 86:a3:23:f2 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICByAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTEyMzAw MTQwMTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEI4NzAzQjZDRjhCNzE0 RDk4MTFCMDA1QTc2NUM1OUFEMURERkEzQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwEkm12SJd1jiOCtnvvq4YsSBkxJY8J7GFDh1JGJQYwcYn2d2B aJZWDtA/KhpDBb4/JV/LRJIedTw85fXTP7hV4T7wHq/omqlvmEGwBcUn6HWw9YTE byj+AY59AKFK2vXVzpYjv1+Q/9Rp5aNTMITfuho563gWgY2AHbbzQtOY3DPIxCsM nsRHKwTwKPXOpMzQgTYD3XMCaHdpf3zdPimxQWm7JvTQKSuXd3ZVly1El1eBilOr n6/wFmXB+vCjWjqEABWFrIIi0581KI/ZbYuno4eAcwKMMUXDETLcayWGAWZAs+zl 5pA0tIxL8E6Nh3C3X7MCf5ySldkNaxkU2FW7AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUuHA7bPi3FNmBGwBadlxZrR3fo8EwHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwL3VIQTdiUGkzRk5tQkd3 QmFkbHhaclIzZm84RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAByHM4wDQYJKoZIhvcNAQELBQADggEBAGeRMHiln/80jRPJIPL74thCvnZXLiSh j+vYu8x/mH3aO613qekoevn8OoEFcrW4dhIGpkk6I2yz46s0a4gW3aeeu74Slboq H0M1Z6BdOjpcHomj/V8YYfymPlwZ5xcQRsidNcT/MlZGiuLIaXcNBGCN70ZFX4mT 2FG3YUR6Jmykt4OB9G1i4ekCCUhI79F9IDZG2vXWPclyWDMlNbWu7lYuv3sI4mfc lWqIpGji8CgXxZVblqvM6tjdSAWJVzzGErzk0xH01qAnxNKOz+f4ytk9sJIwzGT0 SyEPOW9aSUFyWDSKXzrIXE6UfuLzom3ZgiW3R5jgEuQ6ioAJp4ajI/I= -----END CERTIFICATE-----Generated at Mon Jan 19 11:29:52 2026 by rpki-client