This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/ubxXiWF4u24scvd8vE9mugiaCis.roa File: ubxXiWF4u24scvd8vE9mugiaCis.roa (raw, json) Hash identifier: H58Og2+XF+ceISStWo6qan8PKFLrYZ7ed+E9bmNzr+0= Subject key identifier: B9:BC:57:89:61:78:BB:6E:2C:72:F7:7C:BC:4F:66:BA:08:9A:0A:2B Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A Certificate serial: 071B Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/ubxXiWF4u24scvd8vE9mugiaCis.roa Signing time: Tue 30 Dec 2025 01:40:11 +0000 ROA not before: Tue 30 Dec 2025 01:40:11 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 142132 IP address blocks: 114.28.203.0/24 maxlen: 32 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1819 (0x71b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A Validity Not Before: Dec 30 01:40:11 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B9BC57896178BB6E2C72F77CBC4F66BA089A0A2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:af:b6:9a:25:75:23:f0:c0:1e:dc:73:98:b9: 02:a8:07:57:82:bb:c6:3d:e2:ea:2d:ee:ac:98:7c: 05:ac:2d:f4:ad:eb:83:cc:6a:a8:63:89:9d:84:a8: 22:36:0f:be:a0:0d:b8:51:3d:36:64:f4:64:a9:39: 87:0b:e0:2c:9c:21:d0:09:81:1e:7e:d6:bd:b6:43: eb:a1:a3:ef:16:5e:9c:0b:76:ad:d5:95:b6:21:28: 12:8b:5a:9d:51:44:35:fc:80:bb:13:d5:14:4b:4e: 1b:24:f5:51:af:98:32:f9:42:10:3d:74:15:c7:6f: b7:12:a2:08:03:57:e6:66:97:35:3b:2c:3c:69:99: 31:f4:1d:0f:0d:ba:0d:9b:10:f2:49:14:a2:c3:42: 45:2d:e6:f4:bd:e5:45:47:2b:d9:9f:b9:32:36:77: 89:4f:4a:7d:b5:39:53:c5:81:80:f6:38:03:1a:b0: df:18:1f:7d:4a:d5:cc:73:ec:a3:d6:91:d3:3b:53: 8c:7e:fe:49:40:56:ef:8e:51:46:bc:d3:06:74:66: 57:fd:7f:b4:3d:ca:8b:b9:e1:52:73:64:b7:e1:9d: 49:35:23:d6:fa:fe:6d:59:69:62:08:e5:49:b5:09: 75:4e:c1:51:49:75:d1:93:b3:d5:75:2a:c3:7c:7e: e1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BC:57:89:61:78:BB:6E:2C:72:F7:7C:BC:4F:66:BA:08:9A:0A:2B X509v3 Authority Key Identifier: keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/ubxXiWF4u24scvd8vE9mugiaCis.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.28.203.0/24 Signature Algorithm: sha256WithRSAEncryption 11:30:d6:f2:3d:8f:f4:65:c6:a0:d7:be:13:2d:2e:27:69:a9: 02:04:b0:28:4d:03:41:f2:12:dd:07:e3:e0:03:58:9b:98:fd: 8c:63:1a:70:54:47:c2:f9:b4:b5:f7:a5:67:22:24:90:cb:2a: 05:ee:0b:ee:55:a9:9e:9f:fe:fb:36:67:8d:15:f3:a0:97:84: 38:54:e5:e5:c6:76:75:bb:2b:06:54:1d:b8:b0:5e:98:54:64: 96:2d:0a:e4:f8:9e:1a:ef:72:48:38:da:3d:a8:e1:87:3c:e5: 17:9d:26:c6:a2:49:9b:96:da:8e:66:4c:c9:b6:9b:c5:06:7a: 9f:27:c1:28:e1:08:7d:d6:f0:79:be:98:89:d1:3d:73:4d:1c: 5c:9e:f7:ab:04:c6:f4:e5:cf:42:20:70:51:73:d1:32:23:eb: 97:48:aa:17:12:ed:24:0b:e3:9e:a2:97:50:87:df:8a:6b:a3: 98:06:fc:64:a6:5f:59:1c:2d:54:4d:6b:d9:6e:8b:71:17:57: 61:41:4f:20:53:79:9a:40:03:45:10:5a:13:26:19:19:d6:b1: f9:6a:ee:09:a3:60:3b:e1:69:34:e0:8d:5f:dd:91:b1:2a:9e: 1a:ee:cf:8f:e9:a1:c1:c7:77:5d:75:09:70:d3:9e:fb:0b:72: 4e:42:4e:33 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICBxswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTEyMzAw MTQwMTFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEI5QkM1Nzg5NjE3OEJC NkUyQzcyRjc3Q0JDNEY2NkJBMDg5QTBBMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcr7aaJXUj8MAe3HOYuQKoB1eCu8Y94uot7qyYfAWsLfSt64PM aqhjiZ2EqCI2D76gDbhRPTZk9GSpOYcL4CycIdAJgR5+1r22Q+uho+8WXpwLdq3V lbYhKBKLWp1RRDX8gLsT1RRLThsk9VGvmDL5QhA9dBXHb7cSoggDV+ZmlzU7LDxp mTH0HQ8Nug2bEPJJFKLDQkUt5vS95UVHK9mfuTI2d4lPSn21OVPFgYD2OAMasN8Y H31K1cxz7KPWkdM7U4x+/klAVu+OUUa80wZ0Zlf9f7Q9you54VJzZLfhnUk1I9b6 /m1ZaWII5Um1CXVOwVFJddGTs9V1KsN8fuGXAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUubxXiWF4u24scvd8vE9mugiaCiswHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwL3VieFhpV0Y0dTI0c2N2 ZDh2RTltdWdpYUNpcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAByHMswDQYJKoZIhvcNAQELBQADggEBABEw1vI9j/RlxqDXvhMtLidpqQIEsChN A0HyEt0H4+ADWJuY/YxjGnBUR8L5tLX3pWciJJDLKgXuC+5VqZ6f/vs2Z40V86CX hDhU5eXGdnW7KwZUHbiwXphUZJYtCuT4nhrvckg42j2o4Yc85RedJsaiSZuW2o5m TMm2m8UGep8nwSjhCH3W8Hm+mInRPXNNHFye96sExvTlz0IgcFFz0TIj65dIqhcS 7SQL456il1CH34pro5gG/GSmX1kcLVRNa9lui3EXV2FBTyBTeZpAA0UQWhMmGRnW sflq7gmjYDvhaTTgjV/dkbEqnhruz4/pocHHd111CXDTnvsLck5CTjM= -----END CERTIFICATE-----Generated at Mon Jan 19 11:29:51 2026 by rpki-client