This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/7012N5p5uPZAWAQbXx0rFHeJmuo.roa File: 7012N5p5uPZAWAQbXx0rFHeJmuo.roa (raw, json) Hash identifier: Xi7BUw6Uq2w3KIv2WwfAQzst+biwx6aTQvns2IqrHvg= Subject key identifier: EF:4D:76:37:9A:79:B8:F6:40:58:04:1B:5F:1D:2B:14:77:89:9A:EA Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: CC93 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/7012N5p5uPZAWAQbXx0rFHeJmuo.roa Signing time: Sun 21 Dec 2025 07:09:47 +0000 ROA not before: Sun 21 Dec 2025 07:09:47 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.226.49.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 52371 (0xcc93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Dec 21 07:09:47 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=EF4D76379A79B8F64058041B5F1D2B1477899AEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:bc:d9:0f:77:d8:e1:08:93:e5:fe:82:e7: 87:eb:3c:4b:2b:9a:9b:d6:1b:14:47:e0:4f:dc:3a: 2a:fa:38:0f:3f:7a:ef:cf:ce:19:fc:e0:9b:51:ae: e8:e8:a0:c9:6f:f7:aa:60:70:a0:b6:5a:f6:57:fd: 56:99:01:6c:cd:99:ac:fb:28:02:a0:66:cf:07:f2: d7:bf:f3:2d:69:04:42:c9:66:62:00:9d:e1:be:4d: 86:cf:73:2c:f4:86:f7:70:7f:8b:6c:22:5a:45:2d: f0:6f:86:f2:24:11:6b:b2:fc:07:04:bc:f1:12:f1: 1a:f6:ee:d4:3a:3a:e8:6b:b7:3a:10:0d:5c:93:f4: ee:e7:a5:50:ae:49:77:d3:3d:e8:1f:a7:83:22:48: e6:b9:b9:f6:ad:3d:eb:0e:7f:cf:91:71:b4:4f:0c: 37:ff:ca:42:99:af:39:9f:b4:ec:00:f8:d8:88:ae: c4:d1:07:be:2e:73:be:1d:bf:fc:09:e0:14:34:3a: 34:63:af:bc:3e:80:cb:9a:ca:23:e0:25:6b:3c:23: 8d:d7:80:1d:59:e4:86:56:ea:87:15:a6:a1:c7:0c: 4d:9b:4f:61:24:c3:73:ce:79:38:ef:3b:07:c4:8b: ba:f8:58:76:00:e3:74:fa:b1:7c:45:c3:d0:d5:4e: 15:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4D:76:37:9A:79:B8:F6:40:58:04:1B:5F:1D:2B:14:77:89:9A:EA X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/7012N5p5uPZAWAQbXx0rFHeJmuo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.49.0/24 Signature Algorithm: sha256WithRSAEncryption 02:10:13:d1:8d:9d:b2:41:f0:9d:96:a3:c5:40:2c:f0:31:47: 00:a0:3d:04:ff:c3:c8:16:f7:0b:64:20:56:02:ee:0c:35:21: 11:73:ca:92:37:ce:32:57:2e:5c:05:93:ce:c3:52:b3:5f:b1: 21:d9:ad:0f:67:6c:69:00:78:92:37:3d:4d:ab:86:5d:e5:ab: 1c:a0:67:ae:cd:a3:94:a8:9a:02:78:ed:fe:78:68:a0:68:e8: 8f:55:26:42:47:cb:49:74:84:bd:b0:3d:09:54:46:c7:46:e1: b1:57:66:f7:4e:c6:66:be:c7:c3:1b:8a:75:11:31:03:77:1a: 53:c0:86:40:4f:0f:cc:b3:a8:34:6e:45:49:0a:49:24:3e:72: 1a:0b:a2:7c:b7:90:e2:45:da:a6:1c:df:71:82:20:a5:f0:27: 3c:80:96:ec:02:b3:8c:8a:07:56:1f:5b:2a:20:cf:5f:18:19: 80:9c:aa:3b:d3:7b:d2:79:3f:ca:20:24:29:9a:38:3c:5e:f0: b8:fd:33:98:a7:93:8b:6e:57:72:3c:5a:cb:92:ca:46:d6:1f: 2c:af:ff:ae:a2:0a:41:7e:10:1a:80:a8:11:46:b7:8b:c8:91: 48:3a:92:34:9f:70:23:41:c2:95:93:49:61:51:27:5b:c9:59: 7e:7d:a2:e6 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAMyTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjUxMjIx MDcwOTQ3WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyhFRjRENzYzNzlBNzlC OEY2NDA1ODA0MUI1RjFEMkIxNDc3ODk5QUVBMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAuku82Q932OEIk+X+gueH6zxLK5qb1hsUR+BP3Doq+jgPP3rv z84Z/OCbUa7o6KDJb/eqYHCgtlr2V/1WmQFszZms+ygCoGbPB/LXv/MtaQRCyWZi AJ3hvk2Gz3Ms9Ib3cH+LbCJaRS3wb4byJBFrsvwHBLzxEvEa9u7UOjroa7c6EA1c k/Tu56VQrkl30z3oH6eDIkjmubn2rT3rDn/PkXG0Tww3/8pCma85n7TsAPjYiK7E 0Qe+LnO+Hb/8CeAUNDo0Y6+8PoDLmsoj4CVrPCON14AdWeSGVuqHFaahxwxNm09h JMNzznk47zsHxIu6+Fh2AON0+rF8RcPQ1U4VKQIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFO9Ndjeaebj2QFgEG18dKxR3iZrqMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzLzcwMTJONXA1dVBa QVdBUWJYeDByRkhlSm11by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr4jEwDQYJKoZIhvcNAQELBQADggEBAAIQE9GNnbJB8J2Wo8VALPAxRwCg PQT/w8gW9wtkIFYC7gw1IRFzypI3zjJXLlwFk87DUrNfsSHZrQ9nbGkAeJI3PU2r hl3lqxygZ67No5SomgJ47f54aKBo6I9VJkJHy0l0hL2wPQlURsdG4bFXZvdOxma+ x8MbinURMQN3GlPAhkBPD8yzqDRuRUkKSSQ+choLony3kOJF2qYc33GCIKXwJzyA luwCs4yKB1YfWyogz18YGYCcqjvTe9J5P8ogJCmaODxe8Lj9M5ink4tuV3I8WsuS ykbWHyyv/66iCkF+EBqAqBFGt4vIkUg6kjSfcCNBwpWTSWFRJ1vJWX59ouY= -----END CERTIFICATE-----Generated at Sun Dec 21 09:42:34 2025 by rpki-client