This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/7vVvaXRhkEbo90knqGGgCSN-u9M.roa File: 7vVvaXRhkEbo90knqGGgCSN-u9M.roa (raw, json) Hash identifier: MPoohhtMzht2N2brdyMylRKe7d4hb92j0SJ5HdlgHuU= Subject key identifier: EE:F5:6F:69:74:61:90:46:E8:F7:49:27:A8:61:A0:09:23:7E:BB:D3 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: E543 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/7vVvaXRhkEbo90knqGGgCSN-u9M.roa Signing time: Mon 12 Jan 2026 05:27:13 +0000 ROA not before: Mon 12 Jan 2026 05:27:13 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63612 IP address blocks: 103.45.128.0/19 maxlen: 19 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 58691 (0xe543) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 12 05:27:13 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=EEF56F6974619046E8F74927A861A009237EBBD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f0:5b:42:0b:3d:ff:40:e8:e3:85:8b:53:58: 0e:af:bb:fc:7d:d0:fc:b7:f4:f1:b5:89:b5:a5:5d: f6:e3:35:9c:5c:19:64:30:ff:7c:11:4d:d7:d3:74: 39:fe:20:e0:bb:89:d4:f2:db:eb:83:05:e7:03:95: 62:ea:90:c5:a1:dc:4e:53:e8:a0:2f:72:23:ad:ee: bd:2b:10:ac:e4:b9:95:43:f1:58:e3:c0:ae:6b:30: 9f:9c:97:49:67:15:f0:13:75:82:c7:c6:1d:01:fe: 18:70:e1:3a:83:75:8e:e3:6c:dd:a6:b3:06:b1:a8: b1:c9:a7:78:4c:6d:55:93:5a:f5:46:1f:2d:88:6e: 2b:5f:82:cf:f4:d2:74:81:38:02:65:59:f5:26:1e: 9b:7d:27:3e:d7:2e:c9:d0:a7:96:d2:f1:4b:1c:00: b9:33:3c:f0:19:6a:cd:55:2f:1e:c6:59:d4:6f:3a: 8c:e1:9b:f9:3f:ea:e2:b3:85:d6:82:71:da:96:87: 7d:8f:ca:3c:df:9c:c5:89:e7:5c:fd:0b:c7:95:ef: d8:35:83:33:15:6d:e3:b9:29:d7:07:48:e9:2a:ba: ab:bf:f2:a0:4e:db:29:dd:4c:b7:d3:9f:8c:58:93: ce:33:d5:6e:2c:56:32:2b:b8:8d:86:8d:52:d9:3e: 50:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F5:6F:69:74:61:90:46:E8:F7:49:27:A8:61:A0:09:23:7E:BB:D3 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/7vVvaXRhkEbo90knqGGgCSN-u9M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.45.128.0/19 Signature Algorithm: sha256WithRSAEncryption 35:a8:49:7c:31:4a:9e:23:dd:15:91:2d:18:a4:98:b1:62:07: 77:9a:68:88:d0:0c:f4:c6:ee:df:b2:f0:f0:e6:40:15:23:e1: 2e:28:e4:d3:7a:f2:16:27:1a:68:c6:f9:8b:df:9f:c7:70:69: 63:67:42:01:37:cd:28:77:02:6b:26:73:01:fb:55:24:66:e3: af:c0:e7:94:3d:7d:a4:69:fc:6e:c4:fe:c6:1d:ba:21:ad:bf: aa:67:9d:f2:bc:00:70:88:6a:b2:d9:5b:a8:93:83:54:c5:e8: d8:7a:03:37:3d:53:dc:ef:8c:32:2d:96:d2:59:dc:40:79:37: c4:36:55:60:0b:45:b3:f0:21:03:68:84:ac:fb:95:a8:01:47: fe:59:92:20:32:0a:e8:e4:68:c3:40:4d:7c:35:81:82:35:96: b8:41:ec:15:43:6a:ad:9d:69:4b:a7:b9:37:d2:80:ca:a7:15: d5:bd:ae:3d:a0:e1:e6:a0:f2:ec:93:64:38:5a:ea:85:b1:b4: 09:f4:98:0e:13:f0:8d:59:34:24:26:50:8c:5a:aa:b9:90:fc: 0e:0e:6a:92:8c:64:67:67:df:36:e3:59:a6:8e:18:42:ed:41: 32:3c:ec:e8:8a:2b:ed:4c:bc:93:71:30:09:57:c5:01:55:ce: 4f:53:2a:45 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAOVDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTEy MDUyNzEzWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyhFRUY1NkY2OTc0NjE5 MDQ2RThGNzQ5MjdBODYxQTAwOTIzN0VCQkQzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEApvBbQgs9/0Do44WLU1gOr7v8fdD8t/TxtYm1pV324zWcXBlk MP98EU3X03Q5/iDgu4nU8tvrgwXnA5Vi6pDFodxOU+igL3Ijre69KxCs5LmVQ/FY 48CuazCfnJdJZxXwE3WCx8YdAf4YcOE6g3WO42zdprMGsaixyad4TG1Vk1r1Rh8t iG4rX4LP9NJ0gTgCZVn1Jh6bfSc+1y7J0KeW0vFLHAC5MzzwGWrNVS8exlnUbzqM 4Zv5P+ris4XWgnHalod9j8o835zFiedc/QvHle/YNYMzFW3juSnXB0jpKrqrv/Kg Ttsp3Uy305+MWJPOM9VuLFYyK7iNho1S2T5QgQIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFO71b2l0YZBG6PdJJ6hhoAkjfrvTMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzLzd2VnZhWFJoa0Vi bzkwa25xR0dnQ1NOLXU5TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVnLYAwDQYJKoZIhvcNAQELBQADggEBADWoSXwxSp4j3RWRLRikmLFiB3ea aIjQDPTG7t+y8PDmQBUj4S4o5NN68hYnGmjG+Yvfn8dwaWNnQgE3zSh3AmsmcwH7 VSRm46/A55Q9faRp/G7E/sYduiGtv6pnnfK8AHCIarLZW6iTg1TF6Nh6Azc9U9zv jDItltJZ3EB5N8Q2VWALRbPwIQNohKz7lagBR/5ZkiAyCujkaMNATXw1gYI1lrhB 7BVDaq2daUunuTfSgMqnFdW9rj2g4eag8uyTZDha6oWxtAn0mA4T8I1ZNCQmUIxa qrmQ/A4OapKMZGdn3zbjWaaOGELtQTI87OiKK+1MvJNxMAlXxQFVzk9TKkU= -----END CERTIFICATE-----Generated at Mon Jan 12 09:20:39 2026 by rpki-client