This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/8GJAJJmi6f20UfxwGXhxWwESe0M.roa File: 8GJAJJmi6f20UfxwGXhxWwESe0M.roa (raw, json) Hash identifier: u/h4XOh0aL8iIw95jxMFYKl/pSu0SagnW/m3nkevmb0= Subject key identifier: F0:62:40:24:99:A2:E9:FD:B4:51:FC:70:19:78:71:5B:01:12:7B:43 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: CA6C Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/8GJAJJmi6f20UfxwGXhxWwESe0M.roa Signing time: Fri 19 Dec 2025 09:09:41 +0000 ROA not before: Fri 19 Dec 2025 09:09:41 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.227.68.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 51820 (0xca6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Dec 19 09:09:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F062402499A2E9FDB451FC701978715B01127B43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:31:df:0b:dc:3c:03:29:3a:36:b4:41:90:09: d9:04:a5:69:5f:33:18:80:e4:66:be:01:f0:9e:7a: e4:69:54:a9:91:a9:6d:65:dd:6f:fa:92:30:4f:fa: b9:18:ef:e5:73:41:68:15:6f:20:e2:f3:a2:2d:a8: b3:f2:7d:14:53:ed:be:da:49:c5:42:5f:3c:fc:ad: 5e:67:21:5e:f8:76:ee:2d:22:40:2a:18:f4:df:1d: 4f:0f:20:42:95:f3:d2:40:a8:f7:2a:a5:d4:fd:fa: ea:1b:33:51:7f:c2:2c:4f:04:3f:37:70:65:78:95: f7:d3:23:0c:2e:36:b6:48:28:cc:eb:1d:75:77:2e: 3e:45:e4:74:bb:61:d6:10:ec:f6:f0:38:20:e6:d6: 2c:3c:99:b7:b0:3a:7a:0d:55:6c:c3:ef:78:8a:59: fd:01:73:d2:11:ac:7d:2f:9e:96:21:e5:30:47:1a: 14:0f:4a:86:20:50:3f:fb:97:2a:69:e1:47:f4:d1: 45:18:f2:59:67:b1:00:92:fd:8c:ad:36:7a:10:bf: f5:2f:a6:e0:6d:dc:cd:55:d2:d6:ab:cc:c0:50:a0: 5b:3a:8b:7a:42:0c:f8:33:07:9c:28:bb:a6:94:48: 3f:cb:ee:bd:d0:1a:64:88:7d:63:a8:3e:9c:7e:48: 4c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:62:40:24:99:A2:E9:FD:B4:51:FC:70:19:78:71:5B:01:12:7B:43 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/8GJAJJmi6f20UfxwGXhxWwESe0M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.68.0/24 Signature Algorithm: sha256WithRSAEncryption 82:d1:5f:b1:9d:b7:bd:1f:6f:c8:ef:95:f0:32:65:21:92:91: 3f:a3:1c:3c:b6:94:02:59:bc:54:55:36:8a:0b:c9:a2:e9:ca: 02:96:f3:18:44:2e:1d:08:0f:0f:30:66:97:74:f4:e7:a3:ac: 6d:b3:76:da:83:10:46:34:b9:91:7e:4f:83:e9:35:95:c9:45: 1c:c0:52:3b:f5:1e:0c:93:60:b8:19:56:26:f1:6a:d0:d0:db: a4:29:7f:53:78:81:b0:40:a3:64:4c:c0:40:15:48:98:2d:33: 72:ea:84:6b:ba:e9:99:07:8d:d2:05:ee:de:1e:6c:e4:1e:91: 76:19:2a:15:0f:16:c9:58:37:0d:30:1a:77:1c:31:88:ef:6f: 77:82:b2:82:6c:ae:2c:bd:62:66:4f:44:d1:34:80:31:a7:64: 49:c7:40:28:28:4c:47:08:df:16:35:8d:9c:96:3e:1c:d3:cf: b5:1b:8a:10:fa:51:71:dc:63:37:00:16:26:59:c4:1d:22:86: 30:dc:e7:e4:80:fa:ae:c4:69:15:4c:8a:54:8d:cc:9a:24:60: e0:a7:77:f9:8e:c9:43:ae:b6:9f:ff:4b:46:05:96:da:32:73: 80:23:b4:c3:9d:38:15:78:e5:97:cf:32:d5:ee:21:4b:bd:a7: 08:30:6d:ce -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAMpsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjUxMjE5 MDkwOTQxWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyhGMDYyNDAyNDk5QTJF OUZEQjQ1MUZDNzAxOTc4NzE1QjAxMTI3QjQzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA4zHfC9w8Ayk6NrRBkAnZBKVpXzMYgORmvgHwnnrkaVSpkalt Zd1v+pIwT/q5GO/lc0FoFW8g4vOiLaiz8n0UU+2+2knFQl88/K1eZyFe+HbuLSJA Khj03x1PDyBClfPSQKj3KqXU/frqGzNRf8IsTwQ/N3BleJX30yMMLja2SCjM6x11 dy4+ReR0u2HWEOz28Dgg5tYsPJm3sDp6DVVsw+94iln9AXPSEax9L56WIeUwRxoU D0qGIFA/+5cqaeFH9NFFGPJZZ7EAkv2MrTZ6EL/1L6bgbdzNVdLWq8zAUKBbOot6 Qgz4MwecKLumlEg/y+690BpkiH1jqD6cfkhM9wIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFPBiQCSZoun9tFH8cBl4cVsBEntDMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzLzhHSkFKSm1pNmYy MFVmeHdHWGh4V3dFU2UwTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr40QwDQYJKoZIhvcNAQELBQADggEBAILRX7Gdt70fb8jvlfAyZSGSkT+j HDy2lAJZvFRVNooLyaLpygKW8xhELh0IDw8wZpd09OejrG2zdtqDEEY0uZF+T4Pp NZXJRRzAUjv1HgyTYLgZVibxatDQ26Qpf1N4gbBAo2RMwEAVSJgtM3LqhGu66ZkH jdIF7t4ebOQekXYZKhUPFslYNw0wGnccMYjvb3eCsoJsriy9YmZPRNE0gDGnZEnH QCgoTEcI3xY1jZyWPhzTz7UbihD6UXHcYzcAFiZZxB0ihjDc5+SA+q7EaRVMilSN zJokYOCnd/mOyUOutp//S0YFltoyc4AjtMOdOBV45ZfPMtXuIUu9pwgwbc4= -----END CERTIFICATE-----Generated at Fri Dec 19 13:26:17 2025 by rpki-client