This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/EPnmJJioXZqYHdcVFILvyNO7myQ.roa File: EPnmJJioXZqYHdcVFILvyNO7myQ.roa (raw, json) Hash identifier: dHnaPmc99iyxdagwfLEO7KE7+fgoXNaX1FVBBFrygMo= Subject key identifier: 10:F9:E6:24:98:A8:5D:9A:98:1D:D7:15:14:82:EF:C8:D3:BB:9B:24 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: CA6B Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/EPnmJJioXZqYHdcVFILvyNO7myQ.roa Signing time: Fri 19 Dec 2025 09:09:41 +0000 ROA not before: Fri 19 Dec 2025 09:09:41 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.226.49.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 51819 (0xca6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Dec 19 09:09:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=10F9E62498A85D9A981DD7151482EFC8D3BB9B24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f0:08:e8:e8:eb:cf:f9:4e:82:97:ea:2f:07: 7f:0d:66:57:7e:5b:38:40:2a:0a:4e:fc:4f:d5:b4: 7b:73:25:9e:9c:2b:45:e8:6c:41:e7:7b:27:10:ce: 58:8d:d2:df:78:39:e2:01:05:76:74:0e:82:3c:89: 4f:9a:b1:f8:9c:e0:52:79:d1:06:fc:64:89:0f:8d: 79:93:9c:5f:88:b2:c7:6b:be:2b:76:43:af:1c:4b: 5b:c0:ca:fa:ac:bb:ea:f1:f7:be:30:52:39:41:bb: 0a:b7:c7:0d:1b:79:e9:9b:da:0a:a2:82:a0:f9:06: 8e:9e:de:37:84:ef:67:9d:9d:db:fb:f7:e2:a3:d2: 1c:33:29:0b:18:b4:63:eb:ba:92:fe:d9:36:38:d9: a4:15:fd:42:de:31:a2:03:e7:38:8b:a6:dd:89:29: c4:4b:aa:71:26:65:a6:33:5f:64:1b:c0:25:07:44: bc:ee:8c:62:d0:60:62:42:86:48:6a:32:b8:30:7b: b5:f4:70:59:3c:99:7e:5d:9a:29:1c:25:1c:03:9a: 08:83:c2:c1:a3:1d:1e:bf:f0:2c:be:d0:1f:7e:d9: ed:d3:db:b5:48:bc:83:73:c1:eb:4d:4b:6a:6c:2a: ef:31:07:db:a3:7a:55:94:18:29:c8:8c:70:75:27: b2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F9:E6:24:98:A8:5D:9A:98:1D:D7:15:14:82:EF:C8:D3:BB:9B:24 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/EPnmJJioXZqYHdcVFILvyNO7myQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.49.0/24 Signature Algorithm: sha256WithRSAEncryption 62:1d:e8:4a:91:ec:e9:37:bc:6b:41:1d:65:ef:b7:67:95:2d: d8:ec:01:0d:3a:c8:da:52:0c:a7:d8:61:0b:77:cd:b3:31:26: 4b:98:b1:48:87:c9:12:9d:44:a9:5c:23:d7:74:83:8c:fe:90: 51:9c:1e:6f:41:a8:62:ee:32:d2:01:b7:76:d0:03:11:3a:f6: 7b:a3:e8:a2:20:dd:09:cc:bc:f1:d1:50:a1:b5:03:57:ef:bc: f9:23:50:c3:d3:d5:02:b3:ff:29:f4:c1:dc:60:70:d5:e6:9b: 83:89:76:6c:c7:62:88:0d:b3:8b:a9:b4:6c:b8:bd:59:90:4d: eb:22:b9:d0:e2:12:a1:4f:9b:5d:91:b0:24:5f:42:7f:69:6e: a4:64:2d:a8:7d:af:b0:72:53:71:72:54:ca:b1:cd:0f:89:61: 44:5b:81:aa:ca:43:5b:3b:7b:92:e5:1c:0f:0e:a9:7b:e9:45: db:fd:fa:06:99:d6:c6:81:8c:45:93:c0:d3:fa:2b:5b:81:ad: 92:00:79:33:cd:f9:ac:c3:b5:34:fc:48:a2:63:bc:47:a0:55: ca:81:06:47:44:da:df:61:ef:fd:08:3e:d7:5a:1e:d6:ed:be: 02:2a:5b:6f:77:b1:0e:16:fc:a7:ee:e9:19:f5:be:46:8f:e0: 22:07:f9:1c -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAMprMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjUxMjE5 MDkwOTQxWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEygxMEY5RTYyNDk4QTg1 RDlBOTgxREQ3MTUxNDgyRUZDOEQzQkI5QjI0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAy/AI6Ojrz/lOgpfqLwd/DWZXfls4QCoKTvxP1bR7cyWenCtF 6GxB53snEM5YjdLfeDniAQV2dA6CPIlPmrH4nOBSedEG/GSJD415k5xfiLLHa74r dkOvHEtbwMr6rLvq8fe+MFI5QbsKt8cNG3npm9oKooKg+QaOnt43hO9nnZ3b+/fi o9IcMykLGLRj67qS/tk2ONmkFf1C3jGiA+c4i6bdiSnES6pxJmWmM19kG8AlB0S8 7oxi0GBiQoZIajK4MHu19HBZPJl+XZopHCUcA5oIg8LBox0ev/AsvtAfftnt09u1 SLyDc8HrTUtqbCrvMQfbo3pVlBgpyIxwdSeyzQIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFBD55iSYqF2amB3XFRSC78jTu5skMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL0VQbm1KSmlvWFpx WUhkY1ZGSUx2eU5PN215US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr4jEwDQYJKoZIhvcNAQELBQADggEBAGId6EqR7Ok3vGtBHWXvt2eVLdjs AQ06yNpSDKfYYQt3zbMxJkuYsUiHyRKdRKlcI9d0g4z+kFGcHm9BqGLuMtIBt3bQ AxE69nuj6KIg3QnMvPHRUKG1A1fvvPkjUMPT1QKz/yn0wdxgcNXmm4OJdmzHYogN s4uptGy4vVmQTesiudDiEqFPm12RsCRfQn9pbqRkLah9r7ByU3FyVMqxzQ+JYURb garKQ1s7e5LlHA8OqXvpRdv9+gaZ1saBjEWTwNP6K1uBrZIAeTPN+azDtTT8SKJj vEegVcqBBkdE2t9h7/0IPtdaHtbtvgIqW293sQ4W/Kfu6Rn1vkaP4CIH+Rw= -----END CERTIFICATE-----Generated at Fri Dec 19 13:26:17 2025 by rpki-client