This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/JkjQt_-7OcJ6J9bSmV4dPMFJ9sM.roa File: JkjQt_-7OcJ6J9bSmV4dPMFJ9sM.roa (raw, json) Hash identifier: +ENpljSygYkAgkfftBcEY+MAJDCNyM4w8uVuYTa8l/c= Subject key identifier: 26:48:D0:B7:FF:BB:39:C2:7A:27:D6:D2:99:5E:1D:3C:C1:49:F6:C3 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: E542 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/JkjQt_-7OcJ6J9bSmV4dPMFJ9sM.roa Signing time: Mon 12 Jan 2026 05:27:13 +0000 ROA not before: Mon 12 Jan 2026 05:27:13 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.227.68.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 58690 (0xe542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 12 05:27:13 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2648D0B7FFBB39C27A27D6D2995E1D3CC149F6C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e2:ad:33:ff:07:01:a2:85:98:32:0c:f3:7a: f6:57:47:18:ac:9f:0a:e4:97:82:b6:81:73:91:ee: 13:d4:c8:7b:3d:58:e6:6a:47:6b:9c:be:a7:94:86: cb:80:f3:f4:c5:c9:29:c0:96:66:a4:18:9b:02:9a: 60:7a:c2:36:35:04:d7:cb:27:cf:27:c2:ad:64:52: 81:52:e5:b2:0f:90:cd:8a:4c:63:72:24:34:80:b8: bb:f6:f5:e3:e8:fb:f1:d0:a7:d1:79:8b:e0:05:86: d9:04:61:f9:30:cc:86:e0:57:03:21:c7:ea:35:eb: 12:69:b6:82:f3:ee:b0:53:aa:3d:d0:95:13:5a:51: d0:4d:91:3f:d6:9c:91:c9:6b:d3:2b:af:c4:00:86: 80:ed:b9:4b:52:74:d7:9a:05:d9:33:10:0c:3d:c3: 75:5e:09:73:6e:67:8b:10:9e:7a:fe:ed:7e:3f:18: 8d:73:37:22:25:6e:0b:bb:f5:12:98:06:22:8e:5f: f9:b6:95:f3:0b:f9:4c:6d:ee:e6:87:35:c7:70:3a: e0:95:d3:86:f0:07:2b:df:3b:4d:93:9c:5c:d3:40: 54:7f:43:66:db:44:5d:60:8d:ba:d9:82:f3:61:e0: 85:75:60:96:b2:c6:77:bb:fc:97:34:96:15:a3:5a: 59:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:48:D0:B7:FF:BB:39:C2:7A:27:D6:D2:99:5E:1D:3C:C1:49:F6:C3 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/JkjQt_-7OcJ6J9bSmV4dPMFJ9sM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.68.0/24 Signature Algorithm: sha256WithRSAEncryption 41:f5:56:3d:7c:b5:82:4d:8e:d0:95:2b:9e:44:c9:73:31:8c: 14:ad:34:fc:f1:bb:1d:49:12:c9:65:7d:f9:ee:3e:cd:ea:50: 19:81:0e:82:80:a1:95:54:de:e0:c9:40:ed:cb:d2:fb:37:fd: 92:1d:19:ab:dc:a6:5c:3c:83:30:5f:52:3c:83:30:04:a2:17: 21:8d:31:c6:a3:5c:e8:2b:6f:89:ee:ba:c9:bf:0f:c3:55:1a: bd:4e:c1:7f:5a:b0:9b:0e:60:55:a2:0b:cc:4c:91:75:3b:8a: 76:90:93:15:e1:8d:cb:53:46:2b:70:09:f7:e9:2e:b7:fd:0c: c3:b8:7f:fe:5a:26:7e:e9:a1:6b:b8:48:a7:07:14:85:dc:19: bd:4f:c3:2b:cc:e7:b4:c2:9c:5a:12:d9:77:42:ca:11:8b:7a: 0c:54:7f:3e:d1:a5:b6:5c:29:d3:a6:33:2e:9b:b9:7f:93:9a: d8:16:e0:b0:5c:0e:db:af:b4:05:95:a3:51:fd:db:33:11:44: 45:df:69:1b:bb:60:a6:0d:ad:44:c5:d2:0c:29:05:46:38:c0: 0b:ba:4f:ff:0b:77:01:c0:9e:e1:92:23:e9:48:70:79:1d:ac: 8d:d2:31:84:c8:0d:9e:87:4e:07:4d:d4:da:d8:07:65:79:93: 07:6f:a8:56 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAOVCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTEy MDUyNzEzWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEygyNjQ4RDBCN0ZGQkIz OUMyN0EyN0Q2RDI5OTVFMUQzQ0MxNDlGNkMzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAnuKtM/8HAaKFmDIM83r2V0cYrJ8K5JeCtoFzke4T1Mh7PVjm akdrnL6nlIbLgPP0xckpwJZmpBibAppgesI2NQTXyyfPJ8KtZFKBUuWyD5DNikxj ciQ0gLi79vXj6Pvx0KfReYvgBYbZBGH5MMyG4FcDIcfqNesSabaC8+6wU6o90JUT WlHQTZE/1pyRyWvTK6/EAIaA7blLUnTXmgXZMxAMPcN1XglzbmeLEJ56/u1+PxiN czciJW4Lu/USmAYijl/5tpXzC/lMbe7mhzXHcDrgldOG8Acr3ztNk5xc00BUf0Nm 20RdYI262YLzYeCFdWCWssZ3u/yXNJYVo1pZpQIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFCZI0Lf/uznCeifW0pleHTzBSfbDMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL0pralF0Xy03T2NK Nko5YlNtVjRkUE1GSjlzTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr40QwDQYJKoZIhvcNAQELBQADggEBAEH1Vj18tYJNjtCVK55EyXMxjBSt NPzxux1JEsllffnuPs3qUBmBDoKAoZVU3uDJQO3L0vs3/ZIdGavcplw8gzBfUjyD MASiFyGNMcajXOgrb4nuusm/D8NVGr1OwX9asJsOYFWiC8xMkXU7inaQkxXhjctT RitwCffpLrf9DMO4f/5aJn7poWu4SKcHFIXcGb1PwyvM57TCnFoS2XdCyhGLegxU fz7RpbZcKdOmMy6buX+TmtgW4LBcDtuvtAWVo1H92zMRREXfaRu7YKYNrUTF0gwp BUY4wAu6T/8LdwHAnuGSI+lIcHkdrI3SMYTIDZ6HTgdN1NrYB2V5kwdvqFY= -----END CERTIFICATE-----Generated at Mon Jan 12 09:20:37 2026 by rpki-client