This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/apuSYN16U7kwkMh7ttr4dQXZZYo.roa File: apuSYN16U7kwkMh7ttr4dQXZZYo.roa (raw, json) Hash identifier: 6iIQrksx1uLJbZ2QEC6yjbBhAX1SaN+3G6pMXaVvXYM= Subject key identifier: 6A:9B:92:60:DD:7A:53:B9:30:90:C8:7B:B6:DA:F8:75:05:D9:65:8A Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: CC94 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/apuSYN16U7kwkMh7ttr4dQXZZYo.roa Signing time: Sun 21 Dec 2025 07:09:47 +0000 ROA not before: Sun 21 Dec 2025 07:09:47 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.227.68.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 52372 (0xcc94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Dec 21 07:09:47 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=6A9B9260DD7A53B93090C87BB6DAF87505D9658A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:30:18:6e:fd:65:a0:06:91:02:19:63:0a:be: cc:e4:8a:c5:ea:3b:6f:aa:86:4c:47:5e:3b:22:01: 8a:4c:c0:43:74:70:e6:af:21:83:ab:0f:fb:7b:dc: b3:f5:eb:54:5c:42:7d:37:d0:d2:02:78:b4:c9:5b: 80:28:29:11:25:b8:c3:21:bf:6a:2e:7e:ad:23:9c: fd:86:68:2b:3c:4c:3f:14:5f:ae:72:3b:38:29:2e: b9:34:40:0d:c6:da:3b:5b:09:90:bb:de:b1:48:c5: 58:c7:39:ea:07:c6:0c:a5:10:4c:11:87:cc:d4:d3: 04:ab:b6:6f:1b:a8:a4:dc:2d:d7:61:e7:9f:0d:29: 8d:66:8a:96:e7:f6:a7:5f:90:9e:c4:53:12:71:c0: 4e:fe:4d:f2:0a:5a:dd:10:83:2c:da:00:60:fb:d0: 9a:56:ce:80:e3:8d:df:76:df:33:1e:6c:1f:a7:e5: 95:ad:41:d3:1f:8f:36:3a:04:76:0d:ae:72:d2:bb: 5a:3b:3d:03:ad:dd:cb:c9:bb:5a:65:23:55:98:06: 08:6b:7c:96:5e:0f:97:ae:5e:a0:ac:31:0a:21:f8: 30:84:8b:73:ac:47:3c:a2:b7:0e:2f:16:fc:65:d1: c5:a0:b2:fe:13:11:11:e5:c1:5d:de:c9:07:38:81: 26:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9B:92:60:DD:7A:53:B9:30:90:C8:7B:B6:DA:F8:75:05:D9:65:8A X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/apuSYN16U7kwkMh7ttr4dQXZZYo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.68.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:23:9c:36:76:62:1e:b8:a1:5f:b5:c1:a3:14:02:95:db:d1: 58:ae:43:18:a3:cb:e1:54:bb:29:c8:1f:2b:3e:7d:d4:96:d3: ff:c7:e8:82:a7:95:8d:29:b7:d7:67:46:33:26:84:09:3c:d3: 46:56:e9:8d:ec:07:8f:c7:cb:da:56:ed:e2:4a:30:a7:5b:fb: 19:24:3e:47:8b:b7:93:96:54:0d:10:16:f0:83:56:0d:20:bd: 30:bc:11:06:7d:95:bf:af:e5:60:aa:6c:cf:aa:41:76:8f:bf: 4f:46:1a:f1:18:0d:38:18:a3:a2:e4:ac:82:4d:9c:0c:a8:31: e3:dc:91:ed:3e:49:38:9a:79:e2:5f:09:80:03:25:e0:57:a8: 50:9f:58:b0:aa:8f:6f:f6:3d:c0:0e:29:ba:82:b1:ee:ce:6d: 04:72:ad:b7:39:86:59:ff:90:cb:6b:bd:b3:49:28:53:65:8e: 69:9a:05:f4:5b:17:4f:38:e9:04:f8:8f:c6:31:e9:49:94:66: 20:a8:7c:85:46:a8:4e:66:9a:92:cc:2b:62:3f:e8:f3:8e:02: a2:e9:9d:83:8e:12:11:d2:9e:23:bb:71:7e:f8:d6:78:0e:03: a9:c9:55:81:f9:4c:10:2e:d4:ce:f8:13:57:8d:4e:f7:ff:b8: 67:38:ea:57 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAMyUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjUxMjIx MDcwOTQ3WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyg2QTlCOTI2MEREN0E1 M0I5MzA5MEM4N0JCNkRBRjg3NTA1RDk2NThBMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAvjAYbv1loAaRAhljCr7M5IrF6jtvqoZMR147IgGKTMBDdHDm ryGDqw/7e9yz9etUXEJ9N9DSAni0yVuAKCkRJbjDIb9qLn6tI5z9hmgrPEw/FF+u cjs4KS65NEANxto7WwmQu96xSMVYxznqB8YMpRBMEYfM1NMEq7ZvG6ik3C3XYeef DSmNZoqW5/anX5CexFMSccBO/k3yClrdEIMs2gBg+9CaVs6A443fdt8zHmwfp+WV rUHTH482OgR2Da5y0rtaOz0Drd3LybtaZSNVmAYIa3yWXg+Xrl6grDEKIfgwhItz rEc8orcOLxb8ZdHFoLL+ExER5cFd3skHOIEmtwIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFGqbkmDdelO5MJDIe7ba+HUF2WWKMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL2FwdVNZTjE2VTdr d2tNaDd0dHI0ZFFYWlpZby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr40QwDQYJKoZIhvcNAQELBQADggEBAF4jnDZ2Yh64oV+1waMUApXb0Viu Qxijy+FUuynIHys+fdSW0//H6IKnlY0pt9dnRjMmhAk800ZW6Y3sB4/Hy9pW7eJK MKdb+xkkPkeLt5OWVA0QFvCDVg0gvTC8EQZ9lb+v5WCqbM+qQXaPv09GGvEYDTgY o6LkrIJNnAyoMePcke0+STiaeeJfCYADJeBXqFCfWLCqj2/2PcAOKbqCse7ObQRy rbc5hln/kMtrvbNJKFNljmmaBfRbF0846QT4j8Yx6UmUZiCofIVGqE5mmpLMK2I/ 6POOAqLpnYOOEhHSniO7cX741ngOA6nJVYH5TBAu1M74E1eNTvf/uGc46lc= -----END CERTIFICATE-----Generated at Sun Dec 21 09:42:30 2025 by rpki-client