This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/kjpI73rOSVRHbUNMfYZO-ntF0u0.roa File: kjpI73rOSVRHbUNMfYZO-ntF0u0.roa (raw, json) Hash identifier: lm3eOWfEenRKIeNSUwPRYaZ5U6tmyLOY3r8F8nxrtsY= Subject key identifier: 92:3A:48:EF:7A:CE:49:54:47:6D:43:4C:7D:86:4E:FA:7B:45:D2:ED Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: CC92 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/kjpI73rOSVRHbUNMfYZO-ntF0u0.roa Signing time: Sun 21 Dec 2025 07:09:46 +0000 ROA not before: Sun 21 Dec 2025 07:09:46 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63612 IP address blocks: 43.227.80.0/20 maxlen: 20 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 52370 (0xcc92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Dec 21 07:09:46 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=923A48EF7ACE4954476D434C7D864EFA7B45D2ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:9c:f0:67:59:fe:c6:ef:b7:c5:a1:9f:08: 77:24:68:22:c8:80:96:b3:e7:13:40:d4:6e:38:1e: eb:79:30:62:aa:76:4a:22:6b:38:39:90:63:83:5b: 87:aa:ac:9c:ff:77:fa:bf:79:cc:c7:17:cb:ec:9a: 6e:37:28:e5:39:a2:9e:9d:9a:7c:f6:60:4e:c9:a0: e6:3f:c0:79:9f:41:05:ee:aa:d4:ed:8c:e0:95:d6: 95:20:32:4f:26:3a:fc:19:f0:5e:64:9e:f1:96:d9: f1:6d:4d:76:a6:87:5e:43:ff:9d:63:bf:d4:eb:d0: 6a:3e:e9:92:53:1d:7b:b1:60:fe:2b:03:d8:86:84: e1:95:9c:5b:9a:79:97:e6:cf:16:fa:e8:21:d7:0a: 82:32:f0:5e:18:27:d2:a0:ea:4e:1b:a1:13:a3:74: f1:50:13:de:b7:24:6f:af:ff:79:99:4c:a0:c7:64: 36:d9:1d:d8:b6:a8:88:4b:7e:04:33:22:3d:4a:5a: be:d8:76:b3:2a:08:17:6b:a3:dd:3e:4b:b9:0c:a0: 89:36:33:7b:db:b4:bf:27:f0:6e:8b:87:d8:19:57: e7:2a:0d:78:8d:2a:e0:07:0a:63:52:81:10:52:68: 45:1e:32:38:4c:43:a0:05:0f:9f:b3:30:75:16:f6: d2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3A:48:EF:7A:CE:49:54:47:6D:43:4C:7D:86:4E:FA:7B:45:D2:ED X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/kjpI73rOSVRHbUNMfYZO-ntF0u0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.80.0/20 Signature Algorithm: sha256WithRSAEncryption 79:21:28:da:bd:0c:7e:9c:e9:88:da:3d:a3:74:d7:86:5a:b2: 82:c5:20:e8:fa:f9:51:7d:a3:35:c1:d3:d6:c8:3c:4b:1d:c7: 43:07:07:b2:39:4d:9c:73:64:cf:55:3b:b9:7d:26:fc:66:92: cf:cc:45:2e:a5:89:ee:91:27:66:10:0c:38:17:44:c1:9f:0b: 61:7b:58:87:bb:91:55:e6:c6:4b:87:d0:05:cf:69:e0:7e:cf: 8d:36:6d:1e:37:da:55:2a:47:d6:50:7b:08:3d:bc:13:a9:6b: 24:96:1f:da:34:32:4c:f4:e1:f4:47:97:e0:04:1b:80:0e:6f: e3:11:c4:6f:6b:c2:4f:af:43:3e:37:f3:49:7f:f6:a2:eb:6b: f8:f7:9d:0b:4f:e5:bb:02:1e:86:ec:f1:68:47:e6:75:84:49: 90:81:05:34:54:86:8c:f6:a8:3a:a9:db:60:bb:ce:56:e6:d6: 80:96:bb:ad:59:a0:7b:9f:4d:a1:38:e1:77:af:bc:1a:a7:8f: 32:c0:30:68:93:89:50:8a:a5:cf:69:c6:f2:49:72:e3:97:04: f2:f7:47:2b:6b:b1:b6:ac:6e:ac:f8:00:5a:77:69:f8:1c:78: 40:6a:89:04:2d:72:73:54:43:b2:a2:7a:3b:3b:6a:b4:a1:b4: d3:de:e4:62 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAMySMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjUxMjIx MDcwOTQ2WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyg5MjNBNDhFRjdBQ0U0 OTU0NDc2RDQzNEM3RDg2NEVGQTdCNDVEMkVEMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAutqc8GdZ/sbvt8Whnwh3JGgiyICWs+cTQNRuOB7reTBiqnZK Ims4OZBjg1uHqqyc/3f6v3nMxxfL7JpuNyjlOaKenZp89mBOyaDmP8B5n0EF7qrU 7YzgldaVIDJPJjr8GfBeZJ7xltnxbU12podeQ/+dY7/U69BqPumSUx17sWD+KwPY hoThlZxbmnmX5s8W+ugh1wqCMvBeGCfSoOpOG6ETo3TxUBPetyRvr/95mUygx2Q2 2R3YtqiIS34EMyI9Slq+2HazKggXa6PdPku5DKCJNjN727S/J/Bui4fYGVfnKg14 jSrgBwpjUoEQUmhFHjI4TEOgBQ+fszB1FvbSrwIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFJI6SO96zklUR21DTH2GTvp7RdLtMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL2tqcEk3M3JPU1ZS SGJVTk1mWVpPLW50RjB1MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQr41AwDQYJKoZIhvcNAQELBQADggEBAHkhKNq9DH6c6YjaPaN014ZasoLF IOj6+VF9ozXB09bIPEsdx0MHB7I5TZxzZM9VO7l9Jvxmks/MRS6lie6RJ2YQDDgX RMGfC2F7WIe7kVXmxkuH0AXPaeB+z402bR432lUqR9ZQewg9vBOpaySWH9o0Mkz0 4fRHl+AEG4AOb+MRxG9rwk+vQz4380l/9qLra/j3nQtP5bsCHobs8WhH5nWESZCB BTRUhoz2qDqp22C7zlbm1oCWu61ZoHufTaE44XevvBqnjzLAMGiTiVCKpc9pxvJJ cuOXBPL3Rytrsbasbqz4AFp3afgceEBqiQQtcnNUQ7Kiejs7arShtNPe5GI= -----END CERTIFICATE-----Generated at Sun Dec 21 11:03:24 2025 by rpki-client