This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/mx1mtdyDOvq6vyGdeZUhTZ6yzJg.roa File: mx1mtdyDOvq6vyGdeZUhTZ6yzJg.roa (raw, json) Hash identifier: gaSATInHNVDXyIua/h1SWPr/Pv7E9V9SE3yGHNnXVyg= Subject key identifier: 9B:1D:66:B5:DC:83:3A:FA:BA:BF:21:9D:79:95:21:4D:9E:B2:CC:98 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: E541 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/mx1mtdyDOvq6vyGdeZUhTZ6yzJg.roa Signing time: Mon 12 Jan 2026 05:27:12 +0000 ROA not before: Mon 12 Jan 2026 05:27:12 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.226.49.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 58689 (0xe541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 12 05:27:12 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=9B1D66B5DC833AFABABF219D7995214D9EB2CC98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ec:aa:14:43:d6:2e:90:ea:58:5a:82:44:b0: d8:bf:a5:be:09:b5:c0:45:53:a0:fc:38:43:e1:76: 7c:02:4c:81:c8:53:84:0a:8f:61:1f:db:f7:f6:6b: da:74:ac:35:f6:e5:74:5c:ce:0f:96:67:ad:f4:9c: b5:26:4b:c7:85:23:27:16:42:8b:15:4d:a1:05:2f: 99:bc:36:17:1e:5b:08:73:ea:58:1b:38:2c:77:63: 0f:1c:18:7a:35:99:c2:e7:2b:7d:6c:96:60:d1:50: 0b:5b:d1:73:49:6e:60:7f:b3:88:20:3e:08:8b:1d: 4f:8f:96:f0:dc:2c:0b:f2:d2:56:ef:3d:c7:c6:0a: db:dd:06:58:df:d4:35:b9:cd:23:23:c5:09:4c:6d: 4a:d5:2e:84:b7:01:12:ec:05:c5:98:b1:84:b3:27: 0e:ab:3a:9e:09:75:21:c3:c5:9e:bc:9e:b4:5e:56: 0a:15:9b:b2:4e:17:b9:2e:0f:c9:c3:20:bd:a6:d5: ab:d9:dc:d0:db:82:34:d3:ed:58:eb:9c:58:de:e5: 8c:06:d8:ab:ca:d8:5d:12:92:1d:ca:bb:42:cf:d6: 11:af:5c:21:69:37:e7:90:8a:d7:4b:64:67:88:4a: ea:c7:4a:04:67:f6:81:24:93:ad:09:f9:59:23:64: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1D:66:B5:DC:83:3A:FA:BA:BF:21:9D:79:95:21:4D:9E:B2:CC:98 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/mx1mtdyDOvq6vyGdeZUhTZ6yzJg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.49.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:4a:41:53:85:88:45:d6:94:2e:86:de:94:c9:fa:51:10:9d: d7:1e:f4:fb:2c:49:bd:10:16:a1:44:50:2f:5f:7e:41:dc:b6: 38:f4:f2:e4:20:bf:07:7b:d0:88:a3:f3:76:2d:f2:3a:87:b7: 4b:74:b5:f6:1e:f0:2a:77:42:7b:c1:cc:66:42:8c:27:fa:c9: bb:2a:fe:09:4e:2d:2c:47:92:55:98:64:6f:62:5b:67:b3:c9: 0a:45:99:06:98:ec:b1:26:9a:16:61:2b:06:bb:b4:0f:f6:9d: 53:ef:5c:9e:78:af:cf:75:5f:69:31:3c:a9:f9:2a:e3:7c:56: d2:f2:e8:f9:f6:4a:6c:90:d7:c8:c5:f0:a1:07:85:34:1f:52: e5:c5:d2:7d:c9:d7:31:2b:5d:5d:62:2e:0f:c5:a5:16:0b:35: fe:09:c2:0f:63:06:ef:78:60:05:60:fb:bb:21:69:a7:1b:f2: d1:22:f3:15:a7:a2:0b:dd:11:56:ab:fb:b3:59:c6:28:aa:8a: c6:22:15:54:f9:6f:af:f4:b5:35:69:56:56:7a:f5:3a:9a:59: b7:b2:19:cb:d0:2b:2a:4d:6e:81:70:b6:32:15:80:a2:d8:94: 2e:6a:22:69:59:af:26:00:c7:fd:3a:59:56:ca:a6:4a:86:23: 41:d0:1b:de -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAOVBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTEy MDUyNzEyWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyg5QjFENjZCNURDODMz QUZBQkFCRjIxOUQ3OTk1MjE0RDlFQjJDQzk4MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA0eyqFEPWLpDqWFqCRLDYv6W+CbXARVOg/DhD4XZ8AkyByFOE Co9hH9v39mvadKw19uV0XM4Plmet9Jy1JkvHhSMnFkKLFU2hBS+ZvDYXHlsIc+pY Gzgsd2MPHBh6NZnC5yt9bJZg0VALW9FzSW5gf7OIID4Iix1Pj5bw3CwL8tJW7z3H xgrb3QZY39Q1uc0jI8UJTG1K1S6EtwES7AXFmLGEsycOqzqeCXUhw8WevJ60XlYK FZuyThe5Lg/JwyC9ptWr2dzQ24I00+1Y65xY3uWMBtirythdEpIdyrtCz9YRr1wh aTfnkIrXS2RniErqx0oEZ/aBJJOtCflZI2TafwIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFJsdZrXcgzr6ur8hnXmVIU2essyYMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL214MW10ZHlET3Zx NnZ5R2RlWlVoVFo2eXpKZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr4jEwDQYJKoZIhvcNAQELBQADggEBAIxKQVOFiEXWlC6G3pTJ+lEQndce 9PssSb0QFqFEUC9ffkHctjj08uQgvwd70Iij83Yt8jqHt0t0tfYe8Cp3QnvBzGZC jCf6ybsq/glOLSxHklWYZG9iW2ezyQpFmQaY7LEmmhZhKwa7tA/2nVPvXJ54r891 X2kxPKn5KuN8VtLy6Pn2SmyQ18jF8KEHhTQfUuXF0n3J1zErXV1iLg/FpRYLNf4J wg9jBu94YAVg+7shaacb8tEi8xWnogvdEVar+7NZxiiqisYiFVT5b6/0tTVpVlZ6 9TqaWbeyGcvQKypNboFwtjIVgKLYlC5qImlZryYAx/06WVbKpkqGI0HQG94= -----END CERTIFICATE-----Generated at Mon Jan 12 09:20:39 2026 by rpki-client