This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/n12lRqyZo91yMukb5oBCylPGqcE.roa File: n12lRqyZo91yMukb5oBCylPGqcE.roa (raw, json) Hash identifier: ROc+xrD4SoGvnrXfJzB5cloKVnmvrRk78grKuMCCZG8= Subject key identifier: 9F:5D:A5:46:AC:99:A3:DD:72:32:E9:1B:E6:80:42:CA:53:C6:A9:C1 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: E540 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/n12lRqyZo91yMukb5oBCylPGqcE.roa Signing time: Mon 12 Jan 2026 05:27:12 +0000 ROA not before: Mon 12 Jan 2026 05:27:12 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63612 IP address blocks: 43.227.80.0/20 maxlen: 20 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 58688 (0xe540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 12 05:27:12 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=9F5DA546AC99A3DD7232E91BE68042CA53C6A9C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9a:48:1e:ec:f4:e6:65:4b:c9:4a:97:e2:00: ff:8c:bf:3b:92:b8:c3:16:06:e5:a0:3f:24:19:ed: e8:7d:82:0c:e1:4f:54:9e:6e:cd:31:4e:2b:ec:7a: 1b:27:18:24:ab:19:f4:56:6f:42:6a:d5:e6:05:82: e4:af:b7:70:f4:c8:81:84:36:e8:a1:10:21:bd:2f: ab:c3:d4:3f:29:0d:e9:b9:16:91:62:0f:46:89:4b: ed:7a:ea:e2:90:6d:0d:11:65:7c:b8:94:eb:d9:5f: 77:0e:42:6c:f7:6c:27:f3:72:80:a8:5c:d5:82:84: d8:7f:59:d6:87:06:aa:7f:b6:de:3b:8f:4c:9c:ee: 0a:42:46:5b:dd:b6:18:c6:55:80:48:f0:bd:c4:07: f7:00:e6:cc:64:5f:de:26:f6:04:ce:94:d7:8f:e0: 6d:21:b8:7d:0e:c8:96:91:77:48:19:c2:d4:ba:07: ea:e1:8e:50:9d:ff:14:88:a1:61:fc:a2:6a:32:9f: 3c:ba:2d:34:1a:3c:3a:0d:9c:65:12:fb:fc:38:35: 13:44:c9:f1:66:83:72:65:9e:57:fd:cf:41:b9:7a: b8:f8:ec:b3:12:f9:57:92:53:56:3d:1f:b1:64:14: c4:be:c0:84:5c:60:ae:af:91:4f:fe:c7:41:31:ec: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5D:A5:46:AC:99:A3:DD:72:32:E9:1B:E6:80:42:CA:53:C6:A9:C1 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/n12lRqyZo91yMukb5oBCylPGqcE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.80.0/20 Signature Algorithm: sha256WithRSAEncryption 07:0c:a4:d2:de:c0:af:9a:c0:85:c2:32:46:12:20:61:35:bf: 4f:89:44:5b:d3:98:b5:c4:2b:bd:d7:7d:72:1f:4d:51:86:a2: 78:a5:0d:fe:ae:4b:4e:55:d9:f3:83:90:70:0a:9a:fa:06:34: f7:2a:d6:c9:58:07:f1:05:b5:ec:71:3b:c5:23:ef:3f:58:c6: 51:43:09:4e:c7:58:ed:c4:9a:68:e9:ca:26:d9:f0:d3:ca:4d: a8:76:1b:29:de:f2:3a:e5:19:3c:4b:3b:c9:06:c9:b1:d9:c3: 9a:39:30:21:80:2f:f5:b4:b2:d7:6e:3e:3e:3e:bd:b7:c6:29: 97:52:70:4f:62:18:c3:df:b4:bd:52:3d:97:8f:3e:58:db:b1: 49:3c:38:ae:fe:43:48:30:0c:48:b6:2e:c5:7d:85:42:71:36: 49:23:44:b5:7b:19:03:19:25:f4:f3:a1:b8:5f:75:64:89:e9: 9e:4c:ff:91:41:ed:79:c5:c7:c0:20:d0:4e:1c:97:90:ce:8d: 24:c2:5d:61:4c:0d:f0:69:9d:13:e2:e4:db:8b:92:91:60:39: 76:c3:29:82:bd:a7:71:20:d4:1b:30:8e:9f:6b:f8:1c:f9:bd: 20:ef:52:8a:67:fb:ba:f3:75:46:6c:a6:a7:ca:22:89:7b:c0: 86:52:40:34 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAOVAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTEy MDUyNzEyWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyg5RjVEQTU0NkFDOTlB M0RENzIzMkU5MUJFNjgwNDJDQTUzQzZBOUMxMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAzppIHuz05mVLyUqX4gD/jL87krjDFgbloD8kGe3ofYIM4U9U nm7NMU4r7HobJxgkqxn0Vm9CatXmBYLkr7dw9MiBhDbooRAhvS+rw9Q/KQ3puRaR Yg9GiUvteurikG0NEWV8uJTr2V93DkJs92wn83KAqFzVgoTYf1nWhwaqf7beO49M nO4KQkZb3bYYxlWASPC9xAf3AObMZF/eJvYEzpTXj+BtIbh9DsiWkXdIGcLUugfq 4Y5Qnf8UiKFh/KJqMp88ui00Gjw6DZxlEvv8ODUTRMnxZoNyZZ5X/c9BuXq4+Oyz EvlXklNWPR+xZBTEvsCEXGCur5FP/sdBMexqLwIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFJ9dpUasmaPdcjLpG+aAQspTxqnBMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL24xMmxScXlabzkx eU11a2I1b0JDeWxQR3FjRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQr41AwDQYJKoZIhvcNAQELBQADggEBAAcMpNLewK+awIXCMkYSIGE1v0+J RFvTmLXEK73XfXIfTVGGonilDf6uS05V2fODkHAKmvoGNPcq1slYB/EFtexxO8Uj 7z9YxlFDCU7HWO3EmmjpyibZ8NPKTah2Gyne8jrlGTxLO8kGybHZw5o5MCGAL/W0 stduPj4+vbfGKZdScE9iGMPftL1SPZePPljbsUk8OK7+Q0gwDEi2LsV9hUJxNkkj RLV7GQMZJfTzobhfdWSJ6Z5M/5FB7XnFx8Ag0E4cl5DOjSTCXWFMDfBpnRPi5NuL kpFgOXbDKYK9p3Eg1Bswjp9r+Bz5vSDvUopn+7rzdUZspqfKIol7wIZSQDQ= -----END CERTIFICATE-----Generated at Mon Jan 12 09:21:23 2026 by rpki-client