This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/wp1H5BtnEAoDxmMUZ6W7Nqip5eQ.roa File: wp1H5BtnEAoDxmMUZ6W7Nqip5eQ.roa (raw, json) Hash identifier: gLs9oTlKzmtri5cFVr3DAwXKjsSHRIHJYoUrTkj+0Bw= Subject key identifier: C2:9D:47:E4:1B:67:10:0A:03:C6:63:14:67:A5:BB:36:A8:A9:E5:E4 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: CC95 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/wp1H5BtnEAoDxmMUZ6W7Nqip5eQ.roa Signing time: Sun 21 Dec 2025 07:09:47 +0000 ROA not before: Sun 21 Dec 2025 07:09:47 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63612 IP address blocks: 103.45.128.0/19 maxlen: 19 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 52373 (0xcc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Dec 21 07:09:47 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C29D47E41B67100A03C6631467A5BB36A8A9E5E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:bd:07:93:27:58:32:f0:07:a1:f8:c1:eb: ce:af:b3:4b:6d:aa:8b:3f:b9:0a:43:6f:71:f7:26: 10:ba:3b:8f:9b:a6:c8:e7:b0:b4:89:e0:88:bb:7d: f4:b0:d9:bb:26:d4:99:2e:f3:dd:46:a0:e2:a8:45: 1d:7c:d3:24:04:72:95:cb:6f:38:d6:3b:42:58:32: a4:38:56:d0:85:7f:17:5c:e7:c0:bc:82:fb:cc:c6: bd:83:02:f3:79:36:e7:32:e3:de:86:e5:d1:32:4a: 91:98:28:03:e5:a0:7d:85:15:04:84:dd:de:6a:29: eb:82:35:9c:e7:29:4c:43:5d:fd:31:7b:4d:a0:c2: 6b:61:28:61:21:3c:96:0b:14:0a:cd:d4:d6:6f:9a: 16:a2:ac:29:05:d4:68:39:82:6b:f8:62:d6:dc:26: cc:3d:2e:79:88:f5:95:b0:c3:e4:fe:56:33:f9:8b: 7a:9d:73:60:fc:56:31:b7:98:b6:a5:af:54:41:b8: 6f:c0:fc:a6:5c:da:39:c4:a5:c8:84:ff:e2:bb:91: 81:72:71:6d:4c:29:8d:00:09:6d:a6:13:2d:69:d1: 04:99:30:db:26:fb:a2:2e:4a:cc:d8:9e:ab:d8:ba: 87:14:ad:fd:43:a8:5e:3a:25:c9:83:f7:9c:27:03: d5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9D:47:E4:1B:67:10:0A:03:C6:63:14:67:A5:BB:36:A8:A9:E5:E4 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/wp1H5BtnEAoDxmMUZ6W7Nqip5eQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.45.128.0/19 Signature Algorithm: sha256WithRSAEncryption 2d:7e:2f:4a:7e:53:7a:0c:7d:18:24:9e:cb:33:31:c6:19:d3: 7b:86:45:ca:0b:10:c8:82:1c:66:ff:31:ed:ca:98:11:82:47: 4f:57:20:dd:b6:e6:65:88:07:d6:4b:f1:f8:b8:13:90:29:63: 80:93:00:4f:d2:2c:31:ca:09:f1:21:08:1c:f6:32:55:aa:84: d7:0d:6b:33:30:46:fc:00:51:a1:43:a6:5d:a0:26:46:c1:04: 62:e3:cd:7b:fd:5c:f8:52:56:8e:6e:a0:be:c6:a7:6c:c7:b4: 7d:d5:2f:85:36:cf:46:e8:5f:c1:38:82:a5:2e:b4:b5:46:ca: 6d:46:02:bb:cb:cc:b3:70:be:e4:26:37:97:cc:37:58:87:04: bd:22:24:46:04:8d:fb:2c:0f:d3:8a:d8:f6:09:73:ad:71:a1: 3d:14:e0:0f:15:44:b5:6a:65:fe:f8:e7:1f:de:5d:c6:bf:47: 93:6a:78:75:2c:88:78:02:49:ca:0b:b6:56:4f:04:bb:84:aa: a9:c1:93:36:88:49:67:0f:ac:c0:37:af:55:f8:94:93:ec:b0: 10:00:0e:8b:29:f2:ff:be:71:e8:b6:73:58:ed:95:ee:3b:32: 16:d6:47:d1:8a:68:97:77:a7:e8:c4:31:3e:2d:e8:2c:95:74: 14:c8:47:8c -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAMyVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjUxMjIx MDcwOTQ3WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyhDMjlENDdFNDFCNjcx MDBBMDNDNjYzMTQ2N0E1QkIzNkE4QTlFNUU0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAr+S9B5MnWDLwB6H4wevOr7NLbaqLP7kKQ29x9yYQujuPm6bI 57C0ieCIu330sNm7JtSZLvPdRqDiqEUdfNMkBHKVy2841jtCWDKkOFbQhX8XXOfA vIL7zMa9gwLzeTbnMuPehuXRMkqRmCgD5aB9hRUEhN3eainrgjWc5ylMQ139MXtN oMJrYShhITyWCxQKzdTWb5oWoqwpBdRoOYJr+GLW3CbMPS55iPWVsMPk/lYz+Yt6 nXNg/FYxt5i2pa9UQbhvwPymXNo5xKXIhP/iu5GBcnFtTCmNAAltphMtadEEmTDb JvuiLkrM2J6r2LqHFK39Q6heOiXJg/ecJwPVKwIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFMKdR+QbZxAKA8ZjFGeluzaoqeXkMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL3dwMUg1QnRuRUFv RHhtTVVaNlc3TnFpcDVlUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVnLYAwDQYJKoZIhvcNAQELBQADggEBAC1+L0p+U3oMfRgknsszMcYZ03uG RcoLEMiCHGb/Me3KmBGCR09XIN225mWIB9ZL8fi4E5ApY4CTAE/SLDHKCfEhCBz2 MlWqhNcNazMwRvwAUaFDpl2gJkbBBGLjzXv9XPhSVo5uoL7Gp2zHtH3VL4U2z0bo X8E4gqUutLVGym1GArvLzLNwvuQmN5fMN1iHBL0iJEYEjfssD9OK2PYJc61xoT0U 4A8VRLVqZf745x/eXca/R5NqeHUsiHgCScoLtlZPBLuEqqnBkzaISWcPrMA3r1X4 lJPssBAADosp8v++cei2c1jtle47MhbWR9GKaJd3p+jEMT4t6CyVdBTIR4w= -----END CERTIFICATE-----Generated at Sun Dec 21 09:42:29 2025 by rpki-client