This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/35z-euacpNYsMVuRMRTajzMG7DU.roa File: 35z-euacpNYsMVuRMRTajzMG7DU.roa (raw, json) Hash identifier: wiH9jVtQWum7AELdVzVwWp4vGw0AZBo/r1HdYLcD8Mk= Subject key identifier: DF:9C:FE:7A:E6:9C:A4:D6:2C:31:5B:91:31:14:DA:8F:33:06:EC:35 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 22B8 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/35z-euacpNYsMVuRMRTajzMG7DU.roa Signing time: Sat 07 Jun 2025 10:38:58 +0000 ROA not before: Sat 07 Jun 2025 10:38:58 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 8888 (0x22b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 7 10:38:58 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=DF9CFE7AE69CA4D62C315B913114DA8F3306EC35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d7:08:2a:fb:12:cc:9d:b7:21:89:ca:31:10: a2:2e:4a:0e:2e:b6:ce:cd:91:cc:b5:2c:d8:06:ee: f6:98:94:fc:76:b7:a1:14:02:1a:d5:6d:04:86:63: 0d:15:60:e7:47:40:e1:f5:4b:20:55:de:69:79:45: 1f:23:09:c5:52:31:d0:f3:a6:90:1d:32:24:84:b6: f6:a9:bb:14:97:d8:b7:bb:0b:ac:1c:7c:87:fb:5e: 0a:8c:19:0d:a3:5a:ad:00:56:79:ae:29:c0:ff:35: b6:af:87:67:b3:96:a2:10:f1:3a:5d:de:08:64:ab: 71:03:4b:03:ce:29:8b:4e:75:dc:63:70:00:6a:e1: ac:18:b9:c0:e0:aa:6f:b3:54:e0:49:d1:d0:39:fb: 48:08:d4:64:95:f9:e1:bd:f2:07:79:d6:3a:40:db: aa:45:1b:1e:3b:f3:32:3f:e2:52:86:92:a1:3b:72: e1:de:89:a6:8c:1e:9c:78:2b:4f:01:4e:d5:1a:d0: 79:a3:4d:7e:68:db:4f:56:89:f3:30:ef:24:8e:35: 18:22:b1:b9:cf:24:5b:2d:90:ba:92:6d:77:09:28: 03:d1:4d:7a:f6:ee:09:c6:6e:8f:a1:fa:3e:b3:2a: 22:48:b6:a8:bd:81:1b:9d:23:85:15:51:b1:b3:ce: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9C:FE:7A:E6:9C:A4:D6:2C:31:5B:91:31:14:DA:8F:33:06:EC:35 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/35z-euacpNYsMVuRMRTajzMG7DU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 9d:fd:06:77:b2:c6:37:01:9e:37:ed:04:0a:b2:60:db:cb:89: f4:33:26:9f:70:1b:91:f9:94:a6:09:6f:fd:1a:5b:45:53:5c: 35:3f:96:fe:a4:c1:c1:d2:41:60:4a:c0:f9:ff:cd:dd:26:cd: b8:41:77:46:f2:4d:6f:75:91:1d:6e:79:bd:03:cb:ba:4a:00: 8a:0d:fd:3c:92:8f:55:d6:74:cd:f2:5b:1a:bb:db:5d:e6:2a: 74:23:2c:55:c6:66:5e:c7:6a:ae:fe:9b:81:a9:71:5f:24:ac: 05:19:f8:81:0d:b7:4b:f3:1c:85:27:cb:c2:bc:dd:bb:c2:58: 91:d5:1d:ef:9b:30:67:80:4f:53:8a:5d:27:e9:e6:a8:40:ec: 8b:9f:bb:4b:61:53:6c:20:d1:2d:da:2b:34:59:84:b9:02:4e: f7:f0:0e:f5:55:e5:16:5a:37:6d:a6:77:da:d0:34:e9:45:48: a9:20:1d:cb:0a:af:64:57:80:60:4a:7d:d1:1b:43:48:b2:3f: f3:f4:8f:16:f1:3d:12:20:45:64:38:44:e3:90:7b:39:53:46: 8e:96:51:a0:25:3e:a2:a8:a8:48:61:84:a4:39:72:3f:57:3b: e7:b3:91:7d:d5:95:5b:42:c2:cb:f5:36:74:f2:de:40:74:7b: 3a:6f:f4:65 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICIrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDcx MDM4NThaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKERGOUNGRTdBRTY5Q0E0 RDYyQzMxNUI5MTMxMTREQThGMzMwNkVDMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz1wgq+xLMnbchicoxEKIuSg4uts7Nkcy1LNgG7vaYlPx2t6EU AhrVbQSGYw0VYOdHQOH1SyBV3ml5RR8jCcVSMdDzppAdMiSEtvapuxSX2Le7C6wc fIf7XgqMGQ2jWq0AVnmuKcD/Nbavh2ezlqIQ8Tpd3ghkq3EDSwPOKYtOddxjcABq 4awYucDgqm+zVOBJ0dA5+0gI1GSV+eG98gd51jpA26pFGx478zI/4lKGkqE7cuHe iaaMHpx4K08BTtUa0HmjTX5o209WifMw7ySONRgisbnPJFstkLqSbXcJKAPRTXr2 7gnGbo+h+j6zKiJItqi9gRudI4UVUbGzzlHPAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU35z+euacpNYsMVuRMRTajzMG7DUwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvMzV6LWV1YWNwTllz TVZ1Uk1SVGFqek1HN0RVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAJ39BneyxjcBnjftBAqyYNvLifQz Jp9wG5H5lKYJb/0aW0VTXDU/lv6kwcHSQWBKwPn/zd0mzbhBd0byTW91kR1ueb0D y7pKAIoN/TySj1XWdM3yWxq7213mKnQjLFXGZl7Haq7+m4GpcV8krAUZ+IENt0vz HIUny8K83bvCWJHVHe+bMGeAT1OKXSfp5qhA7Iufu0thU2wg0S3aKzRZhLkCTvfw DvVV5RZaN22md9rQNOlFSKkgHcsKr2RXgGBKfdEbQ0iyP/P0jxbxPRIgRWQ4ROOQ ezlTRo6WUaAlPqKoqEhhhKQ5cj9XO+ezkX3VlVtCwsv1NnTy3kB0ezpv9GU= -----END CERTIFICATE-----Generated at Mon Jan 12 14:27:26 2026 by rpki-client