This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/3vMsc2qu3GMKLikEFyXzyAAFVzc.roa File: 3vMsc2qu3GMKLikEFyXzyAAFVzc.roa (raw, json) Hash identifier: 2HwZTmP97BRg1wdC0WYNASc4IVwPdeyhMgoe829ujGY= Subject key identifier: DE:F3:2C:73:6A:AE:DC:63:0A:2E:29:04:17:25:F3:C8:00:05:57:37 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 2271 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/3vMsc2qu3GMKLikEFyXzyAAFVzc.roa Signing time: Fri 06 Jun 2025 22:38:51 +0000 ROA not before: Fri 06 Jun 2025 22:38:51 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 8817 (0x2271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 6 22:38:51 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=DEF32C736AAEDC630A2E29041725F3C800055737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:3b:85:7a:25:96:66:af:94:9c:a2:61:95: 0c:70:0d:76:a7:cc:f0:fe:de:00:be:63:58:43:23: 86:3d:e3:8a:cd:e1:09:fc:03:fe:8b:15:cc:59:d8: 5b:d2:f0:55:bf:49:2b:7b:29:6b:d0:07:0a:45:91: 1a:f3:c6:69:7b:5b:d1:fd:c2:5a:c1:94:b9:04:1d: e1:dc:10:d2:15:a5:a0:74:d3:2b:c2:b1:72:df:ab: b0:b7:e0:4d:8f:85:f7:64:bb:5a:a2:3a:f2:a3:7b: 59:69:08:1d:ab:94:3e:41:80:0a:62:87:dc:00:0f: 73:e7:06:97:23:32:fe:12:93:ce:ae:75:26:1d:ba: af:65:4a:f0:16:9a:0c:34:d3:ab:e3:7c:39:9b:4b: 37:78:e2:b1:d6:a6:a6:d5:f2:50:52:5c:21:fc:8a: 15:c8:a0:6a:a4:5a:1b:37:95:f7:84:e3:f7:c5:6a: 2f:aa:85:a6:5a:11:58:ca:fa:31:47:91:9a:63:1f: 30:1d:5c:c6:26:16:c5:55:e6:45:f4:06:f9:eb:48: b5:e2:44:4a:14:31:4c:a0:51:ea:d6:e3:e0:39:5a: 99:fc:6a:b1:2b:ee:82:1d:78:a9:7d:9e:24:3e:3e: aa:c8:e5:35:4d:ac:31:f8:62:cb:d9:79:1b:a0:28: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F3:2C:73:6A:AE:DC:63:0A:2E:29:04:17:25:F3:C8:00:05:57:37 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/3vMsc2qu3GMKLikEFyXzyAAFVzc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 22:9f:9a:d9:f1:0c:23:20:02:a6:dd:c5:66:af:fd:52:0b:5f: af:14:c8:d8:2a:26:9a:7c:d2:c9:69:c8:6d:b6:07:98:01:c0: 04:00:29:51:26:f3:00:b5:82:8f:81:7e:7e:47:4c:71:5e:b1: 97:72:0f:77:a0:11:85:ab:7b:e3:9b:0b:4a:6a:6b:19:e4:11: ff:ec:ca:f0:e0:34:1e:c2:05:4b:c0:1a:5c:dd:b2:9f:0f:e7: 86:35:cc:11:0e:b7:e8:aa:98:ff:6d:d1:53:3b:43:60:0d:64: a7:f2:c3:bf:bd:7c:fe:0d:9d:97:09:fa:d8:71:9c:62:d7:56: bb:47:81:e2:66:1d:dd:2f:32:5c:97:fe:5d:24:4a:8b:04:ec: b9:01:c9:34:b0:61:17:c6:47:46:f3:5f:d9:f6:b1:b8:e1:bf: 56:a9:4f:c4:ab:7d:9d:af:9d:d2:b9:58:f8:a0:3c:5b:a4:c3: 70:4c:95:7a:85:1f:f8:64:d5:3a:c0:42:39:1b:8b:c7:d6:30: 49:b4:2d:b2:5b:1e:ac:26:6f:d0:f8:eb:40:e7:37:fe:dd:aa: 61:ad:59:42:3c:35:4e:92:1b:87:82:7f:aa:a8:e1:cc:f4:69: 4b:4e:82:39:80:62:4f:71:e7:50:0b:4c:24:ec:d3:e8:11:60: 68:e0:63:15 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICInEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDYy MjM4NTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKERFRjMyQzczNkFBRURD NjMwQTJFMjkwNDE3MjVGM0M4MDAwNTU3MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwrDuFeiWWZq+UnKJhlQxwDXanzPD+3gC+Y1hDI4Y944rN4Qn8 A/6LFcxZ2FvS8FW/SSt7KWvQBwpFkRrzxml7W9H9wlrBlLkEHeHcENIVpaB00yvC sXLfq7C34E2Phfdku1qiOvKje1lpCB2rlD5BgApih9wAD3PnBpcjMv4Sk86udSYd uq9lSvAWmgw006vjfDmbSzd44rHWpqbV8lBSXCH8ihXIoGqkWhs3lfeE4/fFai+q haZaEVjK+jFHkZpjHzAdXMYmFsVV5kX0BvnrSLXiREoUMUygUerW4+A5Wpn8arEr 7oIdeKl9niQ+PqrI5TVNrDH4YsvZeRugKLH1AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU3vMsc2qu3GMKLikEFyXzyAAFVzcwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvM3ZNc2MycXUzR01L TGlrRUZ5WHp5QUFGVnpjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBACKfmtnxDCMgAqbdxWav/VILX68U yNgqJpp80slpyG22B5gBwAQAKVEm8wC1go+Bfn5HTHFesZdyD3egEYWre+ObC0pq axnkEf/syvDgNB7CBUvAGlzdsp8P54Y1zBEOt+iqmP9t0VM7Q2ANZKfyw7+9fP4N nZcJ+thxnGLXVrtHgeJmHd0vMlyX/l0kSosE7LkByTSwYRfGR0bzX9n2sbjhv1ap T8SrfZ2vndK5WPigPFukw3BMlXqFH/hk1TrAQjkbi8fWMEm0LbJbHqwmb9D460Dn N/7dqmGtWUI8NU6SG4eCf6qo4cz0aUtOgjmAYk9x51ALTCTs0+gRYGjgYxU= -----END CERTIFICATE-----Generated at Mon Jan 12 15:29:07 2026 by rpki-client