This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/62hpxeJSuNd2baMaGn8OiqCSVOA.roa
File: 62hpxeJSuNd2baMaGn8OiqCSVOA.roa (raw, json)
Hash identifier: JE6+vE4YkXNcZOmxhtyCBOzbLXwnOn912a132V4QTp0=
Subject key identifier: EB:68:69:C5:E2:52:B8:D7:76:6D:A3:1A:1A:7F:0E:8A:A0:92:54:E0
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 224A
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/62hpxeJSuNd2baMaGn8OiqCSVOA.roa
Signing time: Fri 06 Jun 2025 16:08:50 +0000
ROA not before: Fri 06 Jun 2025 16:08:50 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8778 (0x224a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 6 16:08:50 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EB6869C5E252B8D7766DA31A1A7F0E8AA09254E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:57:3e:77:fa:21:05:fe:f7:7b:97:d9:dc:
65:98:d3:ca:54:e2:25:9e:9c:6d:81:e1:be:1a:0b:
38:24:47:70:79:36:76:fa:72:ec:1a:eb:f8:d4:32:
9d:91:a2:e2:a8:30:43:9e:30:db:5e:6d:38:70:b1:
ac:4f:b7:4b:2f:e7:84:8b:74:4d:b4:dd:c4:d6:b2:
41:d2:66:3f:4f:19:01:6a:e5:ac:c8:1e:ee:64:93:
43:23:a3:5e:f3:39:00:6a:a1:81:b1:fc:46:22:38:
da:ec:a6:ce:17:a2:46:8d:54:f6:5c:72:d6:2a:ef:
09:d6:f6:3f:31:f1:f5:96:53:72:cf:2f:d4:ca:e2:
da:ed:21:7c:12:bd:24:56:a8:c0:ad:32:9c:02:d7:
07:c3:a2:df:ec:eb:2e:d6:1d:2a:88:eb:47:eb:09:
19:8a:e6:ed:4d:75:4a:52:73:32:5c:b0:79:84:59:
6b:0d:b5:15:66:66:ec:d1:63:0e:3d:8d:17:4d:3d:
ea:0d:a2:90:b2:f4:20:8d:99:5f:f7:35:01:54:e9:
46:76:82:7f:af:db:ed:2b:ce:9a:e8:5b:e6:06:c9:
12:e9:d8:d4:5d:b8:ba:22:a6:ea:5b:4a:a0:6f:46:
f4:e3:33:54:ea:91:b5:1b:f8:f3:59:c4:14:9c:4a:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:68:69:C5:E2:52:B8:D7:76:6D:A3:1A:1A:7F:0E:8A:A0:92:54:E0
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/62hpxeJSuNd2baMaGn8OiqCSVOA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
6e:ae:35:34:11:bf:79:cb:39:0d:d2:14:e5:46:b3:16:b1:b1:
d0:72:e6:72:43:ee:60:15:f6:d0:4d:3f:51:03:5c:2e:54:f2:
e3:ce:f3:74:54:d2:dc:63:b7:cb:84:ac:92:50:df:e2:63:19:
e0:dc:91:ac:20:b1:34:3d:d3:da:0e:44:3e:b6:e0:ff:0d:ef:
67:8b:c2:7d:23:8f:25:95:ce:ad:c2:ec:d8:d7:dc:7a:52:ba:
58:72:fe:c5:20:fb:b4:ef:4c:68:cf:4e:29:f4:33:15:e5:a8:
2f:62:92:61:78:44:23:a3:fc:4e:23:ec:e8:81:39:7a:3b:5a:
dd:24:03:ff:e3:76:62:8c:0e:fd:bb:3a:9f:ac:7c:56:9a:08:
26:48:38:84:5c:7d:93:f3:e0:90:22:6a:a1:21:0b:40:85:02:
60:f7:f7:44:60:be:b8:a5:d6:82:b7:1b:c6:6d:05:8c:8e:77:
05:b4:93:fa:13:77:bf:d3:58:4f:7f:1e:f4:77:c7:4b:7c:19:
dc:08:85:61:5f:51:34:bc:60:d7:53:cc:0a:65:72:a2:c2:1c:
12:a1:ca:56:58:55:05:a9:cc:8e:c8:60:bd:72:8d:a0:15:ae:
9d:47:50:8b:6a:d8:36:c9:38:5a:56:79:66:5b:7c:8d:7f:18:
63:e7:f5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:19:17 2026 by rpki-client