This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/9tk_X0eW_MDTWrAg3KAOaFdZ9as.roa File: 9tk_X0eW_MDTWrAg3KAOaFdZ9as.roa (raw, json) Hash identifier: kDgZrhaIoUxt8QcWKOBBFopTNOWeD1PMFwvKm+TAGDg= Subject key identifier: F6:D9:3F:5F:47:96:FC:C0:D3:5A:B0:20:DC:A0:0E:68:57:59:F5:AB Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 9119 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/9tk_X0eW_MDTWrAg3KAOaFdZ9as.roa Signing time: Sun 21 Dec 2025 03:40:04 +0000 ROA not before: Sun 21 Dec 2025 03:40:04 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 37145 (0x9119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Dec 21 03:40:04 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F6D93F5F4796FCC0D35AB020DCA00E685759F5AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8d:13:e3:aa:2d:3b:43:3b:70:f6:7b:6a:de: 32:08:63:ad:ea:d1:08:28:a4:2f:49:3d:da:03:e5: ef:59:ca:46:b7:d6:92:e9:c7:05:98:e6:81:12:54: 48:ea:1f:c0:ce:f2:69:87:7f:89:89:1c:f7:63:aa: 76:68:54:cd:70:c3:eb:0a:63:ed:04:cc:7a:c8:a5: 6b:10:79:94:60:21:62:ee:8a:a0:ac:53:76:ff:0c: 2f:5c:91:98:42:fd:43:64:09:8d:98:bd:72:88:88: 8c:88:f3:38:58:21:d4:12:63:84:2e:57:e7:0f:4d: c3:be:e4:c3:ad:50:1d:3c:3f:d4:cc:68:bf:b7:b5: ca:0f:37:13:af:31:c3:00:bf:c2:53:aa:c3:53:68: 2b:e0:18:8f:2f:ea:c1:72:93:9f:a1:a1:33:34:4e: ce:3c:fe:c2:c0:ac:f0:d5:1b:ea:b5:7b:a7:e4:8e: 37:cd:93:29:70:d4:18:df:bc:1b:03:d7:60:1e:b2: 43:50:ba:4e:be:2a:f0:f0:d7:13:80:14:f9:7f:ca: 8b:fe:62:ce:7b:86:8c:c4:15:78:55:93:a0:91:a6: 0f:1e:3c:8e:d7:8b:75:0c:f2:10:65:e3:13:07:a6: 63:7d:45:c5:d1:8b:26:09:25:f7:63:d0:19:27:c4: 7f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D9:3F:5F:47:96:FC:C0:D3:5A:B0:20:DC:A0:0E:68:57:59:F5:AB X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/9tk_X0eW_MDTWrAg3KAOaFdZ9as.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 6f:da:bc:06:0d:cf:5e:ed:e0:2a:a1:df:e6:08:10:b5:d1:84: fd:cf:84:2f:11:b4:8d:db:80:a8:7e:f5:d2:5e:50:2b:d2:c4: fa:4a:1a:a8:92:89:a8:8c:e0:9b:0a:da:24:cf:e4:7b:f9:75: a2:22:d4:a0:d6:2f:e9:5d:d4:63:03:0b:78:47:16:cb:3b:47: 1b:1d:64:fb:58:a1:0f:fa:03:a7:03:01:22:4e:02:ed:67:04: ec:f3:0d:70:66:16:16:0b:2c:86:25:e9:17:c4:0e:da:73:d0: 09:81:36:21:65:62:90:c9:bd:f4:44:96:2c:2f:2f:ab:09:5f: 7c:6b:13:44:cc:eb:23:f9:20:86:04:ab:6d:75:b2:c0:56:f9: ff:57:7d:47:23:68:ed:49:11:6d:01:77:6d:d3:e5:4d:a3:63: 7b:7e:e7:8b:bf:1e:41:e2:48:ed:22:26:3b:42:99:2b:e3:24: e1:ed:14:ae:8b:6d:f4:b8:b7:40:01:3c:f4:d5:a3:41:9f:af: 34:d8:05:87:3e:bc:58:71:d1:5a:27:59:be:fe:50:1a:f4:0c: c5:a3:da:cd:83:8b:a3:19:37:61:dd:6d:89:00:4a:f6:ad:57: cb:71:04:71:81:1c:a6:65:40:7b:69:c2:8e:99:58:b5:f2:22: 37:15:d7:c2 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIDAJEZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKEQy QUI2QzlCNkUxNjUzMzRDMDMyRDA1MUQ1RkM3RDE1NDdFNEUzNTMwHhcNMjUxMjIx MDM0MDA0WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyhGNkQ5M0Y1RjQ3OTZG Q0MwRDM1QUIwMjBEQ0EwMEU2ODU3NTlGNUFCMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA0I0T46otO0M7cPZ7at4yCGOt6tEIKKQvST3aA+XvWcpGt9aS 6ccFmOaBElRI6h/AzvJph3+JiRz3Y6p2aFTNcMPrCmPtBMx6yKVrEHmUYCFi7oqg rFN2/wwvXJGYQv1DZAmNmL1yiIiMiPM4WCHUEmOELlfnD03DvuTDrVAdPD/UzGi/ t7XKDzcTrzHDAL/CU6rDU2gr4BiPL+rBcpOfoaEzNE7OPP7CwKzw1RvqtXun5I43 zZMpcNQY37wbA9dgHrJDULpOvirw8NcTgBT5f8qL/mLOe4aMxBV4VZOgkaYPHjyO 14t1DPIQZeMTB6ZjfUXF0YsmCSX3Y9AZJ8R/vQIDAQABo4IB9DCCAfAwHQYDVR0O BBYEFPbZP19HlvzA01qwINygDmhXWfWrMB8GA1UdIwQYMBaAFNKrbJtuFlM0wDLQ UdX8fRVH5ONTMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw OTgvMHF0c20yNFdVelRBTXRCUjFmeDlGVWZrNDFNLmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDk4Lzl0a19YMGVXX01E VFdyQWczS0FPYUZkWjlhcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkB5tAMA0GCSqGSIb3DQEBCwUAA4IBAQBv2rwGDc9e7eAqod/mCBC10YT9 z4QvEbSN24CofvXSXlAr0sT6ShqokomojOCbCtokz+R7+XWiItSg1i/pXdRjAwt4 RxbLO0cbHWT7WKEP+gOnAwEiTgLtZwTs8w1wZhYWCyyGJekXxA7ac9AJgTYhZWKQ yb30RJYsLy+rCV98axNEzOsj+SCGBKttdbLAVvn/V31HI2jtSRFtAXdt0+VNo2N7 fueLvx5B4kjtIiY7Qpkr4yTh7RSui230uLdAATz01aNBn6802AWHPrxYcdFaJ1m+ /lAa9AzFo9rNg4ujGTdh3W2JAEr2rVfLcQRxgRymZUB7acKOmVi18iI3FdfC -----END CERTIFICATE-----Generated at Sun Dec 21 06:26:46 2025 by rpki-client