This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/B_7hoqNlgKyA9-JSWDJGZJJ54_c.roa File: B_7hoqNlgKyA9-JSWDJGZJJ54_c.roa (raw, json) Hash identifier: slxN86nrgntulhdGWgtf8kaUXCdj6jv3hjsxKsNPtxg= Subject key identifier: 07:FE:E1:A2:A3:65:80:AC:80:F7:E2:52:58:32:46:64:92:79:E3:F7 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 912D Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/B_7hoqNlgKyA9-JSWDJGZJJ54_c.roa Signing time: Sun 21 Dec 2025 07:10:04 +0000 ROA not before: Sun 21 Dec 2025 07:10:04 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 37165 (0x912d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Dec 21 07:10:04 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=07FEE1A2A36580AC80F7E252583246649279E3F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:cb:da:5f:88:57:91:35:94:07:43:ee:ba: f0:7c:33:d4:92:4d:cb:7e:5a:ae:10:1a:ac:7e:39: 86:56:4e:2f:5b:32:7e:3b:29:ca:e0:34:a8:21:b8: 60:80:0d:73:6c:64:89:89:56:7b:59:15:03:18:1c: 27:9f:3e:84:7a:8e:36:64:af:b8:32:7e:81:50:87: 69:e3:96:4d:b3:53:38:ea:ba:4f:a5:b1:f1:bc:4c: 7e:95:d8:5c:b5:49:2e:4b:b2:87:25:c2:de:45:84: 21:84:1c:ec:9c:a1:10:b6:3b:10:88:56:b0:13:5f: fb:92:30:64:32:70:90:1a:d8:8b:b0:8d:5b:1d:93: 3a:2b:34:96:2c:54:ea:43:aa:86:b3:c6:9d:dd:fd: aa:ba:9e:6c:cf:e7:12:0c:a3:3b:4e:a7:10:e7:22: 63:60:af:42:ae:43:9a:2e:b7:65:b2:2f:4b:94:ba: 72:4c:87:71:2d:e9:3c:a7:db:a0:bd:bc:c3:c0:9b: 12:f1:f6:7f:e3:90:09:09:5e:a5:81:44:5b:4c:aa: e0:06:c7:34:f8:63:94:ec:47:ad:61:25:58:29:ae: 12:25:8f:3b:15:16:55:bc:92:b0:96:35:71:4d:46: 48:f6:27:2d:04:10:0e:c0:34:5c:bd:07:e4:ac:90: 12:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FE:E1:A2:A3:65:80:AC:80:F7:E2:52:58:32:46:64:92:79:E3:F7 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/B_7hoqNlgKyA9-JSWDJGZJJ54_c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 82:2f:95:de:83:24:14:b3:28:4b:12:6a:03:63:87:5b:07:6d: bb:83:14:59:99:c6:8d:86:a1:69:db:f1:43:18:95:23:15:09: 96:1f:59:78:90:74:1e:61:59:8a:cc:fc:c3:9c:04:09:62:e1: 7f:2f:d3:1f:67:eb:30:a2:e1:5a:ab:82:7e:29:75:fa:c5:61: a7:e9:0a:57:63:b7:5a:ea:6b:a9:76:4f:e0:65:cc:23:dd:36: 5f:1e:e2:e5:8c:52:94:c0:d7:dc:55:9a:2a:e6:cc:fb:4c:1f: e2:b6:22:43:6b:0b:5c:0b:8c:5d:f1:19:3c:1f:d5:bf:ec:20: 73:2e:98:47:26:4b:3a:8a:9c:90:e0:a4:b1:f4:f0:79:ca:23: 5f:41:b7:95:3e:9c:c9:01:62:fe:51:05:71:33:1b:36:2b:c6: a9:17:54:48:f8:3b:02:e7:e5:0c:40:f1:d0:05:4d:0c:da:7b: dd:c0:96:d7:f3:0e:56:ba:7c:22:36:84:dd:d4:8a:97:68:f2: bb:86:ad:a5:e3:23:cd:c0:46:c9:1c:2c:50:f4:20:bf:e5:50: 7b:20:d6:0c:01:44:3d:9c:24:0d:97:bd:3e:43:9c:9f:65:cc: dd:62:b5:9e:1e:12:03:f1:34:c8:bb:ed:c3:61:be:db:92:f5: 48:50:28:65 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIDAJEtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKEQy QUI2QzlCNkUxNjUzMzRDMDMyRDA1MUQ1RkM3RDE1NDdFNEUzNTMwHhcNMjUxMjIx MDcxMDA0WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEygwN0ZFRTFBMkEzNjU4 MEFDODBGN0UyNTI1ODMyNDY2NDkyNzlFM0Y3MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAsuvL2l+IV5E1lAdD7rrwfDPUkk3LflquEBqsfjmGVk4vWzJ+ OynK4DSoIbhggA1zbGSJiVZ7WRUDGBwnnz6Eeo42ZK+4Mn6BUIdp45ZNs1M46rpP pbHxvEx+ldhctUkuS7KHJcLeRYQhhBzsnKEQtjsQiFawE1/7kjBkMnCQGtiLsI1b HZM6KzSWLFTqQ6qGs8ad3f2qup5sz+cSDKM7TqcQ5yJjYK9CrkOaLrdlsi9LlLpy TIdxLek8p9ugvbzDwJsS8fZ/45AJCV6lgURbTKrgBsc0+GOU7EetYSVYKa4SJY87 FRZVvJKwljVxTUZI9ictBBAOwDRcvQfkrJASSwIDAQABo4IB9DCCAfAwHQYDVR0O BBYEFAf+4aKjZYCsgPfiUlgyRmSSeeP3MB8GA1UdIwQYMBaAFNKrbJtuFlM0wDLQ UdX8fRVH5ONTMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw OTgvMHF0c20yNFdVelRBTXRCUjFmeDlGVWZrNDFNLmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDk4L0JfN2hvcU5sZ0t5 QTktSlNXREpHWkpKNTRfYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkB5tAMA0GCSqGSIb3DQEBCwUAA4IBAQCCL5XegyQUsyhLEmoDY4dbB227 gxRZmcaNhqFp2/FDGJUjFQmWH1l4kHQeYVmKzPzDnAQJYuF/L9MfZ+swouFaq4J+ KXX6xWGn6QpXY7da6mupdk/gZcwj3TZfHuLljFKUwNfcVZoq5sz7TB/itiJDawtc C4xd8Rk8H9W/7CBzLphHJks6ipyQ4KSx9PB5yiNfQbeVPpzJAWL+UQVxMxs2K8ap F1RI+DsC5+UMQPHQBU0M2nvdwJbX8w5WunwiNoTd1IqXaPK7hq2l4yPNwEbJHCxQ 9CC/5VB7INYMAUQ9nCQNl70+Q5yfZczdYrWeHhID8TTIu+3DYb7bkvVIUChl -----END CERTIFICATE-----Generated at Sun Dec 21 09:30:19 2025 by rpki-client