This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/Bp3FkMWvO5lpAFvWbm4XFoal04c.roa File: Bp3FkMWvO5lpAFvWbm4XFoal04c.roa (raw, json) Hash identifier: 6afIGdtpoQ05yWvh+sfKbssjHdKqcN3/8+zo0fFxxm0= Subject key identifier: 06:9D:C5:90:C5:AF:3B:99:69:00:5B:D6:6E:6E:17:16:86:A5:D3:87 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 25D9 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Bp3FkMWvO5lpAFvWbm4XFoal04c.roa Signing time: Fri 13 Jun 2025 00:09:14 +0000 ROA not before: Fri 13 Jun 2025 00:09:14 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 9689 (0x25d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 13 00:09:14 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=069DC590C5AF3B9969005BD66E6E171686A5D387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:45:86:57:4f:bd:cf:af:61:2d:5c:a3:49: 85:31:ae:c1:8d:35:61:75:de:4c:2d:2c:21:af:ca: a8:31:c4:06:78:e4:3e:b5:ab:02:38:14:91:c0:61: ad:a3:86:73:cf:eb:82:9a:39:17:ac:58:a2:f3:62: ce:6a:fd:65:bd:4b:f2:c5:e7:69:a2:7f:05:5d:75: a1:85:5d:84:00:1e:46:ad:e6:f8:b0:f2:2e:4c:03: ff:a3:c5:ec:3e:56:f9:08:06:b8:6e:00:67:10:05: b6:80:1c:c8:2b:17:b2:4b:a9:ba:3f:12:0b:db:a6: 5f:f5:4b:5d:80:4c:e4:83:20:df:03:86:17:f2:e3: ff:de:35:ff:ed:4a:7a:28:ea:ad:35:e1:1a:43:76: 1f:8c:d2:08:42:da:e4:1e:f9:26:a0:ef:c1:58:52: ee:ac:ec:4b:2a:64:f5:e3:84:61:66:19:69:7e:dc: 39:74:05:22:f8:80:c3:6e:b5:96:9c:03:81:b7:6e: 66:26:07:d3:01:24:f7:6a:68:01:cd:ff:c7:55:30: 54:06:42:e6:db:f6:8d:4f:ce:46:e5:ed:b0:74:2d: 13:8a:c2:df:6f:43:40:3a:f1:99:50:a8:f4:dd:3a: ea:3d:af:78:b2:db:67:3e:7b:81:db:de:97:b2:eb: 20:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9D:C5:90:C5:AF:3B:99:69:00:5B:D6:6E:6E:17:16:86:A5:D3:87 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Bp3FkMWvO5lpAFvWbm4XFoal04c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 10:1c:f2:1e:d7:0e:cb:f9:c3:55:a9:2c:a6:7d:b6:64:de:88: a3:e8:31:03:a6:b9:79:a6:7d:70:56:8e:e2:63:b0:d6:74:ce: c1:c7:c6:6f:4e:34:d7:a9:51:81:45:3b:67:0e:26:c7:f5:c4: da:c0:84:51:f0:f1:61:ab:46:af:89:9b:33:da:f6:db:4a:8d: 73:e4:d2:df:b7:fc:42:72:05:de:29:df:d3:1a:65:44:d2:af: 10:46:59:f1:8e:b7:e7:00:ed:0d:ba:0b:f5:38:bd:f9:39:42: 37:71:14:2f:f7:8e:19:aa:29:e2:61:e9:8c:9c:0c:dc:2b:21: 43:05:13:4e:1a:83:17:4c:63:80:6f:d1:79:ba:cc:76:8a:0d: a2:5e:be:9e:4b:c0:5d:4d:c7:3b:4c:9b:f0:63:77:e5:65:3e: b7:2d:cf:f0:7d:a7:c8:06:8d:a7:47:c9:2b:92:73:c8:a4:e6: 6e:cd:34:2d:c7:cc:6a:5a:d8:e8:81:a5:78:ee:2a:d0:c6:31: 76:40:c6:c0:c2:32:90:21:22:4d:50:aa:bf:ad:16:0a:6b:32: 52:57:92:d1:7e:47:69:34:a7:f4:f3:e9:3d:61:ce:b1:80:d0: aa:3a:52:14:12:ea:7e:08:36:9b:69:8a:71:19:fa:a0:f8:fc: 58:83:00:e3 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICJdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTMw MDA5MTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDA2OURDNTkwQzVBRjNC OTk2OTAwNUJENjZFNkUxNzE2ODZBNUQzODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3tUWGV0+9z69hLVyjSYUxrsGNNWF13kwtLCGvyqgxxAZ45D61 qwI4FJHAYa2jhnPP64KaOResWKLzYs5q/WW9S/LF52mifwVddaGFXYQAHkat5viw 8i5MA/+jxew+VvkIBrhuAGcQBbaAHMgrF7JLqbo/Egvbpl/1S12ATOSDIN8Dhhfy 4//eNf/tSnoo6q014RpDdh+M0ghC2uQe+Sag78FYUu6s7EsqZPXjhGFmGWl+3Dl0 BSL4gMNutZacA4G3bmYmB9MBJPdqaAHN/8dVMFQGQubb9o1Pzkbl7bB0LROKwt9v Q0A68ZlQqPTdOuo9r3iy22c+e4Hb3pey6yBlAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUBp3FkMWvO5lpAFvWbm4XFoal04cwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvQnAzRmtNV3ZPNWxw QUZ2V2JtNFhGb2FsMDRjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBABAc8h7XDsv5w1WpLKZ9tmTeiKPo MQOmuXmmfXBWjuJjsNZ0zsHHxm9ONNepUYFFO2cOJsf1xNrAhFHw8WGrRq+JmzPa 9ttKjXPk0t+3/EJyBd4p39MaZUTSrxBGWfGOt+cA7Q26C/U4vfk5QjdxFC/3jhmq KeJh6YycDNwrIUMFE04agxdMY4Bv0Xm6zHaKDaJevp5LwF1NxztMm/Bjd+VlPrct z/B9p8gGjadHySuSc8ik5m7NNC3HzGpa2OiBpXjuKtDGMXZAxsDCMpAhIk1Qqr+t FgprMlJXktF+R2k0p/Tz6T1hzrGA0Ko6UhQS6n4INptpinEZ+qD4/FiDAOM= -----END CERTIFICATE-----Generated at Sun Jan 11 23:23:30 2026 by rpki-client