This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/CjCRV6dh9gI1b94JEs3ytkyC_9c.roa File: CjCRV6dh9gI1b94JEs3ytkyC_9c.roa (raw, json) Hash identifier: cWn8rPGwU8OS88910mXFYrKrJDoyboGvDlZT16d4yHk= Subject key identifier: 0A:30:91:57:A7:61:F6:02:35:6F:DE:09:12:CD:F2:B6:4C:82:FF:D7 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 1C49 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/CjCRV6dh9gI1b94JEs3ytkyC_9c.roa Signing time: Tue 27 May 2025 00:08:12 +0000 ROA not before: Tue 27 May 2025 00:08:12 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 7241 (0x1c49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: May 27 00:08:12 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=0A309157A761F602356FDE0912CDF2B64C82FFD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4a:59:b3:27:60:4f:ab:3b:eb:20:ff:0a:6b: a3:f0:9a:ee:7c:f3:fb:ac:fa:e8:15:31:6f:63:36: 5c:52:5a:fe:3d:c4:46:25:aa:61:b3:0c:bf:d1:f2: cc:3c:c5:7c:d8:88:98:ad:7d:9f:49:17:cb:be:38: df:11:7e:72:00:20:2e:42:eb:45:a2:eb:1b:f8:f7: 64:f8:24:a0:77:e7:85:c7:a8:ec:52:d8:6a:c8:ee: dc:82:68:d0:ea:68:ac:cd:84:54:29:0d:1c:83:c7: 3d:0a:2c:4e:60:a0:76:df:86:16:f7:26:d9:bd:b1: aa:55:ea:fd:b1:58:b7:89:df:b3:ec:c7:6e:51:e8: 84:df:01:11:3e:96:eb:89:0a:18:8d:ba:cb:06:ce: ee:ad:13:e4:3d:e9:ed:08:f4:12:9c:54:9d:1f:c2: cf:ea:e1:e9:db:d5:46:38:d8:b3:58:26:c6:64:db: 4c:ec:38:0a:4c:26:21:dc:48:6a:d3:33:0a:91:df: 73:af:23:39:1e:a0:bf:0e:d3:4c:b8:df:bc:38:cb: 75:6c:79:6e:2b:3b:79:c9:e9:36:ce:d7:ed:61:ab: 4c:de:0f:a0:e3:b1:54:dc:b9:26:a4:d4:4b:c6:95: ef:f0:5d:a0:d9:62:1c:12:5e:c4:63:00:27:70:54: 03:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:30:91:57:A7:61:F6:02:35:6F:DE:09:12:CD:F2:B6:4C:82:FF:D7 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/CjCRV6dh9gI1b94JEs3ytkyC_9c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption bd:f9:51:a5:a2:74:5d:09:e8:5d:26:ff:2b:bf:bc:b2:14:8c: 83:36:a2:57:33:bd:06:20:7d:47:e5:0a:3a:e0:94:4f:53:d0: 0e:68:4c:9f:bc:4b:e3:3f:35:e2:29:f7:33:19:bd:2f:83:51: 16:99:d0:8b:de:45:d6:81:e5:bc:1b:37:2d:f0:c6:aa:c7:bf: bb:7f:d8:55:74:46:1d:00:bf:c6:6c:fb:86:1c:0e:4b:cb:ed: e7:37:0d:74:9a:bc:d6:88:6c:e0:b3:39:bb:9e:f2:82:11:dc: 49:25:41:e5:86:55:07:ab:fe:fc:9e:e0:bb:6a:6e:f6:cf:e8: e7:94:21:fb:d2:e7:a8:be:ef:ca:4a:bf:a6:86:68:98:cd:71: 24:5b:6e:0e:28:ad:0d:22:77:06:a8:50:2d:08:e9:bd:9c:f8: 0c:8d:c9:e0:63:a3:76:f3:7c:06:90:c6:b8:b7:ac:f4:72:97: b1:dd:80:0e:44:8b:80:48:24:20:10:db:9d:c8:17:47:da:ea: 12:37:88:60:58:ed:79:96:4c:43:50:e6:c1:c1:b1:52:e4:d0: 15:09:19:e3:db:1d:fb:8b:dc:fa:da:1b:b5:8f:b9:aa:7a:f3: 21:3f:9f:52:54:74:54:e3:cd:92:b8:0c:cd:6c:8b:05:3e:46: 6d:d7:8f:0b -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICHEkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA1Mjcw MDA4MTJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDBBMzA5MTU3QTc2MUY2 MDIzNTZGREUwOTEyQ0RGMkI2NEM4MkZGRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWSlmzJ2BPqzvrIP8Ka6Pwmu588/us+ugVMW9jNlxSWv49xEYl qmGzDL/R8sw8xXzYiJitfZ9JF8u+ON8RfnIAIC5C60Wi6xv492T4JKB354XHqOxS 2GrI7tyCaNDqaKzNhFQpDRyDxz0KLE5goHbfhhb3Jtm9sapV6v2xWLeJ37Psx25R 6ITfARE+luuJChiNussGzu6tE+Q96e0I9BKcVJ0fws/q4enb1UY42LNYJsZk20zs OApMJiHcSGrTMwqR33OvIzkeoL8O00y437w4y3VseW4rO3nJ6TbO1+1hq0zeD6Dj sVTcuSak1EvGle/wXaDZYhwSXsRjACdwVAObAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUCjCRV6dh9gI1b94JEs3ytkyC/9cwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvQ2pDUlY2ZGg5Z0kx Yjk0SkVzM3l0a3lDXzljLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAL35UaWidF0J6F0m/yu/vLIUjIM2 olczvQYgfUflCjrglE9T0A5oTJ+8S+M/NeIp9zMZvS+DURaZ0IveRdaB5bwbNy3w xqrHv7t/2FV0Rh0Av8Zs+4YcDkvL7ec3DXSavNaIbOCzObue8oIR3EklQeWGVQer /vye4LtqbvbP6OeUIfvS56i+78pKv6aGaJjNcSRbbg4orQ0idwaoUC0I6b2c+AyN yeBjo3bzfAaQxri3rPRyl7HdgA5Ei4BIJCAQ253IF0fa6hI3iGBY7XmWTENQ5sHB sVLk0BUJGePbHfuL3PraG7WPuap68yE/n1JUdFTjzZK4DM1siwU+Rm3Xjws= -----END CERTIFICATE-----Generated at Mon Jan 12 15:00:06 2026 by rpki-client