This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/OHkqsadGcrEzA8C9MrWlmukUcNA.roa File: OHkqsadGcrEzA8C9MrWlmukUcNA.roa (raw, json) Hash identifier: GBCG+Wo5BGAfxOxqBJkSfWB22TInzVn0kO7OtyQdd74= Subject key identifier: 38:79:2A:B1:A7:46:72:B1:33:03:C0:BD:32:B5:A5:9A:E9:14:70:D0 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 2624 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/OHkqsadGcrEzA8C9MrWlmukUcNA.roa Signing time: Fri 13 Jun 2025 12:39:19 +0000 ROA not before: Fri 13 Jun 2025 12:39:19 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 9764 (0x2624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 13 12:39:19 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=38792AB1A74672B13303C0BD32B5A59AE91470D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:14:a8:ef:52:19:8a:b5:b1:9a:8f:d5:92:b0: 30:ca:0c:df:e8:73:dd:be:0a:fc:cb:23:de:a6:e1: 17:e6:86:2e:e2:52:05:5c:4c:f8:21:10:e1:70:25: fa:e7:78:64:fc:27:65:1e:0d:02:94:97:ba:93:cf: 97:aa:4f:36:5b:cd:63:40:0c:f7:be:05:d1:75:9b: d8:6f:de:ea:91:a3:c4:49:03:3b:06:14:98:a5:a2: 4e:e8:37:df:6c:ab:29:92:b0:0e:de:6e:53:55:d7: c3:44:4d:d1:d1:1a:81:72:3b:59:12:db:c1:38:64: a3:40:34:7d:2e:77:97:aa:57:e3:96:32:11:70:24: 33:a3:91:9b:af:38:4e:5f:41:74:63:19:f8:a0:f7: 34:a6:c1:1e:e3:b7:30:4b:48:eb:e1:ae:1c:85:00: 17:f6:a9:f8:2d:8b:5d:9e:a3:56:9d:a4:a2:6b:3a: 53:14:1a:38:7e:08:fb:b9:f6:69:44:53:23:e1:a0: d1:2d:8e:d9:b9:ab:71:51:dd:5e:36:c6:11:d9:52: 71:69:8a:62:79:02:db:ff:47:2b:2d:12:76:59:c8: 9b:5e:7a:65:35:94:68:7e:bf:4f:b4:1e:42:da:21: 3f:4b:bd:77:b9:6a:4a:b0:8f:f9:0e:9e:d7:11:74: 8e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:79:2A:B1:A7:46:72:B1:33:03:C0:BD:32:B5:A5:9A:E9:14:70:D0 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/OHkqsadGcrEzA8C9MrWlmukUcNA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 2b:e6:08:57:8f:ac:5a:10:0f:bf:32:16:23:0e:7f:35:c7:2a: 2d:d0:d5:6e:31:33:da:1d:bc:b5:c1:7e:33:2b:b6:b3:7d:f6: 43:ab:2a:03:d6:d9:56:7d:c4:16:33:a4:07:db:c9:b5:1f:1a: 32:c0:99:e6:95:27:91:0b:73:00:fe:53:29:32:48:a5:7b:a4: b1:60:50:32:6e:e0:4c:15:29:cd:d3:d3:2b:74:68:86:ca:8b: 5b:4d:a6:95:55:50:07:cf:22:d3:79:0d:94:8d:39:1b:90:00: 11:ad:1b:35:51:37:c0:6e:27:74:c2:6c:ee:bc:8c:44:45:1a: 80:c7:6b:09:4a:22:16:9f:69:85:10:0a:01:7d:02:bf:81:83: 0e:4d:4d:7a:22:e3:c2:59:80:d2:3f:fd:69:d2:a0:65:be:56: f4:47:00:be:76:a9:a4:28:a5:48:a3:ed:3b:d3:9e:e9:da:49: 41:aa:db:5b:c0:6d:64:84:10:ae:de:00:2f:07:95:f4:c0:eb: 3f:75:2e:43:72:3c:34:22:d9:3b:c7:39:78:33:b2:9e:74:b7: b5:6e:3e:d3:3e:29:8b:85:a6:7c:ea:78:71:c5:34:c1:d0:dd: e2:ba:b6:93:c5:3f:02:0f:93:e7:e9:c6:27:53:cc:8e:1f:5c: 3d:9c:5c:8c -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICJiQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTMx MjM5MTlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDM4NzkyQUIxQTc0Njcy QjEzMzAzQzBCRDMyQjVBNTlBRTkxNDcwRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcFKjvUhmKtbGaj9WSsDDKDN/oc92+CvzLI96m4Rfmhi7iUgVc TPghEOFwJfrneGT8J2UeDQKUl7qTz5eqTzZbzWNADPe+BdF1m9hv3uqRo8RJAzsG FJilok7oN99sqymSsA7eblNV18NETdHRGoFyO1kS28E4ZKNANH0ud5eqV+OWMhFw JDOjkZuvOE5fQXRjGfig9zSmwR7jtzBLSOvhrhyFABf2qfgti12eo1adpKJrOlMU Gjh+CPu59mlEUyPhoNEtjtm5q3FR3V42xhHZUnFpimJ5Atv/RystEnZZyJteemU1 lGh+v0+0HkLaIT9LvXe5akqwj/kOntcRdI5XAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUOHkqsadGcrEzA8C9MrWlmukUcNAwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvT0hrcXNhZEdjckV6 QThDOU1yV2xtdWtVY05BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBACvmCFePrFoQD78yFiMOfzXHKi3Q 1W4xM9odvLXBfjMrtrN99kOrKgPW2VZ9xBYzpAfbybUfGjLAmeaVJ5ELcwD+Uyky SKV7pLFgUDJu4EwVKc3T0yt0aIbKi1tNppVVUAfPItN5DZSNORuQABGtGzVRN8Bu J3TCbO68jERFGoDHawlKIhafaYUQCgF9Ar+Bgw5NTXoi48JZgNI//WnSoGW+VvRH AL52qaQopUij7TvTnunaSUGq21vAbWSEEK7eAC8HlfTA6z91LkNyPDQi2TvHOXgz sp50t7VuPtM+KYuFpnzqeHHFNMHQ3eK6tpPFPwIPk+fpxidTzI4fXD2cXIw= -----END CERTIFICATE-----Generated at Sun Jan 11 19:55:57 2026 by rpki-client