This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/QIuPQtfm0i0uiEqXoqZKDE3n3Ao.roa File: QIuPQtfm0i0uiEqXoqZKDE3n3Ao.roa (raw, json) Hash identifier: OyVJEf4f8Ca9v3J2klKfJS6nF9kwqY9cQs4zEqHwWMU= Subject key identifier: 40:8B:8F:42:D7:E6:D2:2D:2E:88:4A:97:A2:A6:4A:0C:4D:E7:DC:0A Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 1F14 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/QIuPQtfm0i0uiEqXoqZKDE3n3Ao.roa Signing time: Sat 31 May 2025 23:08:32 +0000 ROA not before: Sat 31 May 2025 23:08:32 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 7956 (0x1f14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: May 31 23:08:32 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=408B8F42D7E6D22D2E884A97A2A64A0C4DE7DC0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1b:42:80:c5:0a:11:a1:0c:f9:f8:4b:2d:21: b3:72:ac:bb:fb:a8:39:f9:32:e0:91:99:e4:45:f2: cd:52:d7:03:1f:dc:6a:a2:72:8c:34:f2:7b:dd:80: 0b:5b:5c:62:0d:18:b3:52:c4:7f:0e:d6:3b:9f:69: e5:5c:a0:a2:78:b6:99:3b:11:3f:1a:41:5b:b7:71: 65:79:2f:77:95:1a:f1:e3:1b:cd:78:e8:25:ce:7f: f5:52:f6:f5:a5:6b:41:ab:fe:c0:11:d1:f7:b9:07: 5a:1c:98:ed:1d:96:ed:4a:56:29:2c:8b:b6:c6:fa: 5d:31:a8:a1:a2:53:ca:ba:50:33:46:e4:e2:2f:ca: 09:4e:86:5b:32:aa:c0:36:ca:2a:db:3c:b8:d9:06: 8e:5e:eb:1a:c7:26:16:41:79:59:97:9c:4e:1d:d2: 41:40:ca:37:e7:a3:99:87:6e:db:4f:b6:7a:37:8e: 8b:e1:0f:3a:95:8c:d9:24:67:39:76:9a:10:d1:58: 78:e7:54:79:8e:0e:e2:c6:09:a5:93:bd:57:9f:99: 64:5e:62:8a:d4:b4:26:b6:90:6c:3c:cb:07:1d:d9: 5b:df:08:73:d5:82:db:7c:42:bf:22:59:8d:36:01: 6e:e1:76:1b:c3:e4:c9:3f:9c:49:8c:16:51:03:d2: a1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8B:8F:42:D7:E6:D2:2D:2E:88:4A:97:A2:A6:4A:0C:4D:E7:DC:0A X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/QIuPQtfm0i0uiEqXoqZKDE3n3Ao.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 0a:03:5b:70:37:38:24:5d:ac:b8:a7:91:27:e9:d4:d8:70:ef: ac:13:45:ea:52:ca:58:d9:87:74:96:ef:c8:fe:52:b9:ce:f5: b8:78:06:d1:9d:63:00:17:7f:1d:05:53:ca:5c:c2:31:23:a1: b1:13:2a:e6:75:b8:89:0b:7a:95:12:f1:b3:38:e6:04:ed:b2: ee:34:4d:4a:81:04:c7:3a:b1:33:4c:84:a0:70:e0:bc:30:e4: 92:39:af:40:ab:c4:b1:90:07:aa:37:b0:f4:76:5d:8b:ea:7e: 8d:b8:b0:2c:5a:28:e7:4e:76:d4:40:a7:cc:ef:08:5d:1f:e6: 9c:2e:f5:ac:82:36:40:2e:68:87:6a:18:cd:d2:e8:bc:8f:f6: 38:51:04:95:8c:b2:7f:85:2b:12:9c:76:87:1a:0b:58:88:28: 92:dc:3b:23:3a:0b:8c:12:be:13:88:57:c5:f0:e7:5f:69:bf: f8:1b:a0:be:69:01:1f:bf:31:f8:48:25:a4:5e:e9:d4:b6:47: 3b:a1:f4:2b:c2:36:50:fb:80:29:c3:1a:ae:24:32:69:0a:37: 31:32:3f:cd:ee:2b:23:05:99:b8:b3:4e:1a:45:23:31:b4:19: 24:0d:c2:00:7f:63:73:ae:67:6e:e7:d5:6c:e2:4e:52:e8:c8: 1d:71:59:38 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICHxQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA1MzEy MzA4MzJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQwOEI4RjQyRDdFNkQy MkQyRTg4NEE5N0EyQTY0QTBDNERFN0RDMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuG0KAxQoRoQz5+EstIbNyrLv7qDn5MuCRmeRF8s1S1wMf3Gqi cow08nvdgAtbXGINGLNSxH8O1jufaeVcoKJ4tpk7ET8aQVu3cWV5L3eVGvHjG814 6CXOf/VS9vWla0Gr/sAR0fe5B1ocmO0dlu1KViksi7bG+l0xqKGiU8q6UDNG5OIv yglOhlsyqsA2yirbPLjZBo5e6xrHJhZBeVmXnE4d0kFAyjfno5mHbttPtno3jovh DzqVjNkkZzl2mhDRWHjnVHmODuLGCaWTvVefmWReYorUtCa2kGw8ywcd2VvfCHPV gtt8Qr8iWY02AW7hdhvD5Mk/nEmMFlED0qFhAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUQIuPQtfm0i0uiEqXoqZKDE3n3AowHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvUUl1UFF0Zm0waTB1 aUVxWG9xWktERTNuM0FvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAAoDW3A3OCRdrLinkSfp1Nhw76wT RepSyljZh3SW78j+UrnO9bh4BtGdYwAXfx0FU8pcwjEjobETKuZ1uIkLepUS8bM4 5gTtsu40TUqBBMc6sTNMhKBw4Lww5JI5r0CrxLGQB6o3sPR2XYvqfo24sCxaKOdO dtRAp8zvCF0f5pwu9ayCNkAuaIdqGM3S6LyP9jhRBJWMsn+FKxKcdocaC1iIKJLc OyM6C4wSvhOIV8Xw519pv/gboL5pAR+/MfhIJaRe6dS2Rzuh9CvCNlD7gCnDGq4k MmkKNzEyP83uKyMFmbizThpFIzG0GSQNwgB/Y3OuZ27n1WziTlLoyB1xWTg= -----END CERTIFICATE-----Generated at Sun Jan 11 23:57:54 2026 by rpki-client