This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/RlN7WDW9Q4fHqrJZUS8ip_9DIsw.roa File: RlN7WDW9Q4fHqrJZUS8ip_9DIsw.roa (raw, json) Hash identifier: rzegAen+zb2FQefM9zSEqdlJDn5fUBMHrPaxB3Sa4bg= Subject key identifier: 46:53:7B:58:35:BD:43:87:C7:AA:B2:59:51:2F:22:A7:FF:43:22:CC Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 9178 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/RlN7WDW9Q4fHqrJZUS8ip_9DIsw.roa Signing time: Sun 21 Dec 2025 19:40:13 +0000 ROA not before: Sun 21 Dec 2025 19:40:13 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 37240 (0x9178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Dec 21 19:40:13 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=46537B5835BD4387C7AAB259512F22A7FF4322CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:6e:da:72:d7:06:bc:65:3b:e5:dd:0b:b6: 10:ce:33:43:66:3d:98:9d:a1:3e:54:60:9e:07:43: b3:32:6d:c8:62:c5:03:db:78:84:f0:1b:a8:ea:2c: 9a:7a:74:55:55:bb:55:9f:83:72:05:56:c2:e3:de: 69:eb:c2:2c:02:d5:22:02:95:b7:f5:3c:40:b1:43: 5e:6f:1d:89:16:19:4b:bd:f3:e2:c5:3c:cd:fa:bf: 57:e1:41:ca:a3:e6:67:6a:08:55:ea:88:1d:6d:66: 8c:ff:21:05:a4:13:6d:d4:9d:b4:9a:e2:43:20:16: 62:1a:a3:a7:88:f2:11:77:54:11:c1:76:b2:33:56: a9:65:93:2d:40:53:37:96:a0:69:8f:7a:9d:9c:f3: eb:87:62:b5:34:f9:93:f2:42:97:75:2d:da:16:46: 10:bb:77:ed:15:35:0e:f9:4e:9a:e2:7c:26:31:3d: ca:4f:ed:17:5b:45:c6:bc:bb:c6:17:bc:59:94:8f: 95:db:ba:f8:3e:cf:43:b2:e1:9b:8a:49:d7:b0:bf: 4b:28:e5:4f:86:6f:c7:c1:b0:1a:71:da:85:a7:04: e8:f6:0c:b4:9f:26:c4:9b:ef:2f:33:dc:a7:a5:40: 62:d4:06:bd:4f:28:21:38:20:40:7e:73:26:be:e8: ff:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:53:7B:58:35:BD:43:87:C7:AA:B2:59:51:2F:22:A7:FF:43:22:CC X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/RlN7WDW9Q4fHqrJZUS8ip_9DIsw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 91:63:ee:77:58:1d:07:ea:11:fb:a6:c5:cd:4e:4d:c8:43:75: 3b:2d:c9:27:5c:c8:d0:1b:ad:47:d5:96:cb:a0:49:d3:ca:3b: 79:e2:a1:e9:c2:2e:bf:c8:ab:9c:a3:0d:37:95:47:3a:d8:31: 03:6f:8d:06:8e:1d:61:25:65:60:1d:0b:aa:d3:a2:98:73:79: 3a:2b:61:56:1d:8d:a8:2f:b3:66:92:1e:30:7e:d3:24:c6:88: 3c:55:31:75:10:c0:17:78:d9:5f:86:d4:8e:c9:96:c4:7b:98: 5b:ac:e1:2e:77:28:83:8b:e9:62:af:21:27:cb:f7:d5:5f:5b: a0:ab:3b:e3:b5:b7:9d:ce:93:9d:32:82:48:c1:0d:99:0a:1d: 24:87:7b:b3:2b:24:bb:d7:a7:77:22:95:9c:ed:61:07:d5:44: 5f:c7:b3:09:ae:d8:00:c6:b6:9e:37:e7:6f:80:d3:aa:1e:b1: 36:c4:4c:1f:02:2a:55:b7:6d:71:45:3c:0b:87:b7:1c:85:2a: ea:28:5a:f7:4c:d4:a0:e4:b1:28:7a:d9:17:12:b2:7d:0c:ed: 02:d6:37:b2:9b:ae:ab:02:8b:7b:6c:c2:36:00:5a:39:32:09: 8b:20:c5:a2:48:ed:d5:2d:c9:6c:69:e7:49:a9:b8:04:c0:46: c1:e3:41:8e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIDAJF4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKEQy QUI2QzlCNkUxNjUzMzRDMDMyRDA1MUQ1RkM3RDE1NDdFNEUzNTMwHhcNMjUxMjIx MTk0MDEzWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyg0NjUzN0I1ODM1QkQ0 Mzg3QzdBQUIyNTk1MTJGMjJBN0ZGNDMyMkNDMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAzuJu2nLXBrxlO+XdC7YQzjNDZj2YnaE+VGCeB0OzMm3IYsUD 23iE8Buo6iyaenRVVbtVn4NyBVbC495p68IsAtUiApW39TxAsUNebx2JFhlLvfPi xTzN+r9X4UHKo+ZnaghV6ogdbWaM/yEFpBNt1J20muJDIBZiGqOniPIRd1QRwXay M1apZZMtQFM3lqBpj3qdnPPrh2K1NPmT8kKXdS3aFkYQu3ftFTUO+U6a4nwmMT3K T+0XW0XGvLvGF7xZlI+V27r4Ps9DsuGbiknXsL9LKOVPhm/HwbAacdqFpwTo9gy0 nybEm+8vM9ynpUBi1Aa9TyghOCBAfnMmvuj/BwIDAQABo4IB9DCCAfAwHQYDVR0O BBYEFEZTe1g1vUOHx6qyWVEvIqf/QyLMMB8GA1UdIwQYMBaAFNKrbJtuFlM0wDLQ UdX8fRVH5ONTMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw OTgvMHF0c20yNFdVelRBTXRCUjFmeDlGVWZrNDFNLmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDk4L1JsTjdXRFc5UTRm SHFySlpVUzhpcF85RElzdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkB5tAMA0GCSqGSIb3DQEBCwUAA4IBAQCRY+53WB0H6hH7psXNTk3IQ3U7 LcknXMjQG61H1ZbLoEnTyjt54qHpwi6/yKucow03lUc62DEDb40Gjh1hJWVgHQuq 06KYc3k6K2FWHY2oL7Nmkh4wftMkxog8VTF1EMAXeNlfhtSOyZbEe5hbrOEudyiD i+liryEny/fVX1ugqzvjtbedzpOdMoJIwQ2ZCh0kh3uzKyS716d3IpWc7WEH1URf x7MJrtgAxraeN+dvgNOqHrE2xEwfAipVt21xRTwLh7cchSrqKFr3TNSg5LEoetkX ErJ9DO0C1jeym66rAot7bMI2AFo5MgmLIMWiSO3VLclsaedJqbgEwEbB40GO -----END CERTIFICATE-----Generated at Sun Dec 21 22:44:33 2025 by rpki-client