This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/TwRiKt7CN_cwuwlohhhos2uJBdQ.roa File: TwRiKt7CN_cwuwlohhhos2uJBdQ.roa (raw, json) Hash identifier: pMW3iiMiPU4val0EdHr0zZsUe5ESYo2dy2nsB6dQto8= Subject key identifier: 4F:04:62:2A:DE:C2:37:F7:30:BB:09:68:86:18:68:B3:6B:89:05:D4 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 2145 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/TwRiKt7CN_cwuwlohhhos2uJBdQ.roa Signing time: Wed 04 Jun 2025 20:38:43 +0000 ROA not before: Wed 04 Jun 2025 20:38:43 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 8517 (0x2145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 4 20:38:43 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4F04622ADEC237F730BB0968861868B36B8905D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:c8:27:16:71:01:28:81:2b:e6:8d:58:a2: af:1c:4d:c1:ed:34:ad:58:20:6a:a3:6b:6f:0e:0a: bb:56:1e:aa:f4:d2:64:b7:a4:28:58:d5:51:9f:6d: e4:12:67:87:55:62:6f:4a:f1:7c:29:ef:c0:85:07: 7b:34:b7:53:7a:5b:d4:fd:ff:44:30:85:59:3f:d0: 28:e8:c3:b0:ec:c9:b9:87:88:1f:33:55:f0:d7:64: 4b:88:fd:9c:9a:84:6b:5e:06:ea:7b:32:00:59:3a: c9:c4:4b:99:b1:55:54:c6:53:82:8b:7f:8e:ce:e0: 03:b0:89:16:30:b3:d1:aa:73:6e:df:2b:f0:ef:c7: 60:19:9e:dc:13:14:1b:13:ea:07:dd:df:38:c0:14: 65:35:c6:fa:0a:3b:41:6a:f7:0f:c6:6e:7a:31:3b: b9:de:a1:c4:a5:e1:8a:6d:61:5e:cc:cb:30:42:bb: 02:5e:32:e2:01:b9:2d:ed:8c:35:b3:2c:61:8d:86: dc:92:f9:b3:7a:fd:a5:11:0c:a3:3a:ca:61:23:6b: 97:89:09:a0:37:22:0e:9e:b3:6c:47:82:8f:32:fa: a0:8a:7d:f5:e3:92:1a:fe:83:de:20:c4:3d:f5:39: ce:b7:59:4a:6b:ff:de:e1:e3:5c:29:23:11:08:3e: 05:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:04:62:2A:DE:C2:37:F7:30:BB:09:68:86:18:68:B3:6B:89:05:D4 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/TwRiKt7CN_cwuwlohhhos2uJBdQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 9f:5e:00:e4:6c:fc:61:83:1c:55:fe:72:9e:ee:ab:57:2c:99: 2c:7a:5c:9d:b2:16:ad:0e:93:00:65:b2:6e:72:1e:c8:38:4d: 80:48:bd:81:85:e2:a1:4f:69:dd:ad:72:eb:b6:eb:eb:b5:8b: 71:18:49:a0:0b:f1:d9:99:bc:13:61:2d:80:d7:08:c8:84:6b: cf:56:5e:52:25:77:df:ec:72:c7:6b:80:5d:71:28:6c:3b:5e: 59:64:05:6c:83:21:67:23:52:53:09:78:68:a1:f5:23:57:23: ca:d7:00:cc:24:2c:12:f5:1f:37:b9:4c:e7:bf:52:fe:02:6b: d5:f7:52:fd:4c:13:77:df:4b:0c:ec:20:7b:77:fd:12:5d:b5: 77:c4:59:ba:ac:39:04:a5:37:4f:8d:83:4f:5b:5b:51:34:9f: 72:9f:8b:14:a3:f1:da:f1:17:17:d3:d9:60:23:d1:b4:9d:29: f5:a6:7b:92:8f:6f:fb:2b:6f:00:5d:d3:28:42:7f:5d:02:8d: c3:d8:0c:35:26:5d:03:71:f2:9c:91:ce:3f:49:71:26:2b:8b: b4:74:e6:51:51:25:22:47:fb:72:0f:8d:94:03:ec:50:73:52: 99:48:a3:d1:1f:f5:b9:ab:be:c7:41:e4:09:a4:b3:bc:68:8e: dd:a1:77:ed -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICIUUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDQy MDM4NDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDRGMDQ2MjJBREVDMjM3 RjczMEJCMDk2ODg2MTg2OEIzNkI4OTA1RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAycgnFnEBKIEr5o1Yoq8cTcHtNK1YIGqja28OCrtWHqr00mS3 pChY1VGfbeQSZ4dVYm9K8Xwp78CFB3s0t1N6W9T9/0QwhVk/0Cjow7DsybmHiB8z VfDXZEuI/ZyahGteBup7MgBZOsnES5mxVVTGU4KLf47O4AOwiRYws9Gqc27fK/Dv x2AZntwTFBsT6gfd3zjAFGU1xvoKO0Fq9w/GbnoxO7neocSl4YptYV7MyzBCuwJe MuIBuS3tjDWzLGGNhtyS+bN6/aURDKM6ymEja5eJCaA3Ig6es2xHgo8y+qCKffXj khr+g94gxD31Oc63WUpr/97h41wpIxEIPgXdAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUTwRiKt7CN/cwuwlohhhos2uJBdQwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvVHdSaUt0N0NOX2N3 dXdsb2hoaG9zMnVKQmRRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAJ9eAORs/GGDHFX+cp7uq1csmSx6 XJ2yFq0OkwBlsm5yHsg4TYBIvYGF4qFPad2tcuu26+u1i3EYSaAL8dmZvBNhLYDX CMiEa89WXlIld9/scsdrgF1xKGw7XllkBWyDIWcjUlMJeGih9SNXI8rXAMwkLBL1 Hze5TOe/Uv4Ca9X3Uv1ME3ffSwzsIHt3/RJdtXfEWbqsOQSlN0+Ng09bW1E0n3Kf ixSj8drxFxfT2WAj0bSdKfWme5KPb/srbwBd0yhCf10CjcPYDDUmXQNx8pyRzj9J cSYri7R05lFRJSJH+3IPjZQD7FBzUplIo9Ef9bmrvsdB5Amks7xojt2hd+0= -----END CERTIFICATE-----Generated at Mon Jan 12 03:27:35 2026 by rpki-client