This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/UuEWIqRdlbuNZEXsuc-JIyzMn4M.roa File: UuEWIqRdlbuNZEXsuc-JIyzMn4M.roa (raw, json) Hash identifier: 9Zj09hg644xIUFLLZuk/WY9zRqBCNDn8DciVWZUBZWk= Subject key identifier: 52:E1:16:22:A4:5D:95:BB:8D:64:45:EC:B9:CF:89:23:2C:CC:9F:83 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 233C Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/UuEWIqRdlbuNZEXsuc-JIyzMn4M.roa Signing time: Sun 08 Jun 2025 08:38:56 +0000 ROA not before: Sun 08 Jun 2025 08:38:56 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 9020 (0x233c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 8 08:38:56 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=52E11622A45D95BB8D6445ECB9CF89232CCC9F83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:89:93:84:9b:59:32:f9:25:85:81:70:02:5c: 38:c7:b4:5e:78:95:65:7b:9c:6c:69:c6:e1:61:cc: ea:15:94:26:f4:18:10:57:dd:70:83:94:34:ad:36: 9d:63:24:87:02:2f:85:e7:ae:88:41:dd:8e:e2:08: 4e:e0:b7:fb:b6:4d:f2:77:94:28:ca:03:7b:ca:5d: 53:a5:3d:90:ce:51:19:6f:24:87:43:ca:07:22:2d: e5:d4:a6:a2:b5:41:e2:b1:ac:69:16:41:36:4a:69: 9a:29:0b:34:7a:05:56:6f:7d:bc:9d:5d:11:c8:df: 24:a7:3e:ed:0d:54:7f:31:24:07:ac:04:1c:90:85: f3:f4:d6:a9:85:8d:d3:69:7b:38:30:61:5f:6f:f1: ee:b5:ff:ac:ca:48:51:e7:8a:88:99:0d:be:71:80: 8c:6e:ca:8b:e6:72:57:e9:18:a9:34:87:8c:18:80: 8b:34:53:c9:ca:31:93:ee:00:b9:98:7e:fc:f1:b2: 1a:c5:7a:97:e4:07:64:d8:c7:45:cb:5a:f8:07:33: 00:d1:1d:35:a0:29:ea:82:72:cd:30:b3:e4:29:8b: 99:9e:b2:40:af:78:9a:47:86:13:48:bd:b5:c3:5d: cb:0a:22:ea:37:89:bc:47:9f:43:c4:b5:57:35:07: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E1:16:22:A4:5D:95:BB:8D:64:45:EC:B9:CF:89:23:2C:CC:9F:83 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/UuEWIqRdlbuNZEXsuc-JIyzMn4M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 19:76:a4:9c:4b:7a:bc:2b:89:8f:c5:7e:60:68:13:86:1a:82: be:d3:27:c6:89:7b:11:83:dc:67:4e:7b:86:70:8a:a4:6c:09: 9a:51:e5:56:f3:ae:86:de:91:a6:09:90:de:ef:f9:d8:c4:be: 58:ab:da:67:c7:f7:38:c9:49:0a:f1:ab:28:cb:fd:1f:01:fc: c1:5f:62:e8:77:3b:9a:ea:fa:75:d4:64:77:2f:54:05:8c:31: c0:93:56:7b:06:72:cb:fb:30:92:cb:f9:c3:70:24:7a:ca:07: 32:b8:e3:61:a4:d4:4d:49:91:2b:d0:8f:88:f9:91:49:ba:8d: ed:f8:b3:74:7f:10:85:0a:0e:b7:7c:4b:f2:3c:c8:0a:14:00: b7:db:f1:41:9d:91:00:1d:94:29:e2:f7:38:0f:99:51:e4:1c: 7d:16:08:c1:cd:85:3e:b3:25:09:a6:76:1d:b5:ee:16:e0:1a: e7:c1:96:f8:a0:d3:08:75:61:50:8e:01:2e:49:94:7a:2a:77: 57:0e:5f:7d:4a:44:53:6a:c2:6b:be:73:da:0d:43:95:11:cb: ba:ee:96:bb:9a:28:16:f5:36:b5:0f:e6:c8:53:9a:67:36:6e: 8c:71:b0:eb:c8:7a:cb:b7:e7:b5:15:73:95:62:c3:2b:33:0c: 27:43:c1:9e -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICIzwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDgw ODM4NTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDUyRTExNjIyQTQ1RDk1 QkI4RDY0NDVFQ0I5Q0Y4OTIzMkNDQzlGODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeiZOEm1ky+SWFgXACXDjHtF54lWV7nGxpxuFhzOoVlCb0GBBX 3XCDlDStNp1jJIcCL4XnrohB3Y7iCE7gt/u2TfJ3lCjKA3vKXVOlPZDOURlvJIdD ygciLeXUpqK1QeKxrGkWQTZKaZopCzR6BVZvfbydXRHI3ySnPu0NVH8xJAesBByQ hfP01qmFjdNpezgwYV9v8e61/6zKSFHnioiZDb5xgIxuyovmclfpGKk0h4wYgIs0 U8nKMZPuALmYfvzxshrFepfkB2TYx0XLWvgHMwDRHTWgKeqCcs0ws+Qpi5meskCv eJpHhhNIvbXDXcsKIuo3ibxHn0PEtVc1B+v/AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUUuEWIqRdlbuNZEXsuc+JIyzMn4MwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvVXVFV0lxUmRsYnVO WkVYc3VjLUpJeXpNbjRNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBABl2pJxLerwriY/FfmBoE4Yagr7T J8aJexGD3GdOe4ZwiqRsCZpR5VbzrobekaYJkN7v+djEvlir2mfH9zjJSQrxqyjL /R8B/MFfYuh3O5rq+nXUZHcvVAWMMcCTVnsGcsv7MJLL+cNwJHrKBzK442Gk1E1J kSvQj4j5kUm6je34s3R/EIUKDrd8S/I8yAoUALfb8UGdkQAdlCni9zgPmVHkHH0W CMHNhT6zJQmmdh217hbgGufBlvig0wh1YVCOAS5JlHoqd1cOX31KRFNqwmu+c9oN Q5URy7rulruaKBb1NrUP5shTmmc2boxxsOvIesu357UVc5ViwyszDCdDwZ4= -----END CERTIFICATE-----Generated at Mon Jan 12 10:32:25 2026 by rpki-client