This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/VfY58_i6z6IFNDyFNusv1HnicCM.roa File: VfY58_i6z6IFNDyFNusv1HnicCM.roa (raw, json) Hash identifier: BL7c86xnOkr720ipQO1rXPKuJ67m1vu+Ikk3dgoHWOg= Subject key identifier: 55:F6:39:F3:F8:BA:CF:A2:05:34:3C:85:36:EB:2F:D4:79:E2:70:23 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 1EE1 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/VfY58_i6z6IFNDyFNusv1HnicCM.roa Signing time: Sat 31 May 2025 14:38:33 +0000 ROA not before: Sat 31 May 2025 14:38:33 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 7905 (0x1ee1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: May 31 14:38:33 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=55F639F3F8BACFA205343C8536EB2FD479E27023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:62:59:8b:48:11:e1:19:27:73:01:48:10: 4b:0b:d0:6f:e9:84:47:f9:1d:29:8b:0b:07:a5:ed: cf:f8:89:77:15:18:a7:3c:69:05:4d:ab:fb:3e:bf: 12:24:28:04:71:45:11:14:b1:52:79:f3:e5:47:9d: 9a:d0:9c:d1:8a:82:df:f6:89:91:49:f0:a7:08:fe: 1e:e2:0a:29:d1:66:08:10:f3:03:15:90:ca:78:ee: 8c:ee:11:ab:08:79:d3:cf:a4:35:a9:42:8d:b5:85: 63:df:42:ee:1c:9d:71:f9:96:c8:2a:c8:ef:47:49: 39:32:ba:5b:11:7a:4b:cf:98:8d:e5:e1:6f:94:b7: bb:d1:ce:1a:b0:25:2c:9b:20:1a:e7:86:4f:45:1c: 69:e7:7f:cc:12:62:50:92:84:d1:2f:32:1b:3c:d5: bd:48:e5:b9:7b:a8:d6:8a:c0:6c:ec:bf:12:66:f2: b2:ca:36:7f:da:8a:04:d8:4a:5a:f2:8d:4d:e4:d9: 23:ca:6a:f5:ca:82:e3:2d:0a:6c:0c:d5:1b:46:6e: ab:8f:0e:a1:db:c2:8a:ba:3b:78:9f:91:f6:3e:33: 08:cc:a7:27:50:ea:0b:64:6e:07:11:28:5a:ce:27: 38:1c:e9:66:ff:d5:42:01:3f:e8:82:4b:52:69:28: be:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F6:39:F3:F8:BA:CF:A2:05:34:3C:85:36:EB:2F:D4:79:E2:70:23 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/VfY58_i6z6IFNDyFNusv1HnicCM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 85:40:48:28:95:7f:a8:c4:12:c4:62:d9:2c:ec:72:e6:1e:c9: 6f:46:47:f6:78:74:0b:86:ad:da:9d:28:b4:3e:01:bc:3e:50: 12:bd:03:e8:94:ba:96:08:87:9e:f9:ec:1f:4f:2c:21:05:ed: 19:be:2d:b0:ae:40:b7:7a:c4:56:bd:f4:7e:6b:f8:97:46:db: 97:ac:97:cd:81:d5:4d:b3:ca:ec:cc:0e:d0:ba:be:f2:a2:2f: e4:b6:d4:33:fd:e9:d9:bf:f0:f0:43:b4:2c:7d:35:4b:08:db: 3a:71:6e:8b:ec:59:49:f2:fd:e6:4a:d4:26:53:16:82:62:8e: b7:27:a4:65:b9:34:6d:e1:6b:31:38:4c:f7:63:e8:d3:6c:33: c0:fd:59:26:c0:20:a7:30:f2:a5:e7:3b:d4:14:f6:f3:81:cc: 68:20:82:44:32:06:07:84:a1:0e:87:30:f5:8a:e8:6d:bc:90: 8d:61:ae:8e:e3:5b:69:23:bb:e4:33:ac:c9:5b:aa:d4:97:b4: 1b:31:3f:9a:af:fd:f8:71:ae:b6:96:40:dc:ae:99:34:97:40: 5c:63:4d:fd:2f:8c:09:a3:78:4f:c8:fd:58:ce:a4:11:f7:76: 50:aa:73:d7:14:38:75:fd:81:18:2c:7e:5f:43:d5:96:f4:df: 22:7d:ec:da -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICHuEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA1MzEx NDM4MzNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDU1RjYzOUYzRjhCQUNG QTIwNTM0M0M4NTM2RUIyRkQ0NzlFMjcwMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClmGJZi0gR4RkncwFIEEsL0G/phEf5HSmLCwel7c/4iXcVGKc8 aQVNq/s+vxIkKARxRREUsVJ58+VHnZrQnNGKgt/2iZFJ8KcI/h7iCinRZggQ8wMV kMp47ozuEasIedPPpDWpQo21hWPfQu4cnXH5lsgqyO9HSTkyulsRekvPmI3l4W+U t7vRzhqwJSybIBrnhk9FHGnnf8wSYlCShNEvMhs81b1I5bl7qNaKwGzsvxJm8rLK Nn/aigTYSlryjU3k2SPKavXKguMtCmwM1RtGbquPDqHbwoq6O3ifkfY+MwjMpydQ 6gtkbgcRKFrOJzgc6Wb/1UIBP+iCS1JpKL5NAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUVfY58/i6z6IFNDyFNusv1HnicCMwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvVmZZNThfaTZ6NklG TkR5Rk51c3YxSG5pY0NNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAIVASCiVf6jEEsRi2SzscuYeyW9G R/Z4dAuGrdqdKLQ+Abw+UBK9A+iUupYIh5757B9PLCEF7Rm+LbCuQLd6xFa99H5r +JdG25esl82B1U2zyuzMDtC6vvKiL+S21DP96dm/8PBDtCx9NUsI2zpxbovsWUny /eZK1CZTFoJijrcnpGW5NG3hazE4TPdj6NNsM8D9WSbAIKcw8qXnO9QU9vOBzGgg gkQyBgeEoQ6HMPWK6G28kI1hro7jW2kju+QzrMlbqtSXtBsxP5qv/fhxrraWQNyu mTSXQFxjTf0vjAmjeE/I/VjOpBH3dlCqc9cUOHX9gRgsfl9D1Zb03yJ97No= -----END CERTIFICATE-----Generated at Mon Jan 12 05:56:12 2026 by rpki-client