This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/_H53hfa6oHs9I-C7eU_yPWQke5U.roa File: _H53hfa6oHs9I-C7eU_yPWQke5U.roa (raw, json) Hash identifier: kmHnOgawqNQjvuQrqauFayyOAEIfr9npHoIyVLwjB+w= Subject key identifier: FC:7E:77:85:F6:BA:A0:7B:3D:23:E0:BB:79:4F:F2:3D:64:24:7B:95 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 2532 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/_H53hfa6oHs9I-C7eU_yPWQke5U.roa Signing time: Wed 11 Jun 2025 20:09:11 +0000 ROA not before: Wed 11 Jun 2025 20:09:11 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 9522 (0x2532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 11 20:09:11 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=FC7E7785F6BAA07B3D23E0BB794FF23D64247B95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:92:9d:b2:e2:2e:28:b0:b2:15:6f:fa:2b:da: 41:02:0d:16:f4:e3:77:17:83:9d:f4:48:94:2d:db: 18:5f:97:22:39:13:ff:39:fd:81:02:82:b9:2f:9e: d6:a1:37:c5:9a:7a:c4:0f:78:d8:f1:fa:f3:74:35: fb:43:fe:5a:a9:2a:55:88:34:49:49:e6:64:43:1b: b8:70:0b:2b:cc:14:bd:88:95:75:42:eb:ee:11:30: bd:0b:2a:99:ee:1e:58:5e:33:16:10:8e:ff:31:1f: 63:2d:c2:1a:9a:f9:b7:e8:73:e1:a9:af:59:1e:92: 28:f4:24:8b:69:f5:6b:ae:d9:78:fe:c4:21:fd:b0: d2:94:5f:2d:ed:bb:9c:ec:72:e9:67:2a:bd:2b:c8: 6d:98:30:9b:a1:fd:e4:00:ca:cc:c0:4b:ea:c5:b7: 79:ab:8b:e1:7e:4b:a5:13:5e:9a:b0:b9:fc:aa:37: c6:fa:aa:d2:3e:4b:0a:c8:d8:ec:3d:d1:03:cb:b3: 09:d2:81:dd:89:e4:6a:20:51:90:8b:11:c2:cb:c4: 4f:84:01:11:f4:6c:5c:9e:57:b8:2a:9c:6b:b5:99: 2e:07:77:55:30:c9:37:c1:95:34:65:10:7b:69:a1: 1e:91:ca:a1:27:3a:21:6b:b4:df:96:df:bf:24:a1: 28:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7E:77:85:F6:BA:A0:7B:3D:23:E0:BB:79:4F:F2:3D:64:24:7B:95 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/_H53hfa6oHs9I-C7eU_yPWQke5U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 0b:61:da:fe:6a:e6:da:ea:23:cf:83:26:d6:41:ec:41:b4:71: 43:3c:ed:f1:08:5a:9a:be:7a:63:42:36:06:71:71:41:e3:9d: 7a:2b:09:fb:3b:88:e1:9c:8c:9e:4a:9e:47:a4:aa:bd:59:56: ff:2d:e1:66:1d:51:61:c3:bd:15:ff:44:4d:c3:ce:e3:19:9d: d5:91:aa:d6:ad:25:59:1f:42:49:49:ee:39:fa:37:0e:36:5e: 1d:83:66:80:f0:c9:42:b7:43:b9:24:b4:b9:03:68:6b:7a:55: 7e:81:08:8e:87:cf:32:44:ee:20:17:b5:14:65:05:b6:cd:4d: 65:0f:05:fb:b8:c7:c3:67:c9:2b:98:2a:47:73:58:15:36:ea: 7e:24:7d:31:65:24:6b:f8:3f:a4:9a:cb:e0:65:30:f3:c6:2a: af:af:4c:de:99:55:a3:8a:64:c2:e0:0b:b8:63:01:65:bd:5d: 0d:8f:ff:7c:ed:5b:42:4e:f1:25:8c:c8:0e:34:8c:36:61:1b: 5e:b2:02:fa:7b:b5:3b:74:b1:f0:d0:53:13:8a:cc:e0:5e:e6: ed:cc:5c:91:b6:a8:0d:1a:f2:b4:0b:c4:53:2e:2c:f8:77:23: 33:88:fb:ae:1a:08:41:9f:b7:9a:d3:b6:c7:7c:20:74:84:0c: 5f:69:17:6c -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICJTIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTEy MDA5MTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEZDN0U3Nzg1RjZCQUEw N0IzRDIzRTBCQjc5NEZGMjNENjQyNDdCOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwkp2y4i4osLIVb/or2kECDRb043cXg530SJQt2xhflyI5E/85 /YECgrkvntahN8WaesQPeNjx+vN0NftD/lqpKlWINElJ5mRDG7hwCyvMFL2IlXVC 6+4RML0LKpnuHlheMxYQjv8xH2Mtwhqa+bfoc+Gpr1kekij0JItp9Wuu2Xj+xCH9 sNKUXy3tu5zsculnKr0ryG2YMJuh/eQAyszAS+rFt3mri+F+S6UTXpqwufyqN8b6 qtI+SwrI2Ow90QPLswnSgd2J5GogUZCLEcLLxE+EARH0bFyeV7gqnGu1mS4Hd1Uw yTfBlTRlEHtpoR6RyqEnOiFrtN+W378koSj3AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU/H53hfa6oHs9I+C7eU/yPWQke5UwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvX0g1M2hmYTZvSHM5 SS1DN2VVX3lQV1FrZTVVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAAth2v5q5trqI8+DJtZB7EG0cUM8 7fEIWpq+emNCNgZxcUHjnXorCfs7iOGcjJ5Knkekqr1ZVv8t4WYdUWHDvRX/RE3D zuMZndWRqtatJVkfQklJ7jn6Nw42Xh2DZoDwyUK3Q7kktLkDaGt6VX6BCI6HzzJE 7iAXtRRlBbbNTWUPBfu4x8NnySuYKkdzWBU26n4kfTFlJGv4P6Say+BlMPPGKq+v TN6ZVaOKZMLgC7hjAWW9XQ2P/3ztW0JO8SWMyA40jDZhG16yAvp7tTt0sfDQUxOK zOBe5u3MXJG2qA0a8rQLxFMuLPh3IzOI+64aCEGft5rTtsd8IHSEDF9pF2w= -----END CERTIFICATE-----Generated at Mon Jan 12 09:41:00 2026 by rpki-client