This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/fs42JpAgCS3R8ylk6mGCP28V9I0.roa File: fs42JpAgCS3R8ylk6mGCP28V9I0.roa (raw, json) Hash identifier: A+Bp0NYHC/9ykmPJPmDj9yBFwe2tCl0V01xh0D8JfL8= Subject key identifier: 7E:CE:36:26:90:20:09:2D:D1:F3:29:64:EA:61:82:3F:6F:15:F4:8D Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 2405 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/fs42JpAgCS3R8ylk6mGCP28V9I0.roa Signing time: Mon 09 Jun 2025 18:09:01 +0000 ROA not before: Mon 09 Jun 2025 18:09:01 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 9221 (0x2405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 9 18:09:01 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7ECE36269020092DD1F32964EA61823F6F15F48D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:df:ad:0a:59:e7:da:3a:73:80:29:66:89: 3a:8f:e1:1a:ce:c6:41:ce:fc:dc:c4:54:df:fc:2a: 91:cb:f6:5f:c8:4c:84:bd:4a:69:49:77:1f:97:fe: 18:33:7e:f0:a0:e8:af:06:3c:4e:73:72:0b:b8:cb: 52:44:6c:a0:dc:47:ce:29:3c:a7:1b:3b:74:58:10: fe:05:6f:13:ad:fe:b9:cf:0f:59:64:34:1c:3c:71: 8b:68:78:97:ef:81:e6:fb:13:9d:55:ac:fa:17:aa: 76:b8:1a:de:b8:f3:46:51:62:95:07:e7:b4:ae:35: e2:15:1c:4f:b9:e0:aa:f2:9c:0d:8a:5f:33:4a:f6: b7:f3:84:06:cd:b6:73:8b:f2:95:cd:29:bb:a9:70: 92:d9:29:37:93:08:b0:5c:a5:6b:61:a1:3b:13:ff: 14:eb:3e:36:87:c6:b4:6d:58:09:0a:e7:7b:50:39: fa:c2:5d:a7:a7:b3:e7:a1:fa:22:84:f0:2f:39:30: 55:c7:5e:7b:e0:61:c5:2a:d1:73:c0:ff:e8:6c:73: ab:53:01:f4:2c:ef:83:12:ca:6d:ae:ab:0b:bd:75: 39:42:39:ee:de:5f:7a:e1:27:41:c3:67:93:ae:d0: ba:f1:e4:31:75:04:ee:39:93:d6:4a:8a:2e:5d:bf: d0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CE:36:26:90:20:09:2D:D1:F3:29:64:EA:61:82:3F:6F:15:F4:8D X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/fs42JpAgCS3R8ylk6mGCP28V9I0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 55:76:01:ce:e6:e1:46:7a:d4:cb:20:e2:11:fa:b5:35:ea:da: c2:e5:40:b1:66:f7:9c:34:ab:25:49:0d:cc:85:9b:0f:4f:a5: 33:e3:c1:7e:08:a1:25:7c:85:5e:2b:f9:97:d3:85:64:dc:20: 91:71:c9:39:de:ae:f5:1d:cb:92:f7:ff:69:2f:d1:0f:35:47: 80:30:09:7f:49:6b:0b:67:ee:44:f0:9c:7f:30:3e:89:77:8e: ce:e9:7d:30:78:f3:59:9e:7f:a9:f3:8a:45:83:9a:45:78:6a: 74:2b:72:13:1c:71:53:1b:ae:fc:39:23:66:b4:1f:2d:1b:fc: fe:95:b5:e9:5e:f6:1c:45:d4:d8:ba:d4:a3:02:f6:95:d4:e6: 2b:ec:a8:48:8e:17:93:c4:fa:03:b8:08:03:77:fe:47:2f:39: 90:27:a2:74:f5:69:aa:e5:12:53:8c:8c:f2:df:8a:ad:2d:9d: 05:b1:19:0d:2b:2c:5d:c6:aa:9b:4c:a6:30:78:e3:ed:48:75: 89:a5:a1:f5:03:3a:ce:24:b9:d5:d5:b9:23:59:b6:0e:d9:05: 43:c8:ba:1d:6d:08:b8:68:18:e6:0d:70:e9:13:70:4f:78:b0: e3:07:27:7b:1c:51:23:b5:c5:95:e2:63:75:c4:70:81:bd:03: 94:c1:a7:fb -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICJAUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDkx ODA5MDFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDdFQ0UzNjI2OTAyMDA5 MkREMUYzMjk2NEVBNjE4MjNGNkYxNUY0OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3UN+tClnn2jpzgClmiTqP4RrOxkHO/NzEVN/8KpHL9l/ITIS9 SmlJdx+X/hgzfvCg6K8GPE5zcgu4y1JEbKDcR84pPKcbO3RYEP4FbxOt/rnPD1lk NBw8cYtoeJfvgeb7E51VrPoXqna4Gt6480ZRYpUH57SuNeIVHE+54KrynA2KXzNK 9rfzhAbNtnOL8pXNKbupcJLZKTeTCLBcpWthoTsT/xTrPjaHxrRtWAkK53tQOfrC Xaens+eh+iKE8C85MFXHXnvgYcUq0XPA/+hsc6tTAfQs74MSym2uqwu9dTlCOe7e X3rhJ0HDZ5Ou0Lrx5DF1BO45k9ZKii5dv9CHAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUfs42JpAgCS3R8ylk6mGCP28V9I0wHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvZnM0MkpwQWdDUzNS OHlsazZtR0NQMjhWOUkwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAFV2Ac7m4UZ61Msg4hH6tTXq2sLl QLFm95w0qyVJDcyFmw9PpTPjwX4IoSV8hV4r+ZfThWTcIJFxyTnervUdy5L3/2kv 0Q81R4AwCX9Jawtn7kTwnH8wPol3js7pfTB481mef6nzikWDmkV4anQrchMccVMb rvw5I2a0Hy0b/P6Vtele9hxF1Ni61KMC9pXU5ivsqEiOF5PE+gO4CAN3/kcvOZAn onT1aarlElOMjPLfiq0tnQWxGQ0rLF3GqptMpjB44+1IdYmlofUDOs4kudXVuSNZ tg7ZBUPIuh1tCLhoGOYNcOkTcE94sOMHJ3scUSO1xZXiY3XEcIG9A5TBp/s= -----END CERTIFICATE-----Generated at Mon Jan 12 10:28:56 2026 by rpki-client