This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/fspqyPd5eR62-kI9fy8NLRrAGFk.roa File: fspqyPd5eR62-kI9fy8NLRrAGFk.roa (raw, json) Hash identifier: y9JRWIdOmX7uM4iCya4OtS8TW3TgYomtaH0CeOcslfo= Subject key identifier: 7E:CA:6A:C8:F7:79:79:1E:B6:FA:42:3D:7F:2F:0D:2D:1A:C0:18:59 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 1F9D Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/fspqyPd5eR62-kI9fy8NLRrAGFk.roa Signing time: Sun 01 Jun 2025 22:08:35 +0000 ROA not before: Sun 01 Jun 2025 22:08:35 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 8093 (0x1f9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 1 22:08:35 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7ECA6AC8F779791EB6FA423D7F2F0D2D1AC01859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:97:20:29:fa:53:79:0d:ad:84:4a:90:4b:1d: aa:62:f7:d1:ca:3f:99:03:d2:1c:45:97:a9:94:8a: 79:e9:c4:e0:5b:be:3e:06:dc:e5:ea:fe:30:14:b3: a4:a7:da:1a:b3:9c:66:b1:61:39:f9:70:e5:8d:71: ef:11:81:55:1c:ad:cd:86:de:4b:4c:96:64:f0:df: 24:de:a4:a1:93:81:8a:6d:0c:dd:e1:57:b6:a0:a5: d1:73:37:3d:78:72:e9:17:cd:9e:f0:98:ee:86:7e: 52:7a:52:35:a9:ae:dd:39:b0:f2:c6:8b:bd:2f:fc: a1:0d:71:b8:fa:1d:ef:32:6a:d9:57:ed:3c:9b:bd: 54:05:e1:c3:2a:69:27:0f:c9:1e:4f:80:a2:eb:2c: a6:15:55:6c:d8:59:94:c6:36:b7:e3:ac:4b:b2:d6: ca:92:ff:71:d3:45:96:ac:b6:36:ef:14:a4:95:8e: dd:cc:9a:6d:16:50:ae:98:9f:0e:14:a6:e3:1d:07: b2:0e:04:11:2e:98:da:86:c4:4f:ba:95:5a:82:8d: 3c:cc:a2:d1:9a:a3:5e:5e:cb:b8:59:a4:fb:f7:fd: be:2b:cc:65:c7:0c:f1:b4:57:10:a6:8f:83:18:c0: 1d:d5:d6:6e:e9:4f:65:12:9d:08:45:54:f7:26:f8: 2a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CA:6A:C8:F7:79:79:1E:B6:FA:42:3D:7F:2F:0D:2D:1A:C0:18:59 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/fspqyPd5eR62-kI9fy8NLRrAGFk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 56:11:ed:eb:00:d9:c7:38:a5:ef:f7:78:0b:1d:3a:02:b0:69: 63:66:95:1e:e8:79:f8:df:4f:5e:03:2e:49:d7:b6:fd:3b:63: 58:33:e4:d4:1a:22:49:ed:14:e0:fd:de:81:6f:48:1b:06:75: 9f:36:b4:7e:14:c4:58:a9:ff:0b:dd:74:4f:b5:e9:8e:ee:75: fa:84:0c:44:f2:f0:54:38:e3:96:b9:40:e6:c2:5e:36:51:e6: 8f:34:c0:c2:ad:84:c5:1c:6c:26:5b:c2:86:58:47:cc:6a:6c: 75:d1:c3:7a:0f:5f:15:bd:47:d7:06:5c:0f:8e:95:fb:d7:b0: 29:87:a8:c4:5e:56:e2:f6:b0:86:82:db:ec:1a:2b:ed:03:db: 48:da:11:4c:42:06:0e:8d:60:65:42:25:8e:e6:8c:dd:cc:a7: 6e:c8:10:8c:03:e9:09:3b:83:05:f5:60:0f:66:32:6b:53:0c: b9:26:62:ec:01:6b:10:8e:1e:39:53:66:bc:74:d7:8b:90:a5: 0d:bf:7b:75:ec:85:eb:93:46:96:a3:56:c4:6c:99:ac:ff:f0: 44:60:b2:18:c8:e5:d3:51:37:c9:72:c4:6b:e3:d9:12:af:27: 1c:19:d2:f2:ff:e8:2a:11:60:e9:b8:ff:ee:0a:a9:bb:93:5c: 45:a0:38:c6 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICH50wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDEy MjA4MzVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDdFQ0E2QUM4Rjc3OTc5 MUVCNkZBNDIzRDdGMkYwRDJEMUFDMDE4NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFlyAp+lN5Da2ESpBLHapi99HKP5kD0hxFl6mUinnpxOBbvj4G 3OXq/jAUs6Sn2hqznGaxYTn5cOWNce8RgVUcrc2G3ktMlmTw3yTepKGTgYptDN3h V7agpdFzNz14cukXzZ7wmO6GflJ6UjWprt05sPLGi70v/KENcbj6He8yatlX7Tyb vVQF4cMqaScPyR5PgKLrLKYVVWzYWZTGNrfjrEuy1sqS/3HTRZastjbvFKSVjt3M mm0WUK6Ynw4UpuMdB7IOBBEumNqGxE+6lVqCjTzMotGao15ey7hZpPv3/b4rzGXH DPG0VxCmj4MYwB3V1m7pT2USnQhFVPcm+CoRAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUfspqyPd5eR62+kI9fy8NLRrAGFkwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvZnNwcXlQZDVlUjYy LWtJOWZ5OE5MUnJBR0ZrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAFYR7esA2cc4pe/3eAsdOgKwaWNm lR7oefjfT14DLknXtv07Y1gz5NQaIkntFOD93oFvSBsGdZ82tH4UxFip/wvddE+1 6Y7udfqEDETy8FQ445a5QObCXjZR5o80wMKthMUcbCZbwoZYR8xqbHXRw3oPXxW9 R9cGXA+OlfvXsCmHqMReVuL2sIaC2+waK+0D20jaEUxCBg6NYGVCJY7mjN3Mp27I EIwD6Qk7gwX1YA9mMmtTDLkmYuwBaxCOHjlTZrx014uQpQ2/e3XsheuTRpajVsRs maz/8ERgshjI5dNRN8lyxGvj2RKvJxwZ0vL/6CoRYOm4/+4KqbuTXEWgOMY= -----END CERTIFICATE-----Generated at Mon Jan 12 16:04:02 2026 by rpki-client