This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/g8qQ1Uj_CxCsOBaz2YlDu2xT1kY.roa File: g8qQ1Uj_CxCsOBaz2YlDu2xT1kY.roa (raw, json) Hash identifier: ECsWMbULZw22/LDnoCx6CLYhVQg6eitIcgH5OvXS984= Subject key identifier: 83:CA:90:D5:48:FF:0B:10:AC:38:16:B3:D9:89:43:BB:6C:53:D6:46 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 2129 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/g8qQ1Uj_CxCsOBaz2YlDu2xT1kY.roa Signing time: Wed 04 Jun 2025 16:08:40 +0000 ROA not before: Wed 04 Jun 2025 16:08:40 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 8489 (0x2129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 4 16:08:40 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=83CA90D548FF0B10AC3816B3D98943BB6C53D646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6e:1a:67:49:4d:e7:22:69:68:95:01:6c:90: 91:fc:6d:19:e4:7d:07:16:07:72:34:57:38:d0:0b: 25:47:d4:1f:93:c0:e3:25:6c:e0:a6:f2:4e:74:bd: ba:8c:a8:a6:86:8f:5b:59:fd:a6:30:33:2d:fc:63: 22:76:91:7a:73:96:08:2b:6b:20:85:f3:14:6a:7c: 93:c7:a9:4d:e9:c1:80:ce:fc:a5:51:7a:35:89:43: 9b:fa:0b:cd:78:a3:7c:14:6e:c2:0c:5d:f9:0e:61: bd:06:02:19:17:48:19:a0:8a:94:f6:f4:1d:5f:f0: 3d:fd:dc:1e:6a:53:47:fa:c7:46:23:95:80:b2:43: ed:e4:3e:b4:07:07:7b:f4:ae:f3:27:b9:f6:02:71: dc:35:1c:c8:4e:b7:af:71:77:4d:8c:a0:c0:30:ce: 55:61:af:e2:e6:bc:89:9c:3b:71:d5:07:6e:f1:03: 19:bf:41:4a:4a:e9:07:1d:c3:02:39:05:91:4e:7c: f5:0f:fb:9e:98:82:11:44:13:94:8d:4b:67:b1:12: 0b:c8:7c:92:86:48:9c:b2:ad:29:85:e8:84:19:57: 3e:b3:9e:d9:ea:9e:97:8f:19:21:b4:c3:f6:2c:26: 41:d9:8e:e2:28:ec:07:6e:6b:b7:b9:6c:50:86:92: 46:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CA:90:D5:48:FF:0B:10:AC:38:16:B3:D9:89:43:BB:6C:53:D6:46 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/g8qQ1Uj_CxCsOBaz2YlDu2xT1kY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 33:dc:d1:53:bd:a9:13:58:50:1a:39:45:dc:84:aa:18:b5:7b: d6:70:83:05:cd:d5:47:d2:e0:39:54:2e:bc:e4:84:17:ef:56: f0:a9:ee:eb:f2:db:04:39:91:2d:36:ea:b5:d1:94:da:76:8c: db:b0:d3:73:22:48:1d:dc:46:b6:af:e4:ac:7d:eb:8f:3b:0e: e4:81:1f:d0:6b:dc:0b:f2:c3:90:ae:83:48:38:8e:50:96:0a: 86:d5:c3:48:71:6a:39:33:ca:52:27:8b:da:d9:58:6c:da:8a: a8:db:43:4a:6a:6b:77:9b:5d:6e:d2:8c:37:6c:98:c9:a1:94: 9a:d3:6a:c8:a4:db:29:a4:a3:18:78:d0:9b:0f:55:e1:de:1f: 30:03:63:df:62:11:2e:07:57:46:66:22:06:71:69:01:aa:61: c4:46:7c:8c:49:2e:74:6e:ba:84:7a:7d:98:ef:01:b7:bd:74: c1:6d:e6:50:83:87:85:cf:a9:69:4a:7e:f9:79:10:72:73:dd: a1:7d:5c:e6:f3:ee:93:e9:3d:0c:25:67:49:b3:e4:0a:16:96: 14:0b:6f:9a:16:69:f8:74:46:e8:43:93:a6:1b:0c:6b:e8:bd: ef:9a:50:82:50:dc:a1:94:ff:f7:36:77:87:f1:1c:61:26:ee: 48:ad:0c:ad -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICISkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDQx NjA4NDBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDgzQ0E5MEQ1NDhGRjBC MTBBQzM4MTZCM0Q5ODk0M0JCNkM1M0Q2NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCabhpnSU3nImlolQFskJH8bRnkfQcWB3I0VzjQCyVH1B+TwOMl bOCm8k50vbqMqKaGj1tZ/aYwMy38YyJ2kXpzlggrayCF8xRqfJPHqU3pwYDO/KVR ejWJQ5v6C814o3wUbsIMXfkOYb0GAhkXSBmgipT29B1f8D393B5qU0f6x0YjlYCy Q+3kPrQHB3v0rvMnufYCcdw1HMhOt69xd02MoMAwzlVhr+LmvImcO3HVB27xAxm/ QUpK6QcdwwI5BZFOfPUP+56YghFEE5SNS2exEgvIfJKGSJyyrSmF6IQZVz6zntnq npePGSG0w/YsJkHZjuIo7Adua7e5bFCGkkZfAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUg8qQ1Uj/CxCsOBaz2YlDu2xT1kYwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvZzhxUTFVal9DeENz T0JhejJZbER1MnhUMWtZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBADPc0VO9qRNYUBo5RdyEqhi1e9Zw gwXN1UfS4DlULrzkhBfvVvCp7uvy2wQ5kS026rXRlNp2jNuw03MiSB3cRrav5Kx9 6487DuSBH9Br3Avyw5Cug0g4jlCWCobVw0hxajkzylIni9rZWGzaiqjbQ0pqa3eb XW7SjDdsmMmhlJrTasik2ymkoxh40JsPVeHeHzADY99iES4HV0ZmIgZxaQGqYcRG fIxJLnRuuoR6fZjvAbe9dMFt5lCDh4XPqWlKfvl5EHJz3aF9XObz7pPpPQwlZ0mz 5AoWlhQLb5oWafh0RuhDk6YbDGvove+aUIJQ3KGU//c2d4fxHGEm7kitDK0= -----END CERTIFICATE-----Generated at Mon Jan 12 14:34:08 2026 by rpki-client