This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/iJ_svf4uLlij5d9VbnyVefOsgjo.roa File: iJ_svf4uLlij5d9VbnyVefOsgjo.roa (raw, json) Hash identifier: LP8CNCuBf+TpFAMKTe3JxSM3nwiNvFBffDE1JL/YPHA= Subject key identifier: 88:9F:EC:BD:FE:2E:2E:58:A3:E5:DF:55:6E:7C:95:79:F3:AC:82:3A Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 23A5 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/iJ_svf4uLlij5d9VbnyVefOsgjo.roa Signing time: Mon 09 Jun 2025 02:08:58 +0000 ROA not before: Mon 09 Jun 2025 02:08:58 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 9125 (0x23a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 9 02:08:58 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=889FECBDFE2E2E58A3E5DF556E7C9579F3AC823A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:42:71:c6:37:0c:a2:42:7a:43:f7:37:f9:f7: 4d:24:ad:b8:aa:6d:db:45:78:74:25:d9:9a:ca:c4: 1b:7f:05:d1:b9:09:d1:ad:d9:e8:08:22:87:58:81: 2e:8f:c5:8b:23:5e:1f:36:6a:b4:97:98:d0:a9:2a: 0f:0a:c9:9f:3b:d5:69:d5:c7:bb:4e:66:f8:2a:74: 89:cb:ee:92:bd:63:da:23:29:ec:fd:4d:c1:a2:be: cd:94:f3:fd:3f:86:76:a8:17:f8:47:42:e3:c7:c6: e3:ec:57:c5:52:20:97:e8:2d:0f:22:f3:cc:72:03: a7:b8:9f:82:8d:84:6c:bb:fb:c7:43:46:2c:ec:cc: 99:be:d0:72:ba:df:4b:3f:c4:d0:67:46:3f:a8:ae: aa:2c:40:8c:f6:c6:37:a0:0e:11:c1:6a:02:93:38: 84:19:85:3a:fd:bc:de:e3:9a:84:f7:55:1b:6b:15: 6b:97:c9:39:0f:49:6f:25:92:6b:22:e4:67:2d:57: 25:c5:13:30:6e:05:a8:95:ef:7b:7d:9a:25:56:34: c8:f3:bf:75:80:1c:f1:de:9b:22:d1:1c:20:d1:1c: 72:ec:78:a4:21:d7:df:2b:1e:30:f2:b9:3c:06:1a: bd:3f:70:90:ff:b8:bd:6c:9a:66:9b:89:73:e5:06: 5c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9F:EC:BD:FE:2E:2E:58:A3:E5:DF:55:6E:7C:95:79:F3:AC:82:3A X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/iJ_svf4uLlij5d9VbnyVefOsgjo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 00:6f:30:07:63:68:36:62:7c:df:d3:9d:3a:58:2f:98:8a:5d: 0f:c6:15:e0:6e:ce:12:18:50:8b:8a:dc:3d:ef:7d:80:29:8d: cc:d0:ff:c3:85:ce:fa:30:19:9f:25:86:bf:38:31:5a:aa:ba: 49:54:ff:ee:39:a2:c3:2a:a3:4b:e4:a4:31:74:14:e2:92:4e: b8:e9:80:0f:97:63:30:e8:2a:c8:2c:7e:eb:4a:fa:3d:d0:7a: 98:42:a8:5b:1a:54:9e:e0:81:45:09:b9:54:f1:23:02:eb:27: ff:8e:e9:58:52:7b:75:60:e1:e4:1e:b7:b2:8a:75:01:47:02: 31:99:ce:de:9b:f7:bd:4a:bd:58:3a:0d:f3:cd:6a:24:7f:e1: f9:b5:9b:ac:23:1c:cb:42:fb:ef:c8:8a:44:11:38:7c:c1:47: a5:99:1a:f4:e7:12:10:a9:84:d0:33:52:e6:3d:42:f0:86:7c: 7f:05:56:02:47:3a:5a:a8:c7:c0:22:7e:c2:67:0b:02:8f:7b: 3e:7d:61:f8:d7:62:cf:12:19:49:40:af:08:3a:4e:34:e3:48: 0d:55:36:40:c5:55:76:69:bc:12:86:55:53:f2:af:af:b9:7d: a0:2e:db:db:9b:32:5b:9c:cd:fd:00:e8:67:eb:f2:d1:9e:b3: 81:c7:c0:2c -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICI6UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDkw MjA4NThaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDg4OUZFQ0JERkUyRTJF NThBM0U1REY1NTZFN0M5NTc5RjNBQzgyM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjQnHGNwyiQnpD9zf5900krbiqbdtFeHQl2ZrKxBt/BdG5CdGt 2egIIodYgS6PxYsjXh82arSXmNCpKg8KyZ871WnVx7tOZvgqdInL7pK9Y9ojKez9 TcGivs2U8/0/hnaoF/hHQuPHxuPsV8VSIJfoLQ8i88xyA6e4n4KNhGy7+8dDRizs zJm+0HK630s/xNBnRj+orqosQIz2xjegDhHBagKTOIQZhTr9vN7jmoT3VRtrFWuX yTkPSW8lkmsi5GctVyXFEzBuBaiV73t9miVWNMjzv3WAHPHemyLRHCDRHHLseKQh 198rHjDyuTwGGr0/cJD/uL1smmabiXPlBlwtAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUiJ/svf4uLlij5d9VbnyVefOsgjowHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvaUpfc3ZmNHVMbGlq NWQ5VmJueVZlZk9zZ2pvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAABvMAdjaDZifN/TnTpYL5iKXQ/G FeBuzhIYUIuK3D3vfYApjczQ/8OFzvowGZ8lhr84MVqquklU/+45osMqo0vkpDF0 FOKSTrjpgA+XYzDoKsgsfutK+j3QephCqFsaVJ7ggUUJuVTxIwLrJ/+O6VhSe3Vg 4eQet7KKdQFHAjGZzt6b971KvVg6DfPNaiR/4fm1m6wjHMtC++/IikQROHzBR6WZ GvTnEhCphNAzUuY9QvCGfH8FVgJHOlqox8AifsJnCwKPez59YfjXYs8SGUlArwg6 TjTjSA1VNkDFVXZpvBKGVVPyr6+5faAu29ubMluczf0A6Gfr8tGes4HHwCw= -----END CERTIFICATE-----Generated at Fri Jan 9 07:50:06 2026 by rpki-client