This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/rr_L5BqsFZkGz76PGdKhSGcj0Vg.roa File: rr_L5BqsFZkGz76PGdKhSGcj0Vg.roa (raw, json) Hash identifier: 3aHPSxUHJwIZU//Cd1ggyE8QX2VjkaAXb1NyM1GkJDg= Subject key identifier: AE:BF:CB:E4:1A:AC:15:99:06:CF:BE:8F:19:D2:A1:48:67:23:D1:58 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 2178 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/rr_L5BqsFZkGz76PGdKhSGcj0Vg.roa Signing time: Thu 05 Jun 2025 05:08:45 +0000 ROA not before: Thu 05 Jun 2025 05:08:45 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 8568 (0x2178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 5 05:08:45 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=AEBFCBE41AAC159906CFBE8F19D2A1486723D158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:1d:ae:e5:1e:1f:6d:0a:1d:f7:83:61:4e: 13:f5:f0:9e:e2:ec:09:bd:03:e8:e5:27:16:36:2e: 40:fc:f0:55:33:39:37:bb:8a:2d:7e:18:3a:31:1e: 6b:2c:1e:85:a1:28:6c:fa:79:9c:6f:47:67:db:7f: 33:97:aa:5b:a6:b4:a5:ca:b7:6a:d3:e3:f4:fe:7c: 39:6e:29:e4:83:3d:38:73:1c:23:e9:a6:ce:2e:8b: 07:ac:0d:d7:f1:d0:23:6c:33:1b:45:d1:8c:16:f1: 75:71:20:4e:e0:a7:5d:31:ce:ff:cc:ce:06:64:64: 18:13:3e:84:32:36:bc:15:f7:3a:64:c7:d3:f0:84: 85:ec:66:01:8f:53:86:4c:69:cb:d7:59:5b:f0:30: 24:ba:a8:a4:7e:2f:76:d5:c3:61:51:f0:19:43:8a: f2:a5:1c:5a:dd:a7:36:ba:27:ef:73:e7:2c:b6:9c: 88:b1:b1:00:c7:ed:02:0f:1b:22:37:46:2d:8b:a5: 42:b1:f3:29:85:44:27:e8:c2:91:e9:b3:06:ae:9f: ac:07:d6:69:f4:58:37:7a:41:85:9f:7b:7b:f1:bd: 89:52:78:ae:84:39:f9:b9:65:8b:3d:f9:ce:4d:00: e3:3d:6f:9b:f5:d7:9d:63:34:f7:38:4b:e6:d7:35: 5a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BF:CB:E4:1A:AC:15:99:06:CF:BE:8F:19:D2:A1:48:67:23:D1:58 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/rr_L5BqsFZkGz76PGdKhSGcj0Vg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 9f:cf:5d:74:2d:59:30:7b:1b:47:85:17:3f:b4:be:0b:33:4a: ac:34:08:07:4b:22:83:5f:09:e1:63:04:02:62:ea:da:1c:ef: 11:d1:39:66:c3:6f:c8:c2:84:0e:4b:19:17:06:e2:1b:e3:5b: b3:5c:7c:32:57:bf:e2:6f:66:53:08:21:cb:89:62:8c:bc:d2: a8:2f:8c:0e:a0:77:8a:1e:8c:6c:bd:e4:7e:fe:21:03:2e:fc: d4:0f:02:b9:da:19:f5:1b:1d:e5:7d:ef:ff:4b:e2:d1:d9:1b: ed:46:09:99:c6:b5:b3:cf:30:9a:24:dc:fd:18:fa:f0:17:ce: 47:3f:78:09:70:97:2e:89:47:b0:ec:4f:0e:97:3c:45:a9:f2: 6b:78:03:24:c8:6d:dd:f6:89:ba:e8:9f:1e:40:b9:8f:25:00: 7a:34:33:7a:5b:b2:75:bc:56:3b:f7:66:12:09:4a:aa:44:8b: 90:1f:ed:5b:a8:b9:8a:57:f5:1c:68:fd:b7:f0:ca:ef:13:85: a8:7d:b6:09:3d:9c:5b:98:90:68:ee:b8:12:b5:4b:43:15:88: 6e:5f:51:8b:85:cc:c5:70:08:0e:f8:6f:f3:48:35:1f:52:7b: 81:52:79:29:84:2e:97:e3:a9:e8:1e:78:3d:7d:9f:dd:8d:12: 86:48:c8:9f -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICIXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDUw NTA4NDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEFFQkZDQkU0MUFBQzE1 OTkwNkNGQkU4RjE5RDJBMTQ4NjcyM0QxNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLAx2u5R4fbQod94NhThP18J7i7Am9A+jlJxY2LkD88FUzOTe7 ii1+GDoxHmssHoWhKGz6eZxvR2fbfzOXqlumtKXKt2rT4/T+fDluKeSDPThzHCPp ps4uiwesDdfx0CNsMxtF0YwW8XVxIE7gp10xzv/MzgZkZBgTPoQyNrwV9zpkx9Pw hIXsZgGPU4ZMacvXWVvwMCS6qKR+L3bVw2FR8BlDivKlHFrdpza6J+9z5yy2nIix sQDH7QIPGyI3Ri2LpUKx8ymFRCfowpHpswaun6wH1mn0WDd6QYWfe3vxvYlSeK6E Ofm5ZYs9+c5NAOM9b5v1151jNPc4S+bXNVqvAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUrr/L5BqsFZkGz76PGdKhSGcj0VgwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvcnJfTDVCcXNGWmtH ejc2UEdkS2hTR2NqMFZnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAJ/PXXQtWTB7G0eFFz+0vgszSqw0 CAdLIoNfCeFjBAJi6toc7xHROWbDb8jChA5LGRcG4hvjW7NcfDJXv+JvZlMIIcuJ Yoy80qgvjA6gd4oejGy95H7+IQMu/NQPArnaGfUbHeV97/9L4tHZG+1GCZnGtbPP MJok3P0Y+vAXzkc/eAlwly6JR7DsTw6XPEWp8mt4AyTIbd32ibronx5AuY8lAHo0 M3pbsnW8Vjv3ZhIJSqpEi5Af7VuouYpX9Rxo/bfwyu8Thah9tgk9nFuYkGjuuBK1 S0MViG5fUYuFzMVwCA74b/NINR9Se4FSeSmELpfjqegeeD19n92NEoZIyJ8= -----END CERTIFICATE-----Generated at Mon Jan 12 22:53:24 2026 by rpki-client