This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/wqmMKQa7Y8tAYX7IN73x9enBUPU.roa File: wqmMKQa7Y8tAYX7IN73x9enBUPU.roa (raw, json) Hash identifier: XL+H8/MyaOYMOIL2RKiXVnhXcCL2D5PUB+NuxiAX2jk= Subject key identifier: C2:A9:8C:29:06:BB:63:CB:40:61:7E:C8:37:BD:F1:F5:E9:C1:50:F5 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 261F Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/wqmMKQa7Y8tAYX7IN73x9enBUPU.roa Signing time: Fri 13 Jun 2025 11:39:20 +0000 ROA not before: Fri 13 Jun 2025 11:39:20 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 9759 (0x261f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 13 11:39:20 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C2A98C2906BB63CB40617EC837BDF1F5E9C150F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:0e:8b:11:92:73:00:db:32:40:13:5e:7e: ae:3d:7f:7f:54:94:48:64:5e:18:73:96:0f:0c:a0: 6d:cf:d3:29:5f:b7:ef:30:00:3c:0e:5b:be:95:95: 6d:9a:88:b6:82:e1:22:ba:3f:11:c2:37:ad:aa:6d: 93:c2:be:2a:4e:05:86:7f:36:36:c5:11:85:13:87: d0:f4:fa:eb:59:b1:6b:cd:d0:c2:b2:e7:ec:4b:23: 80:9c:52:7d:02:db:2f:11:63:e4:51:70:98:d0:a1: d6:85:fe:89:c1:ec:50:db:16:c2:7b:5a:27:13:fa: 5a:8a:ec:05:01:d8:2e:12:18:45:88:8e:41:1f:60: 3e:70:2c:77:f3:3c:da:fb:e9:7f:8b:e7:b9:17:c5: 6e:0d:f8:55:34:90:1e:c0:a0:51:fc:cc:c5:98:2c: 7c:b6:af:20:2f:01:00:3d:77:82:0f:c5:11:e2:be: bf:b8:aa:02:41:37:aa:ec:14:54:1f:95:90:94:04: 8e:8e:b6:e3:1b:96:56:e8:dc:84:d4:ea:9d:16:b0: 72:6c:02:1b:a9:62:b0:2d:25:b3:be:9e:6f:20:d7: 18:ef:95:27:94:72:2e:c7:46:7e:f1:4a:05:74:ea: f5:98:02:57:8f:77:ef:88:72:e1:84:ee:ba:fd:cc: de:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A9:8C:29:06:BB:63:CB:40:61:7E:C8:37:BD:F1:F5:E9:C1:50:F5 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/wqmMKQa7Y8tAYX7IN73x9enBUPU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 6e:dd:9b:76:e0:c1:83:5c:3c:6e:d0:75:33:a8:3e:af:11:a4: 90:78:e9:d7:22:75:64:f2:1a:7c:80:0f:fa:dd:8e:da:47:22: fb:b6:3b:1f:6c:ff:4d:4b:18:39:e1:88:d1:c7:96:87:f8:67: 74:1f:b7:96:e7:41:a2:49:aa:ce:4f:3f:f9:58:51:ae:e9:bc: cb:2d:99:f0:54:1a:ed:3f:0c:76:dc:6a:dd:40:86:e8:d9:fd: 89:f6:9a:ee:01:29:aa:a6:95:3a:ac:0e:eb:ec:ce:c8:11:a6: 06:b6:d2:5f:82:c4:38:94:7f:99:2d:84:08:da:52:f0:41:30: 0c:1b:23:0e:de:72:68:ee:4d:ab:50:3e:36:9d:2e:07:37:ee: 51:9a:76:eb:8d:15:29:9d:f0:77:1f:65:1d:f6:32:c5:0b:63: f6:41:07:71:49:d9:f9:33:a5:d1:22:d5:6c:31:f6:a0:1b:ab: d8:88:d4:9c:03:b3:43:5b:2d:ac:73:89:eb:b6:26:a5:3f:8c: 4c:71:c8:8f:27:91:71:be:6a:93:a4:b4:41:af:db:ce:02:d1: aa:4f:99:bb:68:ab:55:e5:f4:c0:aa:00:22:c9:80:9f:92:f8: 66:9a:5a:d1:a8:0e:e0:4b:0f:a9:c0:4c:79:e8:d0:99:8f:16: d5:cd:ac:6f -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICJh8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTMx MTM5MjBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEMyQTk4QzI5MDZCQjYz Q0I0MDYxN0VDODM3QkRGMUY1RTlDMTUwRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyMw6LEZJzANsyQBNefq49f39UlEhkXhhzlg8MoG3P0ylft+8w ADwOW76VlW2aiLaC4SK6PxHCN62qbZPCvipOBYZ/NjbFEYUTh9D0+utZsWvN0MKy 5+xLI4CcUn0C2y8RY+RRcJjQodaF/onB7FDbFsJ7WicT+lqK7AUB2C4SGEWIjkEf YD5wLHfzPNr76X+L57kXxW4N+FU0kB7AoFH8zMWYLHy2ryAvAQA9d4IPxRHivr+4 qgJBN6rsFFQflZCUBI6OtuMbllbo3ITU6p0WsHJsAhupYrAtJbO+nm8g1xjvlSeU ci7HRn7xSgV06vWYAlePd++IcuGE7rr9zN45AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUwqmMKQa7Y8tAYX7IN73x9enBUPUwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvd3FtTUtRYTdZOHRB WVg3SU43M3g5ZW5CVVBVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAG7dm3bgwYNcPG7QdTOoPq8RpJB4 6dcidWTyGnyAD/rdjtpHIvu2Ox9s/01LGDnhiNHHlof4Z3Qft5bnQaJJqs5PP/lY Ua7pvMstmfBUGu0/DHbcat1AhujZ/Yn2mu4BKaqmlTqsDuvszsgRpga20l+CxDiU f5kthAjaUvBBMAwbIw7ecmjuTatQPjadLgc37lGaduuNFSmd8HcfZR32MsULY/ZB B3FJ2fkzpdEi1Wwx9qAbq9iI1JwDs0NbLaxzieu2JqU/jExxyI8nkXG+apOktEGv 284C0apPmbtoq1Xl9MCqACLJgJ+S+GaaWtGoDuBLD6nATHno0JmPFtXNrG8= -----END CERTIFICATE-----Generated at Mon Jan 12 14:28:07 2026 by rpki-client