This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-y37lHjXud-7HnK0JlVWW_ctN4s.roa File: -y37lHjXud-7HnK0JlVWW_ctN4s.roa (raw, json) Hash identifier: vNLx+IRF2p6HLVRH95kWsyFenM3zXA6fqn4HV+A5z7s= Subject key identifier: FB:2D:FB:94:78:D7:B9:DF:BB:1E:72:B4:26:55:56:5B:F7:2D:37:8B Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 19A2 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-y37lHjXud-7HnK0JlVWW_ctN4s.roa Signing time: Tue 10 Jun 2025 06:09:46 +0000 ROA not before: Tue 10 Jun 2025 06:09:46 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 6562 (0x19a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Jun 10 06:09:46 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=FB2DFB9478D7B9DFBB1E72B42655565BF72D378B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e0:aa:de:ed:1a:2d:4d:4a:66:90:e7:4c:32: 72:60:d6:09:73:10:24:2d:d0:0c:4f:7c:22:5c:ca: 8b:d1:c6:9c:32:80:bb:92:c0:d9:78:7d:c2:20:38: a6:e0:27:70:3e:55:04:90:ef:6b:f4:13:ce:c8:31: 4e:3e:a9:ba:79:05:2e:8d:bc:c6:ce:a4:4d:d8:31: ab:42:14:66:ac:e1:d9:da:21:5e:21:79:95:4d:17: 3b:dd:b0:1e:82:30:54:56:9d:71:64:a3:d9:4f:7b: c8:12:4c:6d:5a:c1:79:9c:de:0f:1c:bd:62:90:fb: 55:78:d3:24:ff:15:4f:ec:8c:12:ed:40:3a:af:e3: b3:c7:a0:5d:62:52:ff:b5:88:ed:c5:e6:76:ef:18: a9:af:d4:4a:77:73:e2:86:b9:99:08:4c:67:a2:b3: c9:f3:fe:1f:4f:f6:88:66:22:32:e3:67:57:15:91: 31:1e:cc:e8:7e:d9:4d:27:7d:9b:c9:0c:c0:4d:b3: d5:49:88:08:27:f1:2a:40:69:b1:e9:49:f7:59:50: 83:a3:97:fd:bd:9b:ea:27:86:19:39:1c:75:86:5c: 71:05:42:bd:4d:b6:e5:6f:f3:46:29:9c:01:d9:b2: cd:c5:26:f5:6c:07:c4:ba:71:e0:4c:a0:f3:b7:6b: f0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2D:FB:94:78:D7:B9:DF:BB:1E:72:B4:26:55:56:5B:F7:2D:37:8B X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-y37lHjXud-7HnK0JlVWW_ctN4s.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 03:7e:d3:88:6b:27:17:5f:7f:c8:80:4c:d2:fa:6e:34:28:46: 11:75:cf:89:f6:a7:25:92:b8:26:77:2f:da:e0:e2:21:4c:41: a4:56:ad:6b:6c:e9:a8:ad:ba:ae:0b:23:9d:24:5b:c4:cc:b2: 2b:71:37:65:a7:ac:1b:09:c1:5d:dc:d3:a6:23:32:71:75:d7: bf:2a:76:08:fb:42:30:f8:92:7f:27:b6:d5:67:b3:41:2c:91: 04:3c:c1:89:fc:d6:74:6b:c7:70:2a:22:d6:d4:02:8d:23:a5: ce:99:bf:59:4a:45:e1:df:72:44:61:c0:f3:a7:8d:60:45:d2: c2:59:3d:cd:fa:df:f8:26:c7:0e:7d:e2:ce:02:50:47:3e:5f: a4:d2:6d:83:1b:5f:77:b3:0c:0a:3a:67:c9:21:3f:be:93:41: 6a:a7:49:6f:60:4d:7d:45:9f:98:fe:82:dd:d5:39:b4:16:c0: f7:d8:f3:e5:59:9a:51:9e:e0:ab:f3:a5:15:8a:34:b1:17:1c: 80:e7:6d:a4:c8:cd:67:cc:f1:bf:7b:32:99:0c:ec:30:ea:9d: 7c:3a:4f:48:8e:c1:2f:f0:f4:e0:9b:c6:47:77:9a:04:ef:bd: bd:aa:45:14:fb:b3:8c:cb:d7:c4:8f:03:0d:aa:3a:a3:11:30: 5d:cb:aa:c9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICGaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTAw NjA5NDZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEZCMkRGQjk0NzhEN0I5 REZCQjFFNzJCNDI2NTU1NjVCRjcyRDM3OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU4Kre7RotTUpmkOdMMnJg1glzECQt0AxPfCJcyovRxpwygLuS wNl4fcIgOKbgJ3A+VQSQ72v0E87IMU4+qbp5BS6NvMbOpE3YMatCFGas4dnaIV4h eZVNFzvdsB6CMFRWnXFko9lPe8gSTG1awXmc3g8cvWKQ+1V40yT/FU/sjBLtQDqv 47PHoF1iUv+1iO3F5nbvGKmv1Ep3c+KGuZkITGeis8nz/h9P9ohmIjLjZ1cVkTEe zOh+2U0nfZvJDMBNs9VJiAgn8SpAabHpSfdZUIOjl/29m+onhhk5HHWGXHEFQr1N tuVv80YpnAHZss3FJvVsB8S6ceBMoPO3a/DvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+y37lHjXud+7HnK0JlVWW/ctN4swHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8teTM3bEhqWHVkLTdIbksw SmxWV1dfY3RONHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAAN+04hrJxdff8iATNL6bjQoRhF1z4n2pyWS uCZ3L9rg4iFMQaRWrWts6aituq4LI50kW8TMsitxN2WnrBsJwV3c06YjMnF1178q dgj7QjD4kn8nttVns0EskQQ8wYn81nRrx3AqItbUAo0jpc6Zv1lKReHfckRhwPOn jWBF0sJZPc363/gmxw594s4CUEc+X6TSbYMbX3ezDAo6Z8khP76TQWqnSW9gTX1F n5j+gt3VObQWwPfY8+VZmlGe4KvzpRWKNLEXHIDnbaTIzWfM8b97MpkM7DDqnXw6 T0iOwS/w9OCbxkd3mgTvvb2qRRT7s4zL18SPAw2qOqMRMF3Lqsk= -----END CERTIFICATE-----Generated at Mon Jan 12 15:20:35 2026 by rpki-client