This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4R_0glTQIB3wlW3QreXZRN5jwTc.roa File: 4R_0glTQIB3wlW3QreXZRN5jwTc.roa (raw, json) Hash identifier: PlXzYhKlyCMuHYY0zig0tlWzs1DTqABgaK7kXrua3xw= Subject key identifier: E1:1F:F4:82:54:D0:20:1D:F0:95:6D:D0:AD:E5:D9:44:DE:63:C1:37 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 174A Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4R_0glTQIB3wlW3QreXZRN5jwTc.roa Signing time: Sat 07 Jun 2025 03:09:29 +0000 ROA not before: Sat 07 Jun 2025 03:09:29 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 5962 (0x174a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Jun 7 03:09:29 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=E11FF48254D0201DF0956DD0ADE5D944DE63C137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:d5:f0:59:e9:f0:2e:14:ce:e9:1d:4a:17: fa:43:46:94:9d:af:78:41:42:91:27:75:a2:4b:bd: 91:32:b5:1e:aa:f0:0c:9f:9f:ad:6e:90:22:73:85: 33:8d:34:71:18:0b:15:45:8a:8f:8e:bb:0c:26:1c: ab:d9:43:15:ca:0b:2d:43:7c:d9:99:97:1d:c1:f6: 3d:16:cd:ad:2d:7d:8b:52:a8:07:8e:36:21:d3:64: b6:f5:eb:b9:06:ea:60:c8:58:1a:a9:d2:ba:c2:a9: ca:82:85:1f:cb:e7:c1:2a:ca:c2:4d:8d:8b:16:6e: 65:7a:77:e8:a3:fb:f1:66:4b:8d:17:02:5e:4c:27: d6:ce:a4:26:1e:c8:53:bd:91:4f:c7:83:6c:6f:9d: 92:48:6b:fb:a7:4f:99:13:31:81:3d:d8:f8:4a:77: c6:1a:fe:19:97:73:c0:07:33:38:c8:bc:ec:44:c3: 26:23:d1:3f:b6:4a:f5:f8:a9:1a:46:8c:5f:aa:97: 6c:28:30:96:7e:68:cd:d7:09:86:ef:eb:8c:82:2c: 3b:ed:8c:07:b4:2d:3c:16:ed:37:ac:b7:c3:e3:59: 92:8a:92:56:04:11:51:65:54:8b:87:71:ac:a2:6e: e2:d4:35:f1:fb:ee:01:4a:d8:19:15:1b:6d:eb:34: 62:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1F:F4:82:54:D0:20:1D:F0:95:6D:D0:AD:E5:D9:44:DE:63:C1:37 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4R_0glTQIB3wlW3QreXZRN5jwTc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 53:8e:da:e1:f4:d0:d8:8d:a4:f5:d4:c6:12:7c:54:97:3c:80: 97:83:a1:cc:cd:4a:bf:0c:51:be:21:0a:53:76:48:1a:bc:d8: 81:bf:37:de:36:d0:f7:45:b7:9a:9a:ce:62:80:58:ef:d6:4c: c6:dd:68:97:61:7d:fd:70:07:f2:47:53:0e:ed:34:f3:2a:a2: 98:64:e4:8b:fd:9b:52:10:98:ca:06:ff:c7:e9:52:81:47:f8: 69:45:31:64:95:45:ac:20:e0:e3:bb:8f:d7:5b:34:fd:fe:a5: b5:fa:bb:65:8f:d3:8d:14:4d:8e:c8:6f:0a:82:4f:f8:d6:74: 84:f0:b8:78:47:96:ae:62:d8:fe:13:10:d2:87:42:1b:e0:ca: bb:3e:72:44:24:0d:8d:d3:15:53:81:ff:ed:55:42:71:4a:5e: 6b:9e:cf:ce:7d:4b:0a:96:44:26:53:49:5f:80:12:08:76:71: 13:a6:0f:e7:d3:c8:84:d3:43:07:bb:b6:be:89:a0:e3:a7:b7: 58:16:48:1d:60:4a:2e:8a:b2:98:ef:e0:3a:e0:6e:5f:61:06: 28:a2:0a:b0:ce:60:be:83:be:d5:b1:6e:57:b5:24:5b:e1:6c: e5:7b:10:2f:b2:5d:4e:12:29:94:b2:32:63:bc:db:b3:0e:15: 3a:72:e9:8b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICF0owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDcw MzA5MjlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEUxMUZGNDgyNTREMDIw MURGMDk1NkREMEFERTVEOTQ0REU2M0MxMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSVtXwWenwLhTO6R1KF/pDRpSdr3hBQpEndaJLvZEytR6q8Ayf n61ukCJzhTONNHEYCxVFio+OuwwmHKvZQxXKCy1DfNmZlx3B9j0Wza0tfYtSqAeO NiHTZLb167kG6mDIWBqp0rrCqcqChR/L58EqysJNjYsWbmV6d+ij+/FmS40XAl5M J9bOpCYeyFO9kU/Hg2xvnZJIa/unT5kTMYE92PhKd8Ya/hmXc8AHMzjIvOxEwyYj 0T+2SvX4qRpGjF+ql2woMJZ+aM3XCYbv64yCLDvtjAe0LTwW7Test8PjWZKKklYE EVFlVIuHcayibuLUNfH77gFK2BkVG23rNGJ7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4R/0glTQIB3wlW3QreXZRN5jwTcwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni80Ul8wZ2xUUUlCM3dsVzNR cmVYWlJONWp3VGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAFOO2uH00NiNpPXUxhJ8VJc8gJeDoczNSr8M Ub4hClN2SBq82IG/N9420PdFt5qazmKAWO/WTMbdaJdhff1wB/JHUw7tNPMqophk 5Iv9m1IQmMoG/8fpUoFH+GlFMWSVRawg4OO7j9dbNP3+pbX6u2WP040UTY7IbwqC T/jWdITwuHhHlq5i2P4TENKHQhvgyrs+ckQkDY3TFVOB/+1VQnFKXmuez859SwqW RCZTSV+AEgh2cROmD+fTyITTQwe7tr6JoOOnt1gWSB1gSi6Kspjv4Drgbl9hBiii CrDOYL6DvtWxble1JFvhbOV7EC+yXU4SKZSyMmO827MOFTpy6Ys= -----END CERTIFICATE-----Generated at Sun Jan 11 14:42:12 2026 by rpki-client