This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4cYKcdb1myjf7qZJkgiJAFp9nNM.roa File: 4cYKcdb1myjf7qZJkgiJAFp9nNM.roa (raw, json) Hash identifier: AhRlR8VfAM6i9D7VJ+mDW3/ItyvqGE6Dk3mW68QpcMo= Subject key identifier: E1:C6:0A:71:D6:F5:9B:28:DF:EE:A6:49:92:08:89:00:5A:7D:9C:D3 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0181 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4cYKcdb1myjf7qZJkgiJAFp9nNM.roa Signing time: Fri 09 May 2025 02:07:45 +0000 ROA not before: Fri 09 May 2025 02:07:45 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 27.103.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 9 02:07:45 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=E1C60A71D6F59B28DFEEA649920889005A7D9CD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dc:5a:8d:cd:0e:59:5f:bc:d8:1a:11:b1:94: 38:91:ab:6a:1d:58:87:42:54:65:09:d0:0d:ed:97: 13:7c:18:8b:bd:ee:13:72:8b:98:dd:63:e3:c5:86: 04:3a:b5:70:e4:85:b3:62:ab:01:74:b4:11:d6:cd: 54:41:e2:ca:30:79:db:f0:e5:f8:da:27:6f:a7:eb: 34:83:a8:26:de:78:10:9b:9d:23:4e:01:75:6d:f4: 4e:4b:c0:08:e1:ea:a1:27:20:eb:9d:44:03:63:01: 4a:9b:ad:8c:ba:7f:09:39:d2:17:41:19:d3:8c:c5: a1:02:55:fe:65:27:91:d6:fd:8b:df:aa:14:f6:5c: 58:6f:9a:ee:f2:3c:08:4a:47:90:fd:41:94:c2:fa: 7c:49:e0:98:ce:0d:c6:0e:af:62:5c:95:18:77:12: 98:50:7f:a1:12:8c:35:eb:c6:42:10:bd:27:3c:1a: 71:4a:83:d2:b3:7e:f0:c8:ee:0f:35:64:a4:43:24: 41:f2:93:0e:96:82:bc:c4:59:a1:89:19:80:32:40: 71:16:f7:61:ff:f9:fa:1d:af:2a:83:62:28:eb:9e: bb:96:c0:b3:65:3a:7f:d3:6b:6e:7e:d6:2c:9c:60: f3:b2:44:80:b9:f3:4e:51:e4:a4:35:01:c0:fb:9e: b1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C6:0A:71:D6:F5:9B:28:DF:EE:A6:49:92:08:89:00:5A:7D:9C:D3 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4cYKcdb1myjf7qZJkgiJAFp9nNM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption 40:3b:88:f5:dc:63:8c:60:b6:a2:74:4f:51:06:07:9d:a6:9e: 63:a8:a2:55:cb:4c:e5:23:96:6a:a7:d1:47:bd:df:0e:8a:72: ff:89:15:09:e0:71:e5:97:7b:93:c3:c5:08:21:63:3c:67:50: ab:80:6c:58:ec:c9:5e:3e:5f:99:07:03:e4:4a:69:c7:63:e5: 3d:70:10:cd:6e:19:c5:74:6a:50:e6:c9:0b:3c:2f:77:09:42: d2:3a:8e:4b:20:55:b1:e0:15:4d:b5:b3:40:1e:39:6d:19:20: 7b:e1:a8:25:4b:99:81:fc:f4:a0:64:92:3c:55:f3:63:e1:92: dc:87:a0:22:71:9e:47:3d:4f:a5:b0:b4:a4:c6:eb:e4:70:e9: 94:9c:f4:ef:38:d9:c9:dc:40:a1:7c:8c:33:34:d6:59:76:d0: 47:05:b6:45:72:55:d0:45:6d:58:4b:0b:96:c7:fb:34:ba:02: 7f:4f:40:23:1d:8e:d8:b5:24:b8:25:6d:bc:f8:7e:32:83:1e: dc:f9:72:a9:e7:af:61:27:4b:c2:c2:08:c2:e4:31:8a:d0:99: 91:13:ca:a9:08:89:4d:d1:de:5a:f7:7f:39:e3:24:ca:64:95: 36:0a:d4:e3:f2:c8:d9:fb:0e:57:be:95:fe:3d:21:22:a1:4a: df:39:56:97 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDkw MjA3NDVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEUxQzYwQTcxRDZGNTlC MjhERkVFQTY0OTkyMDg4OTAwNUE3RDlDRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDn3FqNzQ5ZX7zYGhGxlDiRq2odWIdCVGUJ0A3tlxN8GIu97hNy i5jdY+PFhgQ6tXDkhbNiqwF0tBHWzVRB4sowedvw5fjaJ2+n6zSDqCbeeBCbnSNO AXVt9E5LwAjh6qEnIOudRANjAUqbrYy6fwk50hdBGdOMxaECVf5lJ5HW/YvfqhT2 XFhvmu7yPAhKR5D9QZTC+nxJ4JjODcYOr2JclRh3EphQf6ESjDXrxkIQvSc8GnFK g9KzfvDI7g81ZKRDJEHykw6WgrzEWaGJGYAyQHEW92H/+fodryqDYijrnruWwLNl On/Ta25+1iycYPOyRIC5805R5KQ1AcD7nrH9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4cYKcdb1myjf7qZJkgiJAFp9nNMwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni80Y1lLY2RiMW15amY3cVpK a2dpSkFGcDluTk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA G2cwDQYJKoZIhvcNAQELBQADggEBAEA7iPXcY4xgtqJ0T1EGB52mnmOoolXLTOUj lmqn0Ue93w6Kcv+JFQngceWXe5PDxQghYzxnUKuAbFjsyV4+X5kHA+RKacdj5T1w EM1uGcV0alDmyQs8L3cJQtI6jksgVbHgFU21s0AeOW0ZIHvhqCVLmYH89KBkkjxV 82PhktyHoCJxnkc9T6WwtKTG6+Rw6ZSc9O842cncQKF8jDM01ll20EcFtkVyVdBF bVhLC5bH+zS6An9PQCMdjti1JLglbbz4fjKDHtz5cqnnr2EnS8LCCMLkMYrQmZET yqkIiU3R3lr3fznjJMpklTYK1OPyyNn7Dle+lf49ISKhSt85Vpc= -----END CERTIFICATE-----Generated at Mon Jan 12 13:07:13 2026 by rpki-client