This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/6FtMrnn8V3WEG4M6fhRUwCTBfI0.roa
File: 6FtMrnn8V3WEG4M6fhRUwCTBfI0.roa (raw, json)
Hash identifier: Q2cfR/0MsbXvVWCNJxKGYkJYtPu3khSHmwmEmmC+50g=
Subject key identifier: E8:5B:4C:AE:79:FC:57:75:84:1B:83:3A:7E:14:54:C0:24:C1:7C:8D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 13E4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6FtMrnn8V3WEG4M6fhRUwCTBfI0.roa
Signing time: Mon 02 Jun 2025 14:39:13 +0000
ROA not before: Mon 02 Jun 2025 14:39:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5092 (0x13e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 2 14:39:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E85B4CAE79FC5775841B833A7E1454C024C17C8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:9d:da:9f:ed:15:9d:14:7d:54:60:d5:55:
35:e1:26:36:c8:e5:94:d1:1c:96:36:17:f1:23:fe:
6c:de:73:31:a3:2c:37:d3:ef:83:ef:68:08:a4:c1:
86:1b:f8:f0:cb:be:5d:b7:d6:83:27:73:3e:c0:c3:
44:c9:57:99:28:1c:49:34:51:a2:83:d5:44:c0:53:
4a:02:6d:76:98:16:21:86:36:bd:51:e1:c5:af:bd:
49:a7:de:c8:af:27:be:ce:64:46:2f:6e:46:47:51:
55:88:db:fc:9f:c3:85:2d:bd:3e:9a:65:a8:b4:de:
b2:d9:99:61:02:5e:44:fa:43:19:01:5b:e5:11:f0:
1d:e1:af:cb:ec:37:aa:b1:4d:f5:3b:ae:81:96:be:
f8:6a:ec:71:66:0f:dc:d6:ff:63:eb:c3:55:19:59:
d0:4e:fc:7b:8f:7f:41:ae:68:e6:f2:05:15:6d:71:
a4:05:1a:cc:f7:f3:c9:20:a2:2e:dd:43:fb:e8:08:
77:a2:e0:8c:7c:ac:aa:8d:f7:f8:a0:a6:7c:3d:a0:
7a:c8:e4:a2:6b:af:f3:e5:ed:09:24:5f:26:6f:df:
eb:a2:e8:14:a0:47:a1:bc:cd:5f:f1:51:e9:5e:a4:
e4:cf:12:de:3f:6c:3e:27:04:30:bf:39:8a:c5:f3:
20:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5B:4C:AE:79:FC:57:75:84:1B:83:3A:7E:14:54:C0:24:C1:7C:8D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6FtMrnn8V3WEG4M6fhRUwCTBfI0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:87:1a:20:98:56:9f:5b:90:12:73:ba:6f:86:c2:a1:68:61:
9e:da:d1:3f:97:6a:3e:40:81:6b:59:1b:cc:cc:17:8f:a9:5a:
74:69:97:0b:4e:ba:7a:ea:05:39:f7:9f:40:43:c6:e0:d7:a1:
9a:61:cd:44:a3:e4:ee:cb:b3:ee:22:57:82:b1:d5:99:b8:d1:
90:ca:6e:62:d1:c2:dd:35:ad:86:4f:69:68:85:07:07:cf:0a:
9d:21:e0:f3:d7:f6:82:c0:0d:4a:f6:4f:a3:ae:42:ec:36:64:
4f:02:a3:28:75:16:b9:05:9e:28:bf:cf:42:9f:a7:60:84:13:
47:1b:65:28:96:db:1e:4a:0e:6c:21:74:3c:b0:7a:e8:f9:86:
80:c0:59:0f:01:2c:eb:cb:f7:a6:92:2e:a1:b8:07:d2:df:aa:
21:36:f3:59:bd:86:d5:9e:98:f3:8e:bf:26:0f:aa:bd:8c:5c:
cf:fb:fe:e4:ca:69:d1:e0:59:dc:92:a6:8f:47:e2:72:cc:d3:
eb:d8:33:be:e1:6d:8e:b7:86:97:26:40:71:3a:36:87:6e:c3:
a3:39:4c:ff:a3:03:2f:2a:eb:06:65:68:44:20:1d:6c:5f:af:
a3:2f:79:e2:07:68:b5:1f:5f:d4:bd:a8:72:b7:87:ba:1f:6b:
fb:ee:1a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:51:13 2026 by rpki-client