This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8di27aD5K4phK1EvqCfqqOAS9Tg.roa
File: 8di27aD5K4phK1EvqCfqqOAS9Tg.roa (raw, json)
Hash identifier: JEDo1E19ql+H4ZH3dMiMYyjqs5B+fAMkJNVeeMlwyaE=
Subject key identifier: F1:D8:B6:ED:A0:F9:2B:8A:61:2B:51:2F:A8:27:EA:A8:E0:12:F5:38
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 060A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8di27aD5K4phK1EvqCfqqOAS9Tg.roa
Signing time: Thu 15 May 2025 03:08:01 +0000
ROA not before: Thu 15 May 2025 03:08:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1546 (0x60a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 03:08:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F1D8B6EDA0F92B8A612B512FA827EAA8E012F538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:33:a7:22:11:d4:09:11:10:10:3d:60:40:
46:6b:cb:61:92:fa:a5:aa:a4:45:00:7b:a8:d7:06:
b7:d8:fc:e4:14:b4:87:b7:88:ed:e4:90:1c:56:8f:
ea:9a:12:23:97:cb:1d:5b:bc:78:54:59:f9:e0:59:
7a:7a:0f:d2:7d:38:02:33:12:30:f8:69:9b:87:d8:
b3:dd:a3:85:8e:02:33:74:ef:10:40:2e:d0:37:ac:
2f:8f:9e:07:8e:44:d8:2c:3e:0c:64:89:86:ad:e5:
5a:0c:5e:b2:ca:05:76:8e:8b:ed:30:fd:e2:de:ac:
d8:d7:d7:81:72:28:82:e0:ab:b0:bb:4b:93:33:17:
d7:e5:2f:02:3d:7b:86:48:88:63:0e:68:d4:76:d5:
ad:57:e6:fc:9c:50:db:cf:d2:85:d8:02:6b:56:e1:
65:78:15:ba:0c:ba:82:bc:1d:2b:29:e6:86:68:3f:
7d:be:fe:63:b9:a2:c9:47:80:9c:d7:77:ef:07:e4:
3f:01:66:9e:b0:28:0c:3b:ac:7c:fb:da:ef:50:cb:
04:78:65:7a:c9:0f:d2:65:0b:30:c4:6f:44:48:18:
47:e9:1e:83:46:ae:88:f9:9e:62:f3:d2:5b:d3:ea:
ef:2c:b6:0b:ed:5b:3d:46:10:c1:50:4a:73:1b:35:
b2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D8:B6:ED:A0:F9:2B:8A:61:2B:51:2F:A8:27:EA:A8:E0:12:F5:38
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8di27aD5K4phK1EvqCfqqOAS9Tg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:41:30:93:64:ef:5b:db:f1:74:67:ff:f6:a0:ed:61:d7:a9:
93:68:57:a3:06:83:d0:09:b2:cf:34:d1:b8:64:5f:00:14:29:
1a:42:87:0f:ca:1a:74:5d:48:54:bd:cd:ef:b9:94:fd:fd:11:
ad:fa:95:d0:d3:c9:2c:1f:a1:87:cc:a3:e3:89:e6:1b:55:4f:
08:54:a4:95:36:79:03:11:55:c6:da:41:d4:63:ca:94:14:ce:
23:24:db:e3:f5:fa:7b:b6:ea:db:43:a0:6b:0f:ba:80:33:1e:
77:da:20:5d:30:34:49:1f:fe:a1:6e:98:5f:f2:1d:0c:f4:14:
1a:f3:95:96:36:dd:54:83:f3:1b:9c:97:cb:71:be:8d:81:0d:
14:bc:fc:bc:ab:26:75:3f:34:22:55:62:f4:e1:0f:94:be:cf:
ed:a7:77:81:3e:b7:9d:c8:cc:5e:24:13:83:92:4d:06:8e:21:
b8:18:33:16:95:33:1f:03:27:d5:8a:47:3a:f6:ca:0d:a6:28:
87:3d:08:79:1d:1a:4a:34:5d:bf:17:17:62:6a:8e:68:46:dc:
13:a2:2f:6a:0e:d1:d5:5c:7c:14:b0:05:e9:04:3b:98:b0:d2:
c7:cf:44:74:e4:4a:34:ac:9f:87:82:10:a1:ea:db:60:c7:ea:
be:37:51:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:05:41 2026 by rpki-client