This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8gh8y6jtRsLouAGPo_mruNnp1-Q.roa File: 8gh8y6jtRsLouAGPo_mruNnp1-Q.roa (raw, json) Hash identifier: kEy4TtNc43hhJf0KGHfnM5DS1b5AaNlaEgBEVBeiFf8= Subject key identifier: F2:08:7C:CB:A8:ED:46:C2:E8:B8:01:8F:A3:F9:AB:B8:D9:E9:D7:E4 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0790 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8gh8y6jtRsLouAGPo_mruNnp1-Q.roa Signing time: Sat 17 May 2025 04:08:09 +0000 ROA not before: Sat 17 May 2025 04:08:09 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 1936 (0x790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 17 04:08:09 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=F2087CCBA8ED46C2E8B8018FA3F9ABB8D9E9D7E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:7d:92:96:4b:d5:54:8d:36:cf:04:67:59: dc:53:29:a0:d7:f0:5b:3c:f7:34:dc:05:b7:cc:4f: 15:33:9b:c9:8b:67:df:b4:78:c5:42:bc:ff:31:f8: 9f:35:e2:94:97:74:5f:4b:23:b8:40:88:e6:10:02: 78:a9:ed:0f:b4:e4:71:fe:d6:12:5b:3e:b0:84:7f: af:10:e7:a7:66:78:ec:2c:a4:c5:3d:23:f3:53:31: f8:a6:c5:3e:86:7c:d0:60:08:bb:69:b0:63:1e:07: 55:30:7c:f7:32:12:ae:b7:5a:fc:cb:51:f6:7b:c3: 59:ce:fa:ca:c9:72:df:c1:0c:cb:fc:fd:c6:a5:8f: 7c:ee:fd:75:39:e5:ff:06:23:0e:56:6f:10:fe:93: 6e:7c:7f:4e:78:5c:55:a7:a0:06:f3:01:58:8a:a6: 41:b6:f9:4c:bd:52:da:da:a6:5e:b1:d7:57:bb:16: b2:c1:48:96:5c:db:22:db:b1:f3:7e:d1:63:72:09: 7c:f0:a4:15:b9:b3:6a:3b:4c:56:e3:98:47:70:62: d2:6d:b9:48:21:60:6c:eb:c8:ac:3e:4a:e1:c9:2f: 33:68:d9:87:b7:d4:76:95:98:29:f2:7c:7d:a4:d3: 3a:08:6b:69:ed:c6:35:eb:1c:8f:24:62:e4:b6:b5: c7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:08:7C:CB:A8:ED:46:C2:E8:B8:01:8F:A3:F9:AB:B8:D9:E9:D7:E4 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8gh8y6jtRsLouAGPo_mruNnp1-Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 35:cc:7d:a4:5c:47:99:d3:4c:48:b5:35:0e:a2:60:9c:c8:73: 8d:58:40:79:4d:f8:62:b5:a5:94:46:1a:e6:d8:5f:88:24:99: 6b:99:eb:fd:b7:35:4d:42:54:0c:00:5f:8f:eb:73:95:27:f8: 3b:dd:5e:cf:9d:d8:b6:4a:cb:da:2b:06:78:33:32:31:a0:be: e8:8c:64:9b:30:41:6c:45:f6:54:48:db:68:2f:8f:f9:7b:0a: b2:d0:3d:06:5a:94:fa:45:50:cd:c6:90:7c:06:2b:06:cc:7d: 63:60:e5:15:61:a8:6c:60:91:b0:c1:5e:00:e5:3b:7e:82:da: 82:c3:ac:4d:64:81:22:24:c2:1f:e5:34:87:0c:b3:81:f6:a5: 0e:63:de:42:cc:d7:8d:97:e2:fa:35:33:c9:07:42:15:f9:1c: b5:6a:d3:e1:83:5f:67:11:f9:b4:bb:97:a7:9b:60:d9:b9:59: 3f:f4:1e:34:d0:93:92:f0:b6:c9:6a:7a:f5:fc:56:fd:d6:c1: ce:a5:4d:8e:6e:ea:d0:3e:1d:63:99:b2:bf:0a:6e:e6:d8:b4: ac:62:89:28:87:6b:af:f4:f7:1a:e5:0e:ea:12:3d:1f:f9:6a: 3f:03:9e:90:54:59:35:ca:9c:13:9a:67:26:01:28:c4:67:d6: f2:18:f1:aa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcw NDA4MDlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEYyMDg3Q0NCQThFRDQ2 QzJFOEI4MDE4RkEzRjlBQkI4RDlFOUQ3RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCryn2SlkvVVI02zwRnWdxTKaDX8Fs89zTcBbfMTxUzm8mLZ9+0 eMVCvP8x+J814pSXdF9LI7hAiOYQAnip7Q+05HH+1hJbPrCEf68Q56dmeOwspMU9 I/NTMfimxT6GfNBgCLtpsGMeB1UwfPcyEq63WvzLUfZ7w1nO+srJct/BDMv8/cal j3zu/XU55f8GIw5WbxD+k258f054XFWnoAbzAViKpkG2+Uy9Utrapl6x11e7FrLB SJZc2yLbsfN+0WNyCXzwpBW5s2o7TFbjmEdwYtJtuUghYGzryKw+SuHJLzNo2Ye3 1HaVmCnyfH2k0zoIa2ntxjXrHI8kYuS2tcdtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8gh8y6jtRsLouAGPo/mruNnp1+QwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni84Z2g4eTZqdFJzTG91QUdQ b19tcnVObnAxLVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBADXMfaRcR5nTTEi1NQ6iYJzIc41YQHlN+GK1 pZRGGubYX4gkmWuZ6/23NU1CVAwAX4/rc5Un+DvdXs+d2LZKy9orBngzMjGgvuiM ZJswQWxF9lRI22gvj/l7CrLQPQZalPpFUM3GkHwGKwbMfWNg5RVhqGxgkbDBXgDl O36C2oLDrE1kgSIkwh/lNIcMs4H2pQ5j3kLM142X4vo1M8kHQhX5HLVq0+GDX2cR +bS7l6ebYNm5WT/0HjTQk5LwtslqevX8Vv3Wwc6lTY5u6tA+HWOZsr8KbubYtKxi iSiHa6/09xrlDuoSPR/5aj8DnpBUWTXKnBOaZyYBKMRn1vIY8ao= -----END CERTIFICATE-----Generated at Mon Jan 12 22:11:43 2026 by rpki-client