This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/BDcevDn-e9aVr5F_Ycaczbvf718.roa
File: BDcevDn-e9aVr5F_Ycaczbvf718.roa (raw, json)
Hash identifier: KsRWhLeuqXtzWppgcrhDAcKTZGBDx3BNn8+uRIQDNtw=
Subject key identifier: 04:37:1E:BC:39:FE:7B:D6:95:AF:91:7F:61:C6:9C:CD:BB:DF:EF:5F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04C2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/BDcevDn-e9aVr5F_Ycaczbvf718.roa
Signing time: Tue 13 May 2025 10:10:59 +0000
ROA not before: Tue 13 May 2025 10:10:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1218 (0x4c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 10:10:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=04371EBC39FE7BD695AF917F61C69CCDBBDFEF5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:10:46:63:42:9a:c0:b3:e3:d5:c9:06:d4:
33:fb:ea:10:f7:2b:a2:9b:9b:57:36:f9:d1:c5:2c:
87:dc:35:af:6d:c8:e3:5a:8f:59:52:0e:a1:f2:22:
21:06:71:90:97:1d:3a:37:4b:57:a4:67:3b:11:da:
9d:fb:d8:14:50:36:cf:f0:25:0b:b9:3b:4c:b1:81:
bf:bd:7c:47:20:95:a5:55:d5:4f:58:69:c0:c2:1f:
09:25:c7:9a:6c:ea:dc:6b:2d:93:d7:f4:ec:a9:9d:
a1:a7:13:57:8d:0e:c5:26:17:74:2f:40:57:b5:4f:
97:0a:0d:01:41:97:87:ed:57:b0:44:c9:65:3b:87:
b2:72:80:7d:3f:27:0b:2c:b5:24:3a:1f:4f:c2:21:
5e:f5:d7:ff:12:e4:c9:23:da:c3:af:bf:7b:6f:be:
c7:4f:54:76:0b:eb:64:81:7a:a7:7f:4b:0d:48:69:
77:b7:45:c4:00:ff:9f:fd:a5:ff:f7:10:bf:c6:b6:
09:c7:31:a2:bc:62:3d:6e:8c:18:03:23:0c:cf:f7:
ec:94:5d:de:af:6f:4c:06:b1:55:00:ef:f9:19:4a:
39:99:64:98:57:a2:d7:b0:7b:11:2f:ca:7e:6b:3b:
06:fe:40:40:30:2a:d6:7c:e6:d6:21:89:c4:bd:38:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:37:1E:BC:39:FE:7B:D6:95:AF:91:7F:61:C6:9C:CD:BB:DF:EF:5F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/BDcevDn-e9aVr5F_Ycaczbvf718.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:27:76:df:3e:e4:35:00:b7:b7:04:ae:98:c0:9f:10:93:31:
d2:7c:78:24:41:02:10:b1:f3:41:74:1c:56:57:97:50:47:60:
37:ab:42:88:a8:c2:de:fc:6b:b7:02:03:a4:36:d9:13:7e:27:
26:66:37:62:99:7e:69:e3:3c:2c:59:a4:95:19:ab:68:b3:66:
49:99:10:74:3d:f0:22:1d:6f:50:3c:23:20:c0:2b:87:e2:a1:
9e:ff:09:22:de:1b:ec:28:d4:a0:2d:49:98:c7:ff:7a:56:a4:
86:d8:7c:09:19:9d:5c:31:51:05:02:26:e1:2a:f4:25:b2:7d:
fc:1d:01:10:08:d0:fc:a2:a9:46:15:9e:dd:39:d9:9f:dd:a9:
37:7c:ff:f5:41:be:d3:69:bc:d9:1c:cc:b4:2f:00:5a:ef:f7:
20:dc:03:b5:8d:9f:19:49:cd:62:d4:48:72:a6:df:00:96:72:
4e:88:25:88:48:33:46:09:11:8d:19:77:bc:52:4a:91:d9:32:
34:c5:7d:d1:c5:85:6e:3e:9b:44:c6:4a:9d:5d:e4:25:b0:a3:
57:1d:fe:64:43:e2:29:76:66:a8:fb:87:51:ff:fb:66:2b:31:
ff:41:89:0d:eb:f5:ba:fd:ba:7a:81:25:16:b7:cd:99:c3:05:
3f:72:d7:21
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTMx
MDEwNTlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDA0MzcxRUJDMzlGRTdC
RDY5NUFGOTE3RjYxQzY5Q0NEQkJERkVGNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOCBBGY0KawLPj1ckG1DP76hD3K6Kbm1c2+dHFLIfcNa9tyONa
j1lSDqHyIiEGcZCXHTo3S1ekZzsR2p372BRQNs/wJQu5O0yxgb+9fEcglaVV1U9Y
acDCHwklx5ps6txrLZPX9OypnaGnE1eNDsUmF3QvQFe1T5cKDQFBl4ftV7BEyWU7
h7JygH0/JwsstSQ6H0/CIV711/8S5Mkj2sOvv3tvvsdPVHYL62SBeqd/Sw1IaXe3
RcQA/5/9pf/3EL/GtgnHMaK8Yj1ujBgDIwzP9+yUXd6vb0wGsVUA7/kZSjmZZJhX
otewexEvyn5rOwb+QEAwKtZ85tYhicS9OCnFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUBDcevDn+e9aVr5F/Ycaczbvf718wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9CRGNldkRuLWU5YVZyNUZf
WWNhY3pidmY3MTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAJAndt8+5DUAt7cErpjAnxCTMdJ8eCRBAhCx
80F0HFZXl1BHYDerQoiowt78a7cCA6Q22RN+JyZmN2KZfmnjPCxZpJUZq2izZkmZ
EHQ98CIdb1A8IyDAK4fioZ7/CSLeG+wo1KAtSZjH/3pWpIbYfAkZnVwxUQUCJuEq
9CWyffwdARAI0PyiqUYVnt052Z/dqTd8//VBvtNpvNkczLQvAFrv9yDcA7WNnxlJ
zWLUSHKm3wCWck6IJYhIM0YJEY0Zd7xSSpHZMjTFfdHFhW4+m0TGSp1d5CWwo1cd
/mRD4il2Zqj7h1H/+2YrMf9BiQ3r9br9unqBJRa3zZnDBT9y1yE=
-----END CERTIFICATE-----
Generated at Mon Jan 12 16:00:58 2026 by rpki-client