This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/GXHryPhXtuxs3EB_-Wl5d2yTDjk.roa File: GXHryPhXtuxs3EB_-Wl5d2yTDjk.roa (raw, json) Hash identifier: QKt9tmEmgeW/s87+vS/RBZDlfHZVVTf2/6+TTq8YorE= Subject key identifier: 19:71:EB:C8:F8:57:B6:EC:6C:DC:40:7F:F9:69:79:77:6C:93:0E:39 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0158 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GXHryPhXtuxs3EB_-Wl5d2yTDjk.roa Signing time: Thu 08 May 2025 21:07:44 +0000 ROA not before: Thu 08 May 2025 21:07:44 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 8 21:07:44 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=1971EBC8F857B6EC6CDC407FF96979776C930E39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:02:ef:56:15:bd:d0:61:99:ea:61:e1:42: 99:9b:aa:59:db:9a:43:c0:3b:b0:86:87:96:44:cd: 3a:63:6f:97:3d:09:1b:e4:d1:5f:ac:b0:88:69:ac: fd:58:45:b3:fe:6e:4e:01:9e:4e:75:4d:be:35:f0: ac:f2:dd:74:f3:22:73:98:00:1b:64:2e:8e:eb:5a: b5:a1:2b:c9:7a:cd:54:5f:e7:24:ea:c4:42:4c:14: bf:47:35:2f:ce:cb:d6:96:48:ac:fa:65:e5:98:24: d0:26:76:f0:97:47:93:93:db:39:7f:a3:81:6b:d3: f7:c0:27:5a:4f:f1:f2:fc:73:28:30:dc:1f:46:5d: 21:2d:c4:42:e0:24:c2:37:3c:72:2f:48:d5:7c:f3: aa:22:1a:53:0e:1d:eb:08:4b:35:23:fe:84:2f:a3: 99:e7:dd:47:c5:b5:12:8f:83:71:34:11:d4:17:a4: a0:3e:01:ef:ca:ea:3c:37:42:d3:5e:45:a3:09:96: 04:dd:57:fd:c7:24:bf:eb:b7:cd:13:6b:f7:b7:5e: f8:ef:90:27:a2:09:3b:69:93:f9:1b:35:8d:7c:c3: 44:25:e0:e6:4f:5f:0e:3b:e2:0f:ad:9e:4d:2f:1b: 7f:ff:53:a4:5f:78:10:7c:5d:6a:c7:c8:ea:a3:bf: b9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:71:EB:C8:F8:57:B6:EC:6C:DC:40:7F:F9:69:79:77:6C:93:0E:39 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GXHryPhXtuxs3EB_-Wl5d2yTDjk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2b:b1:11:4e:36:b1:14:12:a6:7a:79:ff:9a:6f:4d:3c:15:d6: be:81:30:37:a9:1d:44:72:fd:a9:3a:72:73:74:85:57:1d:3f: cb:fb:c7:f8:50:d4:e4:56:41:94:80:88:07:79:ea:3c:e5:21: 92:97:5b:89:98:ef:b0:b6:23:01:90:c9:9f:21:e7:37:83:53: 2f:de:6f:58:e4:4a:82:0b:a8:50:36:df:7e:27:a1:1c:6f:68: 28:50:df:d8:f5:0a:2e:e0:98:42:6d:b9:93:58:39:8e:35:e0: 1c:02:6f:c7:96:2f:d8:eb:6a:45:a7:6b:d2:63:af:30:99:18: 53:14:60:85:fc:2c:cf:e5:30:31:ad:cc:e6:a7:f4:01:fd:32: de:85:b4:d1:b1:37:3e:50:1f:72:72:fa:47:7f:9c:f7:1b:8a: 03:e4:e0:dd:ea:05:14:81:a6:8c:7e:cc:51:7b:b5:d2:4f:0c: 0f:6b:62:f8:eb:3f:ae:c2:0f:ea:ee:fc:e0:b6:7e:55:f2:75: 2a:7c:03:eb:d1:98:27:5e:34:fc:15:96:df:a5:50:c4:4e:86: 9b:35:a6:82:4c:76:91:fe:6a:6f:52:d5:b9:2d:42:f8:de:86: 85:a9:5e:6b:57:aa:25:47:10:a3:4e:df:da:a1:61:4b:58:61: 7d:2b:6b:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDgy MTA3NDRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDE5NzFFQkM4Rjg1N0I2 RUM2Q0RDNDA3RkY5Njk3OTc3NkM5MzBFMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0GQLvVhW90GGZ6mHhQpmbqlnbmkPAO7CGh5ZEzTpjb5c9CRvk 0V+ssIhprP1YRbP+bk4Bnk51Tb418Kzy3XTzInOYABtkLo7rWrWhK8l6zVRf5yTq xEJMFL9HNS/Oy9aWSKz6ZeWYJNAmdvCXR5OT2zl/o4Fr0/fAJ1pP8fL8cygw3B9G XSEtxELgJMI3PHIvSNV886oiGlMOHesISzUj/oQvo5nn3UfFtRKPg3E0EdQXpKA+ Ae/K6jw3QtNeRaMJlgTdV/3HJL/rt80Ta/e3XvjvkCeiCTtpk/kbNY18w0Ql4OZP Xw474g+tnk0vG3//U6RfeBB8XWrHyOqjv7nXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGXHryPhXtuxs3EB/+Wl5d2yTDjkwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9HWEhyeVBoWHR1eHMzRUJf LVdsNWQyeVREamsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBACuxEU42sRQSpnp5/5pvTTwV1r6BMDepHURy /ak6cnN0hVcdP8v7x/hQ1ORWQZSAiAd56jzlIZKXW4mY77C2IwGQyZ8h5zeDUy/e b1jkSoILqFA2334noRxvaChQ39j1Ci7gmEJtuZNYOY414BwCb8eWL9jrakWna9Jj rzCZGFMUYIX8LM/lMDGtzOan9AH9Mt6FtNGxNz5QH3Jy+kd/nPcbigPk4N3qBRSB pox+zFF7tdJPDA9rYvjrP67CD+ru/OC2flXydSp8A+vRmCdeNPwVlt+lUMROhps1 poJMdpH+am9S1bktQvjehoWpXmtXqiVHEKNO39qhYUtYYX0razk= -----END CERTIFICATE-----Generated at Mon Jan 12 12:36:10 2026 by rpki-client