This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/GZ6H9uIdDgBIi-rf6dx_wnA3wG8.roa File: GZ6H9uIdDgBIi-rf6dx_wnA3wG8.roa (raw, json) Hash identifier: 8Cv8dRBq92y1rELynz+759ZgwHUWXuqiTyZHfY9r2oU= Subject key identifier: 19:9E:87:F6:E2:1D:0E:00:48:8B:EA:DF:E9:DC:7F:C2:70:37:C0:6F Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 1432 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GZ6H9uIdDgBIi-rf6dx_wnA3wG8.roa Signing time: Tue 03 Jun 2025 00:09:24 +0000 ROA not before: Tue 03 Jun 2025 00:09:24 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 5170 (0x1432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Jun 3 00:09:24 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=199E87F6E21D0E00488BEADFE9DC7FC27037C06F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:4b:46:c2:32:6a:e5:ae:7f:f5:70:bc:f4: 59:f9:ed:0c:18:e8:a0:b3:df:d9:20:db:11:8f:cc: e3:08:09:60:ab:1f:17:c5:44:b3:e0:81:77:ab:6f: d6:64:ae:1f:ed:ea:39:bf:db:70:10:ae:22:f4:a4: f8:63:85:0b:45:17:19:c9:5c:75:60:d8:db:6b:f8: ef:8f:84:0f:a0:90:3f:f6:c6:42:99:66:f5:c7:18: ef:55:93:31:b1:e7:d0:fe:c9:9f:12:85:c8:a1:3c: 01:22:ff:72:78:1f:06:5f:9f:af:cc:e3:15:fb:8d: ac:24:eb:7a:c8:c1:f1:d4:a7:4d:cb:c6:4e:0d:ae: 0c:31:1e:73:f4:9d:fc:2b:84:d0:4d:7c:a3:f0:c4: da:63:02:41:fa:16:6e:52:09:df:97:8e:9c:38:bc: 33:6b:53:ac:32:5e:0d:cb:a4:4e:ac:b9:7e:dc:eb: be:31:1d:67:fd:4a:5d:c0:c3:60:31:3e:ea:39:78: e2:5f:38:b6:23:d9:05:59:49:0b:e2:91:a7:ee:ac: de:d6:5b:7a:7f:fb:74:c2:15:30:54:3a:c3:3e:70: fd:fe:87:b7:28:d1:a8:d5:be:ae:12:a2:92:b6:1f: 13:e0:4d:3e:1b:25:24:59:66:17:69:04:6f:97:84: 7e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9E:87:F6:E2:1D:0E:00:48:8B:EA:DF:E9:DC:7F:C2:70:37:C0:6F X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GZ6H9uIdDgBIi-rf6dx_wnA3wG8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption a0:a2:a2:e8:8c:7d:d2:51:c1:f1:64:49:93:c2:43:cf:a3:3f: 3e:03:3f:e0:31:ef:1d:2f:e2:76:66:35:98:da:9b:0a:4e:66: 9b:8d:0a:00:b1:a0:e7:76:b2:de:87:7c:50:26:63:10:df:04: 97:1a:aa:cc:86:f6:10:ef:c0:92:ee:1c:eb:36:6b:86:11:3f: bd:55:b1:7d:12:c1:9c:09:96:92:47:37:bc:1d:17:a0:ed:b5: 44:34:d6:aa:dc:8b:19:0d:64:f6:1d:a3:d3:2b:e8:2c:55:29: 76:8c:93:2f:05:06:62:d1:5b:9d:84:ea:ca:29:5a:e4:9d:1e: 98:02:58:72:aa:be:71:9d:b7:32:fd:9c:44:70:89:e3:b3:e5: e1:2f:42:b3:05:7d:74:df:b6:60:ab:45:a1:a0:ea:ce:77:49: 18:93:ed:7f:ba:2b:84:9e:7f:76:1e:b7:28:88:4d:d2:bb:87: 67:8d:b7:fb:71:cc:d2:20:4e:6d:9d:b2:b3:e1:49:04:2b:99: f3:ee:62:f4:1b:65:0d:3d:e3:75:81:a0:a1:84:2d:d2:84:a2: a9:6b:c8:00:ba:84:6d:77:00:80:6e:85:ad:36:d8:35:33:6a: 4f:13:2e:56:28:6d:4a:86:b9:50:b0:0f:52:fb:10:2a:11:7c: ce:6b:ef:db -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICFDIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDMw MDA5MjRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDE5OUU4N0Y2RTIxRDBF MDA0ODhCRUFERkU5REM3RkMyNzAzN0MwNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx3UtGwjJq5a5/9XC89Fn57QwY6KCz39kg2xGPzOMICWCrHxfF RLPggXerb9Zkrh/t6jm/23AQriL0pPhjhQtFFxnJXHVg2Ntr+O+PhA+gkD/2xkKZ ZvXHGO9VkzGx59D+yZ8ShcihPAEi/3J4HwZfn6/M4xX7jawk63rIwfHUp03Lxk4N rgwxHnP0nfwrhNBNfKPwxNpjAkH6Fm5SCd+Xjpw4vDNrU6wyXg3LpE6suX7c674x HWf9Sl3Aw2AxPuo5eOJfOLYj2QVZSQvikafurN7WW3p/+3TCFTBUOsM+cP3+h7co 0ajVvq4SopK2HxPgTT4bJSRZZhdpBG+XhH5XAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGZ6H9uIdDgBIi+rf6dx/wnA3wG8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9HWjZIOXVJZERnQklpLXJm NmR4X3duQTN3Rzgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAKCiouiMfdJRwfFkSZPCQ8+jPz4DP+Ax7x0v 4nZmNZjamwpOZpuNCgCxoOd2st6HfFAmYxDfBJcaqsyG9hDvwJLuHOs2a4YRP71V sX0SwZwJlpJHN7wdF6DttUQ01qrcixkNZPYdo9Mr6CxVKXaMky8FBmLRW52E6sop WuSdHpgCWHKqvnGdtzL9nERwieOz5eEvQrMFfXTftmCrRaGg6s53SRiT7X+6K4Se f3YetyiITdK7h2eNt/txzNIgTm2dsrPhSQQrmfPuYvQbZQ0943WBoKGELdKEoqlr yAC6hG13AIBuha022DUzak8TLlYobUqGuVCwD1L7ECoRfM5r79s= -----END CERTIFICATE-----Generated at Mon Jan 12 16:40:07 2026 by rpki-client