This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Gakw-9DIgUAvrdcWEbdOGTztG9Q.roa File: Gakw-9DIgUAvrdcWEbdOGTztG9Q.roa (raw, json) Hash identifier: fgtxn41yJkzy7x3wbHo5nSCD9G4SUtZy0oIiwuW+TQo= Subject key identifier: 19:A9:30:FB:D0:C8:81:40:2F:AD:D7:16:11:B7:4E:19:3C:ED:1B:D4 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 07F4 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Gakw-9DIgUAvrdcWEbdOGTztG9Q.roa Signing time: Sat 17 May 2025 16:38:18 +0000 ROA not before: Sat 17 May 2025 16:38:18 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 2036 (0x7f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 17 16:38:18 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=19A930FBD0C881402FADD71611B74E193CED1BD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7a:73:4c:ff:99:9e:4e:91:88:f1:6c:b1:e9: 9c:54:46:b0:d9:1b:22:ad:f7:aa:d1:71:0a:bb:1f: 04:07:16:3f:d0:fa:0b:cd:12:9c:c7:cb:42:87:1f: 83:ff:bf:16:b0:22:8b:82:47:58:f5:03:17:63:0a: 47:a6:0e:b4:13:7b:87:90:51:03:d4:f9:f8:3a:52: b0:5f:bd:3c:61:38:92:ed:45:71:05:e6:ba:14:c7: 78:9f:5b:69:ca:2f:d4:04:45:27:c1:3c:fd:86:a1: 49:2b:f1:5e:fd:4d:30:ee:eb:96:ba:0f:43:d7:36: 68:c2:fb:36:0b:48:b5:d5:d9:f0:28:a1:d9:3d:a2: 82:68:18:df:81:c5:fa:33:e8:66:15:ff:32:be:fe: 55:81:cb:7b:90:10:45:f7:8c:3d:c2:9c:30:35:0d: 0c:76:d3:e2:95:83:3d:36:88:1b:85:a8:28:57:44: 27:c2:a1:8a:61:99:a5:ef:fc:69:bf:1a:82:e2:2c: 3b:ee:ef:31:ed:65:0b:f4:1f:d4:54:9b:83:d6:01: b9:b0:17:c9:18:54:9e:91:fc:00:12:5f:77:45:04: da:5f:b5:d3:54:2d:89:c1:91:4f:25:29:8b:6e:be: ee:87:8b:62:68:a5:6a:20:37:e1:90:06:a1:69:f3: 89:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A9:30:FB:D0:C8:81:40:2F:AD:D7:16:11:B7:4E:19:3C:ED:1B:D4 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Gakw-9DIgUAvrdcWEbdOGTztG9Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7c:c7:b2:67:bd:e9:ea:64:f8:b5:67:81:bc:d8:32:94:03:93: f0:ae:f9:4d:b2:bf:7e:7b:88:08:ba:74:49:71:62:2b:a4:f6: b8:32:61:4e:07:ee:34:54:18:29:32:eb:cb:a9:7d:73:09:65: 81:e1:10:02:1a:f6:3c:73:dd:29:0b:f4:73:d4:6c:13:83:bb: de:f0:09:f1:0c:7c:90:e6:1c:ad:5f:9a:35:08:b7:d2:6d:3b: 2f:cf:8e:ee:e2:d1:84:f0:3f:1c:9a:17:0c:10:87:1d:d3:a0: 58:52:7f:62:c7:fe:a2:fa:72:7a:48:ea:6f:b4:23:7e:92:d5: d6:50:1c:b3:2f:60:41:52:be:9a:65:0c:fe:f2:59:82:53:17: 66:fb:dd:e0:95:f5:32:38:f7:99:39:00:eb:9c:7d:06:02:96: cf:11:fb:5a:2f:d0:6e:7d:70:b7:07:b6:ef:36:81:44:bd:1e: 80:21:96:62:46:18:63:2a:f1:be:4b:fe:01:08:f6:a4:a5:12: e6:36:60:60:46:40:d2:1f:10:fc:ea:38:d4:83:52:f2:48:ff: f3:3d:27:21:b7:b4:f4:76:41:16:82:a6:a8:1a:c9:9a:30:70: b9:58:38:ab:94:ac:1c:d7:a4:b3:f6:1b:72:56:57:42:3e:5e: 76:a0:71:2d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcx NjM4MThaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDE5QTkzMEZCRDBDODgx NDAyRkFERDcxNjExQjc0RTE5M0NFRDFCRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrenNM/5meTpGI8Wyx6ZxURrDZGyKt96rRcQq7HwQHFj/Q+gvN EpzHy0KHH4P/vxawIouCR1j1AxdjCkemDrQTe4eQUQPU+fg6UrBfvTxhOJLtRXEF 5roUx3ifW2nKL9QERSfBPP2GoUkr8V79TTDu65a6D0PXNmjC+zYLSLXV2fAoodk9 ooJoGN+Bxfoz6GYV/zK+/lWBy3uQEEX3jD3CnDA1DQx20+KVgz02iBuFqChXRCfC oYphmaXv/Gm/GoLiLDvu7zHtZQv0H9RUm4PWAbmwF8kYVJ6R/AASX3dFBNpftdNU LYnBkU8lKYtuvu6Hi2JopWogN+GQBqFp84kdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGakw+9DIgUAvrdcWEbdOGTztG9QwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9HYWt3LTlESWdVQXZyZGNX RWJkT0dUenRHOVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAHzHsme96epk+LVngbzYMpQDk/Cu+U2yv357 iAi6dElxYiuk9rgyYU4H7jRUGCky68upfXMJZYHhEAIa9jxz3SkL9HPUbBODu97w CfEMfJDmHK1fmjUIt9JtOy/Pju7i0YTwPxyaFwwQhx3ToFhSf2LH/qL6cnpI6m+0 I36S1dZQHLMvYEFSvpplDP7yWYJTF2b73eCV9TI495k5AOucfQYCls8R+1ov0G59 cLcHtu82gUS9HoAhlmJGGGMq8b5L/gEI9qSlEuY2YGBGQNIfEPzqONSDUvJI//M9 JyG3tPR2QRaCpqgayZowcLlYOKuUrBzXpLP2G3JWV0I+XnagcS0= -----END CERTIFICATE-----Generated at Mon Jan 12 10:29:04 2026 by rpki-client