This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/HZYiLw1VSZfBXm-y7JTQBxrWN9g.roa File: HZYiLw1VSZfBXm-y7JTQBxrWN9g.roa (raw, json) Hash identifier: Xc/6fFwort9BUXt0oTyBmYmBi/JhuFN2Vw8iDfYySug= Subject key identifier: 1D:96:22:2F:0D:55:49:97:C1:5E:6F:B2:EC:94:D0:07:1A:D6:37:D8 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 1675 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HZYiLw1VSZfBXm-y7JTQBxrWN9g.roa Signing time: Fri 06 Jun 2025 00:39:25 +0000 ROA not before: Fri 06 Jun 2025 00:39:25 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 27.103.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 5749 (0x1675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Jun 6 00:39:25 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=1D96222F0D554997C15E6FB2EC94D0071AD637D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:7a:de:6d:ac:84:c6:34:c7:bf:0d:89:48:d2: 5e:21:11:d8:a7:47:bb:1f:9c:a1:af:58:48:12:df: 57:7f:2e:1c:49:c6:cf:2a:c0:74:9f:2b:e8:a5:23: 5c:de:8d:32:d6:31:72:b5:32:3d:5e:4e:14:bb:5d: bb:53:54:28:e5:6a:5e:4a:02:99:04:c7:7a:87:1a: 7d:e3:73:9e:73:0e:53:1e:f0:f5:c7:86:d2:61:56: a1:62:7a:78:47:f1:90:d8:9c:cc:6b:78:7a:6c:35: 45:ab:16:19:dc:4a:a2:8a:e6:88:59:b8:bc:1d:5a: 96:5b:4d:15:68:fe:32:26:a5:3e:c1:56:ef:58:d3: d5:7d:be:aa:5d:56:4b:66:6b:ad:c9:26:e5:b0:bf: 36:fe:c2:44:3d:84:90:f5:2d:e1:fc:eb:8c:0c:5c: f4:15:4f:f5:4d:bd:c1:4f:8f:e5:bc:57:f1:72:40: 72:a1:92:86:f2:13:af:fc:c3:05:99:fb:39:46:2d: db:5e:94:46:b0:8c:0d:e9:e0:f5:86:be:0c:69:06: fe:dd:1f:fa:cb:28:8f:f5:5a:21:e7:09:ed:de:29: d7:a7:11:9a:ae:13:b1:d0:52:ed:0e:26:6e:00:47: f0:9b:5b:37:7b:35:fb:80:2c:af:63:57:4c:74:3d: 3e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:96:22:2F:0D:55:49:97:C1:5E:6F:B2:EC:94:D0:07:1A:D6:37:D8 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HZYiLw1VSZfBXm-y7JTQBxrWN9g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption 17:cb:81:ee:78:cc:ce:28:91:45:ed:31:14:07:f9:d7:4b:8b: 7e:33:a5:db:64:88:91:a8:7e:c9:5e:43:8b:f9:38:1e:0e:92: 38:37:44:ab:90:8e:68:f3:c6:96:ce:5e:df:27:4f:98:0a:d5: 01:bb:e4:ad:b2:37:5f:71:71:21:bf:3a:7f:a9:23:0b:1f:2a: 8b:8c:95:b9:37:92:fb:1b:2f:9c:f6:10:44:2c:b7:51:3e:12: b5:ca:94:f1:ba:4f:4d:52:c2:89:00:8b:8c:66:d4:bc:cd:3a: d5:73:5f:a4:1a:00:85:fb:ec:dc:fc:3c:83:6f:51:f3:88:98: 09:ef:bb:2d:57:3a:41:cf:63:89:94:81:24:d6:97:c3:8e:a3: 7d:8c:13:52:a1:4b:b9:04:ec:d8:28:24:6d:06:a3:5d:27:aa: 0e:b1:ff:3d:b3:fa:55:e6:77:a3:28:25:d9:98:bc:50:86:8d: 13:c0:07:20:5a:b5:6c:51:e1:28:78:0e:93:8a:20:5a:ce:f9: 72:1f:ed:7e:bd:0b:74:ec:73:78:02:47:a4:cc:ef:80:dc:3f: 79:18:cc:7a:13:2c:7e:3b:0d:26:9c:72:af:14:ca:f6:9b:6a: 55:8d:29:6f:9d:29:16:1e:ab:a0:cf:36:bf:1a:42:1c:6f:36: 70:ab:9e:aa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICFnUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDYw MDM5MjVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDFEOTYyMjJGMEQ1NTQ5 OTdDMTVFNkZCMkVDOTREMDA3MUFENjM3RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD4et5trITGNMe/DYlI0l4hEdinR7sfnKGvWEgS31d/LhxJxs8q wHSfK+ilI1zejTLWMXK1Mj1eThS7XbtTVCjlal5KApkEx3qHGn3jc55zDlMe8PXH htJhVqFienhH8ZDYnMxreHpsNUWrFhncSqKK5ohZuLwdWpZbTRVo/jImpT7BVu9Y 09V9vqpdVktma63JJuWwvzb+wkQ9hJD1LeH864wMXPQVT/VNvcFPj+W8V/FyQHKh kobyE6/8wwWZ+zlGLdtelEawjA3p4PWGvgxpBv7dH/rLKI/1WiHnCe3eKdenEZqu E7HQUu0OJm4AR/CbWzd7NfuALK9jV0x0PT5NAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUHZYiLw1VSZfBXm+y7JTQBxrWN9gwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9IWllpTHcxVlNaZkJYbS15 N0pUUUJ4cldOOWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA G2cwDQYJKoZIhvcNAQELBQADggEBABfLge54zM4okUXtMRQH+ddLi34zpdtkiJGo fsleQ4v5OB4Okjg3RKuQjmjzxpbOXt8nT5gK1QG75K2yN19xcSG/On+pIwsfKouM lbk3kvsbL5z2EEQst1E+ErXKlPG6T01SwokAi4xm1LzNOtVzX6QaAIX77Nz8PINv UfOImAnvuy1XOkHPY4mUgSTWl8OOo32ME1KhS7kE7NgoJG0Go10nqg6x/z2z+lXm d6MoJdmYvFCGjRPAByBatWxR4Sh4DpOKIFrO+XIf7X69C3Tsc3gCR6TM74DcP3kY zHoTLH47DSaccq8UyvabalWNKW+dKRYeq6DPNr8aQhxvNnCrnqo= -----END CERTIFICATE-----Generated at Mon Jan 12 10:31:56 2026 by rpki-client