This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/KMplL2LvjAGtm-s0Xuq05EMdDm8.roa File: KMplL2LvjAGtm-s0Xuq05EMdDm8.roa (raw, json) Hash identifier: AvLWXPL+gEyIHuVL8lhGj+Kub0Yiz9KtH0yrItW76kE= Subject key identifier: 28:CA:65:2F:62:EF:8C:01:AD:9B:EB:34:5E:EA:B4:E4:43:1D:0E:6F Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 17CE Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KMplL2LvjAGtm-s0Xuq05EMdDm8.roa Signing time: Sat 07 Jun 2025 19:39:31 +0000 ROA not before: Sat 07 Jun 2025 19:39:31 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 6094 (0x17ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Jun 7 19:39:31 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=28CA652F62EF8C01AD9BEB345EEAB4E4431D0E6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a0:18:84:52:e1:14:ec:ae:79:ac:a1:0c:c7: bb:4d:75:49:66:0e:3c:98:8d:d3:82:51:31:fd:aa: 90:29:95:f2:ea:a2:5f:4f:00:8f:35:9a:ca:4c:64: 75:30:ff:d9:d9:5e:ff:fb:a0:04:50:26:92:94:09: 53:04:37:5b:10:3b:c3:c2:bc:00:99:72:f6:61:4e: 65:7f:5d:d7:c9:6e:fe:95:f7:25:12:57:df:16:21: 4d:18:ee:63:3e:af:52:74:a2:4e:28:7f:d0:8c:21: 12:28:e9:31:a6:25:4b:02:f4:16:cb:ad:eb:43:1d: f8:3b:6e:b7:0b:ff:a7:a6:c2:1c:55:2a:f5:93:71: 95:61:e4:8d:3f:ae:44:5c:85:ec:ed:63:52:17:88: 03:ab:6d:e3:a7:d7:a6:09:a0:78:5a:ca:21:3d:48: b9:83:69:36:bf:39:61:71:af:3a:5f:e3:ee:e6:e3: 0b:85:88:94:44:ce:e6:1a:65:ae:69:f9:d7:b9:49: 77:0b:00:3a:a5:5e:99:b0:cc:ab:99:7c:02:ab:f3: 61:8c:8b:da:3a:c3:dd:21:31:9f:97:b6:86:c4:77: ed:5e:41:df:32:b1:01:a7:58:e9:9a:b8:b0:86:1a: c2:82:f8:1b:6f:24:e0:bd:da:b4:d1:a4:58:82:6b: a4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CA:65:2F:62:EF:8C:01:AD:9B:EB:34:5E:EA:B4:E4:43:1D:0E:6F X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KMplL2LvjAGtm-s0Xuq05EMdDm8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 57:15:d1:f5:d3:94:10:72:71:ef:62:b8:39:e0:37:41:83:c1: 37:f9:41:95:7c:b1:80:3d:d7:23:56:0f:8f:ca:7d:8a:8b:79: a8:5d:d8:f5:f2:3e:cc:f6:d1:cb:c6:c7:ef:b9:5b:56:a5:23: 3b:1a:53:db:d7:70:43:d2:4a:df:c0:bc:be:10:bd:b6:05:ed: 56:05:95:76:c7:eb:bf:77:96:3f:fa:10:60:52:20:e5:6a:e7: 95:32:64:d7:b7:6a:08:fa:9d:02:5b:77:6d:29:da:d8:f1:97: 0d:3e:8e:8b:9c:8e:24:43:d1:4e:80:ce:31:e4:bf:ad:3a:9a: fb:75:2b:68:20:af:31:fd:7a:ab:98:7e:0a:5a:f9:6d:4c:c0: 95:10:a0:38:4b:2d:9a:31:c6:2e:92:ef:b4:8f:dd:90:83:23: ed:75:09:0a:b6:4b:5c:21:d8:4d:3b:a0:c5:ab:56:a2:17:89: 57:40:a7:b4:af:d4:28:d3:96:06:36:19:00:9a:ff:20:50:b3: 13:b5:8a:44:7e:35:9c:ab:e7:78:53:e0:69:b9:6b:4a:94:08: 85:5a:45:60:d4:92:d4:30:0f:29:e5:cc:57:04:1e:55:e0:5e: a3:13:f1:7a:40:b4:c5:40:be:23:c5:bd:b7:d8:28:ed:04:0f: a9:69:fd:ae -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICF84wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDcx OTM5MzFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDI4Q0E2NTJGNjJFRjhD MDFBRDlCRUIzNDVFRUFCNEU0NDMxRDBFNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqoBiEUuEU7K55rKEMx7tNdUlmDjyYjdOCUTH9qpAplfLqol9P AI81mspMZHUw/9nZXv/7oARQJpKUCVMEN1sQO8PCvACZcvZhTmV/XdfJbv6V9yUS V98WIU0Y7mM+r1J0ok4of9CMIRIo6TGmJUsC9BbLretDHfg7brcL/6emwhxVKvWT cZVh5I0/rkRcheztY1IXiAOrbeOn16YJoHhayiE9SLmDaTa/OWFxrzpf4+7m4wuF iJREzuYaZa5p+de5SXcLADqlXpmwzKuZfAKr82GMi9o6w90hMZ+XtobEd+1eQd8y sQGnWOmauLCGGsKC+BtvJOC92rTRpFiCa6RtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKMplL2LvjAGtm+s0Xuq05EMdDm8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9LTXBsTDJMdmpBR3RtLXMw WHVxMDVFTWREbTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAFcV0fXTlBByce9iuDngN0GDwTf5QZV8sYA9 1yNWD4/KfYqLeahd2PXyPsz20cvGx++5W1alIzsaU9vXcEPSSt/AvL4QvbYF7VYF lXbH6793lj/6EGBSIOVq55UyZNe3agj6nQJbd20p2tjxlw0+joucjiRD0U6AzjHk v606mvt1K2ggrzH9equYfgpa+W1MwJUQoDhLLZoxxi6S77SP3ZCDI+11CQq2S1wh 2E07oMWrVqIXiVdAp7Sv1CjTlgY2GQCa/yBQsxO1ikR+NZyr53hT4Gm5a0qUCIVa RWDUktQwDynlzFcEHlXgXqMT8XpAtMVAviPFvbfYKO0ED6lp/a4= -----END CERTIFICATE-----Generated at Mon Jan 12 16:01:19 2026 by rpki-client