This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/SMVXkCVMZs04ZmAYX1PsperTwHQ.roa File: SMVXkCVMZs04ZmAYX1PsperTwHQ.roa (raw, json) Hash identifier: g2NpXMdTAi3ifkmrvjlRxhf9pWNjQ4bhWljk3P92umA= Subject key identifier: 48:C5:57:90:25:4C:66:CD:38:66:60:18:5F:53:EC:A5:EA:D3:C0:74 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 1674 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SMVXkCVMZs04ZmAYX1PsperTwHQ.roa Signing time: Fri 06 Jun 2025 00:39:25 +0000 ROA not before: Fri 06 Jun 2025 00:39:25 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 5748 (0x1674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Jun 6 00:39:25 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=48C55790254C66CD386660185F53ECA5EAD3C074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a4:0a:ef:81:32:14:23:4b:de:60:64:64:a7: 0f:9e:ec:80:05:6c:a4:8b:7b:21:66:17:3e:24:8a: a9:53:d4:97:ba:c7:d9:9b:51:49:61:a0:46:f5:f5: 9b:e5:21:14:d4:3c:ee:3a:a4:00:ce:3e:2f:b5:c2: 27:8b:35:68:6e:9b:08:b8:fd:b8:b0:e6:c7:d7:3d: 5c:ba:fd:c3:00:aa:4d:4a:2f:af:4d:64:b7:27:e1: 6d:b6:de:e2:d7:f3:8d:87:d9:91:a4:9d:66:6f:63: 97:ed:d7:57:d9:99:52:87:33:fb:fe:d5:05:fd:6f: cd:8a:66:a2:9e:d0:f4:10:08:f8:3d:15:05:06:67: d2:78:fa:b2:ed:a8:47:14:1d:ab:76:cb:2c:02:79: 89:43:2a:0d:76:3f:b6:95:12:ba:95:43:f3:72:af: 72:52:d3:c9:2e:cb:14:24:05:ca:81:e0:5d:f4:93: dd:56:df:6d:02:ac:0e:bc:cf:b3:0a:39:73:89:de: 3c:10:bc:ef:96:35:d1:18:bd:82:33:2a:e4:43:d2: a4:8e:9c:93:31:3e:41:53:5f:00:4d:bc:f6:e5:fe: a2:dc:38:2e:55:30:6f:6d:73:d3:54:4d:bd:38:2f: 67:62:cf:d7:a6:39:ce:c4:40:af:bf:f5:fd:25:9e: 17:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C5:57:90:25:4C:66:CD:38:66:60:18:5F:53:EC:A5:EA:D3:C0:74 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SMVXkCVMZs04ZmAYX1PsperTwHQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 61:50:c2:ca:04:c4:38:9d:94:98:f7:50:1c:61:04:72:39:6d: 66:3a:84:6b:c9:9f:9c:21:96:87:53:bd:75:df:21:a0:80:05: 77:97:97:ec:12:6c:2c:5a:5d:91:6b:88:61:f9:ec:c2:ca:04: 74:ed:e1:b5:0b:1f:0e:74:f2:89:9f:f5:ea:87:a1:25:a7:aa: 25:5d:ce:e4:60:ed:0e:cf:b6:bb:e0:b9:38:39:9d:0f:bf:ce: e0:3b:86:17:5b:7e:3b:c7:28:a9:da:87:97:50:39:5a:75:a9: 40:55:b4:8a:c1:72:e6:c9:64:4b:6c:f1:42:19:99:a5:fe:6d: 50:d8:06:f2:f0:93:82:3c:17:f8:47:b2:45:94:bd:c9:46:49: a0:43:18:6a:ca:57:a2:df:1e:21:ac:67:15:be:ab:07:44:3b: e1:33:eb:03:dd:c8:5c:b8:15:29:47:e9:7a:6b:3e:19:95:4a: 39:86:7b:d6:fb:9b:4e:b7:0d:07:a2:aa:fd:5d:3c:91:71:77: 21:2b:87:1d:9a:fe:c6:39:4a:95:e1:ea:d7:b3:9f:e0:90:e1: 25:d6:99:b4:86:8e:f3:36:f2:a6:0d:50:96:c5:72:e8:c9:e7: 47:0f:c0:01:12:ac:ad:7b:c8:81:3d:01:40:13:9c:a9:f6:49: a8:ea:0c:20 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICFnQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDYw MDM5MjVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDQ4QzU1NzkwMjU0QzY2 Q0QzODY2NjAxODVGNTNFQ0E1RUFEM0MwNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9pArvgTIUI0veYGRkpw+e7IAFbKSLeyFmFz4kiqlT1Je6x9mb UUlhoEb19ZvlIRTUPO46pADOPi+1wieLNWhumwi4/biw5sfXPVy6/cMAqk1KL69N ZLcn4W223uLX842H2ZGknWZvY5ft11fZmVKHM/v+1QX9b82KZqKe0PQQCPg9FQUG Z9J4+rLtqEcUHat2yywCeYlDKg12P7aVErqVQ/Nyr3JS08kuyxQkBcqB4F30k91W 320CrA68z7MKOXOJ3jwQvO+WNdEYvYIzKuRD0qSOnJMxPkFTXwBNvPbl/qLcOC5V MG9tc9NUTb04L2diz9emOc7EQK+/9f0lnhe3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUSMVXkCVMZs04ZmAYX1PsperTwHQwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9TTVZYa0NWTVpzMDRabUFZ WDFQc3BlclR3SFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAGFQwsoExDidlJj3UBxhBHI5bWY6hGvJn5wh lodTvXXfIaCABXeXl+wSbCxaXZFriGH57MLKBHTt4bULHw508omf9eqHoSWnqiVd zuRg7Q7PtrvguTg5nQ+/zuA7hhdbfjvHKKnah5dQOVp1qUBVtIrBcubJZEts8UIZ maX+bVDYBvLwk4I8F/hHskWUvclGSaBDGGrKV6LfHiGsZxW+qwdEO+Ez6wPdyFy4 FSlH6XprPhmVSjmGe9b7m063DQeiqv1dPJFxdyErhx2a/sY5SpXh6tezn+CQ4SXW mbSGjvM28qYNUJbFcujJ50cPwAESrK17yIE9AUATnKn2SajqDCA= -----END CERTIFICATE-----Generated at Mon Jan 12 09:39:06 2026 by rpki-client