This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/SxTZ98j8tVkRb6tG-qBcdHfOqNI.roa
File: SxTZ98j8tVkRb6tG-qBcdHfOqNI.roa (raw, json)
Hash identifier: MbJFfXn5hUbsMSR0vKFJ5uXJxAuVdiuG/KHGf+av5PM=
Subject key identifier: 4B:14:D9:F7:C8:FC:B5:59:11:6F:AB:46:FA:A0:5C:74:77:CE:A8:D2
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1959
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SxTZ98j8tVkRb6tG-qBcdHfOqNI.roa
Signing time: Mon 09 Jun 2025 21:09:42 +0000
ROA not before: Mon 09 Jun 2025 21:09:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6489 (0x1959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 21:09:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4B14D9F7C8FCB559116FAB46FAA05C7477CEA8D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:fd:ac:b0:b7:ef:bc:ab:89:63:97:fb:5d:
06:8c:fc:d2:74:32:9d:4d:ef:b7:bb:76:2c:1f:58:
1d:32:fd:20:6d:7f:5a:fc:92:f5:fb:29:20:7e:a4:
26:18:7b:47:47:30:65:01:28:6e:71:7b:e4:4a:06:
b6:ff:1d:4b:7c:31:8b:fa:68:5a:36:a8:07:bd:51:
bd:3a:16:d8:f7:ec:f6:c5:e7:38:b0:1e:a8:7e:70:
e5:58:c9:55:7c:c4:d0:95:6c:cd:80:14:29:69:3b:
66:c2:93:d5:3a:a8:0a:1d:01:95:4d:5f:65:70:b7:
a4:9d:d6:dd:7b:d6:3e:bf:f4:60:8e:dd:07:cb:a2:
5e:a1:b7:da:8f:30:3e:e1:80:6e:fd:6d:de:44:6c:
61:f5:6e:b7:f0:18:6e:89:c8:55:7a:6a:f8:fe:f9:
0e:ea:72:17:39:e7:78:43:12:6c:99:10:ef:27:c0:
5a:be:96:de:69:c8:92:83:51:fb:9d:f4:a3:7b:15:
a8:2e:93:1a:21:75:52:05:3d:1b:3c:a7:e4:c0:bc:
93:c3:67:fc:54:2b:a1:bd:0e:9c:14:fb:e1:53:57:
7a:07:33:0e:7b:41:c9:d0:e8:b2:7b:2b:f0:ee:1b:
79:60:1e:db:46:2b:d4:19:62:38:37:90:9a:ce:b8:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:14:D9:F7:C8:FC:B5:59:11:6F:AB:46:FA:A0:5C:74:77:CE:A8:D2
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SxTZ98j8tVkRb6tG-qBcdHfOqNI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:e3:3f:70:0a:1f:ff:83:d4:72:84:d7:b5:ea:07:26:68:63:
72:5f:d5:bc:89:4e:e6:51:3d:41:10:6e:18:fa:be:f0:65:d8:
56:34:2d:9f:89:9b:d3:88:09:d3:7c:18:72:07:bf:05:0f:35:
19:03:75:50:97:0d:b3:fb:ae:a8:90:51:b7:43:68:59:0b:76:
9a:08:cf:22:d4:b9:6c:b0:75:76:c9:eb:35:95:ae:a0:46:3e:
6b:60:2e:49:a3:5d:7c:a7:41:d2:9e:00:fc:e2:3e:90:41:52:
fe:a3:8c:14:cf:81:cc:e9:cb:38:95:cd:cd:86:81:97:3b:99:
13:d0:68:f3:28:00:7b:2a:d7:f1:43:19:49:6b:60:df:9f:20:
ad:be:1a:95:0f:a2:f3:29:5c:c4:56:49:ec:31:4d:d3:ea:95:
96:25:68:8b:81:5d:93:d5:f8:23:2d:c3:63:42:ce:be:fe:85:
cf:14:c1:7f:47:aa:36:27:68:bd:9f:3d:85:d4:b2:b6:79:01:
a6:ea:ae:8a:a7:3f:76:5f:a9:e3:c0:ae:a1:24:43:05:60:67:
09:c7:ed:c2:fa:c6:d1:68:ca:74:3e:0a:ed:84:f3:12:7d:01:
86:78:f0:50:92:08:bb:95:6f:58:e0:f2:6f:84:f2:83:b7:af:
20:3f:2c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:06:50 2026 by rpki-client