This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/U1JJ9bqLwTQDGqCtqbYeiuhQAjc.roa
File: U1JJ9bqLwTQDGqCtqbYeiuhQAjc.roa (raw, json)
Hash identifier: nuNc6I1retkqSV677TyKrVYMxnKAC2qsjf7uW9PQ1xI=
Subject key identifier: 53:52:49:F5:BA:8B:C1:34:03:1A:A0:AD:A9:B6:1E:8A:E8:50:02:37
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0402
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/U1JJ9bqLwTQDGqCtqbYeiuhQAjc.roa
Signing time: Mon 12 May 2025 10:08:36 +0000
ROA not before: Mon 12 May 2025 10:08:36 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1026 (0x402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 10:08:36 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=535249F5BA8BC134031AA0ADA9B61E8AE8500237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:f4:0b:31:b4:ab:42:17:3a:8a:ac:e4:c4:
a4:a1:33:97:d1:db:0a:47:6b:b1:3b:90:83:9c:b6:
2d:a0:05:ff:e8:6e:b8:80:0a:1a:8d:98:33:d7:21:
d7:08:71:a5:21:6b:f4:a7:c0:05:ca:1d:8f:97:be:
99:2b:70:78:62:d7:d3:db:a8:70:b6:4e:65:28:22:
03:05:30:3f:30:e6:a6:c3:ef:2f:86:84:2e:36:d1:
63:7d:f8:01:12:8b:21:d7:9d:97:f8:d9:c2:7c:24:
b2:d0:72:fd:12:dd:ea:64:e8:b1:0a:9b:0e:b4:61:
4b:ad:37:77:18:2d:6e:d9:02:e7:a7:47:8a:fc:6f:
82:55:fa:ad:6c:da:41:64:38:eb:17:39:8a:5f:7c:
3c:35:e0:9f:2a:55:c4:8c:ad:a8:a1:24:f3:f3:8e:
b1:9f:50:54:dd:de:13:e1:19:28:1b:3d:88:d7:81:
a3:0a:91:0b:30:1b:5c:e3:e4:94:41:de:b3:e5:c5:
6c:d6:72:20:c9:11:1a:f8:57:8e:ab:76:f9:c4:8c:
0e:fe:a0:9b:26:c4:9d:9f:3d:5a:cb:9e:dc:39:fd:
aa:b4:3a:de:b5:1d:10:95:16:75:4e:f6:37:7d:6b:
a9:8d:ff:28:5b:84:13:58:6a:a6:46:a1:4c:d1:b9:
80:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:52:49:F5:BA:8B:C1:34:03:1A:A0:AD:A9:B6:1E:8A:E8:50:02:37
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/U1JJ9bqLwTQDGqCtqbYeiuhQAjc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:f9:90:bf:ff:90:c2:80:24:7a:15:9a:5e:b4:44:02:46:9b:
12:d3:f7:51:80:09:76:02:f2:fb:a8:6c:74:16:c5:eb:4f:62:
95:cd:f3:29:70:cf:3b:e8:9d:a0:d1:c9:06:9f:b3:87:1d:16:
ec:16:ac:05:e7:61:22:f4:ef:e9:f2:9b:27:52:f0:50:8e:4f:
8f:8f:d9:4a:df:ae:00:9e:6c:af:50:97:1a:13:e4:1d:ab:48:
23:56:a7:d1:3e:64:f7:71:a0:a4:a5:ad:4d:1c:5e:ed:f5:44:
39:8b:92:70:88:7e:2b:35:fe:e1:91:e7:40:c0:06:c3:d4:c1:
21:f8:38:d3:00:2f:a1:20:48:84:96:09:c8:87:72:3b:e3:16:
2c:13:42:25:1c:66:73:62:e0:59:6e:f5:e3:d5:28:a5:5f:b4:
a3:21:41:ba:c0:09:b9:06:0d:66:4f:f4:d1:6a:ec:74:23:04:
1a:81:26:c5:7c:dc:b5:25:03:6b:dc:c7:f1:10:53:6a:ff:3d:
26:bd:75:46:66:ae:c4:02:dc:59:63:4b:55:f5:6c:b6:b2:c1:
a5:c8:16:6c:fb:6f:ce:ae:e0:32:79:f9:d5:f2:55:65:29:7b:
f5:06:64:d8:2d:a4:2c:6d:2a:35:9f:c0:fb:aa:23:7a:78:5f:
79:42:ce:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:55:47 2026 by rpki-client