This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UVUYIlvS5j244QvEouHtMOWSkJA.roa File: UVUYIlvS5j244QvEouHtMOWSkJA.roa (raw, json) Hash identifier: aUDx2gSZXGx7+Fa5/yqQ8nOrxIrAYv6C3wDTCp12bDg= Subject key identifier: 51:55:18:22:5B:D2:E6:3D:B8:E1:0B:C4:A2:E1:ED:30:E5:92:90:90 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0D61 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UVUYIlvS5j244QvEouHtMOWSkJA.roa Signing time: Sat 24 May 2025 22:08:33 +0000 ROA not before: Sat 24 May 2025 22:08:33 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 27.103.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 3425 (0xd61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 24 22:08:33 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=515518225BD2E63DB8E10BC4A2E1ED30E5929090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9d:60:7e:3c:a6:e9:84:78:a2:55:cb:d5:81: 4f:a9:1b:9e:2b:58:73:2d:c8:15:24:6d:72:14:b3: 63:df:94:8f:d9:97:06:cb:7f:6e:ab:90:2d:3e:ef: 9e:ee:7b:00:64:f4:0d:47:d7:f7:68:21:5b:77:29: 00:dc:7e:78:ad:88:c8:59:06:bd:47:79:66:e0:df: 45:d0:f9:ae:89:86:20:66:94:b2:a1:02:f8:ac:8b: 25:79:04:ab:07:00:da:0c:5f:75:07:37:f7:ab:7e: 2c:83:8b:dd:75:8a:ff:20:61:59:a9:cc:ca:cd:1d: 40:b5:9d:cc:bc:6a:d1:63:5b:e0:85:a2:28:00:c5: d3:d8:ae:89:a5:5f:12:70:fd:af:78:24:d7:85:8e: 2f:eb:54:6d:18:54:37:72:ac:51:58:43:65:98:5c: 5f:72:a8:0e:fd:22:c0:72:d8:1a:86:15:13:57:0a: 51:c2:46:5b:fb:b3:9a:8e:e5:58:42:84:f5:17:68: 96:34:98:78:4c:77:47:a2:5b:25:fc:c6:50:2d:d4: 95:f9:d7:05:6a:15:4b:c1:8e:3a:27:26:59:c4:a9: f1:d4:a3:12:27:b1:cd:1d:03:24:17:4b:0b:aa:0f: 05:88:48:86:cf:40:3f:28:2a:1d:9e:4f:d9:ed:e1: c2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:55:18:22:5B:D2:E6:3D:B8:E1:0B:C4:A2:E1:ED:30:E5:92:90:90 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UVUYIlvS5j244QvEouHtMOWSkJA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption af:df:ce:00:47:c3:dc:7e:57:75:1d:1a:a1:3c:06:59:ad:f0: c2:99:98:69:3d:5a:5e:f7:80:12:15:4c:6a:51:71:0b:e1:66: f3:8f:95:6d:b8:0c:22:e8:3d:ad:fd:58:75:20:8a:30:84:a2: f0:9d:62:6c:38:5e:5b:85:d7:4d:cf:88:91:a2:39:7d:f8:77: f3:56:e9:e2:b9:5a:32:25:5e:86:21:ca:a8:53:78:52:1d:1b: e2:6c:16:37:65:26:dd:22:7d:3c:2e:ad:61:7a:f1:b7:fb:27: 83:0d:a4:ed:de:3c:46:f6:49:bd:6c:41:ab:c1:dc:bd:d3:b9: 9b:2a:85:e4:b3:d3:d5:4f:7e:c5:c1:9d:24:e0:52:5e:15:c7: fa:fa:fa:39:72:78:11:36:4d:f9:9b:14:9b:96:93:b9:48:64: 7a:d4:0e:9b:49:88:1b:31:67:f9:a4:90:d9:ba:9e:5f:29:03: 93:44:8c:25:d3:5b:26:94:e6:96:23:e0:27:27:37:42:d8:bd: 4d:48:ef:1e:f0:0e:58:d7:ec:74:7b:9f:d6:61:8d:4a:00:85: 46:a4:49:09:8c:95:dd:19:f4:87:a6:13:1f:44:92:80:57:83: 94:0f:f9:b3:e1:a6:6e:78:4d:03:78:86:8b:46:d6:8e:e4:79: 3c:4e:19:05 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjQy MjA4MzNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDUxNTUxODIyNUJEMkU2 M0RCOEUxMEJDNEEyRTFFRDMwRTU5MjkwOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPnWB+PKbphHiiVcvVgU+pG54rWHMtyBUkbXIUs2PflI/ZlwbL f26rkC0+757uewBk9A1H1/doIVt3KQDcfnitiMhZBr1HeWbg30XQ+a6JhiBmlLKh AvisiyV5BKsHANoMX3UHN/erfiyDi911iv8gYVmpzMrNHUC1ncy8atFjW+CFoigA xdPYromlXxJw/a94JNeFji/rVG0YVDdyrFFYQ2WYXF9yqA79IsBy2BqGFRNXClHC Rlv7s5qO5VhChPUXaJY0mHhMd0eiWyX8xlAt1JX51wVqFUvBjjonJlnEqfHUoxIn sc0dAyQXSwuqDwWISIbPQD8oKh2eT9nt4cL7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUVUYIlvS5j244QvEouHtMOWSkJAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9VVlVZSWx2UzVqMjQ0UXZF b3VIdE1PV1NrSkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA G2cwDQYJKoZIhvcNAQELBQADggEBAK/fzgBHw9x+V3UdGqE8Blmt8MKZmGk9Wl73 gBIVTGpRcQvhZvOPlW24DCLoPa39WHUgijCEovCdYmw4XluF103PiJGiOX34d/NW 6eK5WjIlXoYhyqhTeFIdG+JsFjdlJt0ifTwurWF68bf7J4MNpO3ePEb2Sb1sQavB 3L3TuZsqheSz09VPfsXBnSTgUl4Vx/r6+jlyeBE2TfmbFJuWk7lIZHrUDptJiBsx Z/mkkNm6nl8pA5NEjCXTWyaU5pYj4CcnN0LYvU1I7x7wDljX7HR7n9ZhjUoAhUak SQmMld0Z9IemEx9EkoBXg5QP+bPhpm54TQN4hotG1o7keTxOGQU= -----END CERTIFICATE-----Generated at Mon Jan 12 02:17:46 2026 by rpki-client