This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/WACvnHxtTqVm9SYmCKvtM7fLdqg.roa File: WACvnHxtTqVm9SYmCKvtM7fLdqg.roa (raw, json) Hash identifier: IOk/xBRhuogqHKbb9aSusMIhTJl7vEaiL2h6Kw6AJvM= Subject key identifier: 58:00:AF:9C:7C:6D:4E:A5:66:F5:26:26:08:AB:ED:33:B7:CB:76:A8 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 1A0A Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WACvnHxtTqVm9SYmCKvtM7fLdqg.roa Signing time: Tue 10 Jun 2025 19:09:47 +0000 ROA not before: Tue 10 Jun 2025 19:09:47 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 6666 (0x1a0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Jun 10 19:09:47 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=5800AF9C7C6D4EA566F5262608ABED33B7CB76A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:6c:5b:55:6c:02:48:20:38:2a:6c:70:d2: 07:73:94:1b:5e:5e:85:5a:89:9f:10:5d:fb:d5:14: 3e:4b:46:e7:64:55:d7:be:57:28:41:05:49:cd:25: ba:22:c5:c7:4f:7a:a3:85:9a:4b:e2:d4:c5:79:4e: 6b:ea:0c:ed:a4:5c:a9:33:9e:f5:dd:0f:48:46:46: 4b:a9:09:45:e7:3b:24:23:2b:c5:cd:10:c3:1a:5d: 60:87:44:bb:71:be:c4:1d:24:a8:ae:99:70:31:04: 00:17:ad:09:75:1d:d4:33:30:1b:ca:0a:97:b1:13: 1a:80:e9:22:6d:62:3d:2c:cc:2e:a1:cc:43:49:8f: 0b:31:b1:05:87:5c:ed:14:64:ad:6b:36:3d:79:79: 81:55:4c:85:11:a7:03:cc:94:d3:a2:47:5f:0b:f6: a3:01:26:a1:d0:13:60:43:7c:a3:88:b9:0d:1f:ff: 3c:33:f2:ff:c0:04:62:b1:4c:bb:6b:a8:ea:8d:ad: 34:c9:25:dd:99:2f:33:46:d6:c6:f5:7e:41:a2:24: f7:07:11:2a:97:5e:db:63:dd:06:62:61:60:de:85: f0:59:9a:b3:91:9b:ac:73:1c:1a:af:8d:2f:9b:11: c4:b1:ba:9b:50:06:c7:f5:97:f1:da:72:cc:03:0d: e4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:00:AF:9C:7C:6D:4E:A5:66:F5:26:26:08:AB:ED:33:B7:CB:76:A8 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WACvnHxtTqVm9SYmCKvtM7fLdqg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 38:68:02:bd:ec:bf:da:6a:e6:d8:d5:28:92:8d:8d:f4:5b:0d: 8d:18:dd:4f:97:c3:39:43:84:1b:1c:93:5e:79:c2:e9:14:c9: 68:82:77:ff:59:85:0a:52:78:af:14:82:0b:1b:3a:99:ea:42: 82:78:10:12:14:ab:09:39:a8:30:17:33:16:d7:76:a8:22:f9: e6:65:d3:42:c7:74:9e:7f:9b:25:3a:65:51:db:8e:81:00:a0: e3:3c:73:c5:cf:c2:31:a6:40:7a:1e:20:aa:20:3e:ae:02:2c: 00:5f:94:3b:9a:4e:84:e5:05:2d:9b:c6:96:5c:d0:20:8e:78: 9e:52:46:f7:47:91:14:b1:e8:b5:68:e9:89:3b:f5:87:45:ba: e1:b6:23:3e:7a:ff:76:b9:10:9b:8d:3d:35:50:98:ee:15:32: b8:f7:5c:c4:60:85:86:74:3c:4f:12:7f:2d:51:9b:c1:e9:5b: af:95:09:e2:b4:bb:26:c7:e8:b8:c8:fb:a5:5f:41:4d:56:a9: d6:82:7f:7f:56:09:d9:1a:93:c5:f5:e1:4f:07:d1:d7:95:81: a8:f4:fd:f1:72:46:4d:77:5e:d9:46:51:12:99:df:bf:61:d1: 78:0f:98:99:01:0b:21:1d:7f:1f:cb:85:56:27:b1:eb:44:bd: b0:f4:3d:fa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICGgowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTAx OTA5NDdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDU4MDBBRjlDN0M2RDRF QTU2NkY1MjYyNjA4QUJFRDMzQjdDQjc2QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+vWxbVWwCSCA4Kmxw0gdzlBteXoVaiZ8QXfvVFD5LRudkVde+ VyhBBUnNJboixcdPeqOFmkvi1MV5TmvqDO2kXKkznvXdD0hGRkupCUXnOyQjK8XN EMMaXWCHRLtxvsQdJKiumXAxBAAXrQl1HdQzMBvKCpexExqA6SJtYj0szC6hzENJ jwsxsQWHXO0UZK1rNj15eYFVTIURpwPMlNOiR18L9qMBJqHQE2BDfKOIuQ0f/zwz 8v/ABGKxTLtrqOqNrTTJJd2ZLzNG1sb1fkGiJPcHESqXXttj3QZiYWDehfBZmrOR m6xzHBqvjS+bEcSxuptQBsf1l/HacswDDeS5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWACvnHxtTqVm9SYmCKvtM7fLdqgwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9XQUN2bkh4dFRxVm05U1lt Q0t2dE03ZkxkcWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBADhoAr3sv9pq5tjVKJKNjfRbDY0Y3U+XwzlD hBsck155wukUyWiCd/9ZhQpSeK8UggsbOpnqQoJ4EBIUqwk5qDAXMxbXdqgi+eZl 00LHdJ5/myU6ZVHbjoEAoOM8c8XPwjGmQHoeIKogPq4CLABflDuaToTlBS2bxpZc 0CCOeJ5SRvdHkRSx6LVo6Yk79YdFuuG2Iz56/3a5EJuNPTVQmO4VMrj3XMRghYZ0 PE8Sfy1Rm8HpW6+VCeK0uybH6LjI+6VfQU1WqdaCf39WCdkak8X14U8H0deVgaj0 /fFyRk13XtlGURKZ379h0XgPmJkBCyEdfx/LhVYnsetEvbD0Pfo= -----END CERTIFICATE-----Generated at Mon Jan 12 10:50:00 2026 by rpki-client