This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/WDbo0KAn00uw66je1VnvvJc1Bfs.roa File: WDbo0KAn00uw66je1VnvvJc1Bfs.roa (raw, json) Hash identifier: 6cJT7w1llHoMaFzs6D2Sa4QPjQo5TkupYPfCYFNC48A= Subject key identifier: 58:36:E8:D0:A0:27:D3:4B:B0:EB:A8:DE:D5:59:EF:BC:97:35:05:FB Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 1698 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WDbo0KAn00uw66je1VnvvJc1Bfs.roa Signing time: Fri 06 Jun 2025 05:09:24 +0000 ROA not before: Fri 06 Jun 2025 05:09:24 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 5784 (0x1698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Jun 6 05:09:24 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=5836E8D0A027D34BB0EBA8DED559EFBC973505FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:81:8e:83:c1:12:ec:5f:c6:b9:73:1f:d2:71: 96:00:9f:17:1e:1c:15:10:95:0f:a4:a5:e9:65:b6: 1c:62:95:ed:a9:0a:05:8c:e5:4d:bd:c3:2a:1f:7c: 7d:d2:92:e6:8e:e2:eb:b1:6a:14:fc:e5:9c:18:20: df:b5:b5:2f:37:c9:63:59:6e:68:e5:94:80:aa:03: 06:55:9d:3c:a4:58:6f:c0:19:94:76:b8:a8:8e:d3: 21:55:eb:47:14:08:51:62:cd:a3:57:26:61:75:f8: c1:e9:ba:06:97:8e:0f:57:47:36:62:62:c0:a3:15: d5:a8:ac:38:da:4c:16:fb:46:f8:92:89:37:2a:9b: 9c:65:80:63:6d:09:c5:db:0b:93:12:dd:93:58:ff: a7:b0:eb:b5:75:8d:d0:f6:cc:af:b7:d3:03:e5:c9: cc:36:84:cc:6e:67:95:85:93:f6:27:82:9e:0e:fd: a1:a3:c0:58:c6:5b:1b:b0:63:f4:3f:99:78:dd:6c: 12:ee:8f:b0:70:75:f1:78:30:fa:95:b8:ac:9a:b0: 2f:3c:01:91:4a:f0:7c:0a:48:34:d6:9d:87:74:85: d2:78:a9:0c:90:32:42:4d:fe:17:99:0f:f5:98:c6: 5b:bd:a8:eb:a3:01:a6:4a:f9:73:fd:3a:57:5d:ff: c4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:36:E8:D0:A0:27:D3:4B:B0:EB:A8:DE:D5:59:EF:BC:97:35:05:FB X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WDbo0KAn00uw66je1VnvvJc1Bfs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 96:b8:9f:23:52:ef:29:cc:60:e2:fb:1d:b8:78:69:ab:0f:93: 0d:fd:46:01:a2:a9:c5:4e:d2:3f:47:95:d5:36:85:6c:5b:60: 2e:6b:dc:a1:b5:68:90:90:60:d7:52:66:cb:09:1b:a1:cc:ff: 29:6c:0a:50:24:62:dc:8a:25:92:be:2d:b9:78:07:81:5d:ef: bf:68:e0:0c:90:13:7c:27:ca:68:f5:c6:67:73:3f:62:87:9b: e4:22:83:b2:e2:1c:6b:b5:dd:75:7c:2c:71:ad:43:83:f9:21: a0:db:19:8d:ab:5e:05:c4:7e:6b:88:fc:77:0f:fd:31:c8:33: 5d:7f:13:73:1b:72:82:70:79:bf:e1:68:49:c3:c5:c0:b7:63: f5:93:34:e0:36:0d:8a:98:8a:7a:7a:91:0f:23:6d:0f:20:93: f3:73:bf:f6:45:d5:21:8c:c2:17:4d:9c:73:68:f9:e5:31:5c: b8:4e:9f:a0:0a:ad:7d:21:4b:e7:37:9b:7b:21:24:52:2b:81: f5:a8:87:7f:2b:46:8d:29:d1:2b:bd:1d:08:8f:c2:1f:e5:a3: b9:cf:0e:91:80:03:72:51:42:7b:80:b1:5e:d1:bd:54:61:45: ed:ca:88:de:50:02:7b:d8:b4:9a:8b:5e:2a:bf:ac:34:ac:8a: 70:cd:0c:aa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICFpgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDYw NTA5MjRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDU4MzZFOEQwQTAyN0Qz NEJCMEVCQThERUQ1NTlFRkJDOTczNTA1RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPgY6DwRLsX8a5cx/ScZYAnxceHBUQlQ+kpellthxile2pCgWM 5U29wyoffH3SkuaO4uuxahT85ZwYIN+1tS83yWNZbmjllICqAwZVnTykWG/AGZR2 uKiO0yFV60cUCFFizaNXJmF1+MHpugaXjg9XRzZiYsCjFdWorDjaTBb7RviSiTcq m5xlgGNtCcXbC5MS3ZNY/6ew67V1jdD2zK+30wPlycw2hMxuZ5WFk/Yngp4O/aGj wFjGWxuwY/Q/mXjdbBLuj7BwdfF4MPqVuKyasC88AZFK8HwKSDTWnYd0hdJ4qQyQ MkJN/heZD/WYxlu9qOujAaZK+XP9Oldd/8SDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWDbo0KAn00uw66je1VnvvJc1BfswHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9XRGJvMEtBbjAwdXc2Nmpl MVZudnZKYzFCZnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAJa4nyNS7ynMYOL7Hbh4aasPkw39RgGiqcVO 0j9HldU2hWxbYC5r3KG1aJCQYNdSZssJG6HM/ylsClAkYtyKJZK+Lbl4B4Fd779o 4AyQE3wnymj1xmdzP2KHm+Qig7LiHGu13XV8LHGtQ4P5IaDbGY2rXgXEfmuI/HcP /THIM11/E3MbcoJweb/haEnDxcC3Y/WTNOA2DYqYinp6kQ8jbQ8gk/Nzv/ZF1SGM whdNnHNo+eUxXLhOn6AKrX0hS+c3m3shJFIrgfWoh38rRo0p0Su9HQiPwh/lo7nP DpGAA3JRQnuAsV7RvVRhRe3KiN5QAnvYtJqLXiq/rDSsinDNDKo= -----END CERTIFICATE-----Generated at Mon Jan 12 13:07:16 2026 by rpki-client