This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Wue8znP8sPYsH9Z_99x3v_ose_k.roa File: Wue8znP8sPYsH9Z_99x3v_ose_k.roa (raw, json) Hash identifier: OlSEyKwx/mnFMPF/qYHKGsU+M2qHdAZ1uWDhPUZOEp4= Subject key identifier: 5A:E7:BC:CE:73:FC:B0:F6:2C:1F:D6:7F:F7:DC:77:BF:FA:2C:7B:F9 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 157C Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Wue8znP8sPYsH9Z_99x3v_ose_k.roa Signing time: Wed 04 Jun 2025 17:39:22 +0000 ROA not before: Wed 04 Jun 2025 17:39:22 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 5500 (0x157c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Jun 4 17:39:22 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=5AE7BCCE73FCB0F62C1FD67FF7DC77BFFA2C7BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ac:ac:1f:44:00:0c:94:05:b5:c5:d1:b2:ef: bd:f3:f8:ea:eb:b6:11:d1:a7:74:2f:53:c3:fc:37: 6d:fd:88:f0:ee:6e:b6:df:dd:65:13:eb:69:0b:a4: 16:d0:7b:28:ad:c2:41:cc:56:40:0a:c2:ab:fa:bf: 7c:7e:2e:42:05:96:86:44:07:04:62:3d:0c:e1:07: ac:ed:9f:b3:12:8d:77:c5:62:b0:61:1e:b7:d5:d7: 19:24:78:8f:bd:cc:e0:e9:51:90:70:25:00:18:84: e9:93:8f:f5:b4:80:3e:27:4f:72:2b:2c:8f:5b:71: f7:26:00:1a:38:40:f2:4e:1d:82:d2:30:19:d9:2e: 36:c6:3b:0a:a1:f4:b0:b8:39:c6:ae:2d:e2:97:2f: 18:42:7b:d9:65:e3:87:7e:57:f0:f4:29:a6:a8:89: b7:e1:53:23:0f:07:fa:40:fe:fb:f5:79:1d:e0:8e: 0a:9c:20:25:38:3c:3d:e7:87:13:a1:e0:83:98:8b: e3:8a:70:a5:9f:ab:63:84:b3:09:26:83:3e:f0:30: 71:37:02:37:af:33:9b:b9:7b:14:fd:97:64:d6:f2: e6:ca:8e:8a:fa:d0:65:f7:10:a8:f1:51:64:fe:2f: 88:d4:25:0e:8b:76:fb:5e:0f:1d:c6:6e:ff:76:c3: 7d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E7:BC:CE:73:FC:B0:F6:2C:1F:D6:7F:F7:DC:77:BF:FA:2C:7B:F9 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Wue8znP8sPYsH9Z_99x3v_ose_k.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 29:07:5d:41:61:de:51:ee:03:39:2f:fd:9a:91:f0:20:ff:c5: 95:7c:62:36:ff:b6:21:08:3b:3c:1c:19:85:69:9a:6c:4b:8d: f7:7d:6e:c3:e7:39:6b:93:c5:8c:66:49:76:d6:7c:c2:74:35: 32:7a:a9:4b:11:f3:50:91:0d:5d:7d:80:5c:2b:b4:67:ad:b1: ff:58:41:f9:c3:15:a3:d3:5d:41:20:60:74:e8:30:91:61:73: 20:81:aa:3b:85:d3:7e:46:eb:63:1f:11:f8:7a:70:62:e5:ef: 22:fc:72:a7:b0:f0:a3:63:f3:11:fd:ee:30:22:7b:92:12:a2: b1:e5:d9:b2:0f:47:70:16:44:2f:16:6d:fc:18:d1:35:21:d5: 3e:9d:6f:36:c4:d8:40:27:54:6d:fc:75:a8:85:18:ad:55:bb: e5:83:2c:4e:28:82:f1:33:32:bb:27:20:c4:72:06:26:b5:d0: 39:06:b1:bb:ab:4e:b1:9e:08:0c:86:79:05:7d:a4:1d:4a:d7: fa:57:25:54:0e:32:86:d5:6b:97:ac:08:fe:cf:2d:a0:10:9f: e6:6d:07:9a:37:98:55:0d:3a:d0:f7:bb:c8:1e:b4:76:0a:27: f6:0f:b7:9b:72:c8:5b:39:63:1d:bb:85:f7:bb:9f:58:02:52: c7:a1:bd:dd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICFXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDQx NzM5MjJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDVBRTdCQ0NFNzNGQ0Iw RjYyQzFGRDY3RkY3REM3N0JGRkEyQzdCRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD5rKwfRAAMlAW1xdGy773z+OrrthHRp3QvU8P8N239iPDubrbf 3WUT62kLpBbQeyitwkHMVkAKwqv6v3x+LkIFloZEBwRiPQzhB6ztn7MSjXfFYrBh HrfV1xkkeI+9zODpUZBwJQAYhOmTj/W0gD4nT3IrLI9bcfcmABo4QPJOHYLSMBnZ LjbGOwqh9LC4OcauLeKXLxhCe9ll44d+V/D0KaaoibfhUyMPB/pA/vv1eR3gjgqc ICU4PD3nhxOh4IOYi+OKcKWfq2OEswkmgz7wMHE3AjevM5u5exT9l2TW8ubKjor6 0GX3EKjxUWT+L4jUJQ6LdvteDx3Gbv92w31PAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWue8znP8sPYsH9Z/99x3v/ose/kwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9XdWU4em5QOHNQWXNIOVpf OTl4M3Zfb3NlX2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBACkHXUFh3lHuAzkv/ZqR8CD/xZV8Yjb/tiEI OzwcGYVpmmxLjfd9bsPnOWuTxYxmSXbWfMJ0NTJ6qUsR81CRDV19gFwrtGetsf9Y QfnDFaPTXUEgYHToMJFhcyCBqjuF035G62MfEfh6cGLl7yL8cqew8KNj8xH97jAi e5ISorHl2bIPR3AWRC8WbfwY0TUh1T6dbzbE2EAnVG38daiFGK1Vu+WDLE4ogvEz MrsnIMRyBia10DkGsburTrGeCAyGeQV9pB1K1/pXJVQOMobVa5esCP7PLaAQn+Zt B5o3mFUNOtD3u8getHYKJ/YPt5tyyFs5Yx27hfe7n1gCUsehvd0= -----END CERTIFICATE-----Generated at Fri Jan 9 07:48:04 2026 by rpki-client