This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YixlZH0Ib8aDDGGLnGd2CqSsbPo.roa File: YixlZH0Ib8aDDGGLnGd2CqSsbPo.roa (raw, json) Hash identifier: rbCWfgWhZbPOtgaPULztbOFiJq6/d1h8fc1Ip8Hcdmc= Subject key identifier: 62:2C:65:64:7D:08:6F:C6:83:0C:61:8B:9C:67:76:0A:A4:AC:6C:FA Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 1B10 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YixlZH0Ib8aDDGGLnGd2CqSsbPo.roa Signing time: Thu 12 Jun 2025 04:09:57 +0000 ROA not before: Thu 12 Jun 2025 04:09:57 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 6928 (0x1b10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Jun 12 04:09:57 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=622C65647D086FC6830C618B9C67760AA4AC6CFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c6:d7:de:c6:e6:6a:d6:d3:53:7e:b7:ad:84: 86:c5:ca:8e:27:d3:5f:e8:b0:5e:4c:c9:3d:2f:eb: 82:89:51:9b:ff:31:f4:aa:1f:7d:60:a8:9c:c3:32: 0a:3f:2c:05:ad:36:72:53:e5:09:00:6e:c9:65:30: 04:e0:2b:c6:11:75:e9:34:3a:63:1b:db:a0:ee:84: ba:9d:b1:8e:86:26:9d:5e:77:1b:a3:32:b7:2b:69: d8:ee:e0:33:e5:b3:49:ad:8d:ae:8a:b8:be:98:83: 67:b6:31:57:e0:02:7b:b6:8f:67:bb:c9:11:5b:8a: 5d:72:a8:0e:0c:83:77:1f:c8:b6:fd:ba:fc:f4:4a: 5f:5d:47:55:17:c0:99:a3:1e:e7:20:3c:53:45:e4: 85:bc:43:42:94:e9:1d:40:d4:c6:5c:c9:71:fd:87: 9b:57:5d:ba:80:d8:d6:2e:f2:44:68:ee:63:c1:e7: 24:ff:81:bd:94:16:84:f4:98:d6:67:dc:ca:c4:3e: ac:d5:46:e8:59:50:73:7a:3d:ed:1a:35:fc:04:31: c8:87:16:6b:d6:13:25:19:33:05:c2:ee:86:59:e8: 01:e5:05:51:40:c4:80:f8:6d:79:94:38:28:3e:29: 98:20:3b:25:b7:75:38:c5:f7:99:e7:c1:86:a9:9f: 16:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2C:65:64:7D:08:6F:C6:83:0C:61:8B:9C:67:76:0A:A4:AC:6C:FA X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YixlZH0Ib8aDDGGLnGd2CqSsbPo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 73:ea:63:40:4a:70:8b:5f:e4:ec:2e:fe:7d:55:c9:16:21:ed: 55:82:a7:41:4b:6b:77:76:15:9f:a9:e5:de:d6:5f:7b:5d:ed: fb:04:6a:d6:cf:bd:37:af:e9:62:c2:44:24:0e:da:3c:6e:d4: d0:f3:dd:ff:48:e1:42:02:b0:38:f7:e6:22:5a:22:0a:59:a5: d0:fe:3c:ad:08:06:1f:89:e9:18:05:71:d9:93:5b:74:d3:07: d3:df:86:18:d0:eb:54:ed:0a:40:f5:f6:cc:b5:29:ff:c8:49: 60:e1:40:9b:5e:81:43:ca:9c:e1:1b:6f:e8:a6:c9:5e:fc:26: 84:70:60:d5:4c:c3:17:52:c4:c8:ea:d0:8f:21:f0:93:26:e2: 1d:b5:d0:d7:9c:c5:d9:35:0c:45:04:5e:b4:75:a4:87:cd:6b: 07:16:fd:31:c9:9b:5e:a6:d4:7e:66:bc:69:3a:df:2e:71:06: b0:07:40:ab:59:75:ec:90:e5:5a:96:46:fc:4b:4c:21:f0:3a: 50:33:0d:16:4d:e9:00:6e:15:dc:48:b2:05:40:9a:c4:a9:ac: 86:13:73:c0:b9:99:3e:ba:ef:f1:9c:b2:80:8d:ea:47:ec:37: 3e:7c:85:7d:18:0e:0a:64:6e:58:d3:af:db:1d:6d:d9:b7:54: a8:19:e2:6d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICGxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTIw NDA5NTdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDYyMkM2NTY0N0QwODZG QzY4MzBDNjE4QjlDNjc3NjBBQTRBQzZDRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDextfexuZq1tNTfrethIbFyo4n01/osF5MyT0v64KJUZv/MfSq H31gqJzDMgo/LAWtNnJT5QkAbsllMATgK8YRdek0OmMb26DuhLqdsY6GJp1edxuj Mrcradju4DPls0mtja6KuL6Yg2e2MVfgAnu2j2e7yRFbil1yqA4Mg3cfyLb9uvz0 Sl9dR1UXwJmjHucgPFNF5IW8Q0KU6R1A1MZcyXH9h5tXXbqA2NYu8kRo7mPB5yT/ gb2UFoT0mNZn3MrEPqzVRuhZUHN6Pe0aNfwEMciHFmvWEyUZMwXC7oZZ6AHlBVFA xID4bXmUOCg+KZggOyW3dTjF95nnwYapnxaRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYixlZH0Ib8aDDGGLnGd2CqSsbPowHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9ZaXhsWkgwSWI4YURER0dM bkdkMkNxU3NiUG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAHPqY0BKcItf5Owu/n1VyRYh7VWCp0FLa3d2 FZ+p5d7WX3td7fsEatbPvTev6WLCRCQO2jxu1NDz3f9I4UICsDj35iJaIgpZpdD+ PK0IBh+J6RgFcdmTW3TTB9PfhhjQ61TtCkD19sy1Kf/ISWDhQJtegUPKnOEbb+im yV78JoRwYNVMwxdSxMjq0I8h8JMm4h210Necxdk1DEUEXrR1pIfNawcW/THJm16m 1H5mvGk63y5xBrAHQKtZdeyQ5VqWRvxLTCHwOlAzDRZN6QBuFdxIsgVAmsSprIYT c8C5mT667/GcsoCN6kfsNz58hX0YDgpkbljTr9sdbdm3VKgZ4m0= -----END CERTIFICATE-----Generated at Sun Jan 11 23:23:34 2026 by rpki-client