This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ZMHtxMZFNSF14dab2ylUArds9Ig.roa File: ZMHtxMZFNSF14dab2ylUArds9Ig.roa (raw, json) Hash identifier: OT6B5Q0QzKPZuo6LIyNMQ4Hsst7aTLGKMzq9rL93Et8= Subject key identifier: 64:C1:ED:C4:C6:45:35:21:75:E1:D6:9B:DB:29:54:02:B7:6C:F4:88 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 4686 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZMHtxMZFNSF14dab2ylUArds9Ig.roa Signing time: Sat 20 Dec 2025 17:08:47 +0000 ROA not before: Sat 20 Dec 2025 17:08:47 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9391 IP address blocks: 124.29.0.0/17 maxlen: 17 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 18054 (0x4686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Dec 20 17:08:47 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=64C1EDC4C645352175E1D69BDB295402B76CF488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:fd:76:e4:96:94:7f:b7:de:37:16:79:41: 2c:01:0e:4f:f3:2e:d2:c7:0e:d9:f7:4a:66:9b:aa: 52:f8:ae:3c:e4:97:c8:97:4c:20:7c:31:21:f2:20: 5b:2f:8f:84:80:88:9c:a6:1b:8d:b8:55:b6:0b:ee: de:4d:46:ad:e6:05:e7:ff:f3:80:be:de:9e:33:25: 7e:3c:67:dc:32:8b:c2:7b:2d:9b:c4:5b:67:08:53: 82:a6:56:ca:45:9b:df:9a:35:0c:06:5c:1a:a9:53: 75:15:f0:30:8f:6c:67:4b:61:1a:90:a7:86:30:87: 46:41:fa:e4:38:85:11:8f:70:23:33:94:80:0b:35: b4:b9:3c:e0:d1:a0:5c:f8:39:fb:0c:4e:e9:03:3c: 6e:80:36:7c:a1:31:73:ca:3f:20:de:88:2f:79:3d: 26:1f:14:79:a4:79:61:d5:1b:e2:4e:7f:97:3c:a1: 5d:44:73:05:bf:15:c8:42:13:89:6b:11:df:9b:e9: 38:ad:c1:e4:d1:a4:c3:d0:6c:b8:cc:b1:ca:2e:a7: 08:9a:10:85:a0:7d:a0:ab:48:0a:fe:c5:c2:0e:79: 0a:95:f6:93:ee:1c:e0:d2:b2:09:c9:8c:0d:87:e7: 40:b5:a1:fc:c4:0b:04:0f:01:6d:be:cc:c0:45:33: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C1:ED:C4:C6:45:35:21:75:E1:D6:9B:DB:29:54:02:B7:6C:F4:88 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZMHtxMZFNSF14dab2ylUArds9Ig.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.29.0.0/17 Signature Algorithm: sha256WithRSAEncryption 0d:69:84:45:b5:4b:b2:14:26:a0:05:3c:3a:b4:ff:f3:46:02: 30:6c:d2:93:a8:37:78:9d:89:f8:f5:51:77:5e:ed:bd:e4:b8: 58:57:89:1b:76:6c:ac:30:cf:61:cd:d1:74:f8:7a:71:42:ee: 01:b7:9d:50:0b:30:43:5f:51:a1:92:16:6f:0c:74:c2:93:1e: 9a:c8:2f:6b:fa:51:29:cf:e3:89:d8:a8:3e:eb:c0:60:87:f6: 8c:ac:07:60:fd:c7:24:32:42:de:dd:ff:f9:ab:4d:0f:56:c7: 6d:b1:9b:91:b6:71:bf:dc:a1:6b:05:14:79:78:2f:c4:71:2c: 2e:de:34:d4:ce:86:ea:7a:91:92:57:3e:09:9b:c7:e1:c8:c6: 5d:06:63:56:8e:7c:35:03:e6:32:08:e1:ea:09:9f:d8:28:a1: d9:7e:a9:79:03:d9:6c:89:2b:f4:ff:47:44:61:5a:2e:dd:80: 39:52:a9:91:80:19:fc:ee:5f:7b:79:d4:c2:2c:15:fe:2f:2d: ae:32:e4:cc:f6:55:8e:6a:ff:65:18:f7:d1:05:ae:63:76:a4: 98:ec:28:4d:f2:ed:3f:38:f2:27:3e:96:6d:e6:7d:82:5a:12: 07:ed:17:6b:d3:e9:5a:43:c1:f2:dd:d7:df:1c:66:78:9d:8a: 9b:90:43:75 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICRoYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTEyMjAx NzA4NDdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDY0QzFFREM0QzY0NTM1 MjE3NUUxRDY5QkRCMjk1NDAyQjc2Q0Y0ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBWf125JaUf7feNxZ5QSwBDk/zLtLHDtn3SmabqlL4rjzkl8iX TCB8MSHyIFsvj4SAiJymG424VbYL7t5NRq3mBef/84C+3p4zJX48Z9wyi8J7LZvE W2cIU4KmVspFm9+aNQwGXBqpU3UV8DCPbGdLYRqQp4Ywh0ZB+uQ4hRGPcCMzlIAL NbS5PODRoFz4OfsMTukDPG6ANnyhMXPKPyDeiC95PSYfFHmkeWHVG+JOf5c8oV1E cwW/FchCE4lrEd+b6TitweTRpMPQbLjMscoupwiaEIWgfaCrSAr+xcIOeQqV9pPu HODSsgnJjA2H50C1ofzECwQPAW2+zMBFM4PDAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUZMHtxMZFNSF14dab2ylUArds9IgwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9aTUh0eE1aRk5TRjE0ZGFi MnlsVUFyZHM5SWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH fB0AMA0GCSqGSIb3DQEBCwUAA4IBAQANaYRFtUuyFCagBTw6tP/zRgIwbNKTqDd4 nYn49VF3Xu295LhYV4kbdmysMM9hzdF0+HpxQu4Bt51QCzBDX1GhkhZvDHTCkx6a yC9r+lEpz+OJ2Kg+68Bgh/aMrAdg/cckMkLe3f/5q00PVsdtsZuRtnG/3KFrBRR5 eC/EcSwu3jTUzobqepGSVz4Jm8fhyMZdBmNWjnw1A+YyCOHqCZ/YKKHZfql5A9ls iSv0/0dEYVou3YA5UqmRgBn87l97edTCLBX+Ly2uMuTM9lWOav9lGPfRBa5jdqSY 7ChN8u0/OPInPpZt5n2CWhIH7Rdr0+laQ8Hy3dffHGZ4nYqbkEN1 -----END CERTIFICATE-----Generated at Sat Dec 20 20:22:37 2025 by rpki-client