This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ZQtQYIvN45fdIhaI3x8c-fdgR2Q.roa File: ZQtQYIvN45fdIhaI3x8c-fdgR2Q.roa (raw, json) Hash identifier: OjyCdVFVUQISeMYWfWV8mWIBVucKv8LQ703xjPNX+fs= Subject key identifier: 65:0B:50:60:8B:CD:E3:97:DD:22:16:88:DF:1F:1C:F9:F7:60:47:64 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 19F2 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZQtQYIvN45fdIhaI3x8c-fdgR2Q.roa Signing time: Tue 10 Jun 2025 16:09:44 +0000 ROA not before: Tue 10 Jun 2025 16:09:44 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 6642 (0x19f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Jun 10 16:09:44 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=650B50608BCDE397DD221688DF1F1CF9F7604764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3a:37:8c:21:0e:ae:1b:85:c7:f2:6f:8b:5f: e3:77:f3:3d:c6:fe:0a:29:22:c3:c1:19:ee:32:4f: ef:f9:f8:52:1b:18:dc:70:af:0c:bd:fc:37:5a:bc: 57:c1:2d:92:e5:14:77:21:2c:60:ed:0b:9f:9d:3b: 30:8c:8a:68:09:37:f6:29:7d:ed:a6:e3:4e:4e:dc: 84:27:97:3d:ff:20:da:ed:08:f6:d7:4d:13:fe:2e: 59:fa:f1:1c:48:91:29:86:a5:74:e2:2a:4e:9f:cb: c9:5d:ac:d6:6d:7c:ab:51:de:18:9f:dc:28:a9:3f: 7f:e2:ef:2e:a4:20:2d:70:9b:13:80:6d:c2:3a:2b: 33:d5:f1:b5:00:90:6b:9d:dd:c6:38:4f:97:07:38: 2a:72:73:6b:b3:89:69:63:12:d4:c5:3c:62:a2:b6: 42:6a:04:45:bc:76:a2:d8:8a:e2:ef:8f:3e:5e:97: 63:91:66:67:ca:ae:ad:0e:7c:4d:e5:8a:fe:95:d5: 09:60:9e:8e:9b:5f:77:3e:e6:d8:b4:64:5c:fa:33: a0:d4:15:cc:cf:dd:c1:f1:c3:19:0d:c4:52:a4:5e: 7b:cd:e6:1e:48:17:9c:01:51:31:9b:c0:de:50:37: 3f:bc:46:4b:29:5e:cd:bb:07:3d:e8:46:7b:cd:5d: 6c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0B:50:60:8B:CD:E3:97:DD:22:16:88:DF:1F:1C:F9:F7:60:47:64 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZQtQYIvN45fdIhaI3x8c-fdgR2Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 22:bd:52:71:6f:fa:4a:04:c0:c9:30:a6:7b:40:37:c1:53:be: 2f:b6:87:a9:ac:4a:47:b3:04:89:6a:fd:54:fd:01:a8:6d:bb: 61:e9:44:8f:c8:5c:03:48:77:cb:be:2d:27:00:8c:52:2d:83: 02:c1:fd:0b:0f:a3:c5:c5:9e:14:de:2d:26:ae:21:7e:5a:2a: 89:15:05:74:65:f3:e2:0b:79:a4:28:cf:60:38:68:f1:63:b9: cd:45:13:3e:dc:64:a9:86:f6:e1:ff:e1:e6:28:36:49:0a:c9: d6:29:c3:40:51:d3:ae:ce:28:06:c1:c2:d3:a4:1c:29:7a:c7: d6:d2:2e:40:b9:ca:07:92:8f:85:b8:95:72:36:2b:1c:a2:2b: f1:75:15:5c:68:66:1d:a2:fe:6d:03:57:ab:1e:47:42:1f:16: ef:4f:86:1d:a9:e0:52:41:ec:be:93:8c:b2:37:9e:48:cd:86: 30:98:d1:3f:34:24:87:5b:ca:fe:65:02:a3:f8:6d:ef:20:23: 28:83:7d:8c:9e:01:5d:6f:92:6b:c0:2a:d5:c8:95:ce:92:e2: ac:46:80:42:03:a4:cf:e6:7a:94:c3:35:37:d3:38:68:1d:6e: 80:e2:30:7d:f7:8d:f4:e5:38:80:05:d2:b7:b7:5b:48:24:d3: 8b:65:d9:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICGfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTAx NjA5NDRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDY1MEI1MDYwOEJDREUz OTdERDIyMTY4OERGMUYxQ0Y5Rjc2MDQ3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiOjeMIQ6uG4XH8m+LX+N38z3G/gopIsPBGe4yT+/5+FIbGNxw rwy9/DdavFfBLZLlFHchLGDtC5+dOzCMimgJN/Ypfe2m405O3IQnlz3/INrtCPbX TRP+Lln68RxIkSmGpXTiKk6fy8ldrNZtfKtR3hif3CipP3/i7y6kIC1wmxOAbcI6 KzPV8bUAkGud3cY4T5cHOCpyc2uziWljEtTFPGKitkJqBEW8dqLYiuLvjz5el2OR ZmfKrq0OfE3liv6V1Qlgno6bX3c+5ti0ZFz6M6DUFczP3cHxwxkNxFKkXnvN5h5I F5wBUTGbwN5QNz+8RkspXs27Bz3oRnvNXWwvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZQtQYIvN45fdIhaI3x8c+fdgR2QwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9aUXRRWUl2TjQ1ZmRJaGFJ M3g4Yy1mZGdSMlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBACK9UnFv+koEwMkwpntAN8FTvi+2h6msSkez BIlq/VT9Aahtu2HpRI/IXANId8u+LScAjFItgwLB/QsPo8XFnhTeLSauIX5aKokV BXRl8+ILeaQoz2A4aPFjuc1FEz7cZKmG9uH/4eYoNkkKydYpw0BR067OKAbBwtOk HCl6x9bSLkC5ygeSj4W4lXI2KxyiK/F1FVxoZh2i/m0DV6seR0IfFu9Phh2p4FJB 7L6TjLI3nkjNhjCY0T80JIdbyv5lAqP4be8gIyiDfYyeAV1vkmvAKtXIlc6S4qxG gEIDpM/mepTDNTfTOGgdboDiMH33jfTlOIAF0re3W0gk04tl2YQ= -----END CERTIFICATE-----Generated at Sun Jan 11 20:04:43 2026 by rpki-client