This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/awnrRSnkl1LBe2I3xGvZN5-n5E0.roa File: awnrRSnkl1LBe2I3xGvZN5-n5E0.roa (raw, json) Hash identifier: 6614yzU1f1vVdeeic8fu9m55ZVMTAda8R0+SRrSDP4s= Subject key identifier: 6B:09:EB:45:29:E4:97:52:C1:7B:62:37:C4:6B:D9:37:9F:A7:E4:4D Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0F41 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/awnrRSnkl1LBe2I3xGvZN5-n5E0.roa Signing time: Tue 27 May 2025 10:08:47 +0000 ROA not before: Tue 27 May 2025 10:08:47 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 27.103.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 3905 (0xf41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 27 10:08:47 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=6B09EB4529E49752C17B6237C46BD9379FA7E44D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cb:06:a8:cb:1f:3c:d0:ca:52:6e:94:eb:a4: ef:ab:08:50:6b:e8:e3:fb:a1:72:44:5c:50:d5:50: 0d:0a:c7:25:e5:da:c1:f0:ff:36:1e:f7:61:76:01: 35:d1:ed:cc:bc:3e:2f:00:44:9c:8b:c7:47:ee:5f: 73:db:1f:8e:f3:83:34:02:0d:e3:cb:e5:87:f1:56: 47:84:9a:b2:36:2c:c7:f6:20:79:af:d3:49:68:4d: cc:2c:15:04:f0:4a:f4:e6:0e:cc:42:a8:24:af:ff: a6:90:bb:69:75:1d:ce:51:7f:bf:d3:e6:65:29:37: e3:38:f6:67:5b:80:2a:3f:c4:34:6e:30:78:50:9a: 3d:e8:13:b7:f4:38:d8:1d:79:b9:09:3b:c5:b9:0c: d9:2d:29:d5:0d:4c:5d:4b:f9:9b:9c:ae:b4:ca:28: 00:cf:c3:77:0d:b0:6e:6c:49:a3:40:19:48:32:bf: ce:f0:c4:03:a0:74:c8:d9:ee:07:a6:6e:c1:e0:6e: a8:1f:46:3b:79:bd:10:83:7a:93:25:84:81:26:ce: 4c:f9:e0:47:fc:40:4a:85:68:3a:92:be:c6:19:8a: 71:71:41:0b:01:07:5c:fd:7f:f5:4c:9f:e8:0b:87: 6e:3e:bf:1d:2f:d4:36:d0:0c:d7:13:13:33:ca:73: e2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:09:EB:45:29:E4:97:52:C1:7B:62:37:C4:6B:D9:37:9F:A7:E4:4D X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/awnrRSnkl1LBe2I3xGvZN5-n5E0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:a7:d7:51:7f:d3:03:44:ee:5c:6b:41:95:3c:20:23:32:4d: 0f:ef:ac:f6:30:06:54:bb:de:cc:1a:d7:83:a0:2b:dc:11:ae: 15:2b:b1:e5:c1:98:50:2a:df:56:88:01:75:f2:ed:62:e8:d0: fc:3d:87:32:12:85:24:d0:25:6c:24:86:50:0a:01:38:0b:db: ea:d0:57:c0:9a:08:af:8f:fa:44:9c:09:c0:21:25:c4:ca:d4: 67:bb:8f:75:d8:12:8a:50:05:a3:0e:1d:f1:fe:9e:30:bb:d1: b0:b5:3a:47:5f:f7:71:18:ac:f1:14:e1:85:4a:22:32:93:5f: 8f:5d:24:ce:37:e1:f8:82:80:92:b0:81:4a:c1:73:5b:6e:a4: ab:f0:fe:a2:bd:ad:80:c8:78:bd:95:b3:de:b4:b5:04:cc:88: c0:b8:39:ab:9e:9e:4c:4a:ed:25:80:d3:e3:af:61:1c:58:86: 55:60:68:5d:e9:ef:9b:4c:2e:f6:b7:74:dc:c0:98:ec:d4:1f: 1d:52:02:a0:7e:59:b5:74:59:71:00:59:0f:a3:52:57:38:d4: 51:c2:65:1b:98:30:14:2c:31:fb:84:d0:3d:0b:d5:df:91:de: f1:29:69:9a:93:12:f3:ed:dc:34:59:85:d8:17:05:7f:03:60: 98:78:90:a4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICD0EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1Mjcx MDA4NDdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDZCMDlFQjQ1MjlFNDk3 NTJDMTdCNjIzN0M0NkJEOTM3OUZBN0U0NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDywaoyx880MpSbpTrpO+rCFBr6OP7oXJEXFDVUA0KxyXl2sHw /zYe92F2ATXR7cy8Pi8ARJyLx0fuX3PbH47zgzQCDePL5YfxVkeEmrI2LMf2IHmv 00loTcwsFQTwSvTmDsxCqCSv/6aQu2l1Hc5Rf7/T5mUpN+M49mdbgCo/xDRuMHhQ mj3oE7f0ONgdebkJO8W5DNktKdUNTF1L+ZucrrTKKADPw3cNsG5sSaNAGUgyv87w xAOgdMjZ7gembsHgbqgfRjt5vRCDepMlhIEmzkz54Ef8QEqFaDqSvsYZinFxQQsB B1z9f/VMn+gLh24+vx0v1DbQDNcTEzPKc+IfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUawnrRSnkl1LBe2I3xGvZN5+n5E0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9hd25yUlNua2wxTEJlMkkz eEd2Wk41LW41RTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA G2cwDQYJKoZIhvcNAQELBQADggEBAByn11F/0wNE7lxrQZU8ICMyTQ/vrPYwBlS7 3swa14OgK9wRrhUrseXBmFAq31aIAXXy7WLo0Pw9hzIShSTQJWwkhlAKATgL2+rQ V8CaCK+P+kScCcAhJcTK1Ge7j3XYEopQBaMOHfH+njC70bC1Okdf93EYrPEU4YVK IjKTX49dJM434fiCgJKwgUrBc1tupKvw/qK9rYDIeL2Vs960tQTMiMC4OauenkxK 7SWA0+OvYRxYhlVgaF3p75tMLva3dNzAmOzUHx1SAqB+WbV0WXEAWQ+jUlc41FHC ZRuYMBQsMfuE0D0L1d+R3vEpaZqTEvPt3DRZhdgXBX8DYJh4kKQ= -----END CERTIFICATE-----Generated at Sun Jan 11 20:22:12 2026 by rpki-client