This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ciq3Pg0S1LJL5J3yZVB8bx8jcXc.roa File: ciq3Pg0S1LJL5J3yZVB8bx8jcXc.roa (raw, json) Hash identifier: ewyeMBdnO3HqXmwSKdcFAUk3DSpyBY/27V7cRslIqr4= Subject key identifier: 72:2A:B7:3E:0D:12:D4:B2:4B:E4:9D:F2:65:50:7C:6F:1F:23:71:77 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0262 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ciq3Pg0S1LJL5J3yZVB8bx8jcXc.roa Signing time: Sat 10 May 2025 06:07:51 +0000 ROA not before: Sat 10 May 2025 06:07:51 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 10 06:07:51 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=722AB73E0D12D4B24BE49DF265507C6F1F237177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f2:60:79:90:c8:03:e3:98:09:75:b2:8e:7e: f9:d9:a4:aa:ae:cd:00:1c:bd:a5:89:d5:31:a0:03: 31:76:7f:13:6b:ac:91:e4:5e:da:e2:3c:e6:08:d8: 30:4d:f7:34:9c:ff:0c:06:00:54:46:31:a5:37:09: f2:58:ee:07:28:52:9a:1e:0c:08:c1:41:ba:6d:ac: a9:d0:a3:38:6a:95:47:c3:63:82:38:2a:de:56:ed: 1e:3f:13:31:bb:f4:ef:07:93:6f:9e:29:02:d1:04: b8:e4:6d:8d:9d:18:37:98:53:a2:8d:aa:99:fd:4d: 84:4a:0e:e8:4c:d1:61:d5:ed:25:7d:32:39:73:28: 49:49:28:9d:f6:56:75:b1:4b:49:ad:d5:82:67:58: e3:74:03:c1:52:d2:e4:9d:86:3b:2a:89:1d:16:9a: 15:ef:54:76:c9:78:bc:b5:5e:77:3f:c3:e6:33:6f: f5:57:a3:67:81:24:63:b3:9d:92:21:06:4b:83:f1: cf:c0:7f:0e:3b:de:c3:2e:2d:2b:fe:65:a4:0e:d5: 83:58:6d:48:d9:7b:3b:56:58:f2:44:bb:ad:fc:48: a0:f5:ca:14:87:6c:27:65:33:b8:db:b2:8a:28:d6: 5c:91:8b:55:30:7a:be:f5:e5:2d:7d:c3:bc:e1:38: ee:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2A:B7:3E:0D:12:D4:B2:4B:E4:9D:F2:65:50:7C:6F:1F:23:71:77 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ciq3Pg0S1LJL5J3yZVB8bx8jcXc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 86:3a:e6:48:97:65:6f:f4:31:26:20:e0:0f:02:f7:9e:d3:22: 2f:47:49:bd:ea:14:70:65:ea:0d:2b:dd:18:ff:61:ed:bd:2c: f5:ca:cd:b0:48:a4:93:89:ee:2a:3c:62:f7:0b:cd:38:40:21: 27:ba:b4:de:52:53:43:a5:ad:c2:1e:e6:6e:27:a7:30:31:c9: 55:4e:0a:f8:9c:8c:17:5a:d7:98:e4:21:23:2d:bc:49:d9:0f: 64:0a:90:df:d0:66:6c:d3:e5:36:d1:3c:57:47:e5:89:a1:85: 15:fa:1a:a6:6f:51:97:8a:4f:45:5b:e1:bd:0c:a7:2f:e7:76: 36:98:06:d8:4b:57:4a:0a:4b:ef:32:91:58:0f:fc:08:de:9c: 35:3e:15:61:25:95:0c:c0:42:87:7c:6f:1d:a5:4d:0b:de:12: 31:a7:fb:47:22:b3:94:89:35:51:4b:90:af:bf:da:a0:23:aa: ce:e6:0b:7f:42:fe:d0:fa:01:9b:a9:43:1a:1f:0e:97:c4:15: 03:c6:05:a1:70:94:c5:c9:da:1a:1a:89:13:70:47:35:c6:8d: 7c:c3:4c:57:c4:d2:51:b6:bd:9c:6a:61:cc:e3:99:26:46:88: 89:9c:7e:ae:2f:84:0b:e2:4c:8a:c4:75:06:81:74:e6:94:16: 33:d8:61:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTAw NjA3NTFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDcyMkFCNzNFMEQxMkQ0 QjI0QkU0OURGMjY1NTA3QzZGMUYyMzcxNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ8mB5kMgD45gJdbKOfvnZpKquzQAcvaWJ1TGgAzF2fxNrrJHk XtriPOYI2DBN9zSc/wwGAFRGMaU3CfJY7gcoUpoeDAjBQbptrKnQozhqlUfDY4I4 Kt5W7R4/EzG79O8Hk2+eKQLRBLjkbY2dGDeYU6KNqpn9TYRKDuhM0WHV7SV9Mjlz KElJKJ32VnWxS0mt1YJnWON0A8FS0uSdhjsqiR0WmhXvVHbJeLy1Xnc/w+Yzb/VX o2eBJGOznZIhBkuD8c/Afw473sMuLSv+ZaQO1YNYbUjZeztWWPJEu638SKD1yhSH bCdlM7jbsooo1lyRi1Uwer715S19w7zhOO4tAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUciq3Pg0S1LJL5J3yZVB8bx8jcXcwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9jaXEzUGcwUzFMSkw1SjN5 WlZCOGJ4OGpjWGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAIY65kiXZW/0MSYg4A8C957TIi9HSb3qFHBl 6g0r3Rj/Ye29LPXKzbBIpJOJ7io8YvcLzThAISe6tN5SU0OlrcIe5m4npzAxyVVO CvicjBda15jkISMtvEnZD2QKkN/QZmzT5TbRPFdH5YmhhRX6GqZvUZeKT0Vb4b0M py/ndjaYBthLV0oKS+8ykVgP/AjenDU+FWEllQzAQod8bx2lTQveEjGn+0cis5SJ NVFLkK+/2qAjqs7mC39C/tD6AZupQxofDpfEFQPGBaFwlMXJ2hoaiRNwRzXGjXzD TFfE0lG2vZxqYczjmSZGiImcfq4vhAviTIrEdQaBdOaUFjPYYZ4= -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:15 2026 by rpki-client