This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/eSR7Q-jVGurvOTdb03LeeMchJ4c.roa File: eSR7Q-jVGurvOTdb03LeeMchJ4c.roa (raw, json) Hash identifier: UzngixdpNDFXadLFflwDwsz27khGk/iis8UFBLNqIk0= Subject key identifier: 79:24:7B:43:E8:D5:1A:EA:EF:39:37:5B:D3:72:DE:78:C7:21:27:87 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 14CA Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/eSR7Q-jVGurvOTdb03LeeMchJ4c.roa Signing time: Tue 03 Jun 2025 19:09:16 +0000 ROA not before: Tue 03 Jun 2025 19:09:16 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 5322 (0x14ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Jun 3 19:09:16 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=79247B43E8D51AEAEF39375BD372DE78C7212787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:72:ae:b9:08:2d:2f:1f:a5:96:7b:f9:b7:ae: 93:13:88:17:fd:b3:0a:8c:10:6e:6c:49:be:6f:69: 55:c1:4d:dd:5e:f7:e4:01:76:8f:48:ca:ad:68:f5: 85:b6:5a:55:c4:f2:c1:a4:bf:98:cf:43:a5:c0:6c: 3d:6f:94:70:ba:bf:46:51:12:f1:b6:36:2e:55:c8: e1:2c:86:2a:20:95:35:b1:dd:b5:40:12:40:d3:80: a8:38:50:9c:6e:2d:48:bb:ad:50:08:eb:64:25:c4: ce:1c:79:eb:d9:df:3f:4e:c6:42:dd:0a:69:fb:aa: 11:83:d9:b1:5a:85:83:70:20:d4:01:36:0e:25:76: 5e:48:8b:ae:a1:90:cc:9d:8a:87:7e:b3:9f:e4:e1: 81:b5:7f:0e:c5:4d:1c:f9:f0:2a:00:9c:e0:c7:7a: 4e:65:8b:cc:07:f0:c1:84:68:85:f0:9c:78:83:6b: eb:0d:08:dc:4d:c7:58:8a:6f:3d:58:8c:27:9e:3c: 06:de:43:4a:ec:ea:ff:75:e0:57:be:de:67:50:16: c5:ad:e1:ac:86:f5:41:f8:9e:77:6a:8e:9d:4b:ec: 63:5a:f1:85:3f:47:6f:8c:9f:56:4d:4c:93:61:e7: 0b:a4:e4:ad:78:de:ed:1d:b9:75:08:e0:24:1b:40: b2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:24:7B:43:E8:D5:1A:EA:EF:39:37:5B:D3:72:DE:78:C7:21:27:87 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/eSR7Q-jVGurvOTdb03LeeMchJ4c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 48:65:4b:57:57:4b:b6:34:da:d7:c2:41:f1:71:cd:19:eb:17: e0:51:ad:37:5e:cc:89:cb:c1:fa:56:c4:e4:dd:85:c0:64:bd: dc:d9:8f:bc:e7:b5:d9:29:12:ea:64:15:8f:20:3d:bc:81:58: 9b:56:02:88:f9:f3:f0:56:1c:c0:0a:9f:32:d7:0a:c2:c9:f4: df:7d:70:77:75:d1:f7:2e:a2:3f:ef:e6:f9:3d:be:0f:7e:d0: 9f:d4:c0:51:8a:42:f0:c0:3a:2b:2c:97:9f:52:d4:d4:f7:ef: e8:94:53:51:0a:05:5f:45:6b:2f:48:47:3e:90:ba:8e:8e:ae: 80:7b:e0:d1:5e:d7:53:a4:ca:53:5e:d8:ef:e6:1d:bb:e2:a4: e6:c7:98:c4:47:29:8f:d6:92:a1:e9:75:8c:ae:e7:4d:b9:cd: fb:65:9d:a0:0a:6f:38:f4:5b:de:bf:dc:27:f1:06:51:fa:1b: 9e:04:ed:e5:84:3e:04:27:a1:c2:53:4f:93:c9:33:e0:35:28: d1:4a:8a:88:a2:7a:c9:7a:bb:a1:90:d1:f3:7c:0f:d9:d3:be: 54:85:5f:f9:f7:de:8a:4c:58:ba:d0:3c:97:2d:57:22:23:f3: 99:84:25:a9:72:44:52:c7:94:29:a8:17:da:ce:bb:c6:3b:e9: 2d:f4:cb:33 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICFMowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDMx OTA5MTZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDc5MjQ3QjQzRThENTFB RUFFRjM5Mzc1QkQzNzJERTc4QzcyMTI3ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdcq65CC0vH6WWe/m3rpMTiBf9swqMEG5sSb5vaVXBTd1e9+QB do9Iyq1o9YW2WlXE8sGkv5jPQ6XAbD1vlHC6v0ZREvG2Ni5VyOEshioglTWx3bVA EkDTgKg4UJxuLUi7rVAI62QlxM4ceevZ3z9OxkLdCmn7qhGD2bFahYNwINQBNg4l dl5Ii66hkMydiod+s5/k4YG1fw7FTRz58CoAnODHek5li8wH8MGEaIXwnHiDa+sN CNxNx1iKbz1YjCeePAbeQ0rs6v914Fe+3mdQFsWt4ayG9UH4nndqjp1L7GNa8YU/ R2+Mn1ZNTJNh5wuk5K143u0duXUI4CQbQLK3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUeSR7Q+jVGurvOTdb03LeeMchJ4cwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9lU1I3US1qVkd1cnZPVGRi MDNMZWVNY2hKNGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAEhlS1dXS7Y02tfCQfFxzRnrF+BRrTdezInL wfpWxOTdhcBkvdzZj7zntdkpEupkFY8gPbyBWJtWAoj58/BWHMAKnzLXCsLJ9N99 cHd10fcuoj/v5vk9vg9+0J/UwFGKQvDAOissl59S1NT37+iUU1EKBV9Fay9IRz6Q uo6OroB74NFe11OkylNe2O/mHbvipObHmMRHKY/WkqHpdYyu5025zftlnaAKbzj0 W96/3CfxBlH6G54E7eWEPgQnocJTT5PJM+A1KNFKioiiesl6u6GQ0fN8D9nTvlSF X/n33opMWLrQPJctVyIj85mEJalyRFLHlCmoF9rOu8Y76S30yzM= -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:15 2026 by rpki-client