This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ej1A4M61qL5bzrkODcJKQrpfFpE.roa File: ej1A4M61qL5bzrkODcJKQrpfFpE.roa (raw, json) Hash identifier: 4srk0p1gKSSCPiaIijdKs36WDoOcH4s+8R67nSHK7oc= Subject key identifier: 7A:3D:40:E0:CE:B5:A8:BE:5B:CE:B9:0E:0D:C2:4A:42:BA:5F:16:91 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 051C Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ej1A4M61qL5bzrkODcJKQrpfFpE.roa Signing time: Tue 13 May 2025 21:38:02 +0000 ROA not before: Tue 13 May 2025 21:38:02 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 1308 (0x51c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 13 21:38:02 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=7A3D40E0CEB5A8BE5BCEB90E0DC24A42BA5F1691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:5d:b1:fa:e2:21:aa:36:b8:b9:77:14:d1: 0c:a1:f0:38:23:26:59:28:2c:f4:64:19:5b:ac:5c: 33:c6:38:a2:a1:41:1d:bb:05:fa:0e:ab:d3:96:0f: 52:f8:2d:8d:e4:38:c5:bb:1b:9d:eb:5e:df:3d:04: b2:25:13:29:ce:7c:31:b7:a1:a9:51:3d:84:e1:e6: 4c:c5:94:53:8b:66:fb:41:26:83:18:eb:e6:df:b4: eb:01:0d:1e:05:46:0a:25:71:fd:b0:6e:76:b5:9a: 7b:e7:50:b8:66:0d:e5:57:0e:09:b1:fb:0b:9c:d2: f3:6b:78:66:1b:b3:05:b4:a8:16:3d:fd:28:8d:98: 48:b2:ca:82:75:df:46:d4:ca:3a:b0:6b:d5:90:d0: 0b:92:5e:55:63:9c:45:92:51:4d:90:fd:e0:af:45: ec:94:b1:78:20:39:4a:b9:4b:8b:1b:16:c3:81:2b: 83:2d:4d:ff:a1:4d:f6:17:cd:ba:0e:bf:ec:3d:74: 9b:58:88:41:5b:ab:b2:04:c7:72:f4:ea:0b:9d:1f: c9:b3:6b:5b:92:8b:08:1c:d6:05:e0:77:6d:69:3a: 53:bc:ec:57:9b:d3:60:64:dd:63:31:36:02:12:34: 88:1c:e0:18:c0:a1:39:7b:21:b8:28:67:dd:bd:54: 56:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3D:40:E0:CE:B5:A8:BE:5B:CE:B9:0E:0D:C2:4A:42:BA:5F:16:91 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ej1A4M61qL5bzrkODcJKQrpfFpE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 45:e5:38:13:07:33:cc:bc:69:34:75:87:b5:8c:36:bf:9f:7d: a3:58:5a:f3:57:c8:67:a8:22:08:e9:79:57:81:5d:14:67:1e: c1:85:a4:e7:57:01:b0:49:7e:42:cf:91:75:a7:ad:34:29:dd: da:8e:6e:9a:3d:f0:8a:4e:63:4c:c7:8e:0c:39:b3:59:ca:f5: e9:6a:c9:57:21:91:46:c6:b2:83:7f:d4:00:ca:17:c0:fb:df: 6a:73:42:64:74:5f:03:17:50:2a:0b:fd:b3:4a:23:c3:f0:56: 30:08:a5:0c:07:f2:a1:ad:02:a2:43:de:65:50:47:76:5e:e3: 71:33:e0:bc:41:02:e2:62:bf:19:c8:9b:69:19:5f:77:54:f6: fd:b0:18:67:3f:c8:33:ed:68:66:ef:4f:29:bd:5b:40:64:64: 90:e7:05:44:3b:c4:11:f4:fc:f2:8a:c9:74:ce:ec:0f:03:d9: 89:fa:48:e2:4a:64:35:d8:e7:7a:b2:26:ad:32:68:92:72:f9: b6:04:13:31:14:3d:1c:a7:09:f5:83:d9:bc:95:5b:a6:30:9e: 76:7d:be:4b:ab:43:79:a9:12:1c:1f:17:11:5b:49:58:1d:49: 58:78:dd:66:19:be:c5:f2:86:2b:45:7c:5e:53:54:eb:d7:9d: 8c:75:e2:fe -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBRwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTMy MTM4MDJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDdBM0Q0MEUwQ0VCNUE4 QkU1QkNFQjkwRTBEQzI0QTQyQkE1RjE2OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDXV2x+uIhqja4uXcU0Qyh8DgjJlkoLPRkGVusXDPGOKKhQR27 BfoOq9OWD1L4LY3kOMW7G53rXt89BLIlEynOfDG3oalRPYTh5kzFlFOLZvtBJoMY 6+bftOsBDR4FRgolcf2wbna1mnvnULhmDeVXDgmx+wuc0vNreGYbswW0qBY9/SiN mEiyyoJ130bUyjqwa9WQ0AuSXlVjnEWSUU2Q/eCvReyUsXggOUq5S4sbFsOBK4Mt Tf+hTfYXzboOv+w9dJtYiEFbq7IEx3L06gudH8mza1uSiwgc1gXgd21pOlO87Feb 02Bk3WMxNgISNIgc4BjAoTl7IbgoZ929VFZhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUej1A4M61qL5bzrkODcJKQrpfFpEwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9lajFBNE02MXFMNWJ6cmtP RGNKS1FycGZGcEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAEXlOBMHM8y8aTR1h7WMNr+ffaNYWvNXyGeo IgjpeVeBXRRnHsGFpOdXAbBJfkLPkXWnrTQp3dqObpo98IpOY0zHjgw5s1nK9elq yVchkUbGsoN/1ADKF8D732pzQmR0XwMXUCoL/bNKI8PwVjAIpQwH8qGtAqJD3mVQ R3Ze43Ez4LxBAuJivxnIm2kZX3dU9v2wGGc/yDPtaGbvTym9W0BkZJDnBUQ7xBH0 /PKKyXTO7A8D2Yn6SOJKZDXY53qyJq0yaJJy+bYEEzEUPRynCfWD2byVW6YwnnZ9 vkurQ3mpEhwfFxFbSVgdSVh43WYZvsXyhitFfF5TVOvXnYx14v4= -----END CERTIFICATE-----Generated at Mon Jan 12 16:48:05 2026 by rpki-client