This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/gBXBTHfz9Z7aANIU3wMgMOdtlaY.roa File: gBXBTHfz9Z7aANIU3wMgMOdtlaY.roa (raw, json) Hash identifier: 1Uz/+2RZ2ZHEy/0+m1APH9wi7yc7Fi372jilTPjpojM= Subject key identifier: 80:15:C1:4C:77:F3:F5:9E:DA:00:D2:14:DF:03:20:30:E7:6D:95:A6 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 1B50 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gBXBTHfz9Z7aANIU3wMgMOdtlaY.roa Signing time: Thu 12 Jun 2025 12:10:40 +0000 ROA not before: Thu 12 Jun 2025 12:10:40 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 6992 (0x1b50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Jun 12 12:10:40 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=8015C14C77F3F59EDA00D214DF032030E76D95A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:35:1b:77:35:8d:55:db:af:c4:7e:5e:e5: 27:41:3d:de:04:9a:e1:e0:0c:bb:5e:97:be:fd:db: 2c:e4:1c:a6:5a:bf:0d:7d:bd:4c:93:f9:3d:78:58: 97:6c:4b:76:eb:66:0f:54:0a:37:2e:0f:43:01:08: 59:cb:ae:92:d4:19:84:c7:d6:e4:0e:b4:cd:c8:65: a8:99:e4:91:9a:1b:c0:41:24:a9:0e:08:81:a1:4e: 31:df:59:b8:dd:35:5f:02:5f:05:8b:9d:a8:3e:81: ca:5b:fe:72:7a:14:4c:67:8f:45:be:59:1e:2a:78: ca:72:4a:d2:43:c6:3c:c2:e5:b2:ed:18:87:db:5e: 57:62:a7:28:e2:86:eb:6f:34:40:2c:14:07:c7:f0: c9:1c:09:b5:7e:01:97:17:5b:90:2c:1e:49:9b:6b: 4b:ba:9e:ca:94:0f:bd:54:ba:ce:6e:37:a3:a2:01: 39:c7:17:a7:8f:a4:b3:cf:a8:e2:93:9a:1c:92:af: cb:0d:83:5f:03:4f:24:ba:9e:34:65:20:07:f6:ae: e2:e0:ac:c7:d5:f4:fe:53:24:37:b6:fd:5d:a7:ff: a4:a0:f1:58:be:43:3f:8c:be:30:5b:96:95:bf:8a: 80:da:fe:47:bc:9a:d9:b4:4d:d0:dd:7d:f2:68:b1: 67:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:15:C1:4C:77:F3:F5:9E:DA:00:D2:14:DF:03:20:30:E7:6D:95:A6 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gBXBTHfz9Z7aANIU3wMgMOdtlaY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 04:50:a8:ba:ac:23:c4:25:81:10:b1:59:11:9f:f2:56:42:16: 68:ad:3c:5e:e9:fd:de:5c:b9:9c:4d:66:15:6d:a5:9f:03:20: 4a:a6:33:83:75:99:04:5c:c4:78:09:86:a4:1c:91:45:3b:97: a1:45:f5:7e:f6:38:5b:6c:b4:fe:4a:fb:d9:16:45:1c:a4:18: bb:ee:31:2f:1f:01:ea:24:89:cc:e7:48:be:ea:b7:76:d5:67: 38:3c:56:03:87:90:58:1c:50:71:95:05:25:80:a5:ad:70:ff: 47:75:2d:62:6b:55:17:62:7f:b1:d4:70:0e:1e:49:21:94:1c: d7:a2:24:01:27:ab:1c:72:90:bd:99:f6:ca:fe:38:ea:ba:05: 34:33:f4:fd:1c:39:3e:88:c7:77:55:a8:61:ac:a2:e3:2b:87: a7:12:23:71:cd:04:fa:09:be:63:4d:18:6c:47:cf:63:ef:6c: 3f:34:1f:4e:64:01:42:09:6c:b0:19:75:cc:08:a9:6c:65:cd: d7:db:d7:6c:da:87:39:b6:97:7e:89:30:b3:07:4b:c4:3b:9c: 44:30:fd:a6:b4:b7:e0:fc:fa:b8:0b:61:48:fd:56:9a:ee:46: 8c:8e:27:40:ea:62:5a:83:9f:d4:47:a7:cf:91:cd:88:f0:82: c3:e8:93:67 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICG1AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTIx MjEwNDBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDgwMTVDMTRDNzdGM0Y1 OUVEQTAwRDIxNERGMDMyMDMwRTc2RDk1QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpWDUbdzWNVduvxH5e5SdBPd4EmuHgDLtel7792yzkHKZavw19 vUyT+T14WJdsS3brZg9UCjcuD0MBCFnLrpLUGYTH1uQOtM3IZaiZ5JGaG8BBJKkO CIGhTjHfWbjdNV8CXwWLnag+gcpb/nJ6FExnj0W+WR4qeMpyStJDxjzC5bLtGIfb XldipyjihutvNEAsFAfH8MkcCbV+AZcXW5AsHkmba0u6nsqUD71Uus5uN6OiATnH F6ePpLPPqOKTmhySr8sNg18DTyS6njRlIAf2ruLgrMfV9P5TJDe2/V2n/6Sg8Vi+ Qz+MvjBblpW/ioDa/ke8mtm0TdDdffJosWd9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgBXBTHfz9Z7aANIU3wMgMOdtlaYwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9nQlhCVEhmejlaN2FBTklV M3dNZ01PZHRsYVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAARQqLqsI8QlgRCxWRGf8lZCFmitPF7p/d5c uZxNZhVtpZ8DIEqmM4N1mQRcxHgJhqQckUU7l6FF9X72OFtstP5K+9kWRRykGLvu MS8fAeokicznSL7qt3bVZzg8VgOHkFgcUHGVBSWApa1w/0d1LWJrVRdif7HUcA4e SSGUHNeiJAEnqxxykL2Z9sr+OOq6BTQz9P0cOT6Ix3dVqGGsouMrh6cSI3HNBPoJ vmNNGGxHz2PvbD80H05kAUIJbLAZdcwIqWxlzdfb12zahzm2l36JMLMHS8Q7nEQw /aa0t+D8+rgLYUj9VpruRoyOJ0DqYlqDn9RHp8+RzYjwgsPok2c= -----END CERTIFICATE-----Generated at Mon Jan 12 22:12:40 2026 by rpki-client