This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/lGWjXtZ867z_thR98yBcWtkY_fA.roa File: lGWjXtZ867z_thR98yBcWtkY_fA.roa (raw, json) Hash identifier: LPikWLkl0fG0BjR2QAuB69dL97bcIomhS6GdaoFtM08= Subject key identifier: 94:65:A3:5E:D6:7C:EB:BC:FF:B6:14:7D:F3:20:5C:5A:D9:18:FD:F0 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 098C Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lGWjXtZ867z_thR98yBcWtkY_fA.roa Signing time: Mon 19 May 2025 19:38:24 +0000 ROA not before: Mon 19 May 2025 19:38:24 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 2444 (0x98c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 19 19:38:24 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=9465A35ED67CEBBCFFB6147DF3205C5AD918FDF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:cd:b7:25:9f:84:81:15:f8:19:02:cf:59: 64:dd:6b:db:45:63:f9:55:59:52:3a:47:09:48:5b: c1:e5:94:ef:89:3b:28:cb:0b:d8:b7:64:bd:f2:7c: e9:25:b7:92:82:38:dc:0e:1c:28:10:b0:b7:3f:4b: 12:f4:ca:6a:9c:93:31:fe:94:5c:5b:7c:ae:c5:a9: c0:54:ee:95:8b:58:cb:92:fb:ce:0d:bd:84:0f:53: 18:1e:2b:ad:e7:65:8f:8a:1a:b2:71:40:3e:4a:44: 98:00:7f:df:56:f1:cf:3a:80:f2:15:b4:73:c8:a9: 70:f2:dc:46:c5:14:1d:f2:b8:35:76:64:6a:3b:7d: 01:e3:5f:af:37:e0:2b:f6:00:ef:f6:17:82:ae:9d: 84:a4:be:04:13:ba:4b:0b:26:f6:2b:7c:10:56:c0: 97:26:6a:29:64:53:17:58:3a:29:c8:95:53:af:b8: 4b:f5:a5:c9:0b:7c:e5:b6:6a:7e:2c:1e:bd:f7:32: a1:d9:d8:fe:a8:6f:84:36:cc:bb:5c:8d:84:79:22: 67:39:d5:bd:c1:3d:13:cd:51:07:b3:67:ed:68:4b: f9:31:9b:59:23:94:0b:6c:e3:51:ad:91:56:d2:70: ee:1b:10:9f:86:67:f2:f0:b6:e8:7b:e8:d0:65:5c: 77:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:65:A3:5E:D6:7C:EB:BC:FF:B6:14:7D:F3:20:5C:5A:D9:18:FD:F0 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lGWjXtZ867z_thR98yBcWtkY_fA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1d:64:f4:b7:63:09:ed:e7:bd:e0:23:27:70:24:ef:e9:fc:b1: 64:22:5b:f3:8d:14:d9:0c:91:3b:c9:8b:33:9b:3c:da:57:f5: 72:b2:c0:d7:b4:ac:30:f1:89:27:54:d3:a0:0a:96:76:ad:35: 52:41:64:98:c8:97:0f:c2:a5:ad:67:70:c1:c3:31:eb:a9:e9: c2:f8:6a:3c:3d:b6:96:79:c1:a9:67:95:1d:ea:77:a0:5b:c0: a0:6d:03:c3:a6:61:f6:ae:8a:73:19:13:ac:fd:e4:3b:95:d6: e2:fc:39:fc:75:03:ac:d3:21:ce:29:7b:2c:f4:3d:26:56:0c: 81:e0:fa:7f:3a:79:c7:a6:e0:f8:5c:39:d7:35:32:a2:47:e7: 14:8f:25:b6:02:20:fb:02:37:24:0f:2b:9a:f7:9d:c7:8a:89: 25:a3:97:40:d8:a2:a5:df:4d:c6:02:ba:2f:f0:03:3a:cb:0c: 75:67:63:9a:10:98:7a:63:bb:a1:6d:e7:7f:26:ca:cb:66:3d: d3:98:5a:51:bd:ad:fe:95:c3:e2:83:85:41:b7:ea:03:ec:e3: c7:e9:3f:16:bd:31:6b:dc:d0:23:da:ed:94:bd:07:c8:e7:40: 10:56:0e:c7:cb:88:7f:0b:4e:d3:63:4b:1e:49:4e:6c:54:c8: 81:ff:72:13 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTkx OTM4MjRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDk0NjVBMzVFRDY3Q0VC QkNGRkI2MTQ3REYzMjA1QzVBRDkxOEZERjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLAs23JZ+EgRX4GQLPWWTda9tFY/lVWVI6RwlIW8HllO+JOyjL C9i3ZL3yfOklt5KCONwOHCgQsLc/SxL0ymqckzH+lFxbfK7FqcBU7pWLWMuS+84N vYQPUxgeK63nZY+KGrJxQD5KRJgAf99W8c86gPIVtHPIqXDy3EbFFB3yuDV2ZGo7 fQHjX6834Cv2AO/2F4KunYSkvgQTuksLJvYrfBBWwJcmailkUxdYOinIlVOvuEv1 pckLfOW2an4sHr33MqHZ2P6ob4Q2zLtcjYR5Imc51b3BPRPNUQezZ+1oS/kxm1kj lAts41GtkVbScO4bEJ+GZ/Lwtuh76NBlXHc7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlGWjXtZ867z/thR98yBcWtkY/fAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9sR1dqWHRaODY3el90aFI5 OHlCY1d0a1lfZkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAB1k9LdjCe3nveAjJ3Ak7+n8sWQiW/ONFNkM kTvJizObPNpX9XKywNe0rDDxiSdU06AKlnatNVJBZJjIlw/Cpa1ncMHDMeup6cL4 ajw9tpZ5walnlR3qd6BbwKBtA8OmYfauinMZE6z95DuV1uL8Ofx1A6zTIc4peyz0 PSZWDIHg+n86ecem4PhcOdc1MqJH5xSPJbYCIPsCNyQPK5r3nceKiSWjl0DYoqXf TcYCui/wAzrLDHVnY5oQmHpju6Ft538mystmPdOYWlG9rf6Vw+KDhUG36gPs48fp Pxa9MWvc0CPa7ZS9B8jnQBBWDsfLiH8LTtNjSx5JTmxUyIH/chM= -----END CERTIFICATE-----Generated at Mon Jan 12 13:30:27 2026 by rpki-client