This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mc21AzOvx2QC2I6WqIruuvsb6IA.roa File: mc21AzOvx2QC2I6WqIruuvsb6IA.roa (raw, json) Hash identifier: 2csP1WuU+nw9N6n7BiZY+2FSbS9EJTKl8IHLWzZTzq8= Subject key identifier: 99:CD:B5:03:33:AF:C7:64:02:D8:8E:96:A8:8A:EE:BA:FB:1B:E8:80 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 02CC Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mc21AzOvx2QC2I6WqIruuvsb6IA.roa Signing time: Sat 10 May 2025 19:38:02 +0000 ROA not before: Sat 10 May 2025 19:38:02 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 10 19:38:02 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=99CDB50333AFC76402D88E96A88AEEBAFB1BE880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7b:be:0a:bf:18:4e:39:3f:28:ef:29:86:7d: c3:b9:55:fc:80:c2:c3:dd:e7:1a:45:59:c8:5a:78: 7f:4d:2f:fd:c2:54:f3:c3:8c:22:4c:b1:86:d8:29: c2:19:4c:99:c5:d4:95:b2:a2:94:87:03:36:e6:ab: ab:59:d4:0a:9b:ac:83:4d:6f:43:bd:d3:48:45:ad: c9:6b:68:6b:37:61:e1:d8:ab:c3:e1:3e:c4:51:49: fc:92:cb:42:11:d7:7d:80:6c:c8:c1:67:e1:e6:d0: 3b:d7:a2:23:d9:d9:08:29:db:0b:7b:44:5e:18:d6: 62:71:18:9e:da:3f:ec:b2:34:66:2c:aa:db:d7:58: 90:a3:a6:30:2b:4a:3f:a9:81:ad:05:1b:06:cf:78: e3:f8:e0:ca:56:44:78:5c:0f:38:90:5b:2d:33:c5: e5:ae:07:8d:cf:30:c9:fc:4b:9d:07:f5:57:c2:33: 62:2b:79:e2:3c:c0:f9:c5:c7:98:fe:b4:9f:7b:97: 58:ec:9b:ed:27:66:61:8e:51:f4:fa:d8:fb:29:3f: 74:de:f5:cb:70:b3:ae:b7:cb:d7:a9:98:11:bb:33: 03:d4:45:7c:9a:d7:9a:11:b7:a6:9f:64:39:48:7d: 3e:82:b6:43:98:f6:3b:e9:87:3b:83:7a:24:5d:12: 7e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CD:B5:03:33:AF:C7:64:02:D8:8E:96:A8:8A:EE:BA:FB:1B:E8:80 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mc21AzOvx2QC2I6WqIruuvsb6IA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8d:07:9b:77:1f:9d:d7:2a:89:53:e2:d6:6c:44:40:1d:c8:50: c3:23:35:40:d1:eb:10:28:5a:22:10:42:93:c2:22:db:ef:f3: 0b:78:77:3a:bb:ac:9d:f3:ef:dd:e0:ce:da:c0:c2:2a:e7:8e: f4:5f:c1:e5:ce:57:7a:8c:64:83:c2:d5:a1:9d:e7:89:24:0c: 7c:a2:26:55:3c:c3:1f:c6:38:8b:d2:71:0b:41:60:c4:82:91: ed:a0:33:1f:6b:0b:b7:ce:f2:cd:9f:28:4f:36:ae:38:5b:42: 2a:ef:60:65:16:fc:11:49:74:0f:72:65:a1:8d:48:0d:c1:fa: 7a:bf:fd:59:00:61:93:44:bf:78:e8:1c:36:5d:1f:93:2d:60: 42:06:67:c2:c4:ff:52:76:2c:fa:7f:27:47:8b:d1:70:12:12: a9:ab:ae:3d:5d:a9:f7:a4:49:70:47:ed:44:35:4c:16:e2:e2: 08:21:bf:59:66:ad:93:ac:35:02:db:d6:92:15:45:e4:b2:e6: 8a:6c:47:7e:07:cf:cc:34:06:03:d4:9e:f0:d5:02:71:b2:bd: 6c:4b:0d:23:de:df:6e:13:b1:ce:5d:84:db:65:de:4b:ae:17: 1b:0d:ee:04:88:90:75:4b:54:50:f4:fc:0b:a8:f6:d8:16:7e: 41:3c:72:24 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAswwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTAx OTM4MDJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDk5Q0RCNTAzMzNBRkM3 NjQwMkQ4OEU5NkE4OEFFRUJBRkIxQkU4ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCe74KvxhOOT8o7ymGfcO5VfyAwsPd5xpFWchaeH9NL/3CVPPD jCJMsYbYKcIZTJnF1JWyopSHAzbmq6tZ1AqbrINNb0O900hFrclraGs3YeHYq8Ph PsRRSfySy0IR132AbMjBZ+Hm0DvXoiPZ2Qgp2wt7RF4Y1mJxGJ7aP+yyNGYsqtvX WJCjpjArSj+pga0FGwbPeOP44MpWRHhcDziQWy0zxeWuB43PMMn8S50H9VfCM2Ir eeI8wPnFx5j+tJ97l1jsm+0nZmGOUfT62PspP3Te9ctws663y9epmBG7MwPURXya 15oRt6afZDlIfT6CtkOY9jvphzuDeiRdEn57AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmc21AzOvx2QC2I6WqIruuvsb6IAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9tYzIxQXpPdngyUUMySTZX cUlydXV2c2I2SUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAI0Hm3cfndcqiVPi1mxEQB3IUMMjNUDR6xAo WiIQQpPCItvv8wt4dzq7rJ3z793gztrAwirnjvRfweXOV3qMZIPC1aGd54kkDHyi JlU8wx/GOIvScQtBYMSCke2gMx9rC7fO8s2fKE82rjhbQirvYGUW/BFJdA9yZaGN SA3B+nq//VkAYZNEv3joHDZdH5MtYEIGZ8LE/1J2LPp/J0eL0XASEqmrrj1dqfek SXBH7UQ1TBbi4gghv1lmrZOsNQLb1pIVReSy5opsR34Hz8w0BgPUnvDVAnGyvWxL DSPe324Tsc5dhNtl3kuuFxsN7gSIkHVLVFD0/Auo9tgWfkE8ciQ= -----END CERTIFICATE-----Generated at Thu Jan 1 12:29:14 2026 by rpki-client