This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mibnheEO6jXw011v1oG8I-4OiZs.roa File: mibnheEO6jXw011v1oG8I-4OiZs.roa (raw, json) Hash identifier: 7dkt2lUS6MsM/LdBacyfha78RpbrPtFGUFjVUib9QHY= Subject key identifier: 9A:26:E7:85:E1:0E:EA:35:F0:D3:5D:6F:D6:81:BC:23:EE:0E:89:9B Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0D1C Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mibnheEO6jXw011v1oG8I-4OiZs.roa Signing time: Sat 24 May 2025 13:38:31 +0000 ROA not before: Sat 24 May 2025 13:38:31 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 24 13:38:31 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=9A26E785E10EEA35F0D35D6FD681BC23EE0E899B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:58:fa:a3:1f:35:0e:04:3d:a6:c7:47:a0: e1:45:69:15:6a:e6:d2:eb:3b:01:f8:cd:57:67:f2: 25:eb:e0:62:18:c7:c1:2e:9b:75:d5:7b:ef:30:6b: 6b:71:c9:36:c7:4d:27:09:a2:4e:31:dd:e7:3f:a8: 9a:7d:76:13:f5:65:59:ec:d5:de:ca:04:fa:61:b1: 7f:98:51:67:0d:c0:d9:77:51:71:9e:76:d9:85:63: d8:d9:a7:31:a3:17:33:4d:9c:21:ed:3f:94:af:d6: 9b:b8:89:06:10:2e:bb:bf:12:c2:e1:2b:0e:2e:78: f6:4d:1c:2f:e8:34:67:1a:b9:df:eb:d8:98:49:02: f5:26:f5:09:7f:67:85:48:82:75:3b:7a:a3:9a:a0: 5a:bd:23:c9:ed:b9:d3:7b:ac:80:e8:b5:ea:bc:99: 59:97:e5:c3:e6:01:6d:b5:90:a7:85:f2:19:5d:77: 0e:65:8f:b5:dd:8e:41:95:60:e0:4e:b8:51:61:d6: c0:f0:07:01:5f:32:30:60:3f:67:fc:72:d5:06:0b: 46:37:0a:aa:4d:60:5b:af:75:af:60:82:e9:47:6a: 47:bd:fe:34:55:8f:d7:cb:d8:23:49:fa:06:1d:ba: 7f:a2:6e:88:72:ee:65:c5:41:75:32:5b:d7:6c:49: 48:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:26:E7:85:E1:0E:EA:35:F0:D3:5D:6F:D6:81:BC:23:EE:0E:89:9B X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mibnheEO6jXw011v1oG8I-4OiZs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 42:c5:cb:61:87:32:cd:60:6d:82:a3:24:31:59:9b:98:96:f0: 75:ff:77:fb:b7:85:c4:8a:2f:a3:c4:df:b9:4c:e4:57:c6:ec: 09:20:fb:c2:e4:2a:20:b7:93:9c:45:a6:5d:1f:f5:74:0f:72: 1b:e2:cc:0f:0a:6f:4a:42:fb:1e:fa:90:9c:fc:2c:ea:de:7b: f7:af:25:7b:eb:3a:dd:e4:9a:e4:06:91:e0:a9:55:30:2c:44: 06:5a:0f:cf:e2:b9:a2:14:c9:7b:dd:85:8d:51:80:46:2a:c1: 0a:c2:b8:3c:f5:e1:29:75:d2:f8:85:65:84:6f:b5:45:e6:ee: a9:b6:83:d4:67:9a:25:6f:b8:e7:4b:b5:ab:16:23:8f:c3:cc: 20:f3:8a:75:d7:eb:f8:fb:72:99:92:a8:0f:f8:5d:03:2f:14: c3:ba:17:be:00:6f:9f:bf:1f:81:6b:7e:ae:92:29:7b:3d:f0: c3:1d:20:b8:96:3f:59:43:18:65:2a:5c:a5:80:62:61:14:fa: 1c:c6:a4:16:82:4a:8c:0f:c1:ca:69:11:8d:b5:12:cf:16:a9: b2:b7:4d:5a:11:22:85:5e:25:cb:58:ff:92:2d:b7:1d:58:3e: 60:f5:59:69:d9:6a:45:e2:72:e1:13:f7:31:d4:76:09:c4:58: ec:32:5a:d4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjQx MzM4MzFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDlBMjZFNzg1RTEwRUVB MzVGMEQzNUQ2RkQ2ODFCQzIzRUUwRTg5OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmWlj6ox81DgQ9psdHoOFFaRVq5tLrOwH4zVdn8iXr4GIYx8Eu m3XVe+8wa2txyTbHTScJok4x3ec/qJp9dhP1ZVns1d7KBPphsX+YUWcNwNl3UXGe dtmFY9jZpzGjFzNNnCHtP5Sv1pu4iQYQLru/EsLhKw4uePZNHC/oNGcaud/r2JhJ AvUm9Ql/Z4VIgnU7eqOaoFq9I8ntudN7rIDoteq8mVmX5cPmAW21kKeF8hlddw5l j7XdjkGVYOBOuFFh1sDwBwFfMjBgP2f8ctUGC0Y3CqpNYFuvda9ggulHake9/jRV j9fL2CNJ+gYdun+ibohy7mXFQXUyW9dsSUhVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmibnheEO6jXw011v1oG8I+4OiZswHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9taWJuaGVFTzZqWHcwMTF2 MW9HOEktNE9pWnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAELFy2GHMs1gbYKjJDFZm5iW8HX/d/u3hcSK L6PE37lM5FfG7Akg+8LkKiC3k5xFpl0f9XQPchvizA8Kb0pC+x76kJz8LOree/ev JXvrOt3kmuQGkeCpVTAsRAZaD8/iuaIUyXvdhY1RgEYqwQrCuDz14Sl10viFZYRv tUXm7qm2g9RnmiVvuOdLtasWI4/DzCDzinXX6/j7cpmSqA/4XQMvFMO6F74Ab5+/ H4Frfq6SKXs98MMdILiWP1lDGGUqXKWAYmEU+hzGpBaCSowPwcppEY21Es8WqbK3 TVoRIoVeJctY/5Ittx1YPmD1WWnZakXicuET9zHUdgnEWOwyWtQ= -----END CERTIFICATE-----Generated at Mon Jan 12 16:53:05 2026 by rpki-client