This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ngaoiJ949olPeYRN7eD5IcQWdgg.roa File: ngaoiJ949olPeYRN7eD5IcQWdgg.roa (raw, json) Hash identifier: yDJ9feaLWdSm32BgLCmSxOJLbaiD8aWSAne2AL4UOXw= Subject key identifier: 9E:06:A8:88:9F:78:F6:89:4F:79:84:4D:ED:E0:F9:21:C4:16:76:08 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 19D4 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ngaoiJ949olPeYRN7eD5IcQWdgg.roa Signing time: Tue 10 Jun 2025 12:39:41 +0000 ROA not before: Tue 10 Jun 2025 12:39:41 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 6612 (0x19d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Jun 10 12:39:41 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=9E06A8889F78F6894F79844DEDE0F921C4167608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bc:ff:fb:a2:6d:5c:de:82:79:3b:08:ef:0f: ea:26:93:a7:e6:0a:1a:41:aa:dd:bf:c9:b0:be:7c: 0c:01:b4:ae:bc:59:b3:5f:02:64:a0:66:02:75:5e: 7c:3b:d5:e0:b8:dc:26:b4:60:7e:99:eb:70:ba:7f: 66:44:00:dd:06:51:f5:e0:3b:c9:58:8b:1c:21:e5: 45:7c:df:69:57:17:44:a9:06:4e:fb:27:56:46:08: 54:a6:1b:1a:7e:b6:ec:86:3b:16:dc:bd:61:6d:3f: 6d:4b:f7:02:b3:17:4f:04:34:80:a2:df:f1:01:f0: 75:73:fb:2c:4d:b5:8d:c2:59:9a:70:8a:b0:d3:74: 1c:14:90:75:53:72:85:6e:9c:00:f4:94:da:16:f9: e4:d6:1f:ff:8d:42:ce:a1:5a:e0:c7:62:63:4a:22: 37:58:18:91:18:1c:ff:cf:73:11:61:d7:98:7e:da: 14:dd:b9:da:01:6b:50:65:48:4d:e4:91:02:a1:2e: 99:b4:3b:4f:1a:cc:b2:da:76:aa:72:ed:80:7a:c4: 71:e9:ef:ef:3a:c2:bb:70:22:81:25:5e:42:4c:9e: 59:62:7b:e2:54:92:61:17:44:8c:b7:2d:2b:8a:0f: bb:d5:78:ec:3e:5b:53:c0:72:06:ba:a7:20:55:d2: fb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:06:A8:88:9F:78:F6:89:4F:79:84:4D:ED:E0:F9:21:C4:16:76:08 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ngaoiJ949olPeYRN7eD5IcQWdgg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9a:b6:bb:f6:32:23:b6:04:f4:69:bc:c6:72:8e:81:6f:7f:32: 2b:8d:ad:6c:5d:af:ab:42:2b:7a:fc:da:be:3b:96:d6:6d:35: a5:cf:ee:c9:cf:1c:dc:08:c6:5f:e3:f3:e6:4b:1d:e6:36:c0: c5:b5:af:f2:ca:20:21:f2:14:10:a6:d5:84:2f:47:72:5c:c5: 02:81:0b:ef:ca:44:3a:ca:33:ce:5a:3d:ac:ef:62:c5:02:da: 53:25:fd:86:f7:fc:65:70:82:74:f0:9f:8b:89:fc:a4:24:8c: e8:4b:7f:d6:15:1a:64:26:07:7b:5f:f8:ab:af:68:e4:39:17: ae:0c:08:31:95:e1:a8:70:3c:c6:c7:65:c1:c6:d3:ee:6f:2f: d0:5e:39:37:ba:d3:66:d0:fa:b2:62:f1:c1:80:af:65:0c:c3: 35:e6:ad:97:08:9d:99:33:a1:ac:35:24:91:cd:22:8f:39:05: 19:b3:bd:4c:7c:4e:52:f6:be:81:67:85:37:69:ab:2b:10:f7: 88:d7:4b:70:a6:d1:1c:3c:de:6a:07:b5:e2:76:7e:0f:fe:89: a2:d1:89:64:41:22:a1:c7:8a:98:3e:48:51:05:22:9e:43:c4: 70:2c:37:d2:36:58:fb:07:b0:27:ff:a1:0b:91:b6:6d:a6:d7: 38:4c:df:b2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICGdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTAx MjM5NDFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDlFMDZBODg4OUY3OEY2 ODk0Rjc5ODQ0REVERTBGOTIxQzQxNjc2MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmvP/7om1c3oJ5OwjvD+omk6fmChpBqt2/ybC+fAwBtK68WbNf AmSgZgJ1Xnw71eC43Ca0YH6Z63C6f2ZEAN0GUfXgO8lYixwh5UV832lXF0SpBk77 J1ZGCFSmGxp+tuyGOxbcvWFtP21L9wKzF08ENICi3/EB8HVz+yxNtY3CWZpwirDT dBwUkHVTcoVunAD0lNoW+eTWH/+NQs6hWuDHYmNKIjdYGJEYHP/PcxFh15h+2hTd udoBa1BlSE3kkQKhLpm0O08azLLadqpy7YB6xHHp7+86wrtwIoElXkJMnllie+JU kmEXRIy3LSuKD7vVeOw+W1PAcga6pyBV0vthAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUngaoiJ949olPeYRN7eD5IcQWdggwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9uZ2FvaUo5NDlvbFBlWVJO N2VENUljUVdkZ2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAJq2u/YyI7YE9Gm8xnKOgW9/MiuNrWxdr6tC K3r82r47ltZtNaXP7snPHNwIxl/j8+ZLHeY2wMW1r/LKICHyFBCm1YQvR3JcxQKB C+/KRDrKM85aPazvYsUC2lMl/Yb3/GVwgnTwn4uJ/KQkjOhLf9YVGmQmB3tf+Kuv aOQ5F64MCDGV4ahwPMbHZcHG0+5vL9BeOTe602bQ+rJi8cGAr2UMwzXmrZcInZkz oaw1JJHNIo85BRmzvUx8TlL2voFnhTdpqysQ94jXS3Cm0Rw83moHteJ2fg/+iaLR iWRBIqHHipg+SFEFIp5DxHAsN9I2WPsHsCf/oQuRtm2m1zhM37I= -----END CERTIFICATE-----Generated at Mon Jan 12 16:46:36 2026 by rpki-client