This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/oPvWtN1fjExfIToWq1WfLeMqpvQ.roa File: oPvWtN1fjExfIToWq1WfLeMqpvQ.roa (raw, json) Hash identifier: CdQwWTiEOECa7MqBioy+kujIchbSfaVzFyqd0G502Rw= Subject key identifier: A0:FB:D6:B4:DD:5F:8C:4C:5F:21:3A:16:AB:55:9F:2D:E3:2A:A6:F4 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0CC1 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oPvWtN1fjExfIToWq1WfLeMqpvQ.roa Signing time: Sat 24 May 2025 02:08:32 +0000 ROA not before: Sat 24 May 2025 02:08:32 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 27.103.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 3265 (0xcc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 24 02:08:32 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=A0FBD6B4DD5F8C4C5F213A16AB559F2DE32AA6F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ef:f5:62:25:e5:9b:7c:e3:fa:10:f9:1e:33: 97:6a:4b:34:83:07:de:a1:a5:22:e5:55:99:79:a4: 70:8b:13:59:6e:52:0d:33:4e:cc:cb:a5:bc:45:ef: d0:86:00:ce:b1:a7:59:26:f9:47:dc:79:95:62:87: 60:f9:bb:b9:a4:65:23:bf:4f:64:d2:6c:8c:f4:c2: 6b:d7:8a:d4:73:1c:b1:4b:b0:e9:1f:53:b4:65:6d: d3:21:50:16:55:ff:62:a7:1f:75:2a:a6:a2:db:a2: 10:88:42:43:19:e3:73:5e:58:0c:e5:9e:35:df:a7: c3:80:d3:69:94:3c:33:5f:c5:f5:49:cb:f3:93:5a: af:83:3e:22:c2:4b:16:3e:3f:31:02:2b:89:46:e0: 4d:4f:db:dd:28:b9:c7:53:dc:e2:06:26:90:11:50: e6:9c:24:68:b5:10:cb:7f:6d:b0:85:08:6f:b7:96: a7:d7:d5:fd:0b:f2:3d:ee:b3:91:69:60:c7:35:a5: 07:ac:8b:8a:5b:6b:96:78:f5:0e:56:2b:95:62:ab: 5e:d5:8f:f2:90:dc:32:7d:73:bf:b4:87:ff:cb:35: 11:83:b2:7e:fe:57:46:27:52:39:9a:5f:cd:e3:ef: bd:47:25:a1:71:bf:69:90:44:ff:13:ee:ac:3e:54: 87:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FB:D6:B4:DD:5F:8C:4C:5F:21:3A:16:AB:55:9F:2D:E3:2A:A6:F4 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oPvWtN1fjExfIToWq1WfLeMqpvQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption 86:ea:2a:4f:5f:e0:41:e8:2c:89:17:e9:a3:4c:0f:25:7f:02: 2e:87:82:94:5c:71:7b:37:40:81:16:74:92:55:9c:4d:a4:8f: 50:54:38:f7:4f:2f:c8:22:0c:02:18:85:62:0c:25:4f:53:bb: 04:3c:3e:e9:61:47:0c:82:27:6a:ee:09:f0:c1:f9:4d:23:1a: 19:94:e4:7b:0b:be:d8:bb:3d:67:b1:99:92:e2:bf:22:0e:fb: ae:b4:c3:ba:4f:d4:05:e4:16:73:88:9c:90:f5:c7:05:52:8d: 3f:9a:f4:0b:ea:7e:38:87:aa:ee:29:0e:ea:db:16:83:78:15: 2a:78:54:64:7d:9f:f6:c9:20:16:9e:c3:b1:4a:9d:a6:6d:0a: a3:fe:56:71:ac:66:6b:d5:3e:c4:72:5a:b7:f9:bb:89:0f:06: 73:66:d0:70:ef:32:90:8a:cd:38:0f:08:70:69:eb:a2:2a:92: 01:3a:c9:bf:e0:1e:bc:9b:0a:cb:81:17:16:a7:0b:bb:55:d2: 83:61:05:79:95:ca:c0:04:26:02:46:57:09:2a:33:00:74:e9: 17:ea:a0:1a:b2:2c:6e:ac:63:f8:b8:10:6e:9d:65:a6:17:be: 15:34:2f:2e:32:bb:2b:fc:a1:d1:4b:25:74:0f:0a:bc:e4:b6: 8c:0e:3e:2e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjQw MjA4MzJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEEwRkJENkI0REQ1RjhD NEM1RjIxM0ExNkFCNTU5RjJERTMyQUE2RjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDz7/ViJeWbfOP6EPkeM5dqSzSDB96hpSLlVZl5pHCLE1luUg0z TszLpbxF79CGAM6xp1km+UfceZVih2D5u7mkZSO/T2TSbIz0wmvXitRzHLFLsOkf U7RlbdMhUBZV/2KnH3UqpqLbohCIQkMZ43NeWAzlnjXfp8OA02mUPDNfxfVJy/OT Wq+DPiLCSxY+PzECK4lG4E1P290oucdT3OIGJpARUOacJGi1EMt/bbCFCG+3lqfX 1f0L8j3us5FpYMc1pQesi4pba5Z49Q5WK5Viq17Vj/KQ3DJ9c7+0h//LNRGDsn7+ V0YnUjmaX83j771HJaFxv2mQRP8T7qw+VId3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoPvWtN1fjExfIToWq1WfLeMqpvQwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9vUHZXdE4xZmpFeGZJVG9X cTFXZkxlTXFwdlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA G2cwDQYJKoZIhvcNAQELBQADggEBAIbqKk9f4EHoLIkX6aNMDyV/Ai6HgpRccXs3 QIEWdJJVnE2kj1BUOPdPL8giDAIYhWIMJU9TuwQ8PulhRwyCJ2ruCfDB+U0jGhmU 5HsLvti7PWexmZLivyIO+660w7pP1AXkFnOInJD1xwVSjT+a9AvqfjiHqu4pDurb FoN4FSp4VGR9n/bJIBaew7FKnaZtCqP+VnGsZmvVPsRyWrf5u4kPBnNm0HDvMpCK zTgPCHBp66IqkgE6yb/gHrybCsuBFxanC7tV0oNhBXmVysAEJgJGVwkqMwB06Rfq oBqyLG6sY/i4EG6dZaYXvhU0Ly4yuyv8odFLJXQPCrzktowOPi4= -----END CERTIFICATE-----Generated at Mon Jan 12 10:30:57 2026 by rpki-client