This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/sNzjPL-klyVQWFnBTJG609n_Wo4.roa File: sNzjPL-klyVQWFnBTJG609n_Wo4.roa (raw, json) Hash identifier: 0+W+q8vuEidelFxysM7wlI2Dfm7nZkR3fzVHzbUxLsc= Subject key identifier: B0:DC:E3:3C:BF:A4:97:25:50:58:59:C1:4C:91:BA:D3:D9:FF:5A:8E Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0AD2 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sNzjPL-klyVQWFnBTJG609n_Wo4.roa Signing time: Wed 21 May 2025 12:08:29 +0000 ROA not before: Wed 21 May 2025 12:08:29 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 2770 (0xad2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 21 12:08:29 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=B0DCE33CBFA49725505859C14C91BAD3D9FF5A8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:08:15:89:11:aa:5c:6a:64:06:76:1e:3a:84: 4b:b7:95:17:ac:ab:c0:ba:61:49:a6:54:e9:aa:27: 00:57:99:fb:60:e9:2f:16:6f:af:06:91:32:86:41: c3:40:1c:4b:eb:a6:9d:73:78:37:b9:0f:ea:ea:06: 78:2f:c3:b3:55:9c:06:9d:12:70:87:e1:d4:d0:dd: 09:44:8d:1f:cf:00:0e:22:e5:53:72:76:96:b5:59: 85:da:ff:e8:fb:ab:63:3a:53:2c:3b:d4:53:c9:1d: 6d:cd:3d:86:c6:9e:a4:59:bf:af:0b:54:fd:3e:ae: 0f:a9:19:82:f4:5b:bf:bc:5c:7b:74:52:b9:03:64: 94:e1:70:d0:02:22:27:06:3c:da:e2:1f:2e:50:0d: d4:54:be:49:56:0b:41:41:a5:ad:32:a7:5a:6c:b7: 91:ad:95:77:b9:9f:88:66:e6:72:ce:5a:fe:9a:23: ff:02:a8:dc:48:12:48:5c:83:36:d5:8a:11:ea:29: 8c:5e:3a:3c:29:3b:f0:82:87:36:cc:25:46:f0:dd: 38:ee:eb:30:76:20:ba:8f:c1:71:13:43:86:27:62: 1f:d2:8d:c6:5f:50:9c:03:74:fd:24:69:77:07:bf: ee:43:c6:8d:2f:94:4d:8b:1e:d2:e1:cc:aa:e7:4d: 38:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DC:E3:3C:BF:A4:97:25:50:58:59:C1:4C:91:BA:D3:D9:FF:5A:8E X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sNzjPL-klyVQWFnBTJG609n_Wo4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 96:4a:67:a8:24:fb:5b:44:a9:a1:a6:b7:b7:cb:73:18:f2:c8: 0f:92:c6:f2:47:03:74:36:16:65:d6:4b:7a:9b:1c:e9:71:09: bb:e1:5a:13:98:b5:3a:00:80:d1:c5:e3:a9:d4:7c:f6:32:40: 05:64:60:73:be:e1:d6:8e:e4:6a:d1:e4:5c:76:ba:59:34:bb: 6b:ad:93:3c:06:ff:4d:d0:b4:f0:6f:bf:75:8e:3a:5d:10:79: b6:94:98:b4:a9:7e:c7:74:a9:47:ab:de:9c:d1:5b:f8:3a:b7: 0c:c9:e7:a6:39:48:3e:70:ed:65:88:9d:35:d2:f8:ce:95:10: de:bd:33:1f:5b:96:bb:65:00:3e:c5:d8:bb:a0:ac:ef:f0:9e: 24:70:32:a6:86:10:d5:21:3b:31:20:a2:95:87:91:70:21:b7: 26:ff:8e:e2:9d:96:3f:a1:32:e4:8e:a3:89:26:6d:ab:03:dd: ea:98:fd:dc:4f:70:9a:59:83:b0:51:89:e7:42:db:3d:67:c1: 63:9b:0a:f2:30:59:3e:d1:4b:76:21:28:8e:8e:f5:bd:38:a4: b1:82:81:ae:c8:ce:04:8c:ed:10:f9:96:ff:f3:b7:6f:dc:42: e6:9f:31:5e:a3:60:a2:dc:f9:27:e4:cd:1f:8b:ec:cd:1d:29: 49:68:4e:29 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICCtIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjEx MjA4MjlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEIwRENFMzNDQkZBNDk3 MjU1MDU4NTlDMTRDOTFCQUQzRDlGRjVBOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbCBWJEapcamQGdh46hEu3lResq8C6YUmmVOmqJwBXmftg6S8W b68GkTKGQcNAHEvrpp1zeDe5D+rqBngvw7NVnAadEnCH4dTQ3QlEjR/PAA4i5VNy dpa1WYXa/+j7q2M6Uyw71FPJHW3NPYbGnqRZv68LVP0+rg+pGYL0W7+8XHt0UrkD ZJThcNACIicGPNriHy5QDdRUvklWC0FBpa0yp1pst5GtlXe5n4hm5nLOWv6aI/8C qNxIEkhcgzbVihHqKYxeOjwpO/CChzbMJUbw3Tju6zB2ILqPwXETQ4YnYh/SjcZf UJwDdP0kaXcHv+5Dxo0vlE2LHtLhzKrnTTgPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUsNzjPL+klyVQWFnBTJG609n/Wo4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9zTnpqUEwta2x5VlFXRm5C VEpHNjA5bl9XbzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAJZKZ6gk+1tEqaGmt7fLcxjyyA+SxvJHA3Q2 FmXWS3qbHOlxCbvhWhOYtToAgNHF46nUfPYyQAVkYHO+4daO5GrR5Fx2ulk0u2ut kzwG/03QtPBvv3WOOl0QebaUmLSpfsd0qUer3pzRW/g6twzJ56Y5SD5w7WWInTXS +M6VEN69Mx9blrtlAD7F2LugrO/wniRwMqaGENUhOzEgopWHkXAhtyb/juKdlj+h MuSOo4kmbasD3eqY/dxPcJpZg7BRiedC2z1nwWObCvIwWT7RS3YhKI6O9b04pLGC ga7IzgSM7RD5lv/zt2/cQuafMV6jYKLc+SfkzR+L7M0dKUloTik= -----END CERTIFICATE-----Generated at Mon Jan 12 05:29:26 2026 by rpki-client