This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/sW09W17SUwrFa3urcKIKOPRJdR4.roa
File: sW09W17SUwrFa3urcKIKOPRJdR4.roa (raw, json)
Hash identifier: LssC/z2cY2PbkpVB4YyEu/g0GUZ2JwPpu4+6ei2LUUo=
Subject key identifier: B1:6D:3D:5B:5E:D2:53:0A:C5:6B:7B:AB:70:A2:0A:38:F4:49:75:1E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 017A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sW09W17SUwrFa3urcKIKOPRJdR4.roa
Signing time: Fri 09 May 2025 01:07:45 +0000
ROA not before: Fri 09 May 2025 01:07:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 01:07:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B16D3D5B5ED2530AC56B7BAB70A20A38F449751E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:9c:f9:ed:e3:a9:62:e1:43:db:3d:6d:77:
8d:78:33:4b:62:e5:74:43:48:f7:72:60:d1:bc:68:
a5:fb:83:94:44:55:13:d0:44:df:e0:79:27:c8:7c:
4b:6e:c4:da:f3:2c:37:a8:92:fd:10:d5:1a:82:6e:
41:ca:2b:f9:9b:d8:ce:ca:66:8b:06:1b:6b:b1:a8:
c4:59:ca:6b:d1:9d:6e:82:f0:02:5f:05:d3:a6:ba:
87:b5:31:5a:26:61:7f:da:41:ed:02:b3:3a:2b:f0:
a1:5b:db:bf:c9:13:d2:5b:5b:c9:b7:96:41:23:6b:
1d:06:80:a5:36:bc:74:cd:c4:6e:c5:6a:b9:f5:d3:
25:ae:94:1a:3a:13:78:08:76:32:0b:25:43:eb:97:
38:76:fb:8c:03:87:cd:e5:fb:b9:36:23:0a:6a:bf:
71:e0:4a:d0:07:6b:a1:e4:05:d9:23:6b:3e:ae:c3:
f4:d3:97:d1:b5:59:26:c9:52:b7:8a:99:3f:26:92:
2b:d0:c6:a3:5d:5f:9c:a7:ce:4c:58:0d:28:fb:9d:
a1:a5:55:0a:3a:38:02:6c:0f:0a:be:cb:8c:ac:aa:
a0:ac:1b:5b:3c:fa:76:90:88:c9:19:d7:7f:46:cb:
1d:57:3a:f3:3b:f4:01:fb:6a:26:49:b8:1c:ca:62:
d5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6D:3D:5B:5E:D2:53:0A:C5:6B:7B:AB:70:A2:0A:38:F4:49:75:1E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sW09W17SUwrFa3urcKIKOPRJdR4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:2d:a6:c7:85:b5:30:ca:5f:21:1c:57:3f:75:c0:e9:d8:2f:
70:7c:e1:74:a3:33:35:9a:26:01:55:51:9d:f6:ca:c1:3c:82:
43:2b:b9:a3:06:30:51:83:cb:4b:ba:3a:6d:78:7e:eb:d7:bb:
64:f1:8f:17:cf:05:41:18:06:fb:e6:f5:d8:f8:e9:22:1a:72:
6e:60:d9:82:af:2b:6b:fa:23:98:3e:bc:96:5f:21:f2:21:c8:
76:68:d9:07:f9:0e:fb:bd:6d:fd:37:f5:88:1d:b6:fd:b3:bf:
73:fb:e4:1a:42:e7:d1:ca:37:f2:1f:77:6b:93:87:1f:63:1b:
4d:83:ba:4f:0c:7f:d2:17:c3:74:9b:ef:d9:c4:8d:ab:4b:f8:
ca:09:28:02:ce:66:cf:74:a1:6b:3f:ea:07:74:c3:4d:e7:4b:
04:41:c3:9e:6e:40:3a:94:8e:5d:5d:d0:13:80:b5:f6:1a:00:
64:ed:7a:3b:4f:7c:0f:88:1f:2c:53:c3:7b:3f:1d:2a:cf:2c:
3c:7b:64:5f:9d:7c:28:55:f3:67:27:94:45:a9:fa:39:a2:19:
c8:b2:5f:0e:e6:62:dc:0e:a2:4a:a3:98:38:55:f2:aa:1c:25:
5c:75:f9:05:36:13:c4:dd:2c:a7:fb:34:54:9a:32:fa:9f:96:
81:47:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 14:57:57 2026 by rpki-client