This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/wEkBJN1oZ4sNRgioiqljgYCjkyk.roa File: wEkBJN1oZ4sNRgioiqljgYCjkyk.roa (raw, json) Hash identifier: AkhhvrkjioPl76FwE32EPPygjIXW1bGlU8ajTL5+0fY= Subject key identifier: C0:49:01:24:DD:68:67:8B:0D:46:08:A8:8A:A9:63:81:80:A3:93:29 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 46E6 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wEkBJN1oZ4sNRgioiqljgYCjkyk.roa Signing time: Sun 21 Dec 2025 17:08:46 +0000 ROA not before: Sun 21 Dec 2025 17:08:46 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9391 IP address blocks: 124.29.0.0/17 maxlen: 17 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 18150 (0x46e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Dec 21 17:08:46 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C0490124DD68678B0D4608A88AA9638180A39329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:88:0e:98:25:ef:0b:f6:9f:26:4c:f9:f4:26: 63:fc:49:cf:8d:77:8b:75:67:4d:ee:a5:b8:4c:c6: cd:1a:8c:f4:2c:06:16:01:89:d0:e8:0f:2b:7b:c3: 18:27:c0:27:33:b0:bb:65:fc:da:a6:c4:a5:7d:c0: 53:0e:33:c1:9c:3b:3c:f4:2f:8b:c3:b2:ab:24:fe: 92:0c:70:1d:37:cf:6e:47:d4:a1:1f:3a:ed:90:8d: a3:d9:4a:ac:20:3a:65:bc:ed:84:67:fa:28:a8:0a: ed:0f:a4:99:c8:0c:ef:74:dc:8e:e7:ae:72:28:98: c9:87:02:d7:d6:cd:f5:15:f4:e4:b7:eb:9f:2a:ec: 4f:be:88:42:b4:e8:eb:78:83:98:45:c4:18:db:de: 82:5b:de:4f:ff:57:78:04:08:68:90:c0:ee:a9:57: 55:96:bb:bd:1f:00:54:fd:ce:d1:ae:6d:0a:02:fc: 0c:50:b5:b7:4c:c0:ef:60:b8:46:bd:ae:29:f5:b4: 0f:2f:20:4d:c6:ba:db:a7:0f:54:70:e3:90:c1:75: a8:c0:b0:91:fd:13:36:00:ed:6b:90:7c:d8:4f:94: ee:2f:be:f4:e8:bd:d0:3a:a8:52:71:63:42:28:dd: 72:ee:81:0d:f6:e1:0f:b5:4d:ea:39:05:1d:d4:8a: 2d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:49:01:24:DD:68:67:8B:0D:46:08:A8:8A:A9:63:81:80:A3:93:29 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wEkBJN1oZ4sNRgioiqljgYCjkyk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.29.0.0/17 Signature Algorithm: sha256WithRSAEncryption 0b:f7:1c:17:18:f1:99:79:7c:b5:49:5e:5f:8e:20:8d:05:50: b7:08:e5:4b:4c:87:28:66:7a:e7:0a:22:f0:0a:15:10:d0:80: 84:20:41:cf:f0:ba:47:0f:44:6b:00:aa:8a:1e:c1:a3:e8:33: 38:bd:f1:d8:e9:28:b2:0d:a1:22:3d:45:52:cb:a1:60:c8:99: d9:e7:f8:23:50:db:a0:e3:94:8d:fe:d3:8f:9b:40:87:dd:30: 83:ee:ff:45:9d:48:67:d7:dd:1f:d3:45:4c:09:cc:2e:91:94: f5:11:2f:31:d9:62:01:2b:8c:04:63:81:c6:16:85:a9:cc:43: 0f:fe:cb:cc:79:3c:8e:a7:c2:58:54:5d:4c:19:95:60:42:5a: 01:e6:a5:73:a3:a7:ce:ea:9f:86:3d:6c:98:de:7d:f7:ac:55: 08:f4:0c:d0:d1:9a:df:ba:47:f2:9e:45:4c:55:7c:3a:a9:75: a5:ed:57:50:6c:85:d4:ee:61:0e:57:e2:4c:69:91:be:1c:32: e2:e9:73:67:68:69:68:ee:a4:cb:6c:55:bc:18:9c:eb:09:8e: df:e4:95:70:a7:b9:24:d3:f5:64:d2:2a:fc:82:9c:ce:ae:2d: 51:0a:e0:cb:a4:dd:8d:b4:c6:3d:c8:80:e2:8e:21:ea:46:71: 85:80:05:9e -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICRuYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTEyMjEx NzA4NDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEMwNDkwMTI0REQ2ODY3 OEIwRDQ2MDhBODhBQTk2MzgxODBBMzkzMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCniA6YJe8L9p8mTPn0JmP8Sc+Nd4t1Z03upbhMxs0ajPQsBhYB idDoDyt7wxgnwCczsLtl/NqmxKV9wFMOM8GcOzz0L4vDsqsk/pIMcB03z25H1KEf Ou2QjaPZSqwgOmW87YRn+iioCu0PpJnIDO903I7nrnIomMmHAtfWzfUV9OS3658q 7E++iEK06Ot4g5hFxBjb3oJb3k//V3gECGiQwO6pV1WWu70fAFT9ztGubQoC/AxQ tbdMwO9guEa9rin1tA8vIE3GutunD1Rw45DBdajAsJH9EzYA7WuQfNhPlO4vvvTo vdA6qFJxY0Io3XLugQ324Q+1Teo5BR3Uii3fAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUwEkBJN1oZ4sNRgioiqljgYCjkykwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni93RWtCSk4xb1o0c05SZ2lv aXFsamdZQ2preWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH fB0AMA0GCSqGSIb3DQEBCwUAA4IBAQAL9xwXGPGZeXy1SV5fjiCNBVC3COVLTIco ZnrnCiLwChUQ0ICEIEHP8LpHD0RrAKqKHsGj6DM4vfHY6SiyDaEiPUVSy6FgyJnZ 5/gjUNug45SN/tOPm0CH3TCD7v9FnUhn190f00VMCcwukZT1ES8x2WIBK4wEY4HG FoWpzEMP/svMeTyOp8JYVF1MGZVgQloB5qVzo6fO6p+GPWyY3n33rFUI9AzQ0Zrf ukfynkVMVXw6qXWl7VdQbIXU7mEOV+JMaZG+HDLi6XNnaGlo7qTLbFW8GJzrCY7f 5JVwp7kk0/Vk0ir8gpzOri1RCuDLpN2NtMY9yIDijiHqRnGFgAWe -----END CERTIFICATE-----Generated at Sun Dec 21 20:06:46 2025 by rpki-client