This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/-dEnkD6YmoCKBF_dg5qJ6WwJNi4.roa File: -dEnkD6YmoCKBF_dg5qJ6WwJNi4.roa (raw, json) Hash identifier: gqqOhP/U/jd1+GXh4W6HhG5wWKfeGGyiVkrEcZoftAk= Subject key identifier: F9:D1:27:90:3E:98:9A:80:8A:04:5F:DD:83:9A:89:E9:6C:09:36:2E Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: F3FF Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/-dEnkD6YmoCKBF_dg5qJ6WwJNi4.roa Signing time: Sun 25 Jan 2026 07:28:12 +0000 ROA not before: Sun 25 Jan 2026 07:28:12 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 134762 IP address blocks: 43.226.49.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 62463 (0xf3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 25 07:28:12 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=F9D127903E989A808A045FDD839A89E96C09362E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7c:ad:4a:25:53:9a:23:f1:23:00:64:f2:4e: ed:a9:92:fe:ed:95:1d:30:67:24:b1:01:c4:4e:21: 7b:2d:a1:5c:4a:4b:af:fb:7b:1c:60:69:07:f1:33: 2d:6a:09:58:ce:5f:57:4e:a9:16:b9:fe:87:6d:66: ed:c2:74:27:c0:61:13:2e:4e:5d:d0:14:d1:dd:8f: 9c:35:c2:7a:7e:f1:1f:da:9a:32:db:44:7d:af:83: b0:69:1d:da:22:a3:49:a1:19:f0:18:00:e3:a0:c2: 4b:62:29:66:80:6d:4d:88:77:89:24:d6:f1:83:0c: e2:79:29:3f:4f:4c:15:4f:4b:17:6f:5a:a4:ae:ff: 4e:e4:4a:f8:09:97:6d:d2:f1:e6:be:33:f3:b8:45: 31:c7:39:18:90:6c:af:d5:d9:ce:52:f3:02:e1:d9: df:bb:d6:d2:6c:81:2e:b4:53:f1:61:5f:ea:df:b7: 61:5f:30:63:3d:74:7d:a6:5b:2d:bb:00:07:02:97: 86:39:2e:38:e6:6a:81:96:07:db:40:ac:27:36:c1: 49:0d:87:21:ce:3a:fa:09:55:80:b3:2c:04:3c:f0: c0:b1:50:2a:3c:7c:ec:a8:4b:48:b1:69:f6:b4:4f: ea:7e:cd:1d:b3:13:fd:a8:62:93:68:d4:c3:54:2e: a1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D1:27:90:3E:98:9A:80:8A:04:5F:DD:83:9A:89:E9:6C:09:36:2E X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/-dEnkD6YmoCKBF_dg5qJ6WwJNi4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.49.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:1d:a7:de:5b:17:ba:d2:d3:d5:2e:ec:4d:fc:f1:e6:a1:11: 4d:22:e6:95:9b:b1:2b:6e:4c:12:46:65:bf:2f:ef:cd:e6:71: c5:18:cd:5b:e2:6e:cf:3a:0d:20:10:d3:d5:32:b9:02:e2:7a: ce:98:6c:b3:63:52:9a:07:24:2f:a1:ed:60:87:6b:04:f4:ca: d8:93:d6:fd:14:b7:02:18:ce:2e:47:56:2e:84:11:a8:fa:cb: 88:3f:30:23:68:39:8f:a1:89:1a:70:70:97:6f:b0:55:8e:85: 54:ff:a5:89:a4:c6:32:b8:8e:73:bb:8d:a0:11:b0:c3:21:27: d8:b4:5e:32:cd:55:f3:3d:56:a3:c6:80:2e:92:35:98:7a:0a: e3:42:7b:d3:e1:d1:72:83:97:5e:73:38:bf:1e:1e:58:df:94: 20:b6:86:81:d7:4e:87:08:dc:44:9b:41:02:ee:6a:67:14:d4: 33:c4:32:c2:91:82:42:78:21:46:55:e4:a8:48:6c:9e:c0:68: ef:32:35:e9:55:a7:e8:d5:d5:86:ff:d9:8b:93:a4:7b:31:e5: 12:87:be:fb:98:c3:e4:cb:e7:4c:b4:ec:d5:0f:05:ee:ee:7f: 2d:08:b1:12:4c:19:f0:31:60:69:01:d3:79:5a:08:7d:fa:0d: c9:93:f7:b1 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAPP/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTI1 MDcyODEyWhcNMjcwMTA5MDgyMzE4WjAzMTEwLwYDVQQDEyhGOUQxMjc5MDNFOTg5 QTgwOEEwNDVGREQ4MzlBODlFOTZDMDkzNjJFMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAvXytSiVTmiPxIwBk8k7tqZL+7ZUdMGcksQHETiF7LaFcSkuv +3scYGkH8TMtaglYzl9XTqkWuf6HbWbtwnQnwGETLk5d0BTR3Y+cNcJ6fvEf2poy 20R9r4OwaR3aIqNJoRnwGADjoMJLYilmgG1NiHeJJNbxgwzieSk/T0wVT0sXb1qk rv9O5Er4CZdt0vHmvjPzuEUxxzkYkGyv1dnOUvMC4dnfu9bSbIEutFPxYV/q37dh XzBjPXR9plstuwAHApeGOS445mqBlgfbQKwnNsFJDYchzjr6CVWAsywEPPDAsVAq PHzsqEtIsWn2tE/qfs0dsxP9qGKTaNTDVC6h5QIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFPnRJ5A+mJqAigRf3YOaielsCTYuMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzLy1kRW5rRDZZbW9D S0JGX2RnNXFKNld3Sk5pNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr4jEwDQYJKoZIhvcNAQELBQADggEBAA0dp95bF7rS09Uu7E388eahEU0i 5pWbsStuTBJGZb8v783mccUYzVvibs86DSAQ09UyuQLies6YbLNjUpoHJC+h7WCH awT0ytiT1v0UtwIYzi5HVi6EEaj6y4g/MCNoOY+hiRpwcJdvsFWOhVT/pYmkxjK4 jnO7jaARsMMhJ9i0XjLNVfM9VqPGgC6SNZh6CuNCe9Ph0XKDl15zOL8eHljflCC2 hoHXTocI3ESbQQLuamcU1DPEMsKRgkJ4IUZV5KhIbJ7AaO8yNelVp+jV1Yb/2YuT pHsx5RKHvvuYw+TL50y07NUPBe7ufy0IsRJMGfAxYGkB03laCH36DcmT97E= -----END CERTIFICATE-----Generated at Sun Jan 25 13:29:40 2026 by rpki-client