This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/Fo_crx39al19DVf6dJIeYm5YvDQ.roa File: Fo_crx39al19DVf6dJIeYm5YvDQ.roa (raw, json) Hash identifier: D2WBmWC81N/iZFPl1HzOFrGpKah0e49EVBAR5A+7pN8= Subject key identifier: 16:8F:DC:AF:1D:FD:6A:5D:7D:0D:57:FA:74:92:1E:62:6E:58:BC:34 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: F488 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/Fo_crx39al19DVf6dJIeYm5YvDQ.roa Signing time: Sun 25 Jan 2026 18:57:53 +0000 ROA not before: Sun 25 Jan 2026 18:57:53 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 63612 IP address blocks: 43.227.80.0/20 maxlen: 20 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 62600 (0xf488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 25 18:57:53 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=168FDCAF1DFD6A5D7D0D57FA74921E626E58BC34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:66:4e:cf:f2:18:a5:0f:f6:2f:fd:60:33:89: 8c:27:47:fd:88:d4:f7:7b:e9:a5:84:19:38:b0:5d: df:d0:8a:e5:9b:12:0e:2f:25:38:b2:91:4f:b9:77: e0:cb:a3:b9:2e:26:fa:aa:77:20:20:b4:69:06:6c: ae:00:52:96:18:04:54:44:77:3f:a4:04:e8:74:5b: b9:0a:84:cc:ec:57:e9:aa:6d:c3:dd:03:38:66:c6: a5:cb:36:57:cc:f8:35:01:d9:19:aa:63:5c:ab:97: af:93:e9:09:6f:70:0b:5f:e1:cd:36:60:c0:6f:08: 0d:0e:d5:3e:5b:88:68:45:0e:e0:5e:3a:6b:9f:05: ef:5a:58:c2:37:d5:c0:5f:2d:40:b1:fe:45:8b:5f: d1:22:41:40:e8:2b:ef:73:13:84:b3:9a:c4:74:03: 30:49:6a:3f:0f:64:bf:a9:07:5c:72:4b:27:01:68: 64:9a:b5:42:4e:32:6b:26:b5:e8:74:f4:fd:30:d6: c2:74:4f:3d:fc:44:bc:63:64:e8:59:d8:09:bd:0b: 82:71:cc:7b:c6:56:f2:c7:5b:e2:89:5b:26:49:73: 35:96:44:bb:f8:cc:e3:32:79:7e:ed:92:18:77:9a: 56:51:7e:7b:f3:84:10:1e:d7:21:18:cc:3b:34:43: 6f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8F:DC:AF:1D:FD:6A:5D:7D:0D:57:FA:74:92:1E:62:6E:58:BC:34 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/Fo_crx39al19DVf6dJIeYm5YvDQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.80.0/20 Signature Algorithm: sha256WithRSAEncryption 23:42:a4:3d:47:7f:40:a8:68:38:09:44:46:d7:ea:b6:60:98: 1a:03:0e:cc:c3:24:47:a3:f4:98:84:05:e7:2f:79:29:22:b9: a0:d0:cd:1b:8a:9c:08:5a:17:d6:87:25:40:dd:bb:d0:d4:ee: c3:fd:c5:e5:80:08:4f:b2:02:b1:d1:66:da:31:18:50:10:5c: 0e:8b:07:52:18:fb:98:0c:ab:ae:0a:ca:56:6f:51:0d:04:94: 85:51:5f:7a:06:1c:6a:5a:d4:b4:ec:c4:d5:0b:40:b1:28:59: 9e:a7:4c:28:ba:36:c4:f2:93:ba:30:e9:57:c4:2c:f4:c8:33: fa:a4:b2:ff:4e:2a:c2:88:cb:fa:b4:98:1c:bf:bf:a9:0d:5d: 5e:40:72:f6:4a:aa:f9:06:3e:53:ad:2e:0e:6c:dd:f2:56:7c: f5:f1:e8:c2:9d:8b:74:3f:af:90:80:59:fc:88:cd:5e:6a:8c: 31:e1:cb:f6:79:c5:57:78:fd:9c:ae:b4:ed:0d:e2:ae:fa:01: 9f:39:83:b4:bf:9a:f9:de:14:17:4c:cd:ea:1b:a8:f3:f9:5a: d8:80:d5:97:4d:03:54:fa:80:8b:ef:80:9a:3b:1e:3b:f1:fe: d1:4f:2c:15:82:3b:64:f3:14:04:69:09:3e:79:c8:2d:67:0d: b1:fd:7d:26 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAPSIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTI1 MTg1NzUzWhcNMjcwMTA5MDgyMzE4WjAzMTEwLwYDVQQDEygxNjhGRENBRjFERkQ2 QTVEN0QwRDU3RkE3NDkyMUU2MjZFNThCQzM0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAzmZOz/IYpQ/2L/1gM4mMJ0f9iNT3e+mlhBk4sF3f0IrlmxIO LyU4spFPuXfgy6O5Lib6qncgILRpBmyuAFKWGARURHc/pATodFu5CoTM7Ffpqm3D 3QM4ZsalyzZXzPg1AdkZqmNcq5evk+kJb3ALX+HNNmDAbwgNDtU+W4hoRQ7gXjpr nwXvWljCN9XAXy1Asf5Fi1/RIkFA6CvvcxOEs5rEdAMwSWo/D2S/qQdccksnAWhk mrVCTjJrJrXodPT9MNbCdE89/ES8Y2ToWdgJvQuCccx7xlbyx1viiVsmSXM1lkS7 +MzjMnl+7ZIYd5pWUX5784QQHtchGMw7NENvtwIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFBaP3K8d/WpdfQ1X+nSSHmJuWLw0MB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL0ZvX2NyeDM5YWwx OURWZjZkSkllWW01WXZEUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQr41AwDQYJKoZIhvcNAQELBQADggEBACNCpD1Hf0CoaDgJREbX6rZgmBoD DszDJEej9JiEBecveSkiuaDQzRuKnAhaF9aHJUDdu9DU7sP9xeWACE+yArHRZtox GFAQXA6LB1IY+5gMq64KylZvUQ0ElIVRX3oGHGpa1LTsxNULQLEoWZ6nTCi6NsTy k7ow6VfELPTIM/qksv9OKsKIy/q0mBy/v6kNXV5AcvZKqvkGPlOtLg5s3fJWfPXx 6MKdi3Q/r5CAWfyIzV5qjDHhy/Z5xVd4/ZyutO0N4q76AZ85g7S/mvneFBdMzeob qPP5WtiA1ZdNA1T6gIvvgJo7Hjvx/tFPLBWCO2TzFARpCT55yC1nDbH9fSY= -----END CERTIFICATE-----Generated at Mon Jan 26 05:00:48 2026 by rpki-client