This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/GMWcWUxSW7KNiHJj9uwPAsBqP7Y.roa File: GMWcWUxSW7KNiHJj9uwPAsBqP7Y.roa (raw, json) Hash identifier: 10AaX2Pi2PlocZgFefDzLgmv48gY+mKqbJ6WT3j7Ido= Subject key identifier: 18:C5:9C:59:4C:52:5B:B2:8D:88:72:63:F6:EC:0F:02:C0:6A:3F:B6 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: BCCD Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/GMWcWUxSW7KNiHJj9uwPAsBqP7Y.roa Signing time: Sun 07 Dec 2025 05:47:46 +0000 ROA not before: Sun 07 Dec 2025 05:47:46 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.226.49.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 48333 (0xbccd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Dec 7 05:47:46 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=18C59C594C525BB28D887263F6EC0F02C06A3FB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:64:bc:f2:64:48:e8:f1:fb:fb:d9:f9:0d:65: a9:f3:0f:3c:62:09:f5:da:f8:da:86:3c:fc:fb:4d: 50:41:8a:e7:2d:2c:a5:8d:2c:64:35:47:19:c6:d4: 46:fa:24:7a:a6:6b:3c:f9:ec:e6:17:d5:ef:2d:63: d3:cb:00:cf:58:88:0c:92:59:64:78:88:82:db:72: 21:64:2b:5a:90:1a:3b:ed:0c:92:59:3c:e9:3f:92: 41:66:76:f6:6f:59:07:a8:c7:d2:a3:9a:4e:68:1d: cb:8c:bc:60:f1:6d:68:12:92:f1:0f:9e:ff:5c:b5: 73:0e:e4:7e:98:3d:ec:21:f1:2f:25:b3:4f:b8:3a: 42:44:6f:7c:6d:3b:cc:b9:41:b6:2f:65:0d:1f:f0: c9:ab:bd:44:73:12:e3:28:a1:27:3c:1f:fe:e1:61: 42:c9:38:47:8b:ce:d2:2c:ac:53:e5:d8:80:84:dd: 55:32:ae:cd:0a:fa:4e:d4:18:3d:f0:b0:07:63:c9: 03:33:e0:20:0e:d3:b5:24:05:58:e8:00:e5:fa:19: 47:2a:90:6e:9a:5e:c8:e1:2c:d1:f6:fc:82:fd:f6: d1:59:c9:53:73:58:86:15:cd:07:21:ff:1f:6c:de: f0:2f:1f:93:ff:2d:a5:cb:df:18:8c:93:76:c7:fc: 7a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C5:9C:59:4C:52:5B:B2:8D:88:72:63:F6:EC:0F:02:C0:6A:3F:B6 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/GMWcWUxSW7KNiHJj9uwPAsBqP7Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.49.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:52:ea:ce:07:23:b1:e2:5c:91:18:86:fd:0a:29:aa:61:c4: 9e:31:9a:07:c2:ca:5d:29:d7:8a:1d:57:ba:00:88:6f:de:3b: 70:c2:58:b4:c1:75:6f:6f:5a:de:6c:7b:9c:f4:6b:06:d4:c1: 08:37:db:53:ff:d6:e4:12:51:e6:1b:5a:3c:e5:bb:5e:02:4f: 6c:3f:69:80:cd:8f:8a:c1:bb:b2:85:23:da:39:8e:5d:fc:99: a6:76:03:29:fc:9f:fa:40:44:f1:b4:70:84:97:6e:52:35:ee: 8c:68:9d:bc:01:f1:7f:df:87:be:52:c8:8c:ad:3c:56:c1:ca: cd:5b:4e:30:57:b6:6b:58:de:0b:9a:92:7f:7c:e0:24:a3:dd: 30:e4:be:0c:75:09:77:b8:79:3c:8d:fc:8d:70:32:48:b6:88: 21:fb:be:02:d8:30:24:c4:3f:5e:dd:21:35:e0:ef:8a:c9:91: 3e:24:3e:18:d7:80:2d:7b:e9:9a:1a:52:99:f8:ab:6f:a3:28: 0f:c0:2c:ce:34:80:d6:de:69:b7:26:96:42:ba:d1:bd:c3:54: 86:cd:3d:97:6f:2e:2d:3c:f0:e0:1e:82:47:e6:2b:ba:b6:0e: 31:e8:35:2c:69:f0:1d:ae:2e:1e:f0:42:5f:64:97:26:e4:43: d2:01:c7:9d -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDALzNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjUxMjA3 MDU0NzQ2WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEygxOEM1OUM1OTRDNTI1 QkIyOEQ4ODcyNjNGNkVDMEYwMkMwNkEzRkI2MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA2mS88mRI6PH7+9n5DWWp8w88Ygn12vjahjz8+01QQYrnLSyl jSxkNUcZxtRG+iR6pms8+ezmF9XvLWPTywDPWIgMkllkeIiC23IhZCtakBo77QyS WTzpP5JBZnb2b1kHqMfSo5pOaB3LjLxg8W1oEpLxD57/XLVzDuR+mD3sIfEvJbNP uDpCRG98bTvMuUG2L2UNH/DJq71EcxLjKKEnPB/+4WFCyThHi87SLKxT5diAhN1V Mq7NCvpO1Bg98LAHY8kDM+AgDtO1JAVY6ADl+hlHKpBuml7I4SzR9vyC/fbRWclT c1iGFc0HIf8fbN7wLx+T/y2ly98YjJN2x/x6pQIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFBjFnFlMUluyjYhyY/bsDwLAaj+2MB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL0dNV2NXVXhTVzdL TmlISmo5dXdQQXNCcVA3WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr4jEwDQYJKoZIhvcNAQELBQADggEBAG9S6s4HI7HiXJEYhv0KKaphxJ4x mgfCyl0p14odV7oAiG/eO3DCWLTBdW9vWt5se5z0awbUwQg321P/1uQSUeYbWjzl u14CT2w/aYDNj4rBu7KFI9o5jl38maZ2Ayn8n/pARPG0cISXblI17oxonbwB8X/f h75SyIytPFbBys1bTjBXtmtY3guakn984CSj3TDkvgx1CXe4eTyN/I1wMki2iCH7 vgLYMCTEP17dITXg74rJkT4kPhjXgC176ZoaUpn4q2+jKA/ALM40gNbeabcmlkK6 0b3DVIbNPZdvLi088OAegkfmK7q2DjHoNSxp8B2uLh7wQl9klybkQ9IBx50= -----END CERTIFICATE-----Generated at Sun Dec 7 13:14:24 2025 by rpki-client