This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/INDPMj98VvVLZgMmAjnvdTy9blY.roa File: INDPMj98VvVLZgMmAjnvdTy9blY.roa (raw, json) Hash identifier: rilixzKkKYicQe3mulRvgLOY95wYeaVqebLcQYdlsl4= Subject key identifier: 20:D0:CF:32:3F:7C:56:F5:4B:66:03:26:02:39:EF:75:3C:BD:6E:56 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: F401 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/INDPMj98VvVLZgMmAjnvdTy9blY.roa Signing time: Sun 25 Jan 2026 07:28:12 +0000 ROA not before: Sun 25 Jan 2026 07:28:12 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 63612 IP address blocks: 103.45.128.0/19 maxlen: 19 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 62465 (0xf401) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 25 07:28:12 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=20D0CF323F7C56F54B6603260239EF753CBD6E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:84:b3:f5:2b:03:e9:54:54:92:70:b9:9b:24: 6d:c2:1b:d2:6c:39:b5:71:07:65:ef:34:8b:38:57: 5b:62:1b:77:f5:81:3d:47:45:4c:6c:e6:13:be:4a: c5:c2:85:16:fa:75:4d:b6:7c:0c:ae:b8:a1:f2:2c: 7c:70:4a:8e:ea:e9:25:07:21:ee:91:77:02:65:43: 08:ec:ea:30:ff:be:34:de:87:ff:4b:a7:7a:18:b6: 59:dc:bc:19:56:68:9b:6a:16:f7:72:40:26:34:43: 74:d5:bf:5f:ef:42:96:ac:9b:16:d4:f3:41:c4:3c: 57:fd:96:c0:1d:f4:c6:f6:e4:7a:ba:21:9c:5b:31: ee:2a:aa:10:83:0e:23:6c:a2:f2:db:79:82:c6:c9: 9a:a9:3c:b8:90:99:ec:1a:2d:ce:d5:e7:1f:e1:53: c3:2c:e4:bf:e4:7d:c7:d5:e2:68:dd:66:fa:06:bc: 9f:e3:a9:ca:7f:e1:ef:80:de:0f:d8:fa:a0:a0:24: 13:b4:0c:eb:44:c0:8b:48:06:55:bb:4c:4d:f8:6e: c3:84:2d:d9:60:b4:00:42:76:d6:a9:c4:e4:82:8d: c7:af:38:b3:c3:8d:74:11:21:6b:28:61:82:16:26: c9:b2:32:3d:ac:06:03:07:2f:ba:55:74:09:a2:6e: ed:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D0:CF:32:3F:7C:56:F5:4B:66:03:26:02:39:EF:75:3C:BD:6E:56 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/INDPMj98VvVLZgMmAjnvdTy9blY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.45.128.0/19 Signature Algorithm: sha256WithRSAEncryption 9c:29:59:d0:77:87:36:4a:36:17:97:51:ff:d4:47:79:f5:b5: 66:0f:6d:14:73:64:04:10:f4:5e:15:fe:65:61:25:90:5f:e9: f5:88:45:ff:c5:11:08:73:6c:98:57:f2:c2:2f:91:e0:89:d4: b3:49:3e:a1:99:00:2f:b5:61:b8:57:5a:2e:4a:8c:17:34:ce: 42:5e:06:37:d4:d9:2d:15:98:6e:e6:6f:86:fe:ed:dc:5e:ea: 7a:24:e5:c2:7f:bc:e6:2c:d6:76:43:ff:c3:a5:7a:86:50:90: 7f:93:1d:a9:e9:a9:c1:f8:c5:84:4f:13:bc:ec:5a:7d:77:9b: 3f:73:7e:96:94:84:03:d6:eb:0e:f0:3f:dc:21:ab:2f:9c:bf: 35:d6:ef:69:e9:99:93:4d:cb:d1:c4:2f:1b:68:ad:19:10:e0: f8:a4:a0:33:27:39:c8:ae:02:e1:44:5a:f3:b6:c6:d0:94:1e: 55:5a:42:51:8b:07:7a:c3:90:c9:27:02:4b:92:a2:c7:d8:6c: ca:f0:2a:ec:61:53:2f:6e:a2:69:52:3a:0a:74:54:10:1c:5c: af:a0:3e:7e:b3:9a:45:53:04:d7:ed:6f:42:db:c0:df:a8:df: 48:e8:e0:a7:d8:5b:65:d7:d6:b5:fd:84:65:a4:87:13:4f:f3: 91:ff:e2:69 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAPQBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTI1 MDcyODEyWhcNMjcwMTA5MDgyMzE4WjAzMTEwLwYDVQQDEygyMEQwQ0YzMjNGN0M1 NkY1NEI2NjAzMjYwMjM5RUY3NTNDQkQ2RTU2MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA3oSz9SsD6VRUknC5myRtwhvSbDm1cQdl7zSLOFdbYht39YE9 R0VMbOYTvkrFwoUW+nVNtnwMrrih8ix8cEqO6uklByHukXcCZUMI7Oow/7403of/ S6d6GLZZ3LwZVmibahb3ckAmNEN01b9f70KWrJsW1PNBxDxX/ZbAHfTG9uR6uiGc WzHuKqoQgw4jbKLy23mCxsmaqTy4kJnsGi3O1ecf4VPDLOS/5H3H1eJo3Wb6Bryf 46nKf+HvgN4P2PqgoCQTtAzrRMCLSAZVu0xN+G7DhC3ZYLQAQnbWqcTkgo3Hrziz w410ESFrKGGCFibJsjI9rAYDBy+6VXQJom7tyQIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFCDQzzI/fFb1S2YDJgI573U8vW5WMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL0lORFBNajk4VnZW TFpnTW1Bam52ZFR5OWJsWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVnLYAwDQYJKoZIhvcNAQELBQADggEBAJwpWdB3hzZKNheXUf/UR3n1tWYP bRRzZAQQ9F4V/mVhJZBf6fWIRf/FEQhzbJhX8sIvkeCJ1LNJPqGZAC+1YbhXWi5K jBc0zkJeBjfU2S0VmG7mb4b+7dxe6nok5cJ/vOYs1nZD/8OleoZQkH+THanpqcH4 xYRPE7zsWn13mz9zfpaUhAPW6w7wP9whqy+cvzXW72npmZNNy9HELxtorRkQ4Pik oDMnOciuAuFEWvO2xtCUHlVaQlGLB3rDkMknAkuSosfYbMrwKuxhUy9uomlSOgp0 VBAcXK+gPn6zmkVTBNftb0LbwN+o30jo4KfYW2XX1rX9hGWkhxNP85H/4mk= -----END CERTIFICATE-----Generated at Sun Jan 25 13:29:40 2026 by rpki-client