This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/JYCrBjgZV6MsWNHh9hZTx0OyX3E.roa
File: JYCrBjgZV6MsWNHh9hZTx0OyX3E.roa (raw, json)
Hash identifier: Szxe3nPlim6EFyRqEaMQbemhwQA6BBk+FOVxyo/0K4M=
Subject key identifier: 25:80:AB:06:38:19:57:A3:2C:58:D1:E1:F6:16:53:C7:43:B2:5F:71
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: BCCF
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/JYCrBjgZV6MsWNHh9hZTx0OyX3E.roa
Signing time: Sun 07 Dec 2025 05:47:46 +0000
ROA not before: Sun 07 Dec 2025 05:47:46 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 63612
IP address blocks: 103.45.128.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48335 (0xbccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Dec 7 05:47:46 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=2580AB06381957A32C58D1E1F61653C743B25F71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a0:70:c2:0d:0e:96:ae:d4:43:f9:2d:4d:39:
87:08:f3:89:a6:e3:de:1d:bf:f1:05:35:fe:76:61:
8c:31:9f:ca:e2:03:5d:5b:08:19:2b:8c:6e:75:a6:
39:b5:e7:53:54:35:15:cb:3e:78:78:05:e9:7d:e1:
cc:79:38:7b:3e:1e:9f:c4:68:d1:b3:49:da:fb:2a:
52:22:5a:4f:c7:4f:05:0c:07:ab:0c:d7:af:42:9a:
81:43:6a:e9:bf:08:f9:4e:55:9e:e1:f5:66:a3:23:
94:62:d3:ac:cc:55:55:27:eb:52:ff:60:fd:8c:32:
4d:20:ed:05:36:dd:90:86:1f:c5:72:b0:b3:6d:62:
dc:9b:33:f3:33:3a:5d:f4:b8:24:9f:f1:fc:79:c8:
cd:75:8d:a1:f6:9e:7f:44:60:9f:59:05:d9:f9:3e:
e6:6f:6c:b3:08:fc:93:05:e0:53:5a:89:d0:54:2c:
a8:a7:a5:be:2d:66:e3:56:e5:76:86:66:47:87:39:
b8:e2:6c:d1:64:04:39:7c:bd:df:f5:6b:f1:f9:84:
52:86:44:e2:1d:32:b7:d2:d4:91:e3:5c:b8:28:30:
bc:61:65:04:7a:6d:df:07:2e:3a:a8:62:c6:fa:42:
a7:98:b6:77:6a:60:d4:d6:fc:be:2d:36:d6:13:ca:
e0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:80:AB:06:38:19:57:A3:2C:58:D1:E1:F6:16:53:C7:43:B2:5F:71
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/JYCrBjgZV6MsWNHh9hZTx0OyX3E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.45.128.0/19
Signature Algorithm: sha256WithRSAEncryption
77:73:e0:d1:95:9e:91:b6:01:71:7c:c1:16:59:be:5c:f0:16:
9c:19:f2:ae:15:6b:77:db:bd:53:82:cc:a5:35:32:17:66:b3:
eb:30:8a:61:74:a3:91:1c:5f:08:9a:f7:8e:f7:b0:f0:ed:08:
c0:84:94:5f:2b:59:49:d5:8d:6a:6b:f5:07:8e:39:37:dc:99:
21:1d:df:62:7b:54:00:89:14:d8:50:11:a9:e5:47:c5:f1:3e:
5e:09:73:b3:14:83:0c:03:30:93:f9:cb:14:d2:c7:50:c0:22:
d5:8b:62:c1:52:97:b3:f8:32:4e:87:07:be:fe:5f:96:cf:6e:
be:a6:77:db:de:3b:11:0a:4d:42:fe:51:2e:48:70:94:2e:a1:
cc:63:6c:b6:62:09:73:ed:1a:e9:e2:1a:9f:4b:d9:7c:44:d6:
61:1e:b0:f1:e9:b6:2f:cb:44:45:01:f6:cb:88:29:64:4b:8b:
be:88:06:f1:85:8e:00:53:ef:d2:e7:61:13:9b:c4:82:dc:27:
22:57:b9:78:d1:4d:35:eb:df:6e:26:e0:df:c2:90:1c:6b:3f:
f6:b5:f1:e7:08:36:3d:04:6e:99:9a:99:c5:ae:24:98:42:4a:
5a:30:48:14:20:88:8b:8a:eb:d4:aa:14:c8:a4:e0:64:96:d7:
f7:8e:d1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:14:24 2025 by rpki-client