This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/R7jTlwljOqj824AsRpPwvcoMzSE.roa File: R7jTlwljOqj824AsRpPwvcoMzSE.roa (raw, json) Hash identifier: R5D8RVihqUq1Yn/m/kMIVisqiZQS1CfZdJby1C1odvc= Subject key identifier: 47:B8:D3:97:09:63:3A:A8:FC:DB:80:2C:46:93:F0:BD:CA:0C:CD:21 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: F48B Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/R7jTlwljOqj824AsRpPwvcoMzSE.roa Signing time: Sun 25 Jan 2026 18:57:54 +0000 ROA not before: Sun 25 Jan 2026 18:57:54 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 63612 IP address blocks: 103.45.128.0/19 maxlen: 19 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 62603 (0xf48b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 25 18:57:54 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=47B8D39709633AA8FCDB802C4693F0BDCA0CCD21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:6a:bd:20:f7:62:1d:5f:8d:9a:56:e1:9d: 9e:1a:6d:92:14:44:f1:76:74:24:d8:d1:e6:1c:6f: 99:ab:8c:4a:7f:ca:02:a6:77:64:a3:8d:8c:0e:78: a5:fc:31:99:49:71:60:6a:15:e2:da:70:b7:43:16: 9e:c1:68:3f:a9:f2:03:ac:da:f2:b0:b4:81:8e:62: 26:45:51:23:e8:66:05:45:57:68:b5:d4:5d:47:21: c7:57:c1:c2:51:26:e4:1a:f3:95:05:83:a4:f8:64: 58:2b:18:a1:29:2c:db:89:c5:a6:44:a0:4f:f1:d7: 34:93:8f:60:65:f2:f1:b1:5c:69:2b:e9:63:7e:bc: 0a:1c:0f:8f:16:73:59:48:51:bd:e0:53:f7:7a:22: e9:0b:ac:65:73:cf:b0:a6:da:f9:a5:70:e1:15:34: 8a:5f:95:53:6c:72:5b:67:e9:0f:1b:9e:94:c2:e9: f3:64:2a:27:14:5f:7e:26:0e:72:24:f8:dc:4b:2f: 4c:8b:83:49:40:e9:fb:e8:bc:b1:23:6c:53:f9:56: bc:ec:85:68:94:24:ed:92:66:5f:4d:ef:69:ca:8c: b7:38:9f:14:be:af:f1:f7:7a:53:a8:30:67:c2:ed: 6b:3b:28:f3:cd:7b:9a:a2:d7:15:3e:59:dd:d8:12: a0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B8:D3:97:09:63:3A:A8:FC:DB:80:2C:46:93:F0:BD:CA:0C:CD:21 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/R7jTlwljOqj824AsRpPwvcoMzSE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.45.128.0/19 Signature Algorithm: sha256WithRSAEncryption 71:3a:79:5a:17:3a:8a:79:20:6d:53:98:65:6d:7f:c6:f3:67: a3:d9:75:2a:12:d9:7f:76:47:1a:02:f7:dc:4a:eb:c1:7a:50: 3d:ec:b3:b3:28:39:9f:f8:d5:dc:c1:17:c3:c9:08:bc:b9:c7: 50:23:ce:da:26:72:e9:40:d3:e4:36:64:bd:d1:7e:3a:8d:63: 5e:78:3f:13:87:99:a1:45:d2:76:a8:75:5d:61:07:80:ff:24: 61:43:b1:c8:5f:cf:01:12:03:3d:fd:39:9f:89:2c:30:1a:75: ed:a6:06:38:14:fe:2e:05:f8:e2:31:e3:71:eb:ef:72:c3:ec: 40:e4:41:ea:0c:17:54:f9:35:d0:95:12:a6:94:a8:b8:27:3e: ad:f1:d6:5d:79:a0:4f:27:a4:67:d1:51:16:ba:0a:92:29:d8: 39:9c:54:a4:ab:ea:72:fb:97:9e:a6:7c:7a:45:ed:d9:3d:c2: af:27:7e:b1:6b:02:51:bf:a1:73:8d:a4:7a:61:aa:66:70:c5: eb:03:75:36:ac:8b:3c:f3:8b:87:4d:b9:d2:b3:42:00:dc:50: 29:4e:9a:6a:d9:40:d5:2d:26:d4:f3:e6:b6:b9:17:10:53:7a: 21:41:4c:54:89:5b:07:ac:aa:a2:84:18:4b:b2:15:fa:b6:e0: bc:4f:f6:78 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAPSLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTI1 MTg1NzU0WhcNMjcwMTA5MDgyMzE4WjAzMTEwLwYDVQQDEyg0N0I4RDM5NzA5NjMz QUE4RkNEQjgwMkM0NjkzRjBCRENBMENDRDIxMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAqNNqvSD3Yh1fjZpW4Z2eGm2SFETxdnQk2NHmHG+Zq4xKf8oC pndko42MDnil/DGZSXFgahXi2nC3QxaewWg/qfIDrNrysLSBjmImRVEj6GYFRVdo tdRdRyHHV8HCUSbkGvOVBYOk+GRYKxihKSzbicWmRKBP8dc0k49gZfLxsVxpK+lj frwKHA+PFnNZSFG94FP3eiLpC6xlc8+wptr5pXDhFTSKX5VTbHJbZ+kPG56Uwunz ZConFF9+Jg5yJPjcSy9Mi4NJQOn76LyxI2xT+Va87IVolCTtkmZfTe9pyoy3OJ8U vq/x93pTqDBnwu1rOyjzzXuaotcVPlnd2BKgUQIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFEe405cJYzqo/NuALEaT8L3KDM0hMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL1I3alRsd2xqT3Fq ODI0QXNScFB3dmNvTXpTRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVnLYAwDQYJKoZIhvcNAQELBQADggEBAHE6eVoXOop5IG1TmGVtf8bzZ6PZ dSoS2X92RxoC99xK68F6UD3ss7MoOZ/41dzBF8PJCLy5x1AjztomculA0+Q2ZL3R fjqNY154PxOHmaFF0naodV1hB4D/JGFDschfzwESAz39OZ+JLDAade2mBjgU/i4F +OIx43Hr73LD7EDkQeoMF1T5NdCVEqaUqLgnPq3x1l15oE8npGfRURa6CpIp2Dmc VKSr6nL7l56mfHpF7dk9wq8nfrFrAlG/oXONpHphqmZwxesDdTasizzzi4dNudKz QgDcUClOmmrZQNUtJtTz5ra5FxBTeiFBTFSJWwesqqKEGEuyFfq24LxP9ng= -----END CERTIFICATE-----Generated at Mon Jan 26 05:02:19 2026 by rpki-client