This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/UYtxDljNdNTzh6vHpZ-pj1TbrwA.roa File: UYtxDljNdNTzh6vHpZ-pj1TbrwA.roa (raw, json) Hash identifier: zPi7pmu2NNHtyqlYWqiOxRUOr7IK/1FbYBGg/CXSEg4= Subject key identifier: 51:8B:71:0E:58:CD:74:D4:F3:87:AB:C7:A5:9F:A9:8F:54:DB:AF:00 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: BD8E Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/UYtxDljNdNTzh6vHpZ-pj1TbrwA.roa Signing time: Sun 07 Dec 2025 21:47:31 +0000 ROA not before: Sun 07 Dec 2025 21:47:31 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.227.68.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 48526 (0xbd8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Dec 7 21:47:31 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=518B710E58CD74D4F387ABC7A59FA98F54DBAF00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a2:b0:8a:fe:a4:bf:19:76:b8:f1:19:96:0f: 3d:ad:de:ab:4f:11:7f:55:a9:4e:1f:16:95:d7:b5: 9e:07:30:07:29:99:b1:f5:77:bb:11:f2:ff:29:23: 6d:ad:70:0c:8b:38:eb:3a:cc:65:de:74:ce:e1:0a: c8:42:e9:ed:ec:2a:83:c4:c2:52:da:33:32:85:92: 5d:7f:b7:db:7e:85:5e:1e:97:cd:19:50:72:bf:70: f8:8d:ef:1d:fd:f4:ff:1b:12:e1:be:18:9c:6f:aa: e9:26:51:d3:53:81:7a:19:a3:eb:c1:d7:54:2a:bb: fc:8f:cd:06:ce:8f:e9:85:53:3d:53:19:16:19:75: c0:35:b6:7e:65:6c:34:24:3f:50:96:84:f6:48:d5: 28:50:7e:45:bb:9c:20:6b:1c:d5:dc:b7:03:4c:5d: ad:b4:ce:d3:4e:12:93:c6:45:59:52:6e:ad:1e:d6: 7b:68:70:64:8d:1a:f7:43:13:8f:8b:36:52:4e:89: 4e:77:62:b8:6d:2b:3e:5e:00:91:cc:ab:b1:b8:b6: a9:28:90:be:a3:0c:de:cf:db:be:eb:85:07:2e:69: ee:cd:78:b8:69:08:ff:28:f2:ba:c5:f8:96:d8:31: 19:bc:0f:5d:1f:c6:ca:6e:da:73:a0:94:b9:2d:e6: 6e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8B:71:0E:58:CD:74:D4:F3:87:AB:C7:A5:9F:A9:8F:54:DB:AF:00 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/UYtxDljNdNTzh6vHpZ-pj1TbrwA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.68.0/24 Signature Algorithm: sha256WithRSAEncryption 76:aa:a4:d9:fa:6a:4f:9c:92:65:fa:9f:fb:db:3c:06:f0:9c: 81:c6:a3:b6:eb:3a:cd:18:54:94:c6:96:b4:3d:08:7c:b2:82: 24:02:65:ad:9f:06:c8:a1:ff:53:f8:c5:7b:5e:f1:72:5f:47: 77:be:2c:d6:57:52:61:03:3b:d9:83:3c:f6:b5:93:cd:26:d1: 69:76:56:98:97:6a:79:88:ff:5b:90:80:9a:50:e7:fd:73:3e: 39:09:d8:b3:1f:7d:86:2a:d7:28:ef:51:1d:a1:99:7a:07:43: 3b:03:05:97:20:dc:5f:aa:1d:94:db:61:27:c4:ed:33:ea:6e: 31:cf:78:d5:0c:79:e6:77:29:82:02:55:ed:e2:76:d4:69:e1: 1b:f2:88:0d:83:69:a4:e7:b3:d1:b1:09:f9:dc:34:60:3e:2d: 3c:d8:64:dc:c9:8d:ff:89:5f:93:1d:30:c3:5d:a4:13:01:d0: f5:d7:e2:5b:8a:61:43:ba:ce:6e:d5:c1:d2:d9:0b:0b:35:49: 39:27:5b:a5:9b:0d:91:c9:9f:89:b6:30:fe:e4:ca:43:fe:21: 56:76:90:03:c7:02:f9:cc:cc:e7:3a:03:8d:04:5c:97:c7:0f: ff:9a:8f:36:cb:ea:d6:b1:3d:42:a1:f2:ac:92:1a:7c:29:09: 8d:6d:8a:55 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAL2OMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjUxMjA3 MjE0NzMxWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyg1MThCNzEwRTU4Q0Q3 NEQ0RjM4N0FCQzdBNTlGQTk4RjU0REJBRjAwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA76Kwiv6kvxl2uPEZlg89rd6rTxF/ValOHxaV17WeBzAHKZmx 9Xe7EfL/KSNtrXAMizjrOsxl3nTO4QrIQunt7CqDxMJS2jMyhZJdf7fbfoVeHpfN GVByv3D4je8d/fT/GxLhvhicb6rpJlHTU4F6GaPrwddUKrv8j80Gzo/phVM9UxkW GXXANbZ+ZWw0JD9QloT2SNUoUH5Fu5wgaxzV3LcDTF2ttM7TThKTxkVZUm6tHtZ7 aHBkjRr3QxOPizZSTolOd2K4bSs+XgCRzKuxuLapKJC+owzez9u+64UHLmnuzXi4 aQj/KPK6xfiW2DEZvA9dH8bKbtpzoJS5LeZuAQIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFFGLcQ5YzXTU84erx6WfqY9U268AMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL1VZdHhEbGpOZE5U emg2dkhwWi1wajFUYnJ3QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr40QwDQYJKoZIhvcNAQELBQADggEBAHaqpNn6ak+ckmX6n/vbPAbwnIHG o7brOs0YVJTGlrQ9CHyygiQCZa2fBsih/1P4xXte8XJfR3e+LNZXUmEDO9mDPPa1 k80m0Wl2VpiXanmI/1uQgJpQ5/1zPjkJ2LMffYYq1yjvUR2hmXoHQzsDBZcg3F+q HZTbYSfE7TPqbjHPeNUMeeZ3KYICVe3idtRp4RvyiA2DaaTns9GxCfncNGA+LTzY ZNzJjf+JX5MdMMNdpBMB0PXX4luKYUO6zm7VwdLZCws1STknW6WbDZHJn4m2MP7k ykP+IVZ2kAPHAvnMzOc6A40EXJfHD/+ajzbL6taxPUKh8qySGnwpCY1tilU= -----END CERTIFICATE-----Generated at Mon Dec 8 10:24:08 2025 by rpki-client