This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/UwerCyMyj65iQPyEfSLJNkMqXLY.roa File: UwerCyMyj65iQPyEfSLJNkMqXLY.roa (raw, json) Hash identifier: iEbj/I5F5YtEYosPSSinH/Pif6V/Mtx2XOJdWfIOQEk= Subject key identifier: 53:07:AB:0B:23:32:8F:AE:62:40:FC:84:7D:22:C9:36:43:2A:5C:B6 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: F42A Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/UwerCyMyj65iQPyEfSLJNkMqXLY.roa Signing time: Sun 25 Jan 2026 10:59:20 +0000 ROA not before: Sun 25 Jan 2026 10:59:20 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 134762 IP address blocks: 43.227.68.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 62506 (0xf42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 25 10:59:20 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=5307AB0B23328FAE6240FC847D22C936432A5CB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:12:aa:95:8a:97:b5:c1:15:62:2d:db:7c:a7: 1e:32:3a:91:a7:33:bf:78:07:bb:e7:07:b0:53:5c: 99:83:d9:38:f2:de:41:2e:47:27:03:ea:83:72:8d: 12:2c:9d:fa:46:60:3c:ec:53:3a:fa:b1:44:ec:03: c2:44:c3:4b:47:bc:64:e6:10:15:0e:53:b0:8e:c6: 9a:21:91:17:62:40:cd:97:9c:32:41:69:c2:82:c8: ee:79:03:bc:ea:b9:98:37:36:84:4a:b1:f7:16:ce: ee:96:0d:98:e4:81:30:5c:2c:a9:47:56:69:64:9f: 1e:73:5a:f7:75:82:1f:f4:52:aa:f5:03:f1:84:d0: 9a:df:c7:b1:fa:79:e4:21:f0:dd:9e:fd:82:29:c3: 63:30:d7:5a:20:e8:25:00:bb:13:b8:8a:d6:72:15: 22:35:83:3a:fc:05:48:ee:ce:36:3d:5d:a0:ae:6b: 97:57:50:6b:c2:a8:ab:d3:40:8b:c3:dd:a7:56:83: 7a:53:e0:8c:ec:45:65:13:08:45:8e:cb:9d:dc:79: e7:9c:72:4b:59:3e:9a:b2:fb:4c:33:90:30:69:ae: bd:68:f2:e6:60:42:59:90:95:78:f4:8b:d9:3a:e6: 54:26:7c:be:6c:69:6e:79:9f:a6:02:08:73:74:b4: 1e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:07:AB:0B:23:32:8F:AE:62:40:FC:84:7D:22:C9:36:43:2A:5C:B6 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/UwerCyMyj65iQPyEfSLJNkMqXLY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.68.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:e6:51:20:dc:e2:bd:b2:b8:c8:e5:14:6b:62:c2:82:e0:00: 1c:00:c0:7c:c3:2b:dc:77:94:e2:c8:b5:1d:85:7b:bb:14:f4: e9:3e:66:61:2e:e1:a4:c2:c0:ed:0c:5f:1c:c9:0c:9e:24:3e: 16:56:aa:97:fe:8e:ae:e9:cd:0d:d4:3e:87:e4:aa:d8:ca:10: 63:b9:74:8b:dc:93:4c:83:d5:2d:5a:2a:d0:62:91:c1:46:f8: 0c:66:94:db:f5:31:34:73:26:24:c1:50:28:a8:cd:90:a9:d7: 6f:51:4a:f9:5e:86:3a:64:de:da:3b:51:1d:7d:6b:f6:dc:4c: b7:23:b0:69:9f:5e:49:72:74:6e:7a:a5:71:54:26:b7:2d:47: 1a:6e:84:4c:b7:7e:ce:2c:28:30:4c:90:b2:44:04:29:b9:7c: d2:e2:eb:29:a1:76:71:da:ba:97:2b:dd:9f:f0:4f:ba:fe:c5: 8c:3b:fd:2b:fd:2b:8e:19:c0:c4:15:7b:cd:d6:32:42:3d:74: 3c:de:0f:2b:a9:f1:0a:3e:9d:0f:4e:00:81:8d:7b:dd:66:07: e2:7e:38:94:9f:df:2b:8f:48:27:cb:dd:7e:29:c5:7b:88:e8: 16:ae:45:e9:f4:f1:d0:48:c6:2e:91:eb:fc:6b:2c:60:e3:fc: 07:42:f1:04 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAPQqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTI1 MTA1OTIwWhcNMjcwMTA5MDgyMzE4WjAzMTEwLwYDVQQDEyg1MzA3QUIwQjIzMzI4 RkFFNjI0MEZDODQ3RDIyQzkzNjQzMkE1Q0I2MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAvRKqlYqXtcEVYi3bfKceMjqRpzO/eAe75wewU1yZg9k48t5B LkcnA+qDco0SLJ36RmA87FM6+rFE7APCRMNLR7xk5hAVDlOwjsaaIZEXYkDNl5wy QWnCgsjueQO86rmYNzaESrH3Fs7ulg2Y5IEwXCypR1ZpZJ8ec1r3dYIf9FKq9QPx hNCa38ex+nnkIfDdnv2CKcNjMNdaIOglALsTuIrWchUiNYM6/AVI7s42PV2grmuX V1Brwqir00CLw92nVoN6U+CM7EVlEwhFjsud3HnnnHJLWT6asvtMM5Awaa69aPLm YEJZkJV49IvZOuZUJny+bGlueZ+mAghzdLQePwIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFFMHqwsjMo+uYkD8hH0iyTZDKly2MB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL1V3ZXJDeU15ajY1 aVFQeUVmU0xKTmtNcVhMWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr40QwDQYJKoZIhvcNAQELBQADggEBAH/mUSDc4r2yuMjlFGtiwoLgABwA wHzDK9x3lOLItR2Fe7sU9Ok+ZmEu4aTCwO0MXxzJDJ4kPhZWqpf+jq7pzQ3UPofk qtjKEGO5dIvck0yD1S1aKtBikcFG+AxmlNv1MTRzJiTBUCiozZCp129RSvlehjpk 3to7UR19a/bcTLcjsGmfXklydG56pXFUJrctRxpuhEy3fs4sKDBMkLJEBCm5fNLi 6ymhdnHaupcr3Z/wT7r+xYw7/Sv9K44ZwMQVe83WMkI9dDzeDyup8Qo+nQ9OAIGN e91mB+J+OJSf3yuPSCfL3X4pxXuI6BauRen08dBIxi6R6/xrLGDj/AdC8QQ= -----END CERTIFICATE-----Generated at Sun Jan 25 15:48:52 2026 by rpki-client