This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/VfqyVf7eMHPEIP2PcK05r_cmwtM.roa File: VfqyVf7eMHPEIP2PcK05r_cmwtM.roa (raw, json) Hash identifier: 2jxwvpMy7UQ9E20+hDvYb2ia4Tw3pnG530YoDxvIgQU= Subject key identifier: 55:FA:B2:55:FE:DE:30:73:C4:20:FD:8F:70:AD:39:AF:F7:26:C2:D3 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: BD8F Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/VfqyVf7eMHPEIP2PcK05r_cmwtM.roa Signing time: Sun 07 Dec 2025 21:47:31 +0000 ROA not before: Sun 07 Dec 2025 21:47:31 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63612 IP address blocks: 103.45.128.0/19 maxlen: 19 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 48527 (0xbd8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Dec 7 21:47:31 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=55FAB255FEDE3073C420FD8F70AD39AFF726C2D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:97:27:70:80:7c:64:a5:25:bd:bf:4a:e4:6d: d0:bf:f9:92:cd:15:2a:a6:78:65:da:42:bf:0d:45: 88:49:09:a1:57:fb:c2:68:cf:c3:06:78:0d:2d:91: 89:d2:1f:32:21:45:35:8f:41:7c:5e:e5:1a:16:3f: ae:95:63:10:b9:0b:52:f9:be:42:b9:e4:16:e3:78: b1:79:05:a1:20:7a:47:60:88:3c:59:9a:79:50:32: 88:6b:d0:6a:b5:82:7d:79:c6:ec:90:7d:34:be:ab: ef:06:86:be:b9:15:a5:7a:4b:ed:84:6e:47:49:25: 8c:6f:b4:52:23:57:99:0d:c6:fb:36:6f:23:58:de: e8:33:d8:26:bf:2c:2c:21:14:81:07:d5:8a:4d:b5: 65:ee:24:55:92:a4:52:eb:cd:d0:5f:78:6a:fd:94: 0b:b8:a2:a6:f5:ae:9e:04:59:6a:a6:c2:d0:56:11: 28:a0:31:69:17:6b:68:d4:2d:b7:74:16:92:be:6b: 39:c7:2c:de:40:e0:43:22:58:8d:7e:3c:ec:5d:1a: 8e:86:68:61:be:f5:a2:05:60:95:4a:58:ca:cf:78: 2b:29:64:0d:db:0f:18:75:7c:25:5b:8f:70:1c:e4: f4:39:00:08:b5:df:36:38:ec:b1:a3:68:ae:21:2d: 45:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FA:B2:55:FE:DE:30:73:C4:20:FD:8F:70:AD:39:AF:F7:26:C2:D3 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/VfqyVf7eMHPEIP2PcK05r_cmwtM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.45.128.0/19 Signature Algorithm: sha256WithRSAEncryption 9f:9e:6f:8a:6c:14:54:0a:26:a5:f5:68:00:5f:f0:4e:38:22: 4c:4f:80:2c:9e:af:b2:6b:95:87:ab:21:12:47:8c:a7:3b:59: 30:c9:bd:ca:76:64:1c:f5:68:13:49:42:7b:48:53:62:d3:23: 25:8c:30:98:3e:a0:50:5c:31:7d:1b:49:7a:c3:64:9e:94:78: c0:d3:56:f1:36:d8:30:9e:50:b5:01:eb:a9:73:96:11:c0:16: 93:10:7d:50:fc:89:3f:2e:21:f9:f6:a0:04:bb:01:46:09:d0: 9d:ea:4d:78:71:40:3e:8e:eb:71:e4:25:66:8a:c1:b9:b8:72: 8c:45:4b:c7:f8:f6:ad:e3:c0:fa:fd:0c:80:a2:f4:95:c2:1c: 6e:c8:a5:da:57:be:aa:d1:ca:63:76:33:f0:c3:43:35:61:11: de:c5:53:b0:de:64:11:84:63:f1:0d:32:9d:11:c2:8e:6e:f4: 65:63:df:96:2c:23:a9:63:73:24:dd:a0:64:76:0c:4b:9c:e2: 90:5d:b6:3d:00:c0:38:6e:76:1c:6d:72:62:12:96:8d:aa:dd: b0:c6:f0:11:11:38:70:41:48:cd:6c:0b:49:4d:42:05:97:06: 12:c6:78:0c:59:82:b4:82:6d:bb:aa:86:2c:2f:a0:00:55:b0: 88:b4:ce:50 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAL2PMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjUxMjA3 MjE0NzMxWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyg1NUZBQjI1NUZFREUz MDczQzQyMEZEOEY3MEFEMzlBRkY3MjZDMkQzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA+pcncIB8ZKUlvb9K5G3Qv/mSzRUqpnhl2kK/DUWISQmhV/vC aM/DBngNLZGJ0h8yIUU1j0F8XuUaFj+ulWMQuQtS+b5CueQW43ixeQWhIHpHYIg8 WZp5UDKIa9BqtYJ9ecbskH00vqvvBoa+uRWlekvthG5HSSWMb7RSI1eZDcb7Nm8j WN7oM9gmvywsIRSBB9WKTbVl7iRVkqRS683QX3hq/ZQLuKKm9a6eBFlqpsLQVhEo oDFpF2to1C23dBaSvms5xyzeQOBDIliNfjzsXRqOhmhhvvWiBWCVSljKz3grKWQN 2w8YdXwlW49wHOT0OQAItd82OOyxo2iuIS1FuQIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFFX6slX+3jBzxCD9j3CtOa/3JsLTMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL1ZmcXlWZjdlTUhQ RUlQMlBjSzA1cl9jbXd0TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVnLYAwDQYJKoZIhvcNAQELBQADggEBAJ+eb4psFFQKJqX1aABf8E44IkxP gCyer7JrlYerIRJHjKc7WTDJvcp2ZBz1aBNJQntIU2LTIyWMMJg+oFBcMX0bSXrD ZJ6UeMDTVvE22DCeULUB66lzlhHAFpMQfVD8iT8uIfn2oAS7AUYJ0J3qTXhxQD6O 63HkJWaKwbm4coxFS8f49q3jwPr9DICi9JXCHG7IpdpXvqrRymN2M/DDQzVhEd7F U7DeZBGEY/ENMp0Rwo5u9GVj35YsI6ljcyTdoGR2DEuc4pBdtj0AwDhudhxtcmIS lo2q3bDG8BEROHBBSM1sC0lNQgWXBhLGeAxZgrSCbbuqhiwvoABVsIi0zlA= -----END CERTIFICATE-----Generated at Mon Dec 8 10:29:45 2025 by rpki-client