This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/hR62UFmQ6Wn5GgsWZT2oXzcN1Dc.roa File: hR62UFmQ6Wn5GgsWZT2oXzcN1Dc.roa (raw, json) Hash identifier: LWA0NiQ1gTwYbl31JeHmmbwS/FF4yC9D50l7DYXfoq0= Subject key identifier: 85:1E:B6:50:59:90:E9:69:F9:1A:0B:16:65:3D:A8:5F:37:0D:D4:37 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: BCD0 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/hR62UFmQ6Wn5GgsWZT2oXzcN1Dc.roa Signing time: Sun 07 Dec 2025 05:47:46 +0000 ROA not before: Sun 07 Dec 2025 05:47:46 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.226.72.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 48336 (0xbcd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Dec 7 05:47:46 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=851EB6505990E969F91A0B16653DA85F370DD437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d9:7d:2c:fb:94:7d:0f:12:95:31:f0:a9:b2: 75:5a:ef:64:c6:71:e2:b0:b3:d3:2a:d6:ae:13:9f: 1a:6f:33:0e:e4:9a:d6:8f:10:cb:0e:4f:bf:13:04: 84:ec:0b:78:52:66:8d:76:7d:5d:a0:7a:9e:a7:05: 97:87:29:f6:e3:1a:93:c0:b6:61:5f:46:6b:50:99: 6e:8a:70:b0:79:e4:63:c7:0b:90:bd:56:22:f2:fd: 37:8c:4a:83:68:87:2e:8e:aa:d7:ae:51:f8:ce:3b: 55:c1:d0:7a:fc:73:1f:33:95:ff:8d:f4:16:74:26: 0f:d1:c3:2a:de:c0:d9:aa:2b:c1:3b:73:48:c7:c9: 43:2c:c5:ad:6a:39:b1:40:b4:10:d3:d8:0e:f7:bc: 91:3e:1a:3d:31:18:03:36:8f:3d:ae:ec:f7:f7:8a: e6:b5:e6:74:b6:d8:af:ff:41:50:99:08:88:9d:06: 0a:2d:b8:8e:64:9a:f8:3c:8f:5f:ee:6f:23:ff:1f: 93:6c:2a:e4:ec:61:d1:db:5f:09:3a:f1:dd:29:44: 74:1f:a3:66:81:1f:9d:90:1e:a7:86:ae:bf:be:b7: 01:f5:b0:bc:ee:91:6b:48:8f:89:93:ee:86:ec:30: 38:04:2a:9c:dc:98:7e:65:12:8d:43:00:ac:b7:6a: 99:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1E:B6:50:59:90:E9:69:F9:1A:0B:16:65:3D:A8:5F:37:0D:D4:37 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/hR62UFmQ6Wn5GgsWZT2oXzcN1Dc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.72.0/22 Signature Algorithm: sha256WithRSAEncryption b2:67:35:5e:84:d0:2d:c5:fe:a9:6d:0f:cd:70:b9:5a:7e:31: 6c:f3:25:d9:10:7c:4d:78:e0:77:8b:b5:cd:5b:1d:c7:9d:43: 33:b4:ca:34:9c:a5:e8:59:6b:fb:4e:72:6f:3e:fe:33:c1:14: b4:d3:3d:7e:21:e3:1b:09:35:ee:82:af:91:cf:a5:67:d9:54: 95:71:8d:6f:87:6f:9a:a5:6f:19:db:f9:da:fe:1b:69:95:d3: 2a:fc:9f:cd:e4:b7:a8:49:ed:ef:64:9f:27:93:54:30:35:e5: 07:1e:42:05:28:23:cd:f4:14:8f:bc:af:a3:d4:9b:0c:ff:1a: 5a:60:bf:39:c3:91:0d:1c:1b:47:dc:d9:ab:6f:61:d2:76:05: ec:d6:6b:37:d8:1e:98:f7:a0:7e:fd:1a:d7:d3:2f:51:59:c8: b7:95:cc:69:7a:00:41:4f:1b:0d:a0:69:7b:cf:90:30:68:20: 2e:84:60:b2:fc:69:12:8f:33:b7:44:8a:0b:2c:e6:3c:38:10: a4:99:5b:22:7f:6c:01:0f:ad:2f:0c:2a:0c:25:db:20:af:26: 0a:a0:ae:9b:4f:77:be:7c:52:81:2d:c5:66:ff:c5:13:8c:90: d5:67:a0:a3:78:18:48:ef:c1:bd:25:e3:b4:0b:80:67:5f:06: a7:37:aa:89 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDALzQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjUxMjA3 MDU0NzQ2WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyg4NTFFQjY1MDU5OTBF OTY5RjkxQTBCMTY2NTNEQTg1RjM3MERENDM3MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA3dl9LPuUfQ8SlTHwqbJ1Wu9kxnHisLPTKtauE58abzMO5JrW jxDLDk+/EwSE7At4UmaNdn1doHqepwWXhyn24xqTwLZhX0ZrUJluinCweeRjxwuQ vVYi8v03jEqDaIcujqrXrlH4zjtVwdB6/HMfM5X/jfQWdCYP0cMq3sDZqivBO3NI x8lDLMWtajmxQLQQ09gO97yRPho9MRgDNo89ruz394rmteZ0ttiv/0FQmQiInQYK LbiOZJr4PI9f7m8j/x+TbCrk7GHR218JOvHdKUR0H6NmgR+dkB6nhq6/vrcB9bC8 7pFrSI+Jk+6G7DA4BCqc3Jh+ZRKNQwCst2qZ0QIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFIUetlBZkOlp+RoLFmU9qF83DdQ3MB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL2hSNjJVRm1RNldu NUdnc1daVDJvWHpjTjFEYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIr4kgwDQYJKoZIhvcNAQELBQADggEBALJnNV6E0C3F/qltD81wuVp+MWzz JdkQfE144HeLtc1bHcedQzO0yjScpehZa/tOcm8+/jPBFLTTPX4h4xsJNe6Cr5HP pWfZVJVxjW+Hb5qlbxnb+dr+G2mV0yr8n83kt6hJ7e9knyeTVDA15QceQgUoI830 FI+8r6PUmwz/GlpgvznDkQ0cG0fc2atvYdJ2BezWazfYHpj3oH79GtfTL1FZyLeV zGl6AEFPGw2gaXvPkDBoIC6EYLL8aRKPM7dEigss5jw4EKSZWyJ/bAEPrS8MKgwl 2yCvJgqgrptPd758UoEtxWb/xROMkNVnoKN4GEjvwb0l47QLgGdfBqc3qok= -----END CERTIFICATE-----Generated at Sun Dec 7 13:14:15 2025 by rpki-client