This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/se0FVYSCgMQHkdi8fCu7ZlVCPxI.roa File: se0FVYSCgMQHkdi8fCu7ZlVCPxI.roa (raw, json) Hash identifier: bp1xWtczGXtDV1wTfFwCw6T90c+eIQrnxcLCoWyKglU= Subject key identifier: B1:ED:05:55:84:82:80:C4:07:91:D8:BC:7C:2B:BB:66:55:42:3F:12 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: F429 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/se0FVYSCgMQHkdi8fCu7ZlVCPxI.roa Signing time: Sun 25 Jan 2026 10:59:20 +0000 ROA not before: Sun 25 Jan 2026 10:59:20 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 134762 IP address blocks: 43.226.49.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 62505 (0xf429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 25 10:59:20 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=B1ED0555848280C40791D8BC7C2BBB6655423F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:ee:4c:41:b7:e4:53:cf:e6:37:e4:c4:1b: 40:f0:a0:9c:6c:cd:4b:fe:05:52:af:da:52:12:02: 3a:14:f7:12:2e:bf:61:43:0a:4c:10:52:40:07:54: 04:6a:cf:99:04:66:b4:3f:15:24:59:c2:e8:7e:35: 56:02:62:9f:95:50:c7:06:0c:0a:f5:ee:0f:18:43: 58:37:35:23:48:8f:4b:61:25:2b:8c:fe:68:14:3b: 1f:d4:dd:75:69:79:26:8c:aa:95:c3:e9:09:67:6c: ed:f0:95:f2:b4:08:0e:3a:28:f0:81:40:07:f7:b9: 66:4d:fc:06:84:b4:84:f5:fe:e8:a4:b2:c1:d3:1d: 6b:13:e2:d2:4a:d6:eb:b7:0e:82:d6:66:c1:69:49: 7c:6d:95:d9:f1:9e:3f:b1:80:b0:27:7d:73:0e:87: a6:1c:3e:0b:03:29:ab:f6:b8:47:ac:87:e8:14:21: 23:68:31:a2:51:08:33:fa:f8:b5:3b:00:4b:25:20: fc:22:7b:c0:8a:de:fe:22:2a:b9:cf:38:9a:98:ee: ae:67:3b:ae:41:8b:33:a2:e4:ec:10:e9:57:d8:fa: 4d:37:da:a7:0f:d2:d2:4b:12:32:2f:9c:43:db:cb: ac:40:f6:5f:47:21:bf:17:7e:b9:ea:0f:e4:fe:07: 92:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:ED:05:55:84:82:80:C4:07:91:D8:BC:7C:2B:BB:66:55:42:3F:12 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/se0FVYSCgMQHkdi8fCu7ZlVCPxI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.49.0/24 Signature Algorithm: sha256WithRSAEncryption ae:8c:d8:9f:18:bf:8b:fd:10:fe:92:40:73:d1:fd:11:a0:ea: 21:e4:4d:31:c7:29:23:95:0f:86:31:bc:79:b2:c7:72:5f:ee: 3a:2b:fb:71:de:e1:3d:80:49:26:b6:22:5e:2a:03:b2:61:38: 9a:d7:cb:7c:af:8b:90:03:fa:d3:b4:03:e1:6d:90:e4:53:eb: 54:32:66:2f:9e:92:e5:60:f9:73:c6:c1:2f:dc:7b:5b:69:0a: a0:ef:18:f3:fb:66:08:a3:2e:c9:d2:76:c4:9b:99:17:d1:5e: ac:20:ab:b6:73:fa:e0:b6:f4:d3:be:e9:66:7b:36:0b:71:e7: 88:a6:be:a9:0a:4c:e0:e9:30:a2:fb:c8:6d:2d:b7:c8:7d:a2: 0e:30:1d:64:1e:fa:0c:86:e0:6a:9a:7a:c6:af:b2:9c:8c:96: 84:c9:de:9b:a2:a8:7f:b5:ec:df:43:da:0f:2f:3b:e6:20:aa: a6:47:51:0e:2c:b3:22:8f:26:f2:88:22:96:fe:a7:ca:2f:b6: 47:1a:2a:43:9b:ac:f0:df:ce:92:37:0f:c6:82:e7:9e:ed:d5: 72:53:65:87:ee:63:db:36:8f:eb:82:e6:69:4f:b9:d6:d7:fa: 13:7f:a6:b2:5f:fb:da:8c:f3:79:27:71:2f:ac:cd:f9:9a:ed: 1a:c6:a0:f7 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAPQpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTI1 MTA1OTIwWhcNMjcwMTA5MDgyMzE4WjAzMTEwLwYDVQQDEyhCMUVEMDU1NTg0ODI4 MEM0MDc5MUQ4QkM3QzJCQkI2NjU1NDIzRjEyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAztvuTEG35FPP5jfkxBtA8KCcbM1L/gVSr9pSEgI6FPcSLr9h QwpMEFJAB1QEas+ZBGa0PxUkWcLofjVWAmKflVDHBgwK9e4PGENYNzUjSI9LYSUr jP5oFDsf1N11aXkmjKqVw+kJZ2zt8JXytAgOOijwgUAH97lmTfwGhLSE9f7opLLB 0x1rE+LSStbrtw6C1mbBaUl8bZXZ8Z4/sYCwJ31zDoemHD4LAymr9rhHrIfoFCEj aDGiUQgz+vi1OwBLJSD8InvAit7+Iiq5zziamO6uZzuuQYszouTsEOlX2PpNN9qn D9LSSxIyL5xD28usQPZfRyG/F3656g/k/geSjwIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFLHtBVWEgoDEB5HYvHwru2ZVQj8SMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL3NlMEZWWVNDZ01R SGtkaThmQ3U3WmxWQ1B4SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr4jEwDQYJKoZIhvcNAQELBQADggEBAK6M2J8Yv4v9EP6SQHPR/RGg6iHk TTHHKSOVD4YxvHmyx3Jf7jor+3He4T2ASSa2Il4qA7JhOJrXy3yvi5AD+tO0A+Ft kORT61QyZi+ekuVg+XPGwS/ce1tpCqDvGPP7ZgijLsnSdsSbmRfRXqwgq7Zz+uC2 9NO+6WZ7Ngtx54imvqkKTODpMKL7yG0tt8h9og4wHWQe+gyG4GqaesavspyMloTJ 3puiqH+17N9D2g8vO+YgqqZHUQ4ssyKPJvKIIpb+p8ovtkcaKkObrPDfzpI3D8aC 557t1XJTZYfuY9s2j+uC5mlPudbX+hN/prJf+9qM83kncS+szfma7RrGoPc= -----END CERTIFICATE-----Generated at Sun Jan 25 15:48:46 2026 by rpki-client