This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/w-LsfVoH3dR7x1o8A53gGkvSrqQ.roa File: w-LsfVoH3dR7x1o8A53gGkvSrqQ.roa (raw, json) Hash identifier: E+F/JUvePHNFySpG+JhvIQjwZYO+LbLew2O1m0AR8wY= Subject key identifier: C3:E2:EC:7D:5A:07:DD:D4:7B:C7:5A:3C:03:9D:E0:1A:4B:D2:AE:A4 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: BD90 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/w-LsfVoH3dR7x1o8A53gGkvSrqQ.roa Signing time: Sun 07 Dec 2025 21:47:32 +0000 ROA not before: Sun 07 Dec 2025 21:47:32 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.226.72.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 48528 (0xbd90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Dec 7 21:47:32 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C3E2EC7D5A07DDD47BC75A3C039DE01A4BD2AEA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:54:f8:e6:a1:53:df:17:e0:65:81:e9:4a:66: d3:32:b0:e5:b0:bc:6b:a2:dd:71:f7:27:aa:44:ee: 47:dd:46:4a:ed:bb:fd:f1:5b:b4:37:23:00:9e:97: cf:fb:6e:83:ab:c1:06:6d:b0:27:37:45:e7:19:5c: ef:b9:39:c5:4b:4c:16:e4:52:b8:34:4c:01:03:31: b7:b9:c0:79:da:12:43:48:f7:55:e6:b3:d4:90:36: ab:0e:db:62:3e:a2:ae:7c:72:13:00:96:c6:25:37: 57:d5:50:e9:54:4f:e0:45:e7:d4:80:59:4c:5b:41: 8a:8e:9f:a5:7b:63:c2:2f:88:ad:d9:cb:be:bd:28: b5:ed:98:67:2e:07:d4:c9:de:51:5b:b2:38:98:8b: 44:d1:b8:d8:77:8f:74:e8:22:51:71:62:f9:0b:b9: de:74:b6:e8:9f:59:47:6e:14:3a:40:7f:e4:e5:4d: fb:41:a9:9b:ac:18:ee:57:81:14:81:21:34:dc:6a: 08:04:b7:2b:6d:ca:e7:01:c6:04:1e:df:a3:24:95: 9b:f5:99:b8:05:c6:31:90:71:41:49:e4:7c:3a:c5: c8:8d:05:95:36:25:6d:c1:b0:e8:8b:04:76:43:4f: 73:d6:2f:a4:0a:6a:0e:89:1b:94:83:57:91:41:67: 02:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E2:EC:7D:5A:07:DD:D4:7B:C7:5A:3C:03:9D:E0:1A:4B:D2:AE:A4 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/w-LsfVoH3dR7x1o8A53gGkvSrqQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.72.0/22 Signature Algorithm: sha256WithRSAEncryption b3:87:dc:74:fc:f7:47:27:7d:d3:8f:5e:56:e1:5d:89:b3:7e: fd:a4:a7:11:0c:b7:de:6f:88:6e:d4:63:ac:5a:9e:b5:92:dd: 27:7e:d1:86:9c:29:72:fa:b3:8f:3a:af:15:f2:4c:e6:bd:dc: 8f:8d:e9:c1:c6:12:e7:63:75:81:97:68:cd:cc:15:c7:52:eb: 95:ab:6f:20:8c:68:c9:59:da:a7:9f:94:61:1d:c4:01:98:77: e6:1e:42:10:47:8b:7e:6a:2e:d7:7a:ee:2d:a8:18:34:8d:de: 7a:bc:eb:f2:4d:61:ec:7a:3e:f1:a9:3e:27:9f:c9:93:51:e3: bd:e2:cf:20:3d:e1:53:2d:1a:90:9c:8b:c3:b6:ac:79:45:29: 8e:f1:c9:ce:34:17:64:74:cc:42:35:1e:3d:0f:64:82:44:0c: 9a:53:84:16:f6:7c:af:99:e5:d1:a2:8c:90:ba:48:1d:b3:db: 93:1b:71:e4:9d:4e:12:22:aa:9e:d1:8d:42:ed:66:09:ac:d7: cf:0f:c4:ec:a1:2b:ce:d4:ba:ea:91:22:81:4e:fd:b6:46:d6: e1:2e:8b:dc:b7:b7:e8:85:4e:66:d8:88:17:df:c4:0d:e5:eb: b2:bb:c7:91:8e:b6:4b:83:32:07:bc:d2:0d:ee:f0:54:31:5d: 82:89:6a:12 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAL2QMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjUxMjA3 MjE0NzMyWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyhDM0UyRUM3RDVBMDdE REQ0N0JDNzVBM0MwMzlERTAxQTRCRDJBRUE0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAm1T45qFT3xfgZYHpSmbTMrDlsLxrot1x9yeqRO5H3UZK7bv9 8Vu0NyMAnpfP+26Dq8EGbbAnN0XnGVzvuTnFS0wW5FK4NEwBAzG3ucB52hJDSPdV 5rPUkDarDttiPqKufHITAJbGJTdX1VDpVE/gRefUgFlMW0GKjp+le2PCL4it2cu+ vSi17ZhnLgfUyd5RW7I4mItE0bjYd4906CJRcWL5C7nedLbon1lHbhQ6QH/k5U37 QambrBjuV4EUgSE03GoIBLcrbcrnAcYEHt+jJJWb9Zm4BcYxkHFBSeR8OsXIjQWV NiVtwbDoiwR2Q09z1i+kCmoOiRuUg1eRQWcC3QIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFMPi7H1aB93Ue8daPAOd4BpL0q6kMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL3ctTHNmVm9IM2RS N3gxbzhBNTNnR2t2U3JxUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIr4kgwDQYJKoZIhvcNAQELBQADggEBALOH3HT890cnfdOPXlbhXYmzfv2k pxEMt95viG7UY6xanrWS3Sd+0YacKXL6s486rxXyTOa93I+N6cHGEudjdYGXaM3M FcdS65WrbyCMaMlZ2qeflGEdxAGYd+YeQhBHi35qLtd67i2oGDSN3nq86/JNYex6 PvGpPiefyZNR473izyA94VMtGpCci8O2rHlFKY7xyc40F2R0zEI1Hj0PZIJEDJpT hBb2fK+Z5dGijJC6SB2z25MbceSdThIiqp7RjULtZgms188PxOyhK87UuuqRIoFO /bZG1uEui9y3t+iFTmbYiBffxA3l67K7x5GOtkuDMge80g3u8FQxXYKJahI= -----END CERTIFICATE-----Generated at Mon Dec 8 10:24:07 2025 by rpki-client