This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/6x_Ba6JlQOkAQ8F4MRyXFyRPNek.roa File: 6x_Ba6JlQOkAQ8F4MRyXFyRPNek.roa (raw, json) Hash identifier: VUdglpB8fsZKBBbnAENUoAyFzuB21jwSMx4dpmM/MvI= Subject key identifier: EB:1F:C1:6B:A2:65:40:E9:00:43:C1:78:31:1C:97:17:24:4F:35:E9 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: A52F Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/6x_Ba6JlQOkAQ8F4MRyXFyRPNek.roa Signing time: Sun 25 Jan 2026 20:28:11 +0000 ROA not before: Sun 25 Jan 2026 20:28:11 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 42287 (0xa52f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jan 25 20:28:11 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=EB1FC16BA26540E90043C178311C9717244F35E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:80:6c:32:5c:d5:35:9f:9f:8a:fd:d5:20: 95:87:63:a1:52:6f:5f:15:25:10:90:f9:c5:48:7b: 28:04:40:46:e1:90:ee:4b:36:8c:dc:85:fa:63:95: 2e:81:3f:cd:b4:18:64:bf:49:e3:21:f0:9e:7a:30: 72:94:6a:67:be:9e:93:aa:a4:6b:4e:ea:8b:a3:7d: 99:38:07:99:2b:4e:67:09:66:69:ff:73:e3:aa:8b: 0a:f8:eb:32:ea:e9:08:60:69:c6:0b:a3:fd:ac:04: 4d:9a:bb:b6:01:e5:03:35:1d:88:4f:ba:c0:3c:4d: 2f:ea:35:c6:ff:5c:14:1a:7a:c1:2a:f4:45:ec:8a: 8b:50:2d:58:65:92:c0:dc:65:36:b7:6e:48:59:14: dd:c9:f0:0a:92:c3:cd:c0:26:63:b4:56:2d:83:69: 82:2e:67:d9:15:b5:d8:c9:4b:dc:bd:97:f3:3e:81: 38:51:9a:7b:ff:20:42:74:ed:ed:e7:b5:e0:d1:20: f8:ee:d0:c9:d2:18:a8:8f:fd:6c:9f:55:c6:69:4a: 89:e6:41:2d:7c:73:da:43:5e:fd:5a:f1:fb:77:65: b6:55:c8:50:f9:ae:2e:ba:91:63:04:ab:83:72:e4: ee:f2:23:ad:52:d2:75:ef:29:a1:99:a0:16:7f:75: 4c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1F:C1:6B:A2:65:40:E9:00:43:C1:78:31:1C:97:17:24:4F:35:E9 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/6x_Ba6JlQOkAQ8F4MRyXFyRPNek.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 4b:c3:fe:2f:55:cb:a2:51:1f:97:c4:80:56:73:56:a1:f1:e6: 2c:d7:3a:81:2f:a2:0b:c5:8a:dd:fa:0b:67:75:6d:fc:8e:69: bd:b6:bd:86:9e:5d:85:9d:ac:cc:28:15:5a:ef:40:46:9c:ef: fd:a6:9e:f9:23:69:c7:be:25:55:a6:14:2f:07:c5:4b:df:80: 19:5b:9d:97:02:f9:0e:4a:88:7f:50:f2:aa:d1:28:8e:a2:d8: 39:de:f3:e4:50:aa:5d:2b:7c:60:85:14:b6:f2:93:f8:3d:94: b3:40:49:3a:4c:b3:69:18:4f:df:30:9a:a8:e6:c1:b5:cd:4f: 78:4a:85:92:fc:b8:f7:52:a8:da:19:01:5b:29:36:57:5f:53: c7:18:a7:6a:15:d8:74:54:43:61:a9:92:8d:bd:8d:11:aa:18: 50:f0:d2:c5:ae:fe:97:02:a2:20:0b:bf:72:73:74:af:35:a7: f7:73:e9:ee:ab:18:8f:92:37:7a:4b:a3:ec:e8:7b:2d:ef:4c: 44:0d:18:b4:08:69:95:9c:13:33:3f:5b:41:3a:81:b5:08:a0: 9a:34:0a:0e:66:f0:6f:2a:77:ec:fe:e0:57:8a:06:fb:6f:cb: ee:ed:e9:46:07:cd:24:d3:8e:dd:55:5f:b5:57:69:ba:01:5b: 76:91:eb:3d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIDAKUvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKEQy QUI2QzlCNkUxNjUzMzRDMDMyRDA1MUQ1RkM3RDE1NDdFNEUzNTMwHhcNMjYwMTI1 MjAyODExWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyhFQjFGQzE2QkEyNjU0 MEU5MDA0M0MxNzgzMTFDOTcxNzI0NEYzNUU5MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAw9OAbDJc1TWfn4r91SCVh2OhUm9fFSUQkPnFSHsoBEBG4ZDu SzaM3IX6Y5UugT/NtBhkv0njIfCeejBylGpnvp6TqqRrTuqLo32ZOAeZK05nCWZp /3PjqosK+Osy6ukIYGnGC6P9rARNmru2AeUDNR2IT7rAPE0v6jXG/1wUGnrBKvRF 7IqLUC1YZZLA3GU2t25IWRTdyfAKksPNwCZjtFYtg2mCLmfZFbXYyUvcvZfzPoE4 UZp7/yBCdO3t57Xg0SD47tDJ0hioj/1sn1XGaUqJ5kEtfHPaQ179WvH7d2W2VchQ +a4uupFjBKuDcuTu8iOtUtJ17ymhmaAWf3VMAQIDAQABo4IB9DCCAfAwHQYDVR0O BBYEFOsfwWuiZUDpAEPBeDEclxckTzXpMB8GA1UdIwQYMBaAFNKrbJtuFlM0wDLQ UdX8fRVH5ONTMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw OTgvMHF0c20yNFdVelRBTXRCUjFmeDlGVWZrNDFNLmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDk4LzZ4X0JhNkpsUU9r QVE4RjRNUnlYRnlSUE5lay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkB5tAMA0GCSqGSIb3DQEBCwUAA4IBAQBLw/4vVcuiUR+XxIBWc1ah8eYs 1zqBL6ILxYrd+gtndW38jmm9tr2Gnl2FnazMKBVa70BGnO/9pp75I2nHviVVphQv B8VL34AZW52XAvkOSoh/UPKq0SiOotg53vPkUKpdK3xghRS28pP4PZSzQEk6TLNp GE/fMJqo5sG1zU94SoWS/Lj3UqjaGQFbKTZXX1PHGKdqFdh0VENhqZKNvY0RqhhQ 8NLFrv6XAqIgC79yc3SvNaf3c+nuqxiPkjd6S6Ps6Hst70xEDRi0CGmVnBMzP1tB OoG1CKCaNAoOZvBvKnfs/uBXigb7b8vu7elGB80k047dVV+1V2m6AVt2kes9 -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:40 2026 by rpki-client