This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/y7xJtkLuZkTTnuoNcXBTToKkVUU.roa File: y7xJtkLuZkTTnuoNcXBTToKkVUU.roa (raw, json) Hash identifier: 5Vz6nJHn5PiHagqlOPf19+9ch6X8IoQtRk4bJaxApoU= Subject key identifier: CB:BC:49:B6:42:EE:66:44:D3:9E:EA:0D:71:70:53:4E:82:A4:55:45 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 91E5 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/y7xJtkLuZkTTnuoNcXBTToKkVUU.roa Signing time: Mon 22 Dec 2025 13:40:07 +0000 ROA not before: Mon 22 Dec 2025 13:40:07 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 37349 (0x91e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Dec 22 13:40:07 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=CBBC49B642EE6644D39EEA0D7170534E82A45545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b6:11:03:4b:a3:b4:50:7b:86:42:8a:c4:fd: 95:f0:7e:0e:4d:76:33:be:11:2f:69:4d:f0:d7:9a: 2c:0a:99:58:0d:b0:b7:72:ec:0a:8b:34:ff:36:21: 9a:04:55:14:db:6f:b0:3a:c3:49:d3:a3:61:a7:32: 93:55:a1:a4:85:7d:70:5f:4d:91:d9:bc:3f:d7:d7: cc:da:7b:74:a4:78:bd:58:ad:16:e7:48:92:93:90: 0f:f1:06:88:ed:f4:50:15:66:54:a9:52:a7:89:77: 99:39:40:97:2e:d9:ae:d5:46:50:f3:00:3d:b3:e5: 3d:fc:01:e2:bf:00:ff:75:eb:4c:7c:46:f0:76:58: 96:07:67:8c:44:e1:7d:dc:c3:7a:1e:4e:60:32:ae: 5a:dd:cd:6e:fd:ce:39:21:37:f9:ae:6c:a5:0f:7f: 66:29:b6:df:94:16:c7:4d:7b:d8:b1:8a:74:71:dc: 7d:4b:83:97:a5:a0:7f:aa:65:09:2f:3b:22:fd:99: 94:d9:3d:2e:1e:f6:ef:de:2f:20:1e:21:88:b1:88: 05:9e:f8:32:a3:ed:12:6c:3e:f8:e5:aa:8c:d6:71: ac:30:4c:55:b4:86:8d:8e:61:56:f4:28:59:9d:2a: eb:5f:52:45:6f:a6:fa:50:c8:d0:f0:b7:54:5f:4d: 70:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BC:49:B6:42:EE:66:44:D3:9E:EA:0D:71:70:53:4E:82:A4:55:45 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/y7xJtkLuZkTTnuoNcXBTToKkVUU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption c1:9a:41:09:f2:c3:a8:8e:51:8c:91:c1:a1:28:11:87:54:ba: 72:d9:87:d3:cd:e6:d1:63:9b:73:5d:e0:37:03:e2:7d:43:ea: 3b:d4:14:97:f5:c7:6c:49:01:12:00:21:9f:0e:e5:fc:0d:6e: 60:00:06:1b:ac:1e:36:f2:10:eb:5a:25:cf:fb:d6:55:6c:f2: b9:fe:f7:21:15:a9:3e:dd:a5:78:01:88:17:a4:8c:58:4d:e8: 1d:a6:67:35:c4:66:04:5d:08:d6:f0:01:f7:68:fa:82:de:54: 97:d5:fb:15:bd:05:b3:a7:10:19:08:69:d6:17:2a:b0:55:bb: 08:30:f9:2d:f3:2e:9e:30:48:93:24:bc:b0:7c:90:77:c9:7f: 08:4b:5c:3b:98:dc:7d:5f:95:ff:a4:6d:2d:5f:54:5d:c4:f5: 95:35:35:44:a5:bd:6a:f6:5a:68:9a:54:bd:cf:d5:71:65:c7: 30:93:95:4e:ef:e9:1e:e2:9d:36:e7:17:4c:cc:a3:58:87:0f: 47:c9:11:46:80:91:c7:86:c8:ac:44:a0:02:a5:77:b9:4c:14: fc:12:53:a1:03:3c:c6:4b:e1:66:4d:78:96:03:23:f4:e1:3e: b6:86:e7:8d:86:6d:4c:6d:48:79:0f:bf:3a:bb:74:2a:d1:3a: 9c:99:56:75 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIDAJHlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKEQy QUI2QzlCNkUxNjUzMzRDMDMyRDA1MUQ1RkM3RDE1NDdFNEUzNTMwHhcNMjUxMjIy MTM0MDA3WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyhDQkJDNDlCNjQyRUU2 NjQ0RDM5RUVBMEQ3MTcwNTM0RTgyQTQ1NTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA37YRA0ujtFB7hkKKxP2V8H4OTXYzvhEvaU3w15osCplYDbC3 cuwKizT/NiGaBFUU22+wOsNJ06NhpzKTVaGkhX1wX02R2bw/19fM2nt0pHi9WK0W 50iSk5AP8QaI7fRQFWZUqVKniXeZOUCXLtmu1UZQ8wA9s+U9/AHivwD/detMfEbw dliWB2eMROF93MN6Hk5gMq5a3c1u/c45ITf5rmylD39mKbbflBbHTXvYsYp0cdx9 S4OXpaB/qmUJLzsi/ZmU2T0uHvbv3i8gHiGIsYgFnvgyo+0SbD745aqM1nGsMExV tIaNjmFW9ChZnSrrX1JFb6b6UMjQ8LdUX01wJQIDAQABo4IB9DCCAfAwHQYDVR0O BBYEFMu8SbZC7mZE057qDXFwU06CpFVFMB8GA1UdIwQYMBaAFNKrbJtuFlM0wDLQ UdX8fRVH5ONTMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw OTgvMHF0c20yNFdVelRBTXRCUjFmeDlGVWZrNDFNLmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDk4L3k3eEp0a0x1WmtU VG51b05jWEJUVG9La1ZVVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkB5tAMA0GCSqGSIb3DQEBCwUAA4IBAQDBmkEJ8sOojlGMkcGhKBGHVLpy 2YfTzebRY5tzXeA3A+J9Q+o71BSX9cdsSQESACGfDuX8DW5gAAYbrB428hDrWiXP +9ZVbPK5/vchFak+3aV4AYgXpIxYTegdpmc1xGYEXQjW8AH3aPqC3lSX1fsVvQWz pxAZCGnWFyqwVbsIMPkt8y6eMEiTJLywfJB3yX8IS1w7mNx9X5X/pG0tX1RdxPWV NTVEpb1q9lpomlS9z9VxZccwk5VO7+ke4p025xdMzKNYhw9HyRFGgJHHhsisRKAC pXe5TBT8ElOhAzzGS+FmTXiWAyP04T62hueNhm1MbUh5D786u3Qq0TqcmVZ1 -----END CERTIFICATE-----Generated at Mon Dec 22 16:32:23 2025 by rpki-client