This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-BLkx0Iyr3kOeRvzPTdQI1wftqQ.roa File: -BLkx0Iyr3kOeRvzPTdQI1wftqQ.roa (raw, json) Hash identifier: tVbTBCemrT+RFj+Ez+fy9tncV8Fu4Tu+1+zu6S/d+Mk= Subject key identifier: F8:12:E4:C7:42:32:AF:79:0E:79:1B:F3:3D:37:50:23:5C:1F:B6:A4 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0222 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-BLkx0Iyr3kOeRvzPTdQI1wftqQ.roa Signing time: Fri 09 May 2025 22:07:52 +0000 ROA not before: Fri 09 May 2025 22:07:52 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 9 22:07:52 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=F812E4C74232AF790E791BF33D3750235C1FB6A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8f:ab:cd:c6:ff:70:8e:7a:a5:87:e9:70:f3: f9:70:d0:8f:69:a6:0b:6f:5c:da:c7:cd:90:56:16: 87:2b:ba:8b:a1:5f:3c:02:77:47:6d:38:fc:34:40: ae:45:f4:75:a7:67:05:a4:cb:38:f2:3f:92:1a:c1: 88:df:d2:99:cd:de:a7:63:45:7d:2b:d9:9a:67:ba: 59:5d:23:16:56:f4:f5:1c:11:6c:0c:51:48:14:9a: 9a:6d:ab:06:37:cd:b5:f6:4d:e3:2c:53:a2:78:5a: 20:45:2e:ff:f4:1f:dd:ff:1f:cf:84:0e:db:49:b9: 21:60:dc:2d:0a:2f:01:b9:5c:b0:20:56:90:25:e0: b3:e8:08:aa:c6:25:47:5c:68:56:36:b4:10:cf:67: a3:c5:6c:98:75:ef:be:cd:a2:06:15:92:ec:ee:1a: b8:2e:14:40:fc:12:bf:8b:76:6d:48:1a:11:eb:69: 91:d1:14:08:85:f9:48:79:86:f9:d6:a3:97:25:8e: 0f:98:77:ed:fe:ea:5b:fb:ac:66:42:3c:bc:ae:76: d9:0e:fe:d6:60:25:ab:a1:7d:5a:50:53:05:eb:0b: d2:8b:81:cf:f8:d0:5d:f1:96:a7:37:92:7b:dd:73: 5e:33:bb:e8:db:8c:f3:e1:67:eb:32:1b:81:e9:4f: b9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:12:E4:C7:42:32:AF:79:0E:79:1B:F3:3D:37:50:23:5C:1F:B6:A4 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-BLkx0Iyr3kOeRvzPTdQI1wftqQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 57:92:d3:31:11:e7:70:c3:ba:25:9a:0c:21:0a:b2:cb:c2:fe: 8b:73:61:aa:52:96:f4:82:6a:d4:da:77:d6:16:6e:5d:07:73: da:ac:13:85:1a:00:65:99:6c:0b:2c:e0:d7:75:f8:f6:9a:ab: c9:f4:a0:a0:6b:90:5c:35:df:13:5f:f9:b4:9e:c3:a1:cd:f0: b2:31:a1:15:f9:a8:af:7c:8c:5b:d8:8f:38:01:3e:b5:10:49: 03:8b:a0:18:29:2a:ac:f4:9e:ae:88:c1:bd:ef:c7:71:53:a1: e9:56:f5:d3:30:5c:fe:75:f5:88:2e:09:bb:89:00:45:cb:55: 0f:40:8c:20:d3:24:9e:02:e3:bf:d8:b6:f0:a0:55:ed:2e:b1: b5:74:00:38:18:bd:4c:85:41:d2:e7:5f:43:3f:da:ac:d1:eb: b0:e5:1a:a1:9b:35:72:82:d1:d5:b5:fb:c5:84:c8:1e:09:78: 81:65:73:96:fa:d4:24:c4:d5:a6:1a:c3:ea:bc:6e:f9:c3:43: 0c:4c:5a:4c:d7:e4:78:18:6e:0b:70:12:67:1e:72:ed:da:c4: 96:70:14:c7:c8:17:07:5b:09:48:7a:7b:e6:df:d6:9d:aa:8c: c7:26:55:d1:b0:fd:4e:f7:ae:9d:17:ff:b5:d7:c3:13:cb:a6: 6b:df:40:2e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDky MjA3NTJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEY4MTJFNEM3NDIzMkFG NzkwRTc5MUJGMzNEMzc1MDIzNUMxRkI2QTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqj6vNxv9wjnqlh+lw8/lw0I9ppgtvXNrHzZBWFocruouhXzwC d0dtOPw0QK5F9HWnZwWkyzjyP5IawYjf0pnN3qdjRX0r2ZpnulldIxZW9PUcEWwM UUgUmpptqwY3zbX2TeMsU6J4WiBFLv/0H93/H8+EDttJuSFg3C0KLwG5XLAgVpAl 4LPoCKrGJUdcaFY2tBDPZ6PFbJh1777NogYVkuzuGrguFED8Er+Ldm1IGhHraZHR FAiF+Uh5hvnWo5cljg+Yd+3+6lv7rGZCPLyudtkO/tZgJauhfVpQUwXrC9KLgc/4 0F3xlqc3knvdc14zu+jbjPPhZ+syG4HpT7mbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+BLkx0Iyr3kOeRvzPTdQI1wftqQwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8tQkxreDBJeXIza09lUnZ6 UFRkUUkxd2Z0cVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAFeS0zER53DDuiWaDCEKssvC/otzYapSlvSC atTad9YWbl0Hc9qsE4UaAGWZbAss4Nd1+Paaq8n0oKBrkFw13xNf+bSew6HN8LIx oRX5qK98jFvYjzgBPrUQSQOLoBgpKqz0nq6Iwb3vx3FToelW9dMwXP519YguCbuJ AEXLVQ9AjCDTJJ4C47/YtvCgVe0usbV0ADgYvUyFQdLnX0M/2qzR67DlGqGbNXKC 0dW1+8WEyB4JeIFlc5b61CTE1aYaw+q8bvnDQwxMWkzX5HgYbgtwEmcecu3axJZw FMfIFwdbCUh6e+bf1p2qjMcmVdGw/U73rp0X/7XXwxPLpmvfQC4= -----END CERTIFICATE-----Generated at Tue Dec 23 01:30:14 2025 by rpki-client