This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/0LsfxBcGOdAshS-AN8fWUdVMUy8.roa File: 0LsfxBcGOdAshS-AN8fWUdVMUy8.roa (raw, json) Hash identifier: IeidV6plTle1phU80vZDsVlkZJbhPNVrJe6vV64zfEY= Subject key identifier: D0:BB:1F:C4:17:06:39:D0:2C:85:2F:80:37:C7:D6:51:D5:4C:53:2F Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 04E9 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0LsfxBcGOdAshS-AN8fWUdVMUy8.roa Signing time: Tue 13 May 2025 15:08:47 +0000 ROA not before: Tue 13 May 2025 15:08:47 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 27.103.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 13 15:08:47 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=D0BB1FC4170639D02C852F8037C7D651D54C532F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:b5:51:da:11:8a:3b:8a:16:73:98:45:a8: 6a:b3:c4:ab:f8:92:99:0e:79:82:4a:65:cd:af:ef: 32:5c:1d:cb:84:b2:e9:a9:bc:c8:0c:c2:f0:b4:9a: 4d:b3:28:90:94:4d:7f:9e:86:87:ea:44:5c:f5:df: 2e:04:e7:1e:cc:86:dc:6f:79:7b:b7:7e:1d:7c:1b: 27:14:d7:c8:84:2b:55:ae:73:32:6c:ca:6a:6b:8d: 70:d5:f3:8f:a7:30:73:68:77:75:8a:79:33:7c:c6: 56:d6:fa:63:08:fc:26:bd:03:9d:35:cd:c0:47:2d: f8:49:42:4e:fa:ba:8d:d3:3b:3c:89:b4:64:e9:ca: a6:50:db:cf:21:60:0b:b1:40:dd:f8:bd:15:f4:91: bf:a5:6d:94:20:7d:a8:52:87:77:12:3c:a5:9b:d0: 23:29:ff:de:32:98:2f:91:89:75:eb:0e:04:8c:df: 31:01:95:2c:73:82:0d:4a:4d:0a:25:1b:ba:e7:aa: 5c:6f:c4:aa:3f:9e:82:72:ee:1d:c7:99:37:80:77: 36:db:e6:49:41:85:7b:2a:0f:82:77:b3:10:9f:06: 11:5f:02:15:d0:0a:a4:de:6c:fc:91:3d:1a:2b:d9: 6b:6a:22:31:9b:8c:af:9d:93:64:37:36:93:44:67: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BB:1F:C4:17:06:39:D0:2C:85:2F:80:37:C7:D6:51:D5:4C:53:2F X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0LsfxBcGOdAshS-AN8fWUdVMUy8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption a9:cb:fc:2b:a1:f8:af:f4:27:67:1d:6b:df:88:fe:1e:c9:ff: 9d:cd:a0:8f:a2:df:cb:37:9c:52:41:5a:a4:70:d0:b8:34:e9: 88:44:f6:5f:7b:7e:50:d2:83:e7:7d:26:4f:02:8a:7c:e8:f9: 85:8c:dd:c3:e4:ab:0a:ec:4b:4e:d0:61:84:86:5a:bd:36:63: eb:c2:e9:91:b5:8a:70:2b:d6:f2:c0:dc:93:60:cd:d5:1f:d2: df:8a:b3:c3:97:35:eb:3f:2f:b7:f2:f5:e5:34:7a:e0:90:41: f9:42:20:3a:5d:c7:56:bc:35:8b:0c:5e:fd:26:67:8c:cb:1a: b9:34:34:19:98:38:df:d1:81:4a:1c:fd:36:5b:71:3f:81:9b: 40:eb:ff:b4:c0:25:b5:b8:fc:4b:39:7a:f1:ed:77:02:fc:27: d5:eb:76:82:61:5d:9b:c8:2d:61:6d:90:0e:77:f8:73:80:78: 5d:4c:90:cf:aa:d8:d4:33:c7:56:55:a5:b2:15:f8:de:e0:8e: d6:26:83:81:1b:f8:5b:d9:52:fb:0e:ec:4c:d9:1e:a8:14:7a: 42:60:e1:36:b0:ed:84:ce:81:b0:9e:ca:bc:94:d1:be:38:45: 1e:ac:87:d5:3d:0b:d9:8a:9b:cf:05:b5:dc:a8:3f:e4:9a:08: e6:b2:ce:fe -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTMx NTA4NDdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEQwQkIxRkM0MTcwNjM5 RDAyQzg1MkY4MDM3QzdENjUxRDU0QzUzMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/C7VR2hGKO4oWc5hFqGqzxKv4kpkOeYJKZc2v7zJcHcuEsump vMgMwvC0mk2zKJCUTX+ehofqRFz13y4E5x7MhtxveXu3fh18GycU18iEK1WuczJs ymprjXDV84+nMHNod3WKeTN8xlbW+mMI/Ca9A501zcBHLfhJQk76uo3TOzyJtGTp yqZQ288hYAuxQN34vRX0kb+lbZQgfahSh3cSPKWb0CMp/94ymC+RiXXrDgSM3zEB lSxzgg1KTQolG7rnqlxvxKo/noJy7h3HmTeAdzbb5klBhXsqD4J3sxCfBhFfAhXQ CqTebPyRPRor2WtqIjGbjK+dk2Q3NpNEZx0pAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0LsfxBcGOdAshS+AN8fWUdVMUy8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8wTHNmeEJjR09kQXNoUy1B TjhmV1VkVk1VeTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA G2cwDQYJKoZIhvcNAQELBQADggEBAKnL/Cuh+K/0J2cda9+I/h7J/53NoI+i38s3 nFJBWqRw0Lg06YhE9l97flDSg+d9Jk8Cinzo+YWM3cPkqwrsS07QYYSGWr02Y+vC 6ZG1inAr1vLA3JNgzdUf0t+Ks8OXNes/L7fy9eU0euCQQflCIDpdx1a8NYsMXv0m Z4zLGrk0NBmYON/RgUoc/TZbcT+Bm0Dr/7TAJbW4/Es5evHtdwL8J9XrdoJhXZvI LWFtkA53+HOAeF1MkM+q2NQzx1ZVpbIV+N7gjtYmg4Eb+FvZUvsO7EzZHqgUekJg 4Taw7YTOgbCeyryU0b44RR6sh9U9C9mKm88FtdyoP+SaCOayzv4= -----END CERTIFICATE-----Generated at Mon Dec 22 23:34:12 2025 by rpki-client