This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/19yJvfZz9qxq5rqzPjL3R-VnIS0.roa File: 19yJvfZz9qxq5rqzPjL3R-VnIS0.roa (raw, json) Hash identifier: jF+H9tEsttO3C057YGOe6XeDHZXe0yHv9Fnk9a3YCO0= Subject key identifier: D7:DC:89:BD:F6:73:F6:AC:6A:E6:BA:B3:3E:32:F7:47:E5:67:21:2D Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0212 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/19yJvfZz9qxq5rqzPjL3R-VnIS0.roa Signing time: Fri 09 May 2025 20:08:15 +0000 ROA not before: Fri 09 May 2025 20:08:15 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 9 20:08:15 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=D7DC89BDF673F6AC6AE6BAB33E32F747E567212D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:a7:af:cb:29:9b:9d:a8:04:ec:1f:27:c9: ba:1e:da:7b:a9:f8:b1:02:d6:e5:52:06:85:c4:8a: b1:c1:bd:68:e1:18:0a:75:a6:d1:cd:f5:3f:10:9e: b9:d5:bf:33:d2:8a:93:7e:2a:20:ce:70:44:a1:6a: 1b:03:13:61:ed:8e:8b:c9:6e:28:d8:58:1d:82:d7: c4:a7:c7:dc:fd:e6:12:0c:43:bd:e7:1b:f5:7b:a2: 0a:44:9b:7f:c8:2d:c1:e8:d2:eb:b8:b3:44:9d:d8: 9c:af:4c:e6:a1:e1:8c:7a:69:dd:1e:89:de:65:83: 49:2f:97:3f:1c:10:2a:1e:24:83:b1:59:da:39:97: 14:13:36:3e:79:94:3f:27:cd:86:97:b4:5f:2a:8d: a3:76:c4:c9:e9:af:5d:8f:12:ea:b7:b8:38:12:59: ac:d5:b8:81:52:ef:b5:9c:d9:49:82:50:ec:3d:03: 9a:e1:38:f2:b7:9b:27:cc:7c:63:38:70:83:ff:80: 96:a2:a3:c3:31:d7:f7:6c:03:23:b7:b6:f2:66:e1: 91:27:16:b3:37:8a:bc:8f:34:84:eb:67:9b:8c:b3: ed:05:05:35:ed:f5:bd:ba:64:6c:e4:57:03:94:23: 09:c8:34:d6:20:86:85:fc:49:a9:b8:bd:dd:49:6a: 04:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DC:89:BD:F6:73:F6:AC:6A:E6:BA:B3:3E:32:F7:47:E5:67:21:2D X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/19yJvfZz9qxq5rqzPjL3R-VnIS0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 01:62:bd:41:80:43:00:8f:05:79:6d:61:de:43:b5:75:b3:89: 76:20:e6:e1:e3:88:35:ea:d5:c2:ce:97:55:ec:60:73:bb:86: 4e:f1:90:bc:5f:a2:2b:73:fd:45:59:43:16:15:e1:28:7a:fc: 10:f8:a5:17:8c:7c:35:93:39:a2:d1:5b:89:ee:88:88:9b:2e: 37:6a:53:13:23:75:1e:e6:75:00:bb:8e:87:29:2b:dd:fb:30: 55:03:4f:fb:aa:4d:35:be:5d:b6:b5:9c:1b:9f:b1:b6:c5:b5: a4:fa:7e:03:c9:6d:dd:5d:ce:9d:c8:f9:e6:01:45:9c:d0:81: b6:33:01:c0:63:d8:25:9f:15:61:ae:37:db:bb:2d:88:ed:9d: 0b:63:0a:36:56:57:fa:09:e8:b2:fc:9d:da:2b:49:c5:23:d3: f0:01:f2:ed:b8:48:eb:d1:9d:a7:78:f4:83:1f:d2:38:f2:d3: 3a:55:e6:7f:e6:22:05:da:df:e5:18:7b:39:9e:12:be:5d:cc: 5e:35:c3:4b:7c:88:1f:2f:e6:01:ed:3e:4e:98:84:05:a4:fa: b5:96:3d:3f:c0:84:8d:6c:d3:8c:fe:ea:2b:9c:f2:a3:e2:1d: f8:f9:0b:70:0b:6a:b6:43:e8:c2:7e:7b:a5:a2:8b:6e:97:98: 70:0b:25:70 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDky MDA4MTVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEQ3REM4OUJERjY3M0Y2 QUM2QUU2QkFCMzNFMzJGNzQ3RTU2NzIxMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0hKevyymbnagE7B8nyboe2nup+LEC1uVSBoXEirHBvWjhGAp1 ptHN9T8QnrnVvzPSipN+KiDOcEShahsDE2HtjovJbijYWB2C18Snx9z95hIMQ73n G/V7ogpEm3/ILcHo0uu4s0Sd2JyvTOah4Yx6ad0eid5lg0kvlz8cECoeJIOxWdo5 lxQTNj55lD8nzYaXtF8qjaN2xMnpr12PEuq3uDgSWazVuIFS77Wc2UmCUOw9A5rh OPK3myfMfGM4cIP/gJaio8Mx1/dsAyO3tvJm4ZEnFrM3iryPNITrZ5uMs+0FBTXt 9b26ZGzkVwOUIwnINNYghoX8Sam4vd1JagRRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU19yJvfZz9qxq5rqzPjL3R+VnIS0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8xOXlKdmZaejlxeHE1cnF6 UGpMM1ItVm5JUzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAAFivUGAQwCPBXltYd5DtXWziXYg5uHjiDXq 1cLOl1XsYHO7hk7xkLxfoitz/UVZQxYV4Sh6/BD4pReMfDWTOaLRW4nuiIibLjdq UxMjdR7mdQC7jocpK937MFUDT/uqTTW+Xba1nBufsbbFtaT6fgPJbd1dzp3I+eYB RZzQgbYzAcBj2CWfFWGuN9u7LYjtnQtjCjZWV/oJ6LL8ndorScUj0/AB8u24SOvR nad49IMf0jjy0zpV5n/mIgXa3+UYezmeEr5dzF41w0t8iB8v5gHtPk6YhAWk+rWW PT/AhI1s04z+6iuc8qPiHfj5C3ALarZD6MJ+e6Wii26XmHALJXA= -----END CERTIFICATE-----Generated at Tue Dec 23 01:29:20 2025 by rpki-client