This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/6zQDhXh5WXAtu-u8U-dXRGnpU_8.roa File: 6zQDhXh5WXAtu-u8U-dXRGnpU_8.roa (raw, json) Hash identifier: 9fhhg2swVDQzqqckGzLxbCRm7LgxXMVvtUnqefbjpLo= Subject key identifier: EB:34:03:85:78:79:59:70:2D:BB:EB:BC:53:E7:57:44:69:E9:53:FF Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0188 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6zQDhXh5WXAtu-u8U-dXRGnpU_8.roa Signing time: Fri 09 May 2025 03:07:45 +0000 ROA not before: Fri 09 May 2025 03:07:45 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 9 03:07:45 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=EB340385787959702DBBEBBC53E7574469E953FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9e:66:eb:ce:19:bc:0e:91:b7:a0:7a:65:5b: 46:bb:27:f8:34:dd:73:e9:10:82:12:59:8f:1a:b9: 6e:82:e4:b4:3d:73:78:4c:86:5e:9b:85:c9:69:7e: cb:ff:b0:84:d0:9f:c1:50:f7:99:7f:49:03:74:c9: 28:38:1a:06:ac:7e:8b:9b:ac:ce:89:47:b1:48:3f: 6e:7e:d0:77:0e:dd:98:ba:a9:48:f8:a4:cc:42:18: fc:97:b7:c2:92:7f:dd:54:9b:e9:d1:31:38:20:c6: ad:53:30:3f:49:8e:1d:10:57:21:2e:27:a2:6e:65: 81:df:eb:5e:34:af:f4:a8:24:9a:52:bb:9f:02:3c: d3:e3:42:5f:cf:ef:9a:ca:14:2b:3a:ab:30:ab:ed: 04:ac:9f:b5:a8:ae:9b:0e:97:8e:ce:04:b5:3c:f3: 20:2f:5d:7d:81:01:70:ad:dc:eb:53:52:2e:9d:39: ff:53:18:8d:a7:b5:41:92:c1:70:e3:cb:a0:f3:0f: e8:67:17:6a:ac:87:e3:8d:95:61:a9:15:7c:47:da: c6:9c:2f:c9:ba:d7:b4:93:34:d9:1a:06:aa:74:0a: 79:11:cc:3d:0a:fc:f8:e5:d2:b5:e6:58:01:7f:78: 61:ed:61:52:b8:1b:f6:d7:13:2f:08:26:2a:c6:93: 77:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:34:03:85:78:79:59:70:2D:BB:EB:BC:53:E7:57:44:69:E9:53:FF X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6zQDhXh5WXAtu-u8U-dXRGnpU_8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 58:1c:d0:aa:43:4a:6f:69:c4:6e:81:4b:e0:69:97:b3:03:7c: 63:67:df:30:59:d5:9d:a6:99:8c:77:04:c3:5e:f9:d5:88:67: 2e:47:24:ca:0b:a4:78:fa:d8:d9:11:9b:48:19:7e:e3:dc:27: 60:2b:d1:cf:2a:ae:9d:dd:04:df:e9:5d:ec:fe:14:9f:31:cb: f4:29:74:d0:23:0b:b3:36:e5:8c:84:1d:5b:36:d7:ff:e7:d2: 09:e1:22:b5:4b:e1:b4:1c:97:16:34:6d:89:4a:92:c9:82:af: 7d:a6:eb:92:2c:08:b1:af:19:68:f9:d4:b8:76:0d:c4:70:74: 6a:db:a8:10:fe:6e:db:4c:94:a4:56:4b:02:e8:e7:6c:74:fc: 5e:59:5f:28:95:03:3a:4d:b4:d6:4d:75:ee:b1:d7:61:dc:74: d6:7f:cf:45:72:5a:73:4c:3e:45:38:51:24:89:f2:2b:8d:da: 81:3c:14:8b:a4:5b:cc:63:70:97:03:3d:c4:5c:5f:d4:d8:f3: a3:ba:9c:e5:7d:56:73:18:a5:54:74:a1:2f:47:39:eb:11:9f: 13:a5:4c:78:54:44:ae:24:3b:2a:74:f6:54:df:4f:60:de:51: 54:c9:e9:55:5f:f4:6c:1c:c3:73:eb:88:cf:e0:94:36:7e:27: 75:dd:47:32 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDkw MzA3NDVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEVCMzQwMzg1Nzg3OTU5 NzAyREJCRUJCQzUzRTc1NzQ0NjlFOTUzRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCznmbrzhm8DpG3oHplW0a7J/g03XPpEIISWY8auW6C5LQ9c3hM hl6bhclpfsv/sITQn8FQ95l/SQN0ySg4GgasfoubrM6JR7FIP25+0HcO3Zi6qUj4 pMxCGPyXt8KSf91Um+nRMTggxq1TMD9Jjh0QVyEuJ6JuZYHf6140r/SoJJpSu58C PNPjQl/P75rKFCs6qzCr7QSsn7WorpsOl47OBLU88yAvXX2BAXCt3OtTUi6dOf9T GI2ntUGSwXDjy6DzD+hnF2qsh+ONlWGpFXxH2sacL8m617STNNkaBqp0CnkRzD0K /Pjl0rXmWAF/eGHtYVK4G/bXEy8IJirGk3ffAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU6zQDhXh5WXAtu+u8U+dXRGnpU/8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni82elFEaFhoNVdYQXR1LXU4 VS1kWFJHbnBVXzgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAFgc0KpDSm9pxG6BS+Bpl7MDfGNn3zBZ1Z2m mYx3BMNe+dWIZy5HJMoLpHj62NkRm0gZfuPcJ2Ar0c8qrp3dBN/pXez+FJ8xy/Qp dNAjC7M25YyEHVs21//n0gnhIrVL4bQclxY0bYlKksmCr32m65IsCLGvGWj51Lh2 DcRwdGrbqBD+bttMlKRWSwLo52x0/F5ZXyiVAzpNtNZNde6x12HcdNZ/z0VyWnNM PkU4USSJ8iuN2oE8FIukW8xjcJcDPcRcX9TY86O6nOV9VnMYpVR0oS9HOesRnxOl THhURK4kOyp09lTfT2DeUVTJ6VVf9Gwcw3PriM/glDZ+J3XdRzI= -----END CERTIFICATE-----Generated at Mon Dec 22 13:04:25 2025 by rpki-client