This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8DtBT_Mdc4jW4lRhU8mrBYn8yq0.roa File: 8DtBT_Mdc4jW4lRhU8mrBYn8yq0.roa (raw, json) Hash identifier: 44QUkZslElfjizHefS+rPUn+rJddT7RFgMn8/B8RQQ8= Subject key identifier: F0:3B:41:4F:F3:1D:73:88:D6:E2:54:61:53:C9:AB:05:89:FC:CA:AD Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 078E Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8DtBT_Mdc4jW4lRhU8mrBYn8yq0.roa Signing time: Sat 17 May 2025 03:38:09 +0000 ROA not before: Sat 17 May 2025 03:38:09 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 17 03:38:09 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=F03B414FF31D7388D6E2546153C9AB0589FCCAAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:c6:b7:24:fa:20:73:e1:b6:1b:3b:79:51: ab:32:9a:72:47:45:50:d2:53:61:4c:c8:e0:9d:e4: e0:25:00:c0:69:88:aa:6a:fd:ef:2a:8c:dd:38:0b: f9:15:70:87:4a:0e:dc:53:8a:c1:5f:b0:bf:23:f9: f9:eb:ac:09:0a:b2:16:58:ef:c0:80:dc:b2:5b:c7: b2:72:ca:1f:62:7b:c1:c6:57:6a:1f:17:4c:3e:34: df:18:19:ab:de:e1:b0:b7:37:f7:d4:43:27:f7:dc: a6:ac:00:cd:45:3e:0e:57:e4:e8:58:0a:93:4d:7e: fc:af:2f:69:b0:4d:5c:57:5c:f4:83:df:d7:64:f7: 93:ce:4d:fb:77:58:df:fe:8e:6c:71:7b:cd:82:15: 45:a5:b2:67:79:c8:53:73:7e:b0:3a:5a:b4:c5:6d: c1:aa:37:98:0b:a1:28:ac:0b:3a:1b:bf:61:1e:7b: 48:38:36:78:4a:d2:c9:e1:87:79:e2:22:56:a9:48: d2:2a:23:a0:44:09:da:d6:8c:73:97:ba:c3:86:7d: 88:50:77:99:0c:47:9f:e6:df:6a:9e:ba:55:99:d0: 48:5e:c9:df:a2:2e:40:9e:b4:a3:1b:b2:ef:df:c6: fa:78:1b:cd:b4:c9:57:62:39:46:dd:f6:d9:da:a8: ac:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3B:41:4F:F3:1D:73:88:D6:E2:54:61:53:C9:AB:05:89:FC:CA:AD X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8DtBT_Mdc4jW4lRhU8mrBYn8yq0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 47:4b:fc:3b:34:fb:11:71:2d:09:b4:e7:81:01:af:82:13:2e: c4:46:5e:f7:21:cb:fc:81:7e:19:37:51:6d:8a:31:2f:2e:26: 2d:d0:5d:e4:ae:b9:30:05:e9:0b:e2:7a:32:c6:ed:5f:72:d9: a3:8c:d6:5e:8a:ec:ce:6d:3c:f1:8b:41:2a:5c:30:44:c1:1d: 2f:c8:f2:fb:a5:c0:37:d4:3b:b2:32:cc:a9:49:79:a6:46:67: 0c:6a:0d:07:e8:1f:ed:28:cb:de:5a:d1:2d:0b:01:2b:97:93: 8c:0c:62:96:12:85:93:93:09:02:c2:a6:7e:b7:8b:41:9f:13: d3:ae:ce:06:ce:f9:e3:c2:67:9f:c1:99:db:1e:48:bf:95:3d: b0:55:01:4f:98:fc:51:bd:89:35:ef:d2:32:15:af:e1:8b:29: da:45:18:ed:2f:97:a9:09:ec:13:60:50:e3:23:bb:72:e9:b4: a4:2a:24:54:97:69:4f:f8:2b:5f:4f:e2:f7:96:c2:7e:38:60: 86:d8:c8:f4:76:55:cb:d9:a9:10:28:72:fc:0f:95:b4:72:c7: 1e:e6:65:3f:1a:11:71:e5:3c:8f:dc:f5:03:81:67:31:4f:8d: 5a:bb:d0:e8:b9:d9:4c:65:a4:d6:cb:84:bd:96:12:3b:65:b5: 94:03:04:d6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICB44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcw MzM4MDlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEYwM0I0MTRGRjMxRDcz ODhENkUyNTQ2MTUzQzlBQjA1ODlGQ0NBQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0jca3JPogc+G2Gzt5UasymnJHRVDSU2FMyOCd5OAlAMBpiKpq /e8qjN04C/kVcIdKDtxTisFfsL8j+fnrrAkKshZY78CA3LJbx7Jyyh9ie8HGV2of F0w+NN8YGave4bC3N/fUQyf33KasAM1FPg5X5OhYCpNNfvyvL2mwTVxXXPSD39dk 95POTft3WN/+jmxxe82CFUWlsmd5yFNzfrA6WrTFbcGqN5gLoSisCzobv2Eee0g4 NnhK0snhh3niIlapSNIqI6BECdrWjHOXusOGfYhQd5kMR5/m32qeulWZ0Eheyd+i LkCetKMbsu/fxvp4G820yVdiOUbd9tnaqKxBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8DtBT/Mdc4jW4lRhU8mrBYn8yq0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni84RHRCVF9NZGM0alc0bFJo VThtckJZbjh5cTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAEdL/Ds0+xFxLQm054EBr4ITLsRGXvchy/yB fhk3UW2KMS8uJi3QXeSuuTAF6QviejLG7V9y2aOM1l6K7M5tPPGLQSpcMETBHS/I 8vulwDfUO7IyzKlJeaZGZwxqDQfoH+0oy95a0S0LASuXk4wMYpYShZOTCQLCpn63 i0GfE9OuzgbO+ePCZ5/BmdseSL+VPbBVAU+Y/FG9iTXv0jIVr+GLKdpFGO0vl6kJ 7BNgUOMju3LptKQqJFSXaU/4K19P4veWwn44YIbYyPR2VcvZqRAocvwPlbRyxx7m ZT8aEXHlPI/c9QOBZzFPjVq70Oi52UxlpNbLhL2WEjtltZQDBNY= -----END CERTIFICATE-----Generated at Mon Dec 22 01:07:54 2025 by rpki-client