This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8J8qFFd7LwEDzPzxEa4bC5Qso_c.roa File: 8J8qFFd7LwEDzPzxEa4bC5Qso_c.roa (raw, json) Hash identifier: XdDF2o0MO5/0MhYLQt0Vr3khjbUq/8Exz2XayYtqUg0= Subject key identifier: F0:9F:2A:14:57:7B:2F:01:03:CC:FC:F1:11:AE:1B:0B:94:2C:A3:F7 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0484 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8J8qFFd7LwEDzPzxEa4bC5Qso_c.roa Signing time: Tue 13 May 2025 02:37:57 +0000 ROA not before: Tue 13 May 2025 02:37:57 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 1156 (0x484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 13 02:37:57 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=F09F2A14577B2F0103CCFCF111AE1B0B942CA3F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a8:9e:b3:3a:6b:4a:71:5d:4a:e6:3e:89:a2: eb:89:5f:3c:37:20:5d:a4:cb:01:31:02:26:25:99: 49:3c:a5:5a:d0:8f:95:7b:a5:3e:92:f6:17:4f:32: 8e:4b:f6:99:1b:a3:48:7b:12:9f:99:23:37:58:20: 7e:dc:87:de:b3:97:bd:7e:ca:5d:64:db:45:56:4f: 5f:bd:33:f1:86:3a:cc:15:aa:d8:87:2a:f3:ee:f0: e9:77:a7:51:fb:28:88:1e:85:c7:d8:9a:4b:75:4a: fa:21:34:28:1a:42:e4:56:29:07:e9:fb:9a:b2:ab: d5:96:fd:a4:93:c4:a9:3f:77:36:e6:59:e0:ae:ca: a1:8a:18:6e:c9:79:02:98:b6:0d:2c:7a:d1:15:1c: 63:53:59:69:9f:d8:68:52:f9:51:3e:b6:30:94:33: 76:ac:d8:c5:56:d1:ed:85:6c:b9:6a:b5:2b:b4:db: 82:d1:ab:35:03:de:75:32:62:a3:f9:13:e1:84:d8: c2:9b:79:49:01:af:78:b7:cf:b6:40:a4:9c:df:12: 6d:ac:60:c4:c9:cb:cf:a7:34:05:c9:00:d5:96:5f: bf:da:04:f3:9b:ec:91:c4:c4:e3:fc:a0:5b:eb:8b: 3a:fb:bc:b6:1b:ee:1d:d0:b1:93:36:2c:92:21:b5: 3c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9F:2A:14:57:7B:2F:01:03:CC:FC:F1:11:AE:1B:0B:94:2C:A3:F7 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8J8qFFd7LwEDzPzxEa4bC5Qso_c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 59:e3:45:1e:dd:14:a1:ef:43:a9:71:57:d5:d1:e2:b3:4b:70: 9d:32:c2:a9:2f:60:4b:c8:74:f0:fc:8a:fc:c3:25:27:64:2b: 82:d1:b3:a6:e9:d3:a5:2e:db:42:92:80:9f:f9:7d:32:a5:0f: e1:49:b7:cc:55:e3:c4:af:55:5a:d1:79:7d:cb:b1:74:e5:23: 4d:49:05:15:17:25:ad:1b:07:3e:3a:2e:ea:be:68:4f:fc:cf: 2f:e1:4d:80:f3:1b:f2:ac:7b:80:a2:8a:95:f6:a1:07:8f:ce: c9:e8:a6:89:eb:68:ed:58:14:17:6d:94:34:6e:80:83:71:16: cc:58:4f:16:c0:78:f0:63:a0:7e:2e:00:ab:c2:5d:82:f4:34: 81:87:7d:c1:57:3c:87:89:90:75:22:25:a3:bb:72:75:ae:82: cb:02:8f:e8:7f:c5:ff:60:c4:be:25:e0:e3:25:94:c6:59:79: 3f:c3:01:42:fe:95:60:6e:8b:9c:17:e5:1d:28:20:7d:ed:a2: b2:fe:24:fd:51:c1:2d:f9:8d:74:fd:e4:ed:c7:33:ba:f4:16: 96:45:80:18:f7:2f:fa:d4:79:48:97:83:48:f5:2c:89:ff:9b: bf:35:b5:bd:f2:dd:e3:d1:b1:93:55:26:fc:9d:9e:b1:c1:99: 41:25:05:d0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTMw MjM3NTdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEYwOUYyQTE0NTc3QjJG MDEwM0NDRkNGMTExQUUxQjBCOTQyQ0EzRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmqJ6zOmtKcV1K5j6JouuJXzw3IF2kywExAiYlmUk8pVrQj5V7 pT6S9hdPMo5L9pkbo0h7Ep+ZIzdYIH7ch96zl71+yl1k20VWT1+9M/GGOswVqtiH KvPu8Ol3p1H7KIgehcfYmkt1SvohNCgaQuRWKQfp+5qyq9WW/aSTxKk/dzbmWeCu yqGKGG7JeQKYtg0setEVHGNTWWmf2GhS+VE+tjCUM3as2MVW0e2FbLlqtSu024LR qzUD3nUyYqP5E+GE2MKbeUkBr3i3z7ZApJzfEm2sYMTJy8+nNAXJANWWX7/aBPOb 7JHExOP8oFvrizr7vLYb7h3QsZM2LJIhtTzPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8J8qFFd7LwEDzPzxEa4bC5Qso/cwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni84SjhxRkZkN0x3RUR6UHp4 RWE0YkM1UXNvX2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAFnjRR7dFKHvQ6lxV9XR4rNLcJ0ywqkvYEvI dPD8ivzDJSdkK4LRs6bp06Uu20KSgJ/5fTKlD+FJt8xV48SvVVrReX3LsXTlI01J BRUXJa0bBz46Luq+aE/8zy/hTYDzG/Kse4CiipX2oQePzsnoponraO1YFBdtlDRu gINxFsxYTxbAePBjoH4uAKvCXYL0NIGHfcFXPIeJkHUiJaO7cnWugssCj+h/xf9g xL4l4OMllMZZeT/DAUL+lWBui5wX5R0oIH3torL+JP1RwS35jXT95O3HM7r0FpZF gBj3L/rUeUiXg0j1LIn/m781tb3y3ePRsZNVJvydnrHBmUElBdA= -----END CERTIFICATE-----Generated at Tue Dec 23 00:32:35 2025 by rpki-client