This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/9Td2fL2v4qkgyPZvd6b4ZhIHdcU.roa
File: 9Td2fL2v4qkgyPZvd6b4ZhIHdcU.roa (raw, json)
Hash identifier: 8Tfhy83+qj6oCg0VkNheD79pUWBu5Wbs8wKb37HWQQk=
Subject key identifier: F5:37:76:7C:BD:AF:E2:A9:20:C8:F6:6F:77:A6:F8:66:12:07:75:C5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 079A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9Td2fL2v4qkgyPZvd6b4ZhIHdcU.roa
Signing time: Sat 17 May 2025 05:08:18 +0000
ROA not before: Sat 17 May 2025 05:08:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 05:08:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F537767CBDAFE2A920C8F66F77A6F866120775C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:f6:8e:88:d2:bd:90:16:33:ba:b4:83:fa:
30:65:7b:00:fc:3a:fd:c6:1c:cd:45:b6:0d:43:3f:
99:80:0a:06:ba:72:40:ea:72:0d:9f:1e:18:60:25:
48:62:65:c4:b9:21:e1:e5:55:56:28:87:50:87:1c:
70:9f:6a:be:59:06:87:ba:fd:8c:2a:09:39:82:e0:
47:88:75:bd:5a:58:d0:a6:fe:bf:6e:d8:f4:03:f5:
37:42:70:3d:01:7d:7c:91:d5:89:74:e5:6e:bd:12:
99:2e:33:6f:42:3b:cc:24:91:47:7e:28:cc:f8:eb:
d2:0f:b8:21:75:af:7e:11:36:87:f0:e1:84:d7:38:
e4:63:ce:c7:64:5e:04:3f:40:de:cd:5b:2f:1c:35:
74:0a:d8:3c:ad:62:84:81:d5:8f:1b:24:8b:0a:ec:
98:4d:f7:ae:4e:95:04:7a:65:1e:2a:6b:b3:bf:6b:
89:bc:29:64:75:2f:8c:cd:4f:f2:18:40:b4:e9:52:
d8:81:db:95:e6:78:23:a2:6d:80:b3:99:93:fa:63:
a0:b4:00:12:c5:16:59:48:23:80:3c:f0:cc:d2:4f:
d0:eb:d2:b9:2a:62:ca:c1:99:5e:e6:88:14:ad:30:
ea:78:74:74:e8:82:9f:0a:cd:c5:de:87:07:8d:8c:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:37:76:7C:BD:AF:E2:A9:20:C8:F6:6F:77:A6:F8:66:12:07:75:C5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9Td2fL2v4qkgyPZvd6b4ZhIHdcU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:56:28:30:0d:65:4e:b0:1f:b0:da:4c:4f:f2:91:16:14:53:
84:9c:ae:da:ad:93:d2:36:f9:c0:5e:f4:6a:ac:30:cc:12:56:
a6:89:5d:6f:55:f7:f4:76:4a:30:93:4c:2e:04:dd:a5:c8:bb:
48:8f:d8:54:8e:c0:7d:fb:e4:12:b4:0e:55:13:06:f1:cd:58:
90:4c:da:c7:54:0d:9f:2f:7c:f2:6a:9f:ce:a8:d5:75:63:7f:
fc:dd:36:8b:80:15:4f:b5:d7:ec:31:db:54:44:0d:f5:4a:4b:
2e:a5:fe:87:e1:29:b0:57:6f:59:25:f8:d6:60:c6:36:bf:4a:
c8:f4:d6:cc:36:df:00:43:b8:c4:63:60:60:7e:34:ef:cf:24:
24:e1:82:49:4d:bd:7f:82:6a:de:7e:aa:4f:e4:55:46:7b:f3:
ee:20:c1:fc:33:90:b2:db:3b:62:9d:77:8a:c6:3e:26:6e:d6:
42:11:0c:e6:c1:69:cb:d5:dd:95:7b:70:06:0b:c2:22:b5:8d:
1a:5b:5f:06:80:73:c2:31:1d:e6:b1:b6:02:73:e7:08:c1:06:
ff:50:1a:bf:1e:57:ac:41:7b:cc:95:42:22:6e:e8:40:27:75:
03:52:10:a5:d0:9a:3f:b0:e8:9b:10:54:31:ba:32:ed:d5:ac:
85:69:26:80
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB5owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcw
NTA4MThaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEY1Mzc3NjdDQkRBRkUy
QTkyMEM4RjY2Rjc3QTZGODY2MTIwNzc1QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUbvaOiNK9kBYzurSD+jBlewD8Ov3GHM1Ftg1DP5mACga6ckDq
cg2fHhhgJUhiZcS5IeHlVVYoh1CHHHCfar5ZBoe6/YwqCTmC4EeIdb1aWNCm/r9u
2PQD9TdCcD0BfXyR1Yl05W69EpkuM29CO8wkkUd+KMz469IPuCF1r34RNofw4YTX
OORjzsdkXgQ/QN7NWy8cNXQK2DytYoSB1Y8bJIsK7JhN965OlQR6ZR4qa7O/a4m8
KWR1L4zNT/IYQLTpUtiB25XmeCOibYCzmZP6Y6C0ABLFFllII4A88MzST9Dr0rkq
YsrBmV7miBStMOp4dHTogp8KzcXehweNjM/dAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU9Td2fL2v4qkgyPZvd6b4ZhIHdcUwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni85VGQyZkwydjRxa2d5UFp2
ZDZiNFpoSUhkY1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAGpWKDANZU6wH7DaTE/ykRYUU4Scrtqtk9I2
+cBe9GqsMMwSVqaJXW9V9/R2SjCTTC4E3aXIu0iP2FSOwH375BK0DlUTBvHNWJBM
2sdUDZ8vfPJqn86o1XVjf/zdNouAFU+11+wx21REDfVKSy6l/ofhKbBXb1kl+NZg
xja/Ssj01sw23wBDuMRjYGB+NO/PJCThgklNvX+Cat5+qk/kVUZ78+4gwfwzkLLb
O2Kdd4rGPiZu1kIRDObBacvV3ZV7cAYLwiK1jRpbXwaAc8IxHeaxtgJz5wjBBv9Q
Gr8eV6xBe8yVQiJu6EAndQNSEKXQmj+w6JsQVDG6Mu3VrIVpJoA=
-----END CERTIFICATE-----
Generated at Mon Dec 22 01:08:19 2025 by rpki-client