This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/H3tk3KTCwa5lz6OcaaBl_ke13hA.roa File: H3tk3KTCwa5lz6OcaaBl_ke13hA.roa (raw, json) Hash identifier: XAewOqALEavRBFjXW6aXlsDeQRjvzEysCietzEJMP3k= Subject key identifier: 1F:7B:64:DC:A4:C2:C1:AE:65:CF:A3:9C:69:A0:65:FE:47:B5:DE:10 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0406 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/H3tk3KTCwa5lz6OcaaBl_ke13hA.roa Signing time: Mon 12 May 2025 10:38:10 +0000 ROA not before: Mon 12 May 2025 10:38:10 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 12 10:38:10 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=1F7B64DCA4C2C1AE65CFA39C69A065FE47B5DE10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:31:df:97:29:34:fa:80:8b:b9:18:0f:c7: 3f:f6:b9:a5:f7:e0:e9:54:1f:57:79:5c:6d:5f:2c: dc:16:4e:05:2a:6a:7e:04:62:5a:ad:7e:cc:df:db: 76:1c:0f:5a:49:38:15:41:23:55:06:b9:d1:70:fe: 55:96:4d:76:36:0a:48:10:4b:41:e2:92:29:ff:f1: 59:f1:34:6b:5c:d1:87:e9:90:79:29:c6:9b:d3:25: ad:d1:9a:67:a1:83:37:67:ac:e9:2b:88:63:d3:67: 2c:da:43:eb:95:fe:dc:42:39:7c:0f:a3:04:06:6a: 96:12:68:e4:96:71:2e:e7:95:b4:45:e0:4a:21:ed: e4:f4:53:d5:5f:4f:8a:79:d0:0c:d3:b2:18:ce:85: ee:76:26:c1:b1:be:f7:a8:9f:e7:6d:80:d1:60:39: dd:85:de:f7:9c:c5:ff:66:b3:2f:49:ab:75:f2:80: 3d:87:97:92:39:18:2f:f9:45:21:23:25:3f:f7:67: ad:42:7c:4c:ba:f1:a8:c2:b2:2e:bb:a6:8a:78:13: da:d4:c2:68:da:75:ed:1a:b1:41:c7:50:b9:00:32: de:47:fd:b1:21:01:df:98:53:10:44:55:6d:9e:5f: 34:f5:65:12:14:f6:ac:c7:25:b5:7d:89:56:e6:2b: ea:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7B:64:DC:A4:C2:C1:AE:65:CF:A3:9C:69:A0:65:FE:47:B5:DE:10 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/H3tk3KTCwa5lz6OcaaBl_ke13hA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7d:48:2e:9c:8d:9c:75:fb:f4:ac:be:7f:c6:07:28:86:54:92: 4b:6d:22:0d:55:18:f2:a6:fc:15:c0:f5:ed:3f:c8:3d:2f:f5: 36:04:f4:07:61:c1:63:15:1b:b3:cc:99:94:f6:ea:a4:fe:bd: b8:a1:de:b1:b4:82:66:74:2b:f3:63:f2:24:cc:f4:24:48:fb: ea:4f:28:35:63:97:e6:6b:d8:48:dc:8f:4c:8d:93:18:f1:cf: 98:a3:65:d3:92:e6:6e:42:72:21:d4:a5:35:f6:d2:3d:fb:03: 6d:95:77:f5:94:bc:fb:b9:e6:86:7c:ca:ed:c4:42:be:7f:71: 59:72:7b:9e:b0:7f:34:a6:eb:09:6b:01:49:b6:f2:ea:b4:b7: 52:09:4d:99:73:4b:43:f1:80:30:75:0d:6f:d1:48:be:a3:76: 2a:14:94:58:01:be:b7:89:78:18:18:61:38:7d:2f:fe:47:9e: 38:d7:8c:cd:2f:18:58:b3:a3:a1:7f:8e:e9:bf:d4:31:73:96: d8:94:ac:e0:83:d0:b1:36:b1:f6:9b:0e:43:1d:e6:b8:5a:f7: 47:c6:0d:56:e0:59:5b:80:6c:ba:d1:72:ef:ea:f1:28:60:3e: 51:0b:98:5f:f4:2f:c4:19:bc:17:64:83:ce:6c:41:d0:f3:e4: 04:80:04:05 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTIx MDM4MTBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDFGN0I2NERDQTRDMkMx QUU2NUNGQTM5QzY5QTA2NUZFNDdCNURFMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMkTHflyk0+oCLuRgPxz/2uaX34OlUH1d5XG1fLNwWTgUqan4E Ylqtfszf23YcD1pJOBVBI1UGudFw/lWWTXY2CkgQS0Hikin/8VnxNGtc0YfpkHkp xpvTJa3RmmehgzdnrOkriGPTZyzaQ+uV/txCOXwPowQGapYSaOSWcS7nlbRF4Eoh 7eT0U9VfT4p50AzTshjOhe52JsGxvveon+dtgNFgOd2F3vecxf9msy9Jq3XygD2H l5I5GC/5RSEjJT/3Z61CfEy68ajCsi67pop4E9rUwmjade0asUHHULkAMt5H/bEh Ad+YUxBEVW2eXzT1ZRIU9qzHJbV9iVbmK+p/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUH3tk3KTCwa5lz6OcaaBl/ke13hAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9IM3RrM0tUQ3dhNWx6Nk9j YWFCbF9rZTEzaEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAH1ILpyNnHX79Ky+f8YHKIZUkkttIg1VGPKm /BXA9e0/yD0v9TYE9AdhwWMVG7PMmZT26qT+vbih3rG0gmZ0K/Nj8iTM9CRI++pP KDVjl+Zr2Ejcj0yNkxjxz5ijZdOS5m5CciHUpTX20j37A22Vd/WUvPu55oZ8yu3E Qr5/cVlye56wfzSm6wlrAUm28uq0t1IJTZlzS0PxgDB1DW/RSL6jdioUlFgBvreJ eBgYYTh9L/5HnjjXjM0vGFizo6F/jum/1DFzltiUrOCD0LE2sfabDkMd5rha90fG DVbgWVuAbLrRcu/q8ShgPlELmF/0L8QZvBdkg85sQdDz5ASABAU= -----END CERTIFICATE-----Generated at Mon Dec 22 13:04:06 2025 by rpki-client