This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/I9r-P7mwCRo4lOVotmtO_6WTGVk.roa File: I9r-P7mwCRo4lOVotmtO_6WTGVk.roa (raw, json) Hash identifier: +5zT33oNotiy8k/BEzaJo/ziE/K0qH0l/bjF363beMQ= Subject key identifier: 23:DA:FE:3F:B9:B0:09:1A:38:94:E5:68:B6:6B:4E:FF:A5:93:19:59 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0116 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/I9r-P7mwCRo4lOVotmtO_6WTGVk.roa Signing time: Thu 08 May 2025 12:37:43 +0000 ROA not before: Thu 08 May 2025 12:37:43 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 8 12:37:43 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=23DAFE3FB9B0091A3894E568B66B4EFFA5931959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:66:2c:86:de:c2:36:3c:cb:a1:84:eb:71:51: 4c:9e:48:ad:c8:ab:28:06:fc:80:96:9e:63:99:98: 91:fa:08:5a:eb:a7:f6:1d:a2:90:fe:c4:fc:3e:fd: 2d:d6:c0:ad:f2:6d:f2:0a:d7:6a:bf:65:4c:1f:d5: d9:98:31:72:12:ed:e2:3a:0c:2b:47:25:97:bc:37: 4f:a8:fe:a5:7e:05:52:7a:8c:50:54:29:03:e4:f4: db:1c:d8:55:84:80:37:81:35:88:49:a2:c6:f8:22: f9:44:c9:30:a1:b3:3f:07:7d:5e:dc:c4:11:85:0a: c3:02:48:60:eb:12:1f:e9:39:70:a9:a2:9b:4b:58: e4:7b:62:95:03:42:d0:5a:e7:5c:c9:07:0b:0c:c0: 82:eb:9c:56:27:c6:bf:60:f2:3f:c3:da:15:f9:bd: e3:2e:e0:23:38:2b:ea:0f:d4:09:a0:e8:b2:df:98: 81:06:6d:fd:7b:9d:41:dd:5d:c6:8a:3e:cd:6d:de: c8:c8:b7:32:5f:71:f2:9b:58:18:02:80:5c:4b:c8: 67:6f:3d:03:fe:f0:14:0a:9f:6d:f6:3d:7a:79:98: 21:e8:60:02:5e:16:85:2c:af:ec:40:8c:fb:8f:ec: a0:4f:6d:f8:82:a2:8e:c3:3b:4d:d7:74:7a:02:1b: ac:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DA:FE:3F:B9:B0:09:1A:38:94:E5:68:B6:6B:4E:FF:A5:93:19:59 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/I9r-P7mwCRo4lOVotmtO_6WTGVk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 00:4c:bd:e8:d5:39:4d:44:7b:6b:a1:a1:ff:5b:db:94:a1:80: d7:10:1c:36:db:b5:6c:7e:22:c4:f5:c1:98:0a:6d:68:cc:fa: b4:45:e4:85:21:ae:22:28:8d:8d:82:da:67:74:5e:00:52:e2: 78:0f:1e:bb:81:2b:d1:0d:6b:84:95:9a:05:ce:67:47:aa:3d: 13:54:38:e4:e8:c6:c0:a5:e9:62:9b:b2:69:8e:a2:b6:5b:68: 6c:97:91:35:30:96:7e:2e:4f:96:c4:2d:e1:cb:55:b0:41:7c: c5:3c:e9:87:1a:4a:c2:60:65:4c:0d:ad:40:cd:e2:8e:82:cf: 7c:c2:47:8e:7f:70:c7:38:bd:75:42:7b:f9:6f:e1:07:4c:fe: 23:42:ff:b7:c8:14:e4:51:c3:b8:f9:e8:d3:f6:ba:03:76:08: 08:a6:56:11:b8:05:f1:41:d0:7e:17:b0:25:a9:b4:06:7f:5f: e1:6a:fb:08:79:fe:c9:ec:97:d1:00:48:3f:81:68:52:6a:42: f0:c3:02:c2:e1:5c:b1:21:82:43:f2:d1:47:e1:37:c7:19:e9: 1a:82:ad:88:d2:b7:f3:5b:44:da:b7:7b:3b:f8:16:be:36:85: 3c:4b:7e:b1:81:4e:7d:ae:22:04:17:00:47:7d:7a:9a:d8:aa: e0:1c:87:24 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICARYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDgx MjM3NDNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDIzREFGRTNGQjlCMDA5 MUEzODk0RTU2OEI2NkI0RUZGQTU5MzE5NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgZiyG3sI2PMuhhOtxUUyeSK3IqygG/ICWnmOZmJH6CFrrp/Yd opD+xPw+/S3WwK3ybfIK12q/ZUwf1dmYMXIS7eI6DCtHJZe8N0+o/qV+BVJ6jFBU KQPk9Nsc2FWEgDeBNYhJosb4IvlEyTChsz8HfV7cxBGFCsMCSGDrEh/pOXCpoptL WOR7YpUDQtBa51zJBwsMwILrnFYnxr9g8j/D2hX5veMu4CM4K+oP1Amg6LLfmIEG bf17nUHdXcaKPs1t3sjItzJfcfKbWBgCgFxLyGdvPQP+8BQKn232PXp5mCHoYAJe FoUsr+xAjPuP7KBPbfiCoo7DO03XdHoCG6zVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUI9r+P7mwCRo4lOVotmtO/6WTGVkwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9JOXItUDdtd0NSbzRsT1Zv dG10T182V1RHVmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAABMvejVOU1Ee2uhof9b25ShgNcQHDbbtWx+ IsT1wZgKbWjM+rRF5IUhriIojY2C2md0XgBS4ngPHruBK9ENa4SVmgXOZ0eqPRNU OOToxsCl6WKbsmmOorZbaGyXkTUwln4uT5bELeHLVbBBfMU86YcaSsJgZUwNrUDN 4o6Cz3zCR45/cMc4vXVCe/lv4QdM/iNC/7fIFORRw7j56NP2ugN2CAimVhG4BfFB 0H4XsCWptAZ/X+Fq+wh5/snsl9EASD+BaFJqQvDDAsLhXLEhgkPy0UfhN8cZ6RqC rYjSt/NbRNq3ezv4Fr42hTxLfrGBTn2uIgQXAEd9eprYquAchyQ= -----END CERTIFICATE-----Generated at Mon Dec 22 11:08:11 2025 by rpki-client