This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/JVPwywBIvj8jqlsPD2pXX5IYwh4.roa File: JVPwywBIvj8jqlsPD2pXX5IYwh4.roa (raw, json) Hash identifier: CeADMKc5Mou7suLKL8p4kRBdUC/sLwREoABIEAK09Ok= Subject key identifier: 25:53:F0:CB:00:48:BE:3F:23:AA:5B:0F:0F:6A:57:5F:92:18:C2:1E Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0248 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JVPwywBIvj8jqlsPD2pXX5IYwh4.roa Signing time: Sat 10 May 2025 03:07:51 +0000 ROA not before: Sat 10 May 2025 03:07:51 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 10 03:07:51 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=2553F0CB0048BE3F23AA5B0F0F6A575F9218C21E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:8a:87:90:df:6f:77:19:d8:53:a1:5d:a9: b9:d7:4f:aa:4c:bf:df:30:a7:c9:dc:d9:e2:04:2f: 93:3d:33:92:88:17:ff:2d:55:56:8d:20:b7:fe:6e: 23:5b:a0:81:a5:6d:f6:6e:11:85:54:c6:dd:6a:4d: 25:86:45:55:db:b9:b0:f2:86:8e:5f:fe:0c:c1:05: 47:e5:a3:78:d8:ce:95:7b:f9:f1:93:c8:ec:ed:d4: 15:b1:17:0f:13:90:ce:55:26:d5:79:b3:2c:0e:f7: 10:04:fb:a6:2e:38:71:0e:7a:2d:e7:64:f1:5c:ef: 1c:e8:92:9a:10:15:30:6e:07:73:12:c2:2b:7b:d3: e2:c9:f7:34:34:0a:84:8a:49:ce:40:bd:72:1d:79: 99:21:ba:0b:40:b1:3b:1f:d6:f1:4c:d7:6a:30:6a: 6b:28:cd:32:27:79:df:95:15:88:47:4b:2c:23:37: 24:d1:4c:0e:43:80:72:da:67:fe:a2:63:42:cc:bd: bf:3c:af:cd:ef:93:06:6b:3f:53:36:21:00:b6:a1: a7:0c:6f:5d:2b:ac:b8:eb:e1:ab:88:a3:f7:6f:4d: c8:23:fc:aa:10:e7:e1:f3:64:d8:c7:6c:93:99:81: ac:78:65:9d:02:10:36:79:5a:5a:60:d2:93:6b:a1: 14:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:53:F0:CB:00:48:BE:3F:23:AA:5B:0F:0F:6A:57:5F:92:18:C2:1E X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JVPwywBIvj8jqlsPD2pXX5IYwh4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 88:40:02:11:0d:6a:a2:30:70:26:1b:6a:35:92:6b:a5:fd:9c: 95:bb:15:52:78:06:29:60:a4:ad:8f:38:8a:57:a0:d9:ff:a5: f7:ee:08:68:af:14:69:f5:b4:f3:e7:a7:b4:17:e4:3b:d9:4f: 89:23:c9:f9:bb:ea:91:f5:58:67:f4:d6:80:79:d5:f7:9e:41: fb:0a:5e:c8:09:44:e1:1f:e7:24:56:91:96:fe:3f:d9:9c:c7: 0e:ac:b0:e7:3c:bd:cf:23:4b:06:a0:b4:e5:4a:41:a4:17:25: 56:c4:1c:5f:cb:6d:8e:2d:cd:18:96:1d:58:ec:c4:ac:b9:a4: 23:40:72:55:07:c4:b1:11:5c:d9:1d:62:21:b3:2a:50:3c:8b: 8b:19:8f:95:fa:4b:65:2b:d2:bd:07:4e:5a:f0:d2:5b:ec:74: e7:37:5e:4c:1e:a8:2b:aa:4f:c8:f3:f6:6c:a2:ad:f7:e0:86: 74:0f:ee:3f:94:c3:4c:ad:4a:92:b4:02:65:7e:7f:84:ae:f8: 06:fd:3a:0f:c7:a7:71:c2:da:dc:de:0c:ae:29:ec:48:c1:7a: 9c:69:2f:df:39:76:dd:ac:ed:0e:82:f0:26:94:a3:0b:75:e9: a2:a5:04:00:0a:69:f4:26:67:1a:2b:48:c0:08:81:b8:57:f6: c4:7e:1f:ea -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTAw MzA3NTFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDI1NTNGMENCMDA0OEJF M0YyM0FBNUIwRjBGNkE1NzVGOTIxOEMyMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFnoqHkN9vdxnYU6FdqbnXT6pMv98wp8nc2eIEL5M9M5KIF/8t VVaNILf+biNboIGlbfZuEYVUxt1qTSWGRVXbubDyho5f/gzBBUflo3jYzpV7+fGT yOzt1BWxFw8TkM5VJtV5sywO9xAE+6YuOHEOei3nZPFc7xzokpoQFTBuB3MSwit7 0+LJ9zQ0CoSKSc5AvXIdeZkhugtAsTsf1vFM12owamsozTIned+VFYhHSywjNyTR TA5DgHLaZ/6iY0LMvb88r83vkwZrP1M2IQC2oacMb10rrLjr4auIo/dvTcgj/KoQ 5+HzZNjHbJOZgax4ZZ0CEDZ5Wlpg0pNroRSnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJVPwywBIvj8jqlsPD2pXX5IYwh4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9KVlB3eXdCSXZqOGpxbHNQ RDJwWFg1SVl3aDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAIhAAhENaqIwcCYbajWSa6X9nJW7FVJ4Bilg pK2POIpXoNn/pffuCGivFGn1tPPnp7QX5DvZT4kjyfm76pH1WGf01oB51feeQfsK XsgJROEf5yRWkZb+P9mcxw6ssOc8vc8jSwagtOVKQaQXJVbEHF/LbY4tzRiWHVjs xKy5pCNAclUHxLERXNkdYiGzKlA8i4sZj5X6S2Ur0r0HTlrw0lvsdOc3XkweqCuq T8jz9myirffghnQP7j+Uw0ytSpK0AmV+f4Su+Ab9Og/Hp3HC2tzeDK4p7EjBepxp L985dt2s7Q6C8CaUowt16aKlBAAKafQmZxorSMAIgbhX9sR+H+o= -----END CERTIFICATE-----Generated at Mon Dec 22 23:34:19 2025 by rpki-client